Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Wc65CDfn4-LdF1FVbKdwRoOs77E.roa
File: Wc65CDfn4-LdF1FVbKdwRoOs77E.roa (raw, json)
Hash identifier: SAcxoqM/hUdWcyRhnH2B7WmhejRPFGoQ0wU0Iv36OYs=
Subject key identifier: 59:CE:B9:08:37:E7:E3:E2:DD:17:51:55:6C:A7:70:46:83:AC:EF:B1
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01946E3F8E7B182AE0C9A226D1D0EBB17E15
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Wc65CDfn4-LdF1FVbKdwRoOs77E.roa
Signing time: Thu 16 Jan 2025 08:34:06 +0000
ROA not before: Thu 16 Jan 2025 08:34:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
103.139.50.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a06:1184:33::/48 maxlen: 48
2a0a:2d06:33::/48 maxlen: 48
2a0c:7886:33::/48 maxlen: 48
2a0e:1a80:2541::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2e80::/29 maxlen: 29
2a0f:3d84::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:e1c6::/32 maxlen: 32
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:ecc4:2213::/48 maxlen: 48
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:9280::/32 maxlen: 32
2a13:e101:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 Jan 2025 09:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6e:3f:8e:7b:18:2a:e0:c9:a2:26:d1:d0:eb:b1:7e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 16 08:34:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59ceb90837e7e3e2dd1751556ca7704683acefb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:14:e1:22:3e:5e:4b:9c:31:af:32:b9:b6:3f:
e2:0d:3e:bb:c8:e8:0a:a0:0b:09:67:63:d3:7f:a5:
b3:99:90:8c:a4:c1:b4:b1:bd:13:5f:59:c9:8b:4f:
55:a7:af:ed:6f:74:49:34:00:39:ec:ed:8c:2c:9a:
49:d7:b1:93:ce:9f:20:8c:ea:da:7b:71:ad:6b:62:
c4:67:d1:ad:8e:28:fd:52:43:07:e1:7b:63:0b:18:
89:7e:9c:0e:89:af:ad:2b:d7:74:7b:c6:29:a0:2b:
fc:65:b0:d4:2a:d0:03:dd:23:fb:1a:e4:b9:74:ee:
9b:cc:2a:45:52:8b:71:c6:8e:ac:a7:fb:e4:27:f1:
6b:fe:ee:b6:11:fd:1b:34:c1:18:f2:1c:af:7e:ea:
28:2a:45:75:23:a6:53:cd:73:c7:3f:1f:13:b6:68:
c0:39:37:b6:14:93:40:af:62:44:f7:4b:4b:a2:c0:
3c:9c:e3:d4:94:1d:ed:03:7c:5d:f9:84:9b:01:c3:
32:7d:a0:64:82:1a:6f:fc:99:6e:06:f9:f5:9d:bd:
ba:e4:2a:22:23:f8:fd:19:bc:0e:c8:60:9f:32:d6:
76:f5:8c:cb:72:0a:1b:00:60:40:37:7a:af:7f:69:
30:7e:1c:cd:2d:96:68:cd:b2:5a:34:3d:c7:48:51:
25:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CE:B9:08:37:E7:E3:E2:DD:17:51:55:6C:A7:70:46:83:AC:EF:B1
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Wc65CDfn4-LdF1FVbKdwRoOs77E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
103.139.50.0/24
193.164.199.0/24
IPv6:
2a06:1184:33::/48
2a0a:2d06:33::/48
2a0c:7886:33::/48
2a0e:1a80:2541::/48
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2e80::/29
2a0f:3d84::/32
2a0f:7d02:1::/48
