Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/R3HL3-RsnJrS--su09hlrTZgEXw.roa
File: R3HL3-RsnJrS--su09hlrTZgEXw.roa (raw, json)
Hash identifier: D1uCLmF+602lWtwf+AkPW6XzRXv1KJWVAIaRBYbiyXs=
Subject key identifier: 47:71:CB:DF:E4:6C:9C:9A:D2:FB:EB:2E:D3:D8:65:AD:36:60:11:7C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0190B72D8FBA23A0F9DC41AE75AE077745CC
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/R3HL3-RsnJrS--su09hlrTZgEXw.roa
Signing time: Mon 15 Jul 2024 16:15:34 +0000
ROA not before: Mon 15 Jul 2024 16:15:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
103.139.50.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a0e:1a80:2541::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0e:f600:6c::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2e80::/29 maxlen: 29
2a0f:3d83::/32 maxlen: 32
2a0f:3d87::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:e1c6::/32 maxlen: 32
2a0f:e1c7:1::/48 maxlen: 48
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 17 Jul 2024 11:27:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b7:2d:8f:ba:23:a0:f9:dc:41:ae:75:ae:07:77:45:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 15 16:15:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4771cbdfe46c9c9ad2fbeb2ed3d865ad3660117c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:04:c3:e9:ef:3f:75:15:45:6f:f9:79:cd:20:
df:ba:24:66:c5:37:d5:5e:d3:df:1d:0e:3b:d9:b1:
c6:cc:b7:dd:1f:d9:d0:14:be:5e:5f:b9:16:49:d6:
26:fb:71:61:61:50:66:d7:5b:2e:30:96:98:4e:d0:
59:b7:aa:5f:cf:31:42:43:c9:73:53:0b:80:bf:b1:
c8:e1:42:44:c7:cf:4d:d6:e1:75:fb:c2:fb:c0:4e:
00:d7:8b:50:89:97:6f:f9:ef:16:f2:a1:38:cb:02:
9c:53:31:df:80:e2:60:f6:d6:50:83:21:b3:18:c1:
42:9c:f5:fa:c8:2f:d4:99:96:33:52:bb:c2:f0:a9:
ca:da:51:2d:c3:64:88:0b:6a:29:57:b9:00:5d:f3:
63:af:58:ae:e7:24:30:f1:b0:6e:49:13:79:ee:ac:
ed:31:b2:fe:b6:a0:87:8c:26:ff:1c:44:c8:09:7f:
32:53:d3:49:3e:90:6a:8a:0c:18:43:af:d7:00:94:
42:23:5e:83:15:c8:15:8b:8e:a8:31:e1:c9:8a:0e:
4e:80:e4:c8:f4:6c:22:79:3e:9b:e6:9b:7b:10:3a:
98:a8:1b:b1:db:b0:c1:be:91:96:f8:4f:81:0b:05:
a7:48:2f:6b:0f:fe:09:6d:f5:cb:7f:6c:4e:26:cd:
3b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:71:CB:DF:E4:6C:9C:9A:D2:FB:EB:2E:D3:D8:65:AD:36:60:11:7C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/R3HL3-RsnJrS--su09hlrTZgEXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
103.139.50.0/24
193.164.199.0/24
IPv6:
2a0e:1a80:2541::/48
2a0e:c780::/32
2a0e:f201:1::/48
2a0e:f600:6c::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2e80::/29
2a0f:3d83::/32
2a0f:3d87::/32
2a0f:7d02:1::/48
2a0f:e1c6::/32
2a0f:e1c7:1::/48
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:f540::/29
2a13:18c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
49:1a:98:f0:ef:56:89:45:ec:22:6d:29:e5:b3:a0:21:bf:5f:
8d:56:d6:83:c7:48:43:a0:be:f7:50:e0:09:82:ef:75:27:6f:
18:68:de:bb:27:d5:0e:78:e5:61:a4:06:26:4d:2e:26:ec:87:
4e:89:db:64:d2:a6:e2:a7:50:bd:e9:2b:52:19:93:54:9b:34:
db:6d:a4:2f:ea:75:34:bb:02:2f:5d:9b:cb:79:cd:0b:3c:a4:
86:93:cb:62:66:6e:55:b3:51:c5:f6:5b:20:ac:e1:4a:d0:90:
c7:8a:f5:77:98:ed:7f:69:0e:c7:8c:a6:1f:2e:4f:7d:3e:76:
04:9b:fc:bf:f7:91:38:42:87:45:2c:ae:0b:34:4a:12:66:cc:
69:3b:89:1a:d7:a6:43:18:ad:e2:61:f4:73:80:70:f2:5a:fe:
01:6f:0e:37:b3:97:ac:67:7a:2f:0d:27:c7:54:2c:c6:8b:bb:
9a:fc:e5:98:95:0a:31:1b:13:0c:56:ce:0e:91:24:b1:6a:95:
58:77:75:08:8d:86:30:1b:f9:b6:b8:45:98:27:a3:29:ee:3c:
0e:d5:b0:a1:b8:3d:cd:b1:23:a2:35:11:8a:52:d2:c5:46:dc:
4a:71:3c:89:1b:22:c2:9e:89:d5:8f:fd:5f:b6:54:6b:63:b7:
13:84:fd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:04:31 2025 by rpki-client