Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Sn2fdSXSERTkYuzOj3_0ktGkCZs.roa
File: Sn2fdSXSERTkYuzOj3_0ktGkCZs.roa (raw, json)
Hash identifier: vrXguP4YqVkmRtON2HkvA5EhT1Kk5YbfF0IMjRBmExI=
Subject key identifier: 4A:7D:9F:75:25:D2:11:14:E4:62:EC:CE:8F:7F:F4:92:D1:A4:09:9B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01958E8596312BA3C4F4A18EAAA920B404C4
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Sn2fdSXSERTkYuzOj3_0ktGkCZs.roa
Signing time: Thu 13 Mar 2025 08:01:14 +0000
ROA not before: Thu 13 Mar 2025 08:01:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30633
IP address blocks: 45.86.247.0/24 maxlen: 24
45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
80.253.250.0/24 maxlen: 24
103.139.50.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a06:1184:33::/48 maxlen: 48
2a0a:2d06:33::/48 maxlen: 48
2a0c:7886:33::/48 maxlen: 48
2a0e:1a80:2541::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2e80::/29 maxlen: 29
2a0f:3d84::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:e1c6::/32 maxlen: 32
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:ecc4:2213::/48 maxlen: 48
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:9280::/32 maxlen: 32
2a13:e101:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 13 Mar 2025 12:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:85:96:31:2b:a3:c4:f4:a1:8e:aa:a9:20:b4:04:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 13 08:01:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a7d9f7525d21114e462ecce8f7ff492d1a4099b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:58:fd:d4:6e:86:79:68:f9:c0:43:ac:e7:e6:
3d:a2:bc:ea:09:27:23:38:f1:b7:b2:4c:a8:a9:04:
aa:f6:04:6e:da:0a:f5:17:a6:f3:29:f6:bd:68:11:
95:ca:5d:95:fd:1d:12:92:6e:de:31:25:72:bb:79:
be:bb:f3:a2:a0:26:1b:a0:19:48:84:91:04:f2:c4:
66:fa:af:fd:96:44:41:5b:f0:69:02:7a:e9:87:ec:
84:d8:c7:18:6c:4c:c5:80:28:55:6a:4e:75:36:53:
4e:72:19:f0:da:d6:c8:90:b4:15:af:55:17:5f:32:
c1:6c:96:30:de:4c:24:20:3a:95:98:21:bb:d0:3d:
98:64:13:1a:6a:b6:b5:07:a0:8c:56:2b:e9:dd:9a:
f0:ce:e2:d4:bc:86:c4:f2:a1:a5:4c:81:96:9c:48:
9a:05:50:9c:74:81:ca:e4:9e:72:2a:1a:02:f8:9a:
23:5b:91:73:79:b8:fd:a4:6f:5c:1d:3c:4c:75:d0:
f7:45:a8:cf:d9:63:6f:ab:41:60:72:3b:c1:9e:2c:
f5:66:c7:34:df:8e:86:9b:bc:65:ae:56:17:cc:fd:
20:38:19:4e:d2:20:96:09:34:42:b1:17:45:59:c7:
b9:92:d5:28:57:84:7f:3b:66:9b:30:52:01:dc:a0:
95:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7D:9F:75:25:D2:11:14:E4:62:EC:CE:8F:7F:F4:92:D1:A4:09:9B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Sn2fdSXSERTkYuzOj3_0ktGkCZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.247.0/24
45.129.127.0/24
45.135.37.0/24
80.253.250.0/24
103.139.50.0/24
193.164.199.0/24
IPv6:
2a06:1184:33::/48
2a0a:2d06:33::/48
2a0c:7886:33::/48
2a0e:1a80:2541::/48
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2e80::/29
2a0f:3d84::/32
2a0f:7d02:1::/48
2a0f:e1c6::/32
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:ecc4:2213::/48
2a12:f540::/29
2a13:18c0:1::/48
2a13:9280::/32
2a13:e101:2::/48
Signature Algorithm: sha256WithRSAEncryption
36:42:ea:0f:7c:45:e7:62:a8:df:30:a8:dc:a8:47:68:3e:fb:
7a:99:a7:e5:15:7d:b3:49:38:8b:59:25:ba:e5:a9:9b:0f:d3:
d5:5e:ca:fc:8a:d5:fd:91:29:2d:db:63:ab:7c:b8:e7:5e:1f:
68:50:9f:72:9c:f3:e8:e7:56:0b:f6:89:1d:75:a6:54:40:c4:
bc:1c:0f:19:9c:97:70:45:69:65:d2:25:60:f0:ec:f0:e9:23:
22:0d:5e:ca:7b:bd:e5:bb:c6:cc:d5:b1:1c:b6:cc:1e:06:e7:
a2:d1:13:71:90:71:1a:8b:28:11:84:0d:e2:3a:52:20:73:2a:
4a:be:fa:2b:57:c0:5d:d9:6f:ce:8a:b2:51:b3:0b:1b:94:62:
b6:b9:b6:1a:ad:2d:71:eb:b1:8c:e6:bc:d8:53:9e:7d:e9:44:
76:34:60:99:bc:fc:34:74:2e:6b:44:e9:d7:3a:52:90:b0:18:
ea:c9:13:3a:39:e9:47:21:44:e1:80:d8:3a:ce:27:2f:4a:dc:
3a:e1:18:43:b5:cd:15:46:d3:ee:8c:61:15:47:e2:d3:d9:7e:
e0:85:39:79:6c:74:63:d1:c2:3d:13:19:66:99:71:b3:c7:2c:
2e:da:ac:4e:65:7e:71:5e:12:b4:35:d9:58:8a:2d:35:4a:b1:
42:4f:2f:c2
-----BEGIN CERTIFICATE-----
MIIGKDCCBRCgAwIBAgISAZWOhZYxK6PE9KGOqqkgtATEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwMzEzMDgwMTE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTdkOWY3NTI1ZDIxMTE0ZTQ2MmVjY2U4ZjdmZjQ5MmQxYTQwOTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVj91G6GeWj5wEOs5+Y9orzqCScj
OPG3skyoqQSq9gRu2gr1F6bzKfa9aBGVyl2V/R0Skm7eMSVyu3m+u/OioCYboBlI
hJEE8sRm+q/9lkRBW/BpAnrph+yE2McYbEzFgChVak51NlNOchnw2tbIkLQVr1UX
XzLBbJYw3kwkIDqVmCG70D2YZBMaara1B6CMVivp3ZrwzuLUvIbE8qGlTIGWnEia
BVCcdIHK5J5yKhoC+JojW5Fzebj9pG9cHTxMddD3RajP2WNvq0FgcjvBniz1Zsc0
346Gm7xlrlYXzP0gOBlO0iCWCTRCsRdFWce5ktUoV4R/O2abMFIB3KCVqwIDAQAB
o4IDNDCCAzAwHQYDVR0OBBYEFEp9n3Ul0hEU5GLszo9/9JLRpAmbMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvU24yZmRTWFNFUlRrWXV6T2ozXzBrdEdrQ1pzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBSAYIKwYBBQUHAQcBAf8EggE3MIIBMzAqBAIAATAkAwQA
LVb3AwQALYF/AwQALYclAwQAUP36AwQAZ4syAwQAwaTHMIIBAwQCAAIwgfwDBwAq
BhGEADMDBwAqCi0GADMDBwAqDHiGADMDBwAqDhqAJUEDBQAqDseAAwcAKg7yAQAB
AwcAKg8eAAEjAwcAKg8eAARWAwcAKg8eAAmHAwcAKg8eAAq8AwcAKg8eAN75AwcA
Kg8eAQABAwcAKg8egQACAwcAKg8egRKTAwcAKg8egUMZAwcAKg8egZLoAwcAKg8e
gaPQAwcAKg8egc2uAwUDKg8ugAMFACoPPYQDBwAqD30CAAEDBQAqD+HGAwUDKhBt
QAMFAyoR/YADBQEqEqxAAwcAKhLsxCITAwUDKhL1QAMHACoTGMAAAQMFACoTkoAD
BwAqE+EBAAIwDQYJKoZIhvcNAQELBQADggEBADZC6g98RediqN8wqNyoR2g++3qZ
p+UVfbNJOItZJbrlqZsP09VeyvyK1f2RKS3bY6t8uOdeH2hQn3Kc8+jnVgv2iR11
plRAxLwcDxmcl3BFaWXSJWDw7PDpIyINXsp7veW7xszVsRy2zB4G56LRE3GQcRqL
KBGEDeI6UiBzKkq++itXwF3Zb86KslGzCxuUYra5thqtLXHrsYzmvNhTnn3pRHY0
YJm8/DR0LmtE6dc6UpCwGOrJEzo56UchROGA2DrOJy9K3DrhGEO1zRVG0+6MYRVH
4tPZfuCFOXlsdGPRwj0TGWaZcbPHLC7arE5lfnFeErQ12ViKLTVKsUJPL8I=
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:58:27 2025 by rpki-client