2a0f:e1c6::/32
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:ecc4:2213::/48
2a12:f540::/29
2a13:18c0:1::/48
2a13:9280::/32
2a13:e101:2::/48
Signature Algorithm: sha256WithRSAEncryption
a6:d7:6a:1e:51:79:a4:2e:69:45:7a:44:b7:c6:91:4f:c9:63:
0c:00:40:c7:55:91:b4:3f:35:1f:b9:4f:10:c4:41:5b:ce:35:
d3:fb:ee:5b:91:d7:15:76:5b:e8:e6:e0:d6:ff:e8:22:a7:88:
bc:c0:dc:8b:61:3b:d4:70:21:3f:d3:d4:c3:91:35:e4:d9:6a:
0d:bb:4c:c5:1a:c3:ed:8d:27:da:c7:91:b7:d4:72:10:08:8b:
aa:52:c9:44:19:19:9b:41:09:ee:ec:e2:e0:c8:d7:94:11:76:
df:ae:32:cb:90:54:ee:47:a6:71:d0:82:9f:78:ba:da:b6:e8:
24:74:4c:3a:af:35:18:23:b2:e5:40:48:e6:15:21:58:8f:06:
a3:8f:50:8c:28:22:d5:0d:25:57:66:c7:bd:09:0b:65:e3:a9:
6e:02:95:d8:59:ca:31:3f:7a:ea:09:74:29:19:26:12:46:f1:
dd:70:b4:35:1c:c9:00:5f:4c:16:30:cc:af:c9:f0:ec:41:33:
96:cf:e0:f4:d8:25:3f:91:07:1a:f8:f3:62:dd:db:2d:71:a9:
c7:21:17:6f:a9:88:21:b1:6b:69:a6:ac:be:59:ed:1f:e6:80:
0a:2b:00:a4:2b:28:cb:17:d4:63:02:db:81:07:57:ef:6c:e2:
ed:ca:de:03
-----BEGIN CERTIFICATE-----
MIIGHDCCBQSgAwIBAgISAZRuP457GCrgyaIm0dDrsX4VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwMTE2MDgzNDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWNlYjkwODM3ZTdlM2UyZGQxNzUxNTU2Y2E3NzA0NjgzYWNlZmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBThIj5eS5wxrzK5tj/iDT67yOgK
oAsJZ2PTf6WzmZCMpMG0sb0TX1nJi09Vp6/tb3RJNAA57O2MLJpJ17GTzp8gjOra
e3Gta2LEZ9Gtjij9UkMH4XtjCxiJfpwOia+tK9d0e8YpoCv8ZbDUKtAD3SP7GuS5
dO6bzCpFUotxxo6sp/vkJ/Fr/u62Ef0bNMEY8hyvfuooKkV1I6ZTzXPHPx8TtmjA
OTe2FJNAr2JE90tLosA8nOPUlB3tA3xd+YSbAcMyfaBkghpv/JluBvn1nb265Coi
I/j9GbwOyGCfMtZ29YzLcgobAGBAN3qvf2kwfhzNLZZozbJaND3HSFEl4QIDAQAB
o4IDKDCCAyQwHQYDVR0OBBYEFFnOuQg35+Pi3RdRVWyncEaDrO+xMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvV2M2NUNEZm40LUxkRjFGVmJLZHdSb09zNzdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBPAYIKwYBBQUHAQcBAf8EggErMIIBJzAeBAIAATAYAwQA
LYF/AwQALYclAwQAZ4syAwQAwaTHMIIBAwQCAAIwgfwDBwAqBhGEADMDBwAqCi0G
ADMDBwAqDHiGADMDBwAqDhqAJUEDBQAqDseAAwcAKg7yAQABAwcAKg8eAAEjAwcA
Kg8eAARWAwcAKg8eAAmHAwcAKg8eAAq8AwcAKg8eAN75AwcAKg8eAQABAwcAKg8e
gQACAwcAKg8egRKTAwcAKg8egUMZAwcAKg8egZLoAwcAKg8egaPQAwcAKg8egc2u
AwUDKg8ugAMFACoPPYQDBwAqD30CAAEDBQAqD+HGAwUDKhBtQAMFAyoR/YADBQEq
EqxAAwcAKhLsxCITAwUDKhL1QAMHACoTGMAAAQMFACoTkoADBwAqE+EBAAIwDQYJ
KoZIhvcNAQELBQADggEBAKbXah5ReaQuaUV6RLfGkU/JYwwAQMdVkbQ/NR+5TxDE
QVvONdP77luR1xV2W+jm4Nb/6CKniLzA3IthO9RwIT/T1MORNeTZag27TMUaw+2N
J9rHkbfUchAIi6pSyUQZGZtBCe7s4uDI15QRdt+uMsuQVO5HpnHQgp94utq26CR0
TDqvNRgjsuVASOYVIViPBqOPUIwoItUNJVdmx70JC2XjqW4CldhZyjE/euoJdCkZ
JhJG8d1wtDUcyQBfTBYwzK/J8OxBM5bP4PTYJT+RBxr482Ld2y1xqcchF2+piCGx
a2mmrL5Z7R/mgAorAKQrKMsX1GMC24EHV+9s4u3K3gM=
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:07:09 2025 by rpki-client