Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Y7ykTlzCFsKoLTt3oVrT7sCc1Us.roa
File: Y7ykTlzCFsKoLTt3oVrT7sCc1Us.roa (raw, json)
Hash identifier: PBI6ONHiMfWTQFai6jNsySNWYG9CcDDhRdIGh2sLFM4=
Subject key identifier: 63:BC:A4:4E:5C:C2:16:C2:A8:2D:3B:77:A1:5A:D3:EE:C0:9C:D5:4B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018DC04F0AC86CB4C1BC7CEAB8050815980B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Y7ykTlzCFsKoLTt3oVrT7sCc1Us.roa
Signing time: Mon 19 Feb 2024 07:40:21 +0000
ROA not before: Mon 19 Feb 2024 07:40:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a0e:1a80::/32 maxlen: 32
2a0e:c780::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2100::/29 maxlen: 29
2a0f:2e80::/29 maxlen: 29
2a0f:2f80::/29 maxlen: 29
2a0f:3d80:123::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
2a0f:3d83::/32 maxlen: 32
2a0f:3d84::/32 maxlen: 32
2a0f:3d87::/32 maxlen: 32
2a0f:e841::/32 maxlen: 32
2a0f:e940::/29 maxlen: 29
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:d5c0::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:18c3::/32 maxlen: 32
2a13:18c6::/32 maxlen: 32
2a13:4900::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 19 Feb 2024 18:45:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c0:4f:0a:c8:6c:b4:c1:bc:7c:ea:b8:05:08:15:98:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 19 07:40:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63bca44e5cc216c2a82d3b77a15ad3eec09cd54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d0:6e:c6:87:f4:c1:7c:d3:fb:e7:5f:a5:3c:
57:15:df:4c:16:e6:24:39:c9:9a:a9:12:ca:51:b7:
c7:5e:2d:0c:b9:cf:78:50:18:93:9e:ed:cc:9b:4c:
86:dc:99:a0:78:f6:7d:55:0e:46:24:fa:62:4a:4d:
60:7c:d6:5d:56:4e:21:99:4e:56:53:52:49:ed:49:
f0:c6:b2:e9:c6:4b:8b:68:3b:5b:3a:27:11:98:41:
02:8b:90:04:c5:ef:a2:e4:92:4f:c6:61:ea:d1:04:
50:8a:39:ae:45:06:5a:e3:e8:c3:5c:72:e2:a1:2f:
91:f6:15:9e:12:c5:cb:d8:70:dd:2c:89:4b:e5:b8:
dd:50:ad:da:9b:b8:bd:e3:9a:fe:1a:d0:8b:c2:25:
f7:ee:85:99:94:94:96:46:94:79:45:1c:84:26:f0:
d1:cd:f1:a2:3a:10:f2:68:1f:21:b5:e8:03:2a:b1:
18:9a:58:82:37:24:68:71:d3:73:7a:96:e7:97:f3:
1a:a6:3f:cb:c8:dc:be:26:b5:71:f6:4f:bc:fd:cd:
46:3a:c3:23:81:f1:f0:ae:12:d2:74:33:ba:08:8a:
b3:4a:39:28:29:6a:d9:47:ec:34:fa:8e:78:0f:e2:
59:be:7e:31:ab:36:3e:3a:8c:98:02:91:36:13:e3:
2a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BC:A4:4E:5C:C2:16:C2:A8:2D:3B:77:A1:5A:D3:EE:C0:9C:D5:4B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Y7ykTlzCFsKoLTt3oVrT7sCc1Us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
193.164.199.0/24
IPv6:
2a0e:1a80::/32
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2100::/29
2a0f:2e80::/29
2a0f:2f80::/29
2a0f:3d80:123::/48
2a0f:3d82::-2a0f:3d84:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:3d87::/32
2a0f:e841::/32
2a0f:e940::/29
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:d5c0::/29
2a13:18c0:1::/48
2a13:18c3::/32
2a13:18c6::/32
2a13:4900::/29
Signature Algorithm: sha256WithRSAEncryption
00:d1:a6:1a:56:0f:fc:1a:af:e6:43:0d:cc:3d:93:f8:99:af:
5a:05:f8:49:ff:f9:67:73:71:1c:12:fb:8c:0f:82:78:95:e5:
3d:0d:35:50:d3:a4:57:e4:61:61:b6:57:ed:34:14:da:65:f6:
db:5b:b5:d5:a0:7a:46:69:6f:1c:28:17:28:49:89:64:14:85:
ae:56:03:f5:ee:e8:ae:f4:4e:30:bb:5d:da:14:46:ff:c2:21:
91:34:e1:3a:d5:12:c1:05:ab:4f:39:bf:b8:3c:ae:7f:0f:99:
5f:41:1c:e8:e6:c7:a9:87:ac:b8:b8:13:40:e7:58:11:16:67:
c3:2e:1c:c5:25:79:5a:1f:a8:02:86:ce:cb:c2:9c:c7:b8:8a:
2c:47:c3:bd:f2:21:b6:50:e2:6b:6f:e6:a8:19:a2:77:53:dc:
03:59:f9:7d:99:6c:84:9e:7c:18:8d:9e:75:c2:d7:f7:f9:6d:
cb:e2:8e:fc:ee:bd:f0:8e:3f:36:0e:6e:61:3e:e7:72:33:a9:
1c:ee:67:00:db:78:08:b6:51:f0:58:b9:ab:25:23:88:f6:0d:
24:2b:f8:ba:ea:0f:4c:6e:34:a0:d1:5c:66:fc:a6:95:1d:85:
a1:a1:5c:d9:d3:9a:ee:c8:12:b8:17:06:12:a6:0c:34:e5:89:
83:73:45:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:07:29 2025 by rpki-client