Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/X7toX8Pk9Y75DOnQ3V-TKP9kbHs.roa
File: X7toX8Pk9Y75DOnQ3V-TKP9kbHs.roa (raw, json)
Hash identifier: /XolR6Ys5mAuOmUSnWyFAYF6Nq7lj5wKvvXiQGXDEck=
Subject key identifier: 5F:BB:68:5F:C3:E4:F5:8E:F9:0C:E9:D0:DD:5F:93:28:FF:64:6C:7B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018FB8C4E584BEEBECA6BC0B9158DC27E653
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/X7toX8Pk9Y75DOnQ3V-TKP9kbHs.roa
Signing time: Mon 27 May 2024 06:37:42 +0000
ROA not before: Mon 27 May 2024 06:37:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a0e:1a80::/32 maxlen: 32
2a0e:c780::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2e80::/29 maxlen: 29
2a0f:2f80::/29 maxlen: 29
2a0f:3d84::/32 maxlen: 32
2a0f:3d87::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:e1c6::/32 maxlen: 32
2a0f:e1c7:1::/48 maxlen: 48
2a0f:e847:2::/48 maxlen: 48
2a0f:e940::/29 maxlen: 29
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:18c6::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 11 Jun 2024 06:32:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b8:c4:e5:84:be:eb:ec:a6:bc:0b:91:58:dc:27:e6:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 27 06:37:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5fbb685fc3e4f58ef90ce9d0dd5f9328ff646c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:31:f7:26:61:98:87:80:71:d4:15:37:f5:98:
02:00:04:69:0c:cc:14:70:23:8f:f3:ad:2b:bd:40:
6d:2b:31:22:bf:15:ba:6c:4a:8a:44:10:2c:68:88:
62:83:39:77:e4:15:f9:ee:06:c0:d3:b3:be:d1:8e:
8c:09:69:73:04:ff:01:b1:82:fb:28:35:24:93:39:
83:48:84:7b:ab:92:ef:07:3c:a3:d3:58:21:07:79:
21:0d:e2:0c:a3:26:2d:f5:6e:04:0c:71:f0:7c:ec:
d3:ce:d3:9a:a2:66:4d:42:b0:84:88:84:c4:99:bd:
77:15:3b:82:5b:38:c1:3a:66:b3:3a:44:d7:78:5d:
ae:5e:8d:96:47:ba:e5:cb:72:34:67:39:a8:a3:f4:
7a:bb:13:fb:f5:90:2e:67:ab:36:b9:ab:ce:53:03:
6d:ec:2f:38:a6:f7:1b:a7:eb:4e:02:aa:6d:7d:31:
13:3c:82:db:d9:b2:3b:f2:2e:36:ab:9b:eb:0a:6e:
a5:60:90:99:8f:82:c9:d7:48:80:8a:4e:01:3f:60:
d3:b6:d4:16:f7:c8:9e:c2:12:88:80:ce:b3:31:2d:
37:3d:c7:e2:6a:17:c3:71:9b:73:b8:3d:39:55:ae:
c4:26:f4:84:c2:67:58:e3:36:cd:51:11:21:dc:10:
d5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BB:68:5F:C3:E4:F5:8E:F9:0C:E9:D0:DD:5F:93:28:FF:64:6C:7B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/X7toX8Pk9Y75DOnQ3V-TKP9kbHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
193.164.199.0/24
IPv6:
2a0e:1a80::/32
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2e80::/29
2a0f:2f80::/29
2a0f:3d84::/32
2a0f:3d87::/32
2a0f:7d02:1::/48
2a0f:e1c6::/32
2a0f:e1c7:1::/48
2a0f:e847:2::/48
2a0f:e940::/29
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:f540::/29
2a13:18c0:1::/48
2a13:18c6::/32
Signature Algorithm: sha256WithRSAEncryption
14:11:16:16:0c:00:e6:4d:9d:72:6e:e9:6c:df:37:c7:83:44:
d3:b4:d3:02:f6:a4:50:2f:d1:74:0b:90:33:3b:55:d2:ea:cf:
eb:6f:ae:1e:6c:e5:ae:bb:79:4a:7c:47:1b:79:b6:d6:26:0d:
f4:a1:bf:6d:bf:04:67:39:1a:e9:f3:95:2b:65:75:0e:9a:68:
b3:de:31:fd:bd:16:5a:79:20:7c:06:5a:fb:f3:d9:ff:7e:04:
76:6c:c4:74:3a:f4:3d:27:64:c6:59:9c:46:6c:f4:2d:52:ae:
a9:5a:2e:ea:7f:ac:e0:bc:eb:c3:ba:3b:be:5c:cc:20:63:0b:
5b:39:e4:7a:96:9f:d2:88:46:9f:21:e4:91:fe:cb:d1:3d:22:
d8:b4:22:36:f5:04:40:59:33:58:53:2f:88:02:15:bf:72:1a:
47:91:e0:a7:29:0c:ff:76:1f:8b:a0:ca:34:26:68:49:f6:2d:
48:34:58:db:3c:be:08:9c:de:b8:a0:19:2b:af:f8:54:da:cf:
b4:75:12:30:95:ee:df:7e:29:dc:e1:86:36:2e:6a:38:94:9a:
a1:94:f9:86:cc:cd:c6:ba:73:5e:e1:2d:08:1a:02:82:7a:48:
49:9f:cb:dd:db:b4:78:27:a2:d9:92:d1:35:73:43:3d:bd:80:
1b:c5:63:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:53 2025 by rpki-client