Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/XWNoqnYG4ns_eK2mFrpwGtu_kg0.roa
File: XWNoqnYG4ns_eK2mFrpwGtu_kg0.roa (raw, json)
Hash identifier: T+LeL+loeZxHyTwrWRltdumGyGXfalFu3wlU5we15n4=
Subject key identifier: 5D:63:68:AA:76:06:E2:7B:3F:78:AD:A6:16:BA:70:1A:DB:BF:92:0D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195148A9D0D712E0CFFF780B466DCB6B9CE
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/XWNoqnYG4ns_eK2mFrpwGtu_kg0.roa
Signing time: Mon 17 Feb 2025 15:33:03 +0000
ROA not before: Mon 17 Feb 2025 15:33:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28753
IP address blocks: 2.59.21.0/24 maxlen: 24
45.9.116.0/24 maxlen: 24
45.9.122.0/24 maxlen: 24
45.94.46.0/24 maxlen: 24
45.128.76.0/24 maxlen: 24
45.128.246.0/24 maxlen: 24
45.130.128.0/24 maxlen: 24
45.146.130.0/24 maxlen: 24
45.154.58.0/24 maxlen: 24
84.21.189.0/24 maxlen: 24
84.21.190.0/24 maxlen: 24
93.190.244.0/24 maxlen: 24
185.9.52.0/24 maxlen: 24
185.164.58.0/24 maxlen: 24
193.8.215.0/24 maxlen: 24
2a04:9f40::/29 maxlen: 29
2a06:1184:101::/48 maxlen: 48
2a06:3bc0::/29 maxlen: 29
2a07:8a40::/29 maxlen: 29
2a09:17c1:66::/48 maxlen: 48
2a09:17c1:77::/48 maxlen: 48
2a0a:2d06:102::/48 maxlen: 48
2a0a:2d06:103::/48 maxlen: 48
2a0c:7886:99::/48 maxlen: 48
2a0c:7886:100::/48 maxlen: 48
2a0e:15c7:88::/48 maxlen: 48
2a0e:15c7:99::/48 maxlen: 48
2a0e:1a83:77::/48 maxlen: 48
2a0e:f603:66::/48 maxlen: 48
2a0f:140::/29 maxlen: 29
2a0f:1206:55::/48 maxlen: 48
2a0f:1206:66::/48 maxlen: 48
2a0f:2500::/29 maxlen: 29
2a0f:3d86:88::/48 maxlen: 48
2a0f:3d86:99::/48 maxlen: 48
2a0f:7d06:88::/48 maxlen: 48
2a0f:7d06:99::/48 maxlen: 48
2a0f:cc00::/29 maxlen: 29
2a0f:d200::/29 maxlen: 29
2a0f:da40::/29 maxlen: 29
2a0f:db40::/29 maxlen: 29
2a0f:dfc0::/29 maxlen: 29
2a0f:e040::/29 maxlen: 29
2a0f:e1c1:22::/48 maxlen: 48
2a0f:e202:44::/48 maxlen: 48
2a0f:e202:55::/48 maxlen: 48
2a0f:e202:100::/48 maxlen: 48
2a0f:e4c0::/29 maxlen: 29
2a0f:e6c6:100::/48 maxlen: 48
2a0f:e6c6:101::/48 maxlen: 48
2a0f:e7c6:66::/48 maxlen: 48
2a0f:e7c6:77::/48 maxlen: 48
2a0f:e7c6:88::/48 maxlen: 48
2a0f:e844:22::/48 maxlen: 48
2a0f:e844:33::/48 maxlen: 48
2a0f:ea44:66::/48 maxlen: 48
2a0f:ea44:77::/48 maxlen: 48
2a0f:fc00::/29 maxlen: 29
2a12:ac46:77::/48 maxlen: 48
2a12:ecc0:168::/48 maxlen: 48
2a12:ecc0:178::/48 maxlen: 48
2a13:18c6:55::/48 maxlen: 48
2a13:18c6:77::/48 maxlen: 48
2a13:18c6:88::/48 maxlen: 48
2a13:7d80::/29 maxlen: 29
2a13:8c86:10a::/48 maxlen: 48
2a13:8c86:120::/48 maxlen: 48
2a13:8c86:130::/48 maxlen: 48
2a13:c900:88::/48 maxlen: 48
2a13:c900:99::/48 maxlen: 48
2a13:e107:99::/48 maxlen: 48
2a13:e107:9c::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 27 Feb 2025 16:42:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:14:8a:9d:0d:71:2e:0c:ff:f7:80:b4:66:dc:b6:b9:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 17 15:33:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d6368aa7606e27b3f78ada616ba701adbbf920d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d6:dc:b3:ff:5a:45:c7:65:20:49:c6:07:2c:
f5:80:2e:30:48:59:ac:a0:ae:c3:dc:4a:00:7c:a1:
70:96:c8:dc:00:2b:ef:a3:85:73:16:0a:d1:55:61:
4b:30:e5:c8:42:a5:54:b3:16:f4:f2:fd:ee:05:57:
bc:e8:b1:f4:5b:90:5b:27:53:19:4e:4c:4b:d0:20:
2b:fc:74:c5:20:5d:1f:b5:2c:de:fd:3f:25:2c:74:
22:6a:f4:15:06:5f:b2:44:1b:b2:9f:6e:c7:18:e5:
4a:78:cc:de:51:e1:d0:1a:b8:f7:86:95:a1:30:ad:
08:e2:8d:4a:7d:a2:7b:cf:89:cb:96:c3:5a:7e:1c:
52:15:a4:ff:5f:65:f8:99:08:cf:42:4d:65:3b:81:
9e:fd:f2:91:02:39:25:81:d1:05:8e:f6:d5:44:5e:
6d:d5:c5:0c:2c:17:8a:45:e1:c5:de:88:ea:a6:42:
3d:02:1d:7d:8f:44:1b:79:2f:7d:4d:ba:11:ce:fb:
59:17:d3:99:ea:7f:9a:e0:3c:0f:28:8d:7e:c9:75:
cc:4b:f0:18:89:f4:a1:09:8c:92:53:76:49:a1:96:
03:41:d7:6d:ff:ed:5c:40:24:bd:fa:41:6d:af:4d:
8d:5d:e0:e7:c6:56:2b:6d:27:bc:80:2f:ca:2a:e5:
1c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:63:68:AA:76:06:E2:7B:3F:78:AD:A6:16:BA:70:1A:DB:BF:92:0D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/XWNoqnYG4ns_eK2mFrpwGtu_kg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.21.0/24
45.9.116.0/24
45.9.122.0/24
45.94.46.0/24
45.128.76.0/24
45.128.246.0/24
45.130.128.0/24
45.146.130.0/24
45.154.58.0/24
84.21.189.0-84.21.190.255
93.190.244.0/24
185.9.52.0/24
185.164.58.0/24
193.8.215.0/24
IPv6:
2a04:9f40::/29
2a06:1184:101::/48
2a06:3bc0::/29
2a07:8a40::/29
2a09:17c1:66::/48
2a09:17c1:77::/48
2a0a:2d06:102::/47
2a0c:7886:99::/48
2a0c:7886:100::/48
2a0e:15c7:88::/48
2a0e:15c7:99::/48
2a0e:1a83:77::/48
2a0e:f603:66::/48
2a0f:140::/29
2a0f:1206:55::/48
2a0f:1206:66::/48
2a0f:2500::/29
2a0f:3d86:88::/48
2a0f:3d86:99::/48
2a0f:7d06:88::/48
2a0f:7d06:99::/48
2a0f:cc00::/29
2a0f:d200::/29
2a0f:da40::/29
2a0f:db40::/29
2a0f:dfc0::/29
2a0f:e040::/29
2a0f:e1c1:22::/48
2a0f:e202:44::/48
2a0f:e202:55::/48
2a0f:e202:100::/48
2a0f:e4c0::/29
2a0f:e6c6:100::/47
2a0f:e7c6:66::/48
2a0f:e7c6:77::/48
2a0f:e7c6:88::/48
2a0f:e844:22::/48
2a0f:e844:33::/48
2a0f:ea44:66::/48
2a0f:ea44:77::/48
2a0f:fc00::/29
2a12:ac46:77::/48
2a12:ecc0:168::/48
2a12:ecc0:178::/48
2a13:18c6:55::/48
2a13:18c6:77::/48
2a13:18c6:88::/48
2a13:7d80::/29
2a13:8c86:10a::/48
2a13:8c86:120::/48
2a13:8c86:130::/48
2a13:c900:88::/48
2a13:c900:99::/48
2a13:e107:99::/48
2a13:e107:9c::/48
Signature Algorithm: sha256WithRSAEncryption
06:c9:29:1b:46:01:0d:1f:1b:fa:a8:89:cd:fa:cc:4b:b3:f0:
d7:75:da:4f:82:ba:49:24:bd:b9:fe:3b:5e:1b:31:25:f4:83:
81:f5:93:76:d9:48:70:9c:c6:f3:cf:28:d6:55:b9:91:89:fc:
d8:4c:57:5f:ea:22:f7:59:ac:47:dc:72:cf:e2:3d:65:5b:f1:
37:73:25:30:21:91:4a:13:fe:66:61:e0:f8:ac:f1:d4:6c:03:
4f:34:d1:99:b2:8d:67:cf:0f:67:fd:aa:74:36:28:66:8c:67:
46:e6:05:3a:bb:36:2f:d0:62:19:02:c4:a2:5f:a4:cc:9c:f9:
a0:f3:d1:38:7d:50:3a:87:95:eb:26:88:2f:dd:e4:b6:ad:0e:
b3:a7:5c:1b:50:54:0e:cd:a2:61:38:cd:f3:c7:85:a6:ce:48:
5c:2b:26:75:e1:fb:3e:39:2a:95:e9:6f:b7:f4:f5:62:7d:6e:
a4:5d:23:22:90:28:36:0f:6d:d5:6b:c7:35:38:98:ea:46:ec:
a2:cc:84:2d:a6:4a:01:ed:40:1c:c2:84:a9:d5:3f:00:84:23:
67:6f:c7:da:6c:5f:2d:d1:ad:df:f7:85:bf:fa:36:4f:71:04:
0a:fd:8a:69:5d:1c:14:70:b0:03:5f:5f:f9:aa:5f:18:97:38:
1e:80:8b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:50 2025 by rpki-client