Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QtnZt1EfRg4ZZ-E-mfjBJfdON9M.roa
File: QtnZt1EfRg4ZZ-E-mfjBJfdON9M.roa (raw, json)
Hash identifier: txY5ZWWc3V2EEWET0RCer61G9doqJV3/uF5p/EsFvjc=
Subject key identifier: 42:D9:D9:B7:51:1F:46:0E:19:67:E1:3E:99:F8:C1:25:F7:4E:37:D3
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018DFF387D1FB7925135A9E85F4DF6D4AC80
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QtnZt1EfRg4ZZ-E-mfjBJfdON9M.roa
Signing time: Sat 02 Mar 2024 12:51:48 +0000
ROA not before: Sat 02 Mar 2024 12:51:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a0e:1a80::/32 maxlen: 32
2a0e:c780::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2100::/29 maxlen: 29
2a0f:2e80::/29 maxlen: 29
2a0f:2f80::/29 maxlen: 29
2a0f:3d80:123::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
2a0f:3d83::/32 maxlen: 32
2a0f:3d84::/32 maxlen: 32
2a0f:3d87::/32 maxlen: 32
2a0f:e1c7:1::/48 maxlen: 48
2a0f:e847:2::/48 maxlen: 48
2a0f:e940::/29 maxlen: 29
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:d5c0::/29 maxlen: 29
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:18c3::/32 maxlen: 32
2a13:18c6::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 05 Mar 2024 09:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ff:38:7d:1f:b7:92:51:35:a9:e8:5f:4d:f6:d4:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 2 12:51:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42d9d9b7511f460e1967e13e99f8c125f74e37d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f9:d7:9b:eb:02:b6:b0:12:1d:85:f5:24:48:
20:56:6c:e8:1f:76:9e:2f:76:47:37:c7:33:54:d8:
69:90:1e:bb:eb:2b:7b:9e:22:0e:fb:f8:c7:d0:ce:
e1:29:cf:95:b7:c6:b8:f5:17:1d:0c:75:77:fc:7e:
4e:bd:5c:a7:dd:17:33:ac:1c:59:50:0a:7e:a7:74:
86:6c:9a:64:cb:76:ce:71:1d:47:eb:e0:6a:04:69:
65:e1:35:96:16:6b:94:ee:f9:ce:56:43:f0:49:c4:
b7:05:7d:b3:fb:85:27:75:c2:c2:d8:d3:60:4a:8d:
43:7b:f1:d3:1a:4c:1a:62:a0:7a:cb:d3:99:93:20:
63:eb:e1:b7:eb:d4:ea:35:c2:59:1a:b8:62:e5:94:
e0:89:c7:f4:50:78:0e:2d:92:86:92:7c:08:20:2f:
56:f5:1e:c4:b2:ca:c0:20:3d:c8:41:a3:51:f8:7d:
af:b9:2e:ec:a6:4f:71:08:d1:f1:dc:70:a7:cd:5d:
bb:a6:88:8c:dc:17:72:29:d9:52:79:15:54:7b:14:
de:ef:b3:05:9b:ee:39:2a:28:c4:38:6f:89:a0:79:
da:c3:9b:a0:03:5a:ef:d3:52:03:8a:55:31:17:1a:
59:a2:23:af:a8:e0:be:fb:cf:e7:30:49:1c:0a:f9:
84:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D9:D9:B7:51:1F:46:0E:19:67:E1:3E:99:F8:C1:25:F7:4E:37:D3
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QtnZt1EfRg4ZZ-E-mfjBJfdON9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
193.164.199.0/24
IPv6:
2a0e:1a80::/32
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2100::/29
2a0f:2e80::/29
2a0f:2f80::/29
2a0f:3d80:123::/48
2a0f:3d82::-2a0f:3d84:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:3d87::/32
2a0f:e1c7:1::/48
2a0f:e847:2::/48
2a0f:e940::/29
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:d5c0::/29
2a12:f540::/29
2a13:18c0:1::/48
2a13:18c3::/32
2a13:18c6::/32
Signature Algorithm: sha256WithRSAEncryption
51:36:87:65:88:1e:e4:26:ab:07:c9:5c:4b:26:38:80:9b:c9:
94:f3:a0:41:b5:ac:83:b3:26:1d:9d:ba:f0:d0:42:70:29:f3:
ce:c7:ac:be:94:b0:63:15:54:36:33:66:76:4e:d3:ba:b8:17:
ab:f5:34:ac:2f:f3:49:39:fa:a0:6e:f1:ce:22:24:f7:fe:f0:
3a:dd:e9:b1:fe:74:c2:57:b5:6e:2b:a9:6d:c0:36:a6:b9:aa:
81:20:a8:7d:f2:8f:ca:09:1e:be:c7:de:eb:43:80:2d:86:44:
8f:93:0e:fa:85:cf:60:61:f7:96:1d:cb:70:e4:ae:b9:6c:cc:
66:df:ea:28:e4:c3:90:18:c2:f2:16:2e:3d:a6:f4:68:75:5c:
92:ef:51:79:de:c2:52:3b:a8:8a:ab:86:e8:54:9d:d3:46:42:
ef:8f:ab:55:67:87:d1:5a:52:05:85:2b:d5:5a:f2:86:da:65:
db:2c:de:7a:1d:5b:96:3c:5f:1a:6d:5c:2b:28:53:7b:d5:22:
7b:85:c6:15:e7:1d:87:c1:4a:11:39:3d:06:55:31:59:bc:30:
cb:a9:8c:95:9c:80:1b:0f:c0:0b:c7:03:32:bc:41:de:bd:d0:
3e:73:5b:84:49:c1:ac:e9:bb:ec:20:4a:5a:b7:1c:8a:62:46:
e9:f9:56:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:18:01 2025 by rpki-client