Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/aK6kkaZ0VAbaBjSfD6ATDNf5H64.roa
File: aK6kkaZ