Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/XoF-mN6FTGBr_p0iafj76ftJEPM.roa
File: XoF-mN6FTGBr_p0iafj76ftJEPM.roa (raw, json)
Hash identifier: ZjQRwTLtkAlGfakTwNgBUS4YhyNLrK9rvPoQ7KHE+X0=
Subject key identifier: 5E:81:7E:98:DE:85:4C:60:6B:FE:9D:22:69:F8:FB:E9:FB:49:10:F3
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019006F6C7056C7D51BB124B9371BF9CAFEF
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/XoF-mN6FTGBr_p0iafj76ftJEPM.roa
Signing time: Tue 11 Jun 2024 11:02:34 +0000
ROA not before: Tue 11 Jun 2024 11:02:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a0e:1a80::/32 maxlen: 32
2a0e:1a80:2541::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2e80::/29 maxlen: 29
2a0f:2f80::/29 maxlen: 29
2a0f:3d84::/32 maxlen: 32
2a0f:3d87::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:e1c6::/32 maxlen: 32
2a0f:e1c7:1::/48 maxlen: 48
2a0f:e847:2::/48 maxlen: 48
2a0f:e940::/29 maxlen: 29
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 11 Jun 2024 14:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:06:f6:c7:05:6c:7d:51:bb:12:4b:93:71:bf:9c:af:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 11 11:02:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e817e98de854c606bfe9d2269f8fbe9fb4910f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:37:fa:64:54:f6:53:95:c2:1b:3e:0a:2c:d3:
41:48:6d:43:99:d7:9b:97:4c:f3:f9:fa:6c:06:fa:
17:ae:76:89:df:fd:97:92:37:e4:17:5d:f5:b0:8e:
61:31:d6:dc:51:3c:d8:ab:8c:ca:20:a7:98:2b:d5:
35:bf:59:a6:bf:5a:49:4e:38:54:58:6f:4f:6c:8b:
a5:02:b6:04:bc:c1:1f:a2:45:b8:83:cb:73:e8:a5:
a9:f9:2a:08:88:0c:47:8e:3a:54:0a:bf:cd:b9:93:
10:97:28:57:34:65:e8:26:76:eb:80:e6:dc:00:9f:
b3:5e:57:da:60:91:ad:e5:ed:3e:e6:b7:61:27:63:
dd:ae:c5:1c:47:11:84:20:d3:c8:60:c4:ee:8a:3a:
12:c4:93:93:06:00:b9:e8:18:f4:0d:5b:28:5d:cd:
4d:83:95:cf:b9:54:f7:0d:a5:43:83:ef:01:71:ad:
6c:e9:e1:18:c9:70:8a:80:74:0e:7f:28:52:37:fe:
22:73:6c:c0:f6:d3:b8:e4:3a:7c:52:dc:e5:e5:9c:
40:9a:99:88:1b:ec:be:40:4e:9e:57:4f:43:81:0d:
4b:53:e6:0b:bb:0f:90:9f:5e:10:4d:18:21:eb:56:
fb:e6:cc:d9:47:67:73:af:52:49:04:31:cc:f7:26:
71:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:81:7E:98:DE:85:4C:60:6B:FE:9D:22:69:F8:FB:E9:FB:49:10:F3
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/XoF-mN6FTGBr_p0iafj76ftJEPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
193.164.199.0/24
IPv6:
2a0e:1a80::/32
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2e80::/29
2a0f:2f80::/29
2a0f:3d84::/32
2a0f:3d87::/32
2a0f:7d02:1::/48
2a0f:e1c6::/32
2a0f:e1c7:1::/48
2a0f:e847:2::/48
2a0f:e940::/29
