Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Tg6ZRCSfsdpW2LIiZHN4VC6mUUM.roa
File: Tg6ZRCSfsdpW2LIiZHN4VC6mUUM.roa (raw, json)
Hash identifier: nRGGIy3VpVZru2L7vfOsnw6vU6VceouE6V11L6gsmRE=
Subject key identifier: 4E:0E:99:44:24:9F:B1:DA:56:D8:B2:22:64:73:78:54:2E:A6:51:43
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018F63E0533704A5427C23C9F07F07482960
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Tg6ZRCSfsdpW2LIiZHN4VC6mUUM.roa
Signing time: Fri 10 May 2024 18:59:56 +0000
ROA not before: Fri 10 May 2024 18:59:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a0e:1a80::/32 maxlen: 32
2a0e:c780::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2100::/29 maxlen: 29
2a0f:2e80::/29 maxlen: 29
2a0f:2f80::/29 maxlen: 29
2a0f:3d80:123::/48 maxlen: 48
2a0f:3d84::/32 maxlen: 32
2a0f:3d87::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:7d07::/32 maxlen: 32
2a0f:e1c6::/32 maxlen: 32
2a0f:e1c7:1::/48 maxlen: 48
2a0f:e847:2::/48 maxlen: 48
2a0f:e940::/29 maxlen: 29
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:18c6::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 10 May 2024 20:03:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:63:e0:53:37:04:a5:42:7c:23:c9:f0:7f:07:48:29:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 10 18:59:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e0e9944249fb1da56d8b222647378542ea65143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5c:bd:91:b1:c5:b9:6c:6f:da:e1:5e:ac:08:
dc:21:87:2b:2b:c6:35:a2:14:58:26:71:f6:d3:09:
6d:d9:f4:9a:e0:cc:92:06:65:b3:2d:7c:e0:c5:fa:
f0:1e:21:6d:5e:18:e6:a5:2e:83:62:f3:70:7e:cc:
9e:23:a6:85:b3:d8:00:3e:e6:92:c9:f4:82:06:69:
58:52:0b:2d:ba:49:ab:55:d1:ee:89:7e:fa:6a:5f:
db:b6:53:07:35:e3:da:58:4e:b3:96:bb:6f:da:51:
7d:3d:06:75:09:93:43:f0:ee:32:96:4f:26:8c:7c:
0d:50:99:1b:da:98:59:ca:54:ec:5c:8b:7b:50:f2:
8b:d9:d7:25:82:a5:05:e7:68:0f:47:09:90:0a:e3:
4b:d5:d2:69:14:7a:94:e3:27:b9:17:3e:93:fc:a1:
6e:4c:a2:2a:bf:cd:5b:d2:69:09:b7:b4:33:f2:fd:
ac:8b:b2:dd:1f:04:98:8e:f7:3a:5e:d8:2e:b4:fa:
8d:68:91:65:21:9f:a3:8c:11:a8:24:bc:1d:16:0e:
9a:73:23:73:b4:b2:14:5a:18:d4:53:0f:2c:88:3a:
a8:41:8e:52:88:ad:d6:0e:85:f5:ad:66:d5:f8:bc:
d8:2e:05:40:59:8d:26:ab:b7:30:26:81:46:8b:d2:
d5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0E:99:44:24:9F:B1:DA:56:D8:B2:22:64:73:78:54:2E:A6:51:43
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Tg6ZRCSfsdpW2LIiZHN4VC6mUUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
193.164.199.0/24
IPv6:
2a0e:1a80::/32
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2100::/29
2a0f:2e80::/29
2a0f:2f80::/29
2a0f:3d80:123::/48
2a0f:3d84::/32
2a0f:3d87::/32
2a0f:7d02:1::/48
2a0f:7d07::/32
2a0f:e1c6::/32
2a0f:e1c7:1::/48
2a0f:e847:2::/48
2a0f:e940::/29
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:f540::/29
2a13:18c0:1::/48
2a13:18c6::/32
Signature Algorithm: sha256WithRSAEncryption
cb:20:67:15:a6:55:ea:86:11:11:f7:28:db:4e:f9:84:cd:ca:
a5:df:0a:af:5a:45:24:3f:5a:33:26:b7:1c:5c:6f:0a:df:c2:
a4:83:99:d9:ba:a6:a2:d1:3b:da:12:9d:6e:fe:da:46:9b:50:
c2:f3:87:8d:de:9c:73:76:6e:d7:d8:af:5d:d0:70:02:03:a4:
f7:9f:e4:17:93:9d:b3:91:33:ed:98:db:31:86:91:f9:68:8d:
fe:84:c0:4c:68:9e:92:16:57:1a:a5:c5:c6:56:a0:89:0f:94:
1a:b7:f2:dd:d7:9e:f7:fb:0e:6a:c8:1c:b6:d4:29:02:d5:81:
02:04:11:db:99:0e:c9:1d:fc:85:be:78:a1:80:b6:7f:7b:56:
47:34:cc:da:36:37:5a:45:61:7f:b0:1a:6a:c9:6b:28:30:79:
0f:8b:8c:e3:f5:45:82:f1:47:1f:94:9e:e9:6f:f1:2b:19:f0:
64:9f:5a:72:e1:96:3e:50:5b:7e:7e:54:99:c5:3d:af:33:88:
fc:a7:33:ac:2a:c4:82:5d:91:4f:d8:0b:f3:c8:27:b9:6b:f7:
a4:e8:27:8a:5f:32:78:29:71:ae:de:31:31:13:87:4f:53:b5:
95:a2:4e:b2:6d:e8:7d:b7:84:96:07:19:d4:6d:c1:da:8b:46:
1e:15:d5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:20 2025 by rpki-client