Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/X08NkZQmx_ijcFa2F4No5hBR04Q.roa
File: X08NkZQmx_ijcFa2F4No5hBR04Q.roa (raw, json)
Hash identifier: Uy6ZYG+sihOaUdS93b1cCKxdeQGS8iIFolG3zqGwP4A=
Subject key identifier: 5F:4F:0D:91:94:26:C7:F8:A3:70:56:B6:17:83:68:E6:10:51:D3:84
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0194F4078347311C3BBCC6B48EBF33A1F881
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/X08NkZQmx_ijcFa2F4No5hBR04Q.roa
Signing time: Tue 11 Feb 2025 08:02:00 +0000
ROA not before: Tue 11 Feb 2025 08:02:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28753
IP address blocks: 2.59.21.0/24 maxlen: 24
45.9.116.0/24 maxlen: 24
45.9.122.0/24 maxlen: 24
45.94.46.0/24 maxlen: 24
45.128.76.0/24 maxlen: 24
45.128.246.0/24 maxlen: 24
45.130.128.0/24 maxlen: 24
45.146.130.0/24 maxlen: 24
45.154.58.0/24 maxlen: 24
84.21.189.0/24 maxlen: 24
84.21.190.0/24 maxlen: 24
93.190.244.0/24 maxlen: 24
185.9.52.0/24 maxlen: 24
185.164.58.0/24 maxlen: 24
193.8.215.0/24 maxlen: 24
2a04:9f40::/29 maxlen: 29
2a06:1184:101::/48 maxlen: 48
2a06:3bc0::/29 maxlen: 29
2a07:8a40::/29 maxlen: 29
2a09:17c1:66::/48 maxlen: 48
2a09:17c1:77::/48 maxlen: 48
2a0a:2d06:102::/48 maxlen: 48
2a0a:2d06:103::/48 maxlen: 48
2a0c:7886:99::/48 maxlen: 48
2a0c:7886:100::/48 maxlen: 48
2a0e:15c7:88::/48 maxlen: 48
2a0e:15c7:99::/48 maxlen: 48
2a0e:1a83:77::/48 maxlen: 48
2a0e:f603:66::/48 maxlen: 48
2a0f:140::/29 maxlen: 29
2a0f:1206:55::/48 maxlen: 48
2a0f:1206:66::/48 maxlen: 48
2a0f:2500::/29 maxlen: 29
2a0f:3d86:88::/48 maxlen: 48
2a0f:3d86:99::/48 maxlen: 48
2a0f:7d06:88::/48 maxlen: 48
2a0f:7d06:99::/48 maxlen: 48
2a0f:cc00::/29 maxlen: 29
2a0f:d200::/29 maxlen: 29
2a0f:da40::/29 maxlen: 29
2a0f:dfc0::/29 maxlen: 29
2a0f:e040::/29 maxlen: 29
2a0f:e1c1:22::/48 maxlen: 48
2a0f:e202:44::/48 maxlen: 48
2a0f:e202:55::/48 maxlen: 48
2a0f:e202:100::/48 maxlen: 48
2a0f:e4c0::/29 maxlen: 29
2a0f:e6c6:100::/48 maxlen: 48
2a0f:e6c6:101::/48 maxlen: 48
2a0f:e7c6:66::/48 maxlen: 48
2a0f:e7c6:77::/48 maxlen: 48
2a0f:e7c6:88::/48 maxlen: 48
2a0f:e844:22::/48 maxlen: 48
2a0f:e844:33::/48 maxlen: 48
2a0f:ea44:66::/48 maxlen: 48
2a0f:ea44:77::/48 maxlen: 48
2a0f:fc00::/29 maxlen: 29
2a12:ac46:77::/48 maxlen: 48
2a12:ecc0:168::/48 maxlen: 48
2a12:ecc0:178::/48 maxlen: 48
2a13:18c6:55::/48 maxlen: 48
2a13:18c6:77::/48 maxlen: 48
2a13:18c6:88::/48 maxlen: 48
2a13:7d80::/29 maxlen: 29
2a13:8c86:10a::/48 maxlen: 48
2a13:8c86:120::/48 maxlen: 48
2a13:8c86:130::/48 maxlen: 48
2a13:c900:88::/48 maxlen: 48
2a13:c900:99::/48 maxlen: 48
2a13:e107:99::/48 maxlen: 48
2a13:e107:9c::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 17 Feb 2025 15:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f4:07:83:47:31:1c:3b:bc:c6:b4:8e:bf:33:a1:f8:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 11 08:02:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f4f0d919426c7f8a37056b6178368e61051d384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b5:25:96:43:8c:f5:c4:96:af:e7:ae:79:d3:
8e:aa:94:18:0b:89:df:aa:90:68:26:ed:4b:e3:ed:
0c:96:6a:83:d9:c6:01:ef:91:41:5a:8c:29:f2:2c:
fe:7f:1c:02:e9:aa:70:17:b2:de:23:9d:a1:63:58:
65:6c:13:72:40:fc:c8:18:3b:9f:d2:30:23:78:2b:
83:c3:f3:02:94:4b:e7:9a:79:87:cc:0f:2f:60:9d:
ab:2c:70:04:71:b7:ba:1a:20:90:41:76:3d:30:83:
ef:d0:5e:ab:bf:88:02:3f:55:76:f2:ea:2a:5d:e7:
56:4f:24:ba:d7:12:40:5b:9b:be:27:fd:14:1d:02:
d4:11:26:ef:cb:08:4e:24:54:c8:8d:89:b0:00:a8:
80:7e:69:83:09:f3:ba:bb:10:10:59:41:7a:48:5b:
c0:47:e9:f3:be:d0:b4:c1:7f:91:ff:a1:0a:8e:99:
fd:c1:f7:3f:4b:d6:a3:c0:35:4e:00:2a:6b:a5:0a:
76:da:f1:b0:6f:56:fb:da:1b:ac:2b:1f:79:ed:17:
1d:4b:68:78:92:85:f4:ea:ae:d0:c8:3b:4f:ab:1e:
47:01:f2:41:6c:fe:a4:1c:a5:dd:86:f5:58:de:e5:
62:d6:d6:81:97:e1:49:af:52:f1:58:03:96:0d:7d:
9d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4F:0D:91:94:26:C7:F8:A3:70:56:B6:17:83:68:E6:10:51:D3:84
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/X08NkZQmx_ijcFa2F4No5hBR04Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.21.0/24
45.9.116.0/24
45.9.122.0/24
45.94.46.0/24
45.128.76.0/24
45.128.246.0/24
45.130.128.0/24
45.146.130.0/24
45.154.58.0/24
84.21.189.0-84.21.190.255
93.190.244.0/24
185.9.52.0/24
185.164.58.0/24
193.8.215.0/24
IPv6:
2a04:9f40::/29
2a06:1184:101::/48
2a06:3bc0::/29
2a07:8a40::/29
2a09:17c1:66::/48
2a09:17c1:77::/48
2a0a:2d06:102::/47
2a0c:7886:99::/48
2a0c:7886:100::/48
2a0e:15c7:88::/48
2a0e:15c7:99::/48
2a0e:1a83:77::/48
2a0e:f603:66::/48
2a0f:140::/29
2a0f:1206:55::/48
2a0f:1206:66::/48
2a0f:2500::/29
2a0f:3d86:88::/48
2a0f:3d86:99::/48
2a0f:7d06:88::/48
2a0f:7d06:99::/48
2a0f:cc00::/29
2a0f:d200::/29
2a0f:da40::/29
2a0f:dfc0::/29
2a0f:e040::/29
2a0f:e1c1:22::/48
2a0f:e202:44::/48
2a0f:e202:55::/48
2a0f:e202:100::/48
2a0f:e4c0::/29
2a0f:e6c6:100::/47
2a0f:e7c6:66::/48
2a0f:e7c6:77::/48
2a0f:e7c6:88::/48
2a0f:e844:22::/48
2a0f:e844:33::/48
2a0f:ea44:66::/48
2a0f:ea44:77::/48
2a0f:fc00::/29
2a12:ac46:77::/48
2a12:ecc0:168::/48
2a12:ecc0:178::/48
2a13:18c6:55::/48
2a13:18c6:77::/48
2a13:18c6:88::/48
2a13:7d80::/29
2a13:8c86:10a::/48
2a13:8c86:120::/48
2a13:8c86:130::/48
2a13:c900:88::/48
2a13:c900:99::/48
2a13:e107:99::/48
2a13:e107:9c::/48
Signature Algorithm: sha256WithRSAEncryption
50:d7:2e:d4:d3:73:e7:04:71:cf:c6:1e:cd:d4:45:e8:ca:65:
d3:84:7c:a1:9a:bf:bb:73:5f:27:8c:7f:52:85:a0:8d:10:18:
1e:0e:60:89:fe:dd:d3:a0:1f:9f:68:6d:d8:2d:94:d4:65:4a:
3d:fd:7b:9a:e4:18:86:07:0e:11:76:51:70:5a:bc:11:30:9f:
3a:9f:4d:d7:d4:1a:96:ab:c1:56:10:f6:fe:13:7a:25:eb:9f:
cd:77:e9:ed:5b:2a:85:6a:6b:54:ed:1f:5d:0e:2c:76:4c:90:
45:86:16:4d:38:83:f9:e6:92:6c:18:2f:cd:60:5e:a3:c3:38:
98:d0:e4:78:65:c9:e4:e9:5e:f9:9f:2b:47:f3:f2:d9:17:63:
6e:0d:22:9a:e1:dd:ac:fc:32:5e:ef:c4:71:df:25:37:a1:34:
cc:9e:fb:ea:a3:cb:45:eb:17:79:5a:57:b8:ff:9a:3c:32:cb:
74:9e:ff:6b:81:c2:a6:11:15:b9:2c:f8:9b:99:7a:36:9c:79:
9b:62:e7:e0:54:b7:c7:1a:fe:58:47:dd:65:ae:4a:69:ee:e6:
a1:84:e3:95:42:22:e6:de:c7:8e:f5:ac:4d:5b:83:a1:ac:e4:
6d:75:d5:9e:a2:90:45:aa:71:d4:d9:b5:cb:46:be:5a:c3:74:
79:f0:67:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:08:43 2025 by rpki-client