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:f540::/29
2a13:18c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
5c:aa:59:23:63:da:d7:1a:d9:02:1b:ee:a5:6c:bc:da:c6:c9:
29:17:90:46:b5:6c:c9:ac:7d:f7:06:54:d9:c0:b4:a5:92:76:
90:a8:de:30:9a:23:a2:81:b1:c4:97:38:a2:1b:67:28:0a:81:
f9:4b:5d:d7:f1:87:47:c2:74:15:9e:33:ea:99:27:4e:56:43:
de:79:ad:5c:de:5e:9e:96:1b:70:d9:7f:e3:02:c5:44:2d:70:
35:8d:db:3f:e7:16:57:4f:68:0d:a4:4f:e0:9b:3b:9d:de:b1:
b8:55:2b:a0:28:d9:1a:5f:d8:7d:3a:57:47:ca:d2:9a:1e:09:
9e:6b:08:95:fb:2c:ac:54:0b:53:6d:0f:20:fb:dc:c3:fe:2c:
52:5e:04:3a:e1:dc:7a:87:52:5e:7a:cd:1a:d0:cf:a9:e3:93:
a2:9d:e4:40:f2:b3:37:85:7d:5f:77:82:3b:f6:a7:bc:30:06:
1e:1a:9b:53:a2:e7:9d:e0:d5:1c:db:02:f5:16:66:a7:72:96:
44:d6:a0:e5:a7:05:ad:7b:ff:da:81:e6:ca:60:02:5b:b4:62:
bf:b7:55:36:d4:77:f9:dc:62:f1:2d:90:27:23:6c:19:09:af:
db:d2:f7:6b:88:44:90:e2:4f:8e:6f:41:1c:6d:4e:67:2c:1b:
46:9e:7e:b9
-----BEGIN CERTIFICATE-----
MIIGBjCCBO6gAwIBAgISAZAG9scFbH1RuxJLk3G/nK/vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwNjExMTEwMjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTgxN2U5OGRlODU0YzYwNmJmZTlkMjI2OWY4ZmJlOWZiNDkxMGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTf6ZFT2U5XCGz4KLNNBSG1Dmdeb
l0zz+fpsBvoXrnaJ3/2XkjfkF131sI5hMdbcUTzYq4zKIKeYK9U1v1mmv1pJTjhU
WG9PbIulArYEvMEfokW4g8tz6KWp+SoIiAxHjjpUCr/NuZMQlyhXNGXoJnbrgObc
AJ+zXlfaYJGt5e0+5rdhJ2PdrsUcRxGEINPIYMTuijoSxJOTBgC56Bj0DVsoXc1N
g5XPuVT3DaVDg+8Bca1s6eEYyXCKgHQOfyhSN/4ic2zA9tO45Dp8Utzl5ZxAmpmI
G+y+QE6eV09DgQ1LU+YLuw+Qn14QTRgh61b75szZR2dzr1JJBDHM9yZxSwIDAQAB
o4IDEjCCAw4wHQYDVR0OBBYEFF6BfpjehUxga/6dImn4++n7SRDzMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvWG9GLW1ONkZUR0JyX3AwaWFmajc2ZnRKRVBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBJgYIKwYBBQUHAQcBAf8EggEVMIIBETAYBAIAATASAwQA
LYF/AwQALYclAwQAwaTHMIH0BAIAAjCB7QMFACoOGoADBQAqDseAAwcAKg7yAQAB
AwcAKg8eAAEjAwcAKg8eAARWAwcAKg8eAAmHAwcAKg8eAAq8AwcAKg8eAN75AwcA
Kg8eAQABAwcAKg8egQACAwcAKg8egRKTAwcAKg8egUMZAwcAKg8egZLoAwcAKg8e
gaPQAwcAKg8egc2uAwUDKg8ugAMFAyoPL4ADBQAqDz2EAwUAKg89hwMHACoPfQIA
AQMFACoP4cYDBwAqD+HHAAEDBwAqD+hHAAIDBQMqD+lAAwUDKhBtQAMFAyoR/YAD
BQEqEqxAAwUDKhL1QAMHACoTGMAAATANBgkqhkiG9w0BAQsFAAOCAQEAXKpZI2Pa
1xrZAhvupWy82sbJKReQRrVsyax99wZU2cC0pZJ2kKjeMJojooGxxJc4ohtnKAqB
+Utd1/GHR8J0FZ4z6pknTlZD3nmtXN5enpYbcNl/4wLFRC1wNY3bP+cWV09oDaRP
4Js7nd6xuFUroCjZGl/YfTpXR8rSmh4JnmsIlfssrFQLU20PIPvcw/4sUl4EOuHc
eodSXnrNGtDPqeOTop3kQPKzN4V9X3eCO/anvDAGHhqbU6LnneDVHNsC9RZmp3KW
RNag5acFrXv/2oHmymACW7Riv7dVNtR3+dxi8S2QJyNsGQmv29L3a4hEkOJPjm9B
HG1OZywbRp5+uQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:55:45 2025 by rpki-client