Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RIW8q3wA4ovqu6ZVhsAth53sGvM.roa
File: RIW8q3wA4ovqu6ZVhsAth53sGvM.roa (raw, json)
Hash identifier: kpWSsxMNvhMFlva49vXvkC7Z4OSg0st7lQHyP6cgejs=
Subject key identifier: 44:85:BC:AB:7C:00:E2:8B:EA:BB:A6:55:86:C0:2D:87:9D:EC:1A:F3
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018E559841599CDB172C0E2E9FDCBC9B7EF0
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RIW8q3wA4ovqu6ZVhsAth53sGvM.roa
Signing time: Tue 19 Mar 2024 07:23:45 +0000
ROA not before: Tue 19 Mar 2024 07:23:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a0e:1a80::/32 maxlen: 32
2a0e:c780::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2100::/29 maxlen: 29
2a0f:2e80::/29 maxlen: 29
2a0f:2f80::/29 maxlen: 29
2a0f:3d82::/32 maxlen: 32
2a0f:3d83::/32 maxlen: 32
2a0f:3d84::/32 maxlen: 32
2a0f:3d86:1::/48 maxlen: 48
2a0f:3d87::/32 maxlen: 32
2a0f:e1c7:1::/48 maxlen: 48
2a0f:e847:2::/48 maxlen: 48
2a0f:e940::/29 maxlen: 29
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:d5c0::/29 maxlen: 29
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:18c3::/32 maxlen: 32
2a13:18c6::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 19 Mar 2024 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:55:98:41:59:9c:db:17:2c:0e:2e:9f:dc:bc:9b:7e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 19 07:23:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4485bcab7c00e28beabba65586c02d879dec1af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f8:b1:2c:48:4d:3b:b6:3a:b7:32:55:60:d9:
51:39:02:c4:70:44:12:66:fe:72:a0:b5:63:37:ae:
5d:6f:f4:db:71:94:ef:07:7b:7e:3b:fa:65:d8:ef:
0e:18:c6:62:de:5b:4e:6b:b4:52:70:bc:bd:b9:b2:
9e:2f:c6:6a:ca:9d:f9:49:3f:73:65:3e:f3:77:fa:
de:34:00:1d:08:cb:11:b0:7b:64:c1:5f:d6:c3:e3:
0f:1b:70:a2:9c:52:89:59:e9:14:e3:2b:46:a9:3c:
e6:30:d6:31:0b:82:0f:53:06:93:db:30:97:e1:df:
24:53:17:ac:56:af:b3:ca:7b:f3:f8:a8:9f:37:b8:
0a:7a:10:d1:c4:74:ac:81:65:ed:9b:42:c5:89:3c:
1d:69:c6:85:eb:a9:b5:85:30:74:d8:d2:b7:fa:9c:
26:f7:87:a8:32:2f:8a:74:81:79:c9:06:69:75:49:
59:10:b8:c7:8b:89:b1:cf:1d:14:76:72:98:af:72:
1e:74:d6:1e:b3:bd:fe:d0:23:d1:c5:07:69:5a:89:
98:b3:f5:2b:4b:b8:45:23:49:7b:ff:a3:0d:35:96:
04:d3:c1:36:e9:02:37:15:4f:89:cb:14:10:0f:7d:
bb:ea:5e:12:5f:76:1b:58:ca:3c:2e:54:20:56:ef:
c0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:85:BC:AB:7C:00:E2:8B:EA:BB:A6:55:86:C0:2D:87:9D:EC:1A:F3
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RIW8q3wA4ovqu6ZVhsAth53sGvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
193.164.199.0/24
IPv6:
2a0e:1a80::/32
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2100::/29
2a0f:2e80::/29
2a0f:2f80::/29
2a0f:3d82::-2a0f:3d84:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:3d86:1::/48
2a0f:3d87::/32
2a0f:e1c7:1::/48
2a0f:e847:2::/48
2a0f:e940::/29
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:d5c0::/29
2a12:f540::/29
2a13:18c0:1::/48
2a13:18c3::/32
2a13:18c6::/32
Signature Algorithm: sha256WithRSAEncryption
a7:c9:c3:a3:1f:fc:e3:99:0c:a9:83:0a:fd:a5:ba:44:a4:c8:
e0:30:fa:25:8c:f7:6b:4a:5b:91:19:00:d2:0d:24:cd:8a:f1:
61:9d:6f:03:c5:ce:45:70:19:49:f0:de:3e:e9:1f:bb:19:8e:
05:18:59:06:67:77:95:f7:65:5f:12:da:86:a9:3a:db:6a:34:
c2:87:f5:9d:04:9a:f6:b8:06:f7:59:3c:89:e3:f3:2d:6a:63:
4d:64:d2:c7:cf:5f:7a:8b:08:a1:88:03:94:a8:00:61:3e:80:
a0:6e:39:e5:0b:40:1e:d6:7c:b1:a4:20:29:1c:f3:11:ea:7c:
36:52:fb:80:7b:57:cf:35:44:46:b5:61:45:0e:dd:10:cc:af:
d1:ce:4b:95:cc:88:64:05:62:41:fd:5b:89:9e:0c:4a:75:6b:
c8:4a:e8:9f:0a:1b:42:12:c2:0d:c3:10:0b:3f:03:b8:28:ab:
0a:5a:25:1d:a6:e6:13:ac:9b:97:71:fb:30:8b:c5:70:a9:fb:
ba:c0:e3:87:aa:99:8d:a2:2c:04:0b:06:bb:e9:02:8c:19:15:
95:98:23:bc:e6:e3:59:21:ca:95:7a:6a:e1:b4:ab:23:b7:1e:
ba:9b:b3:84:e1:a3:05:ae:e2:44:5e:1c:d2:53:da:58:63:d7:
c2:1e:b4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:35:35 2025 by rpki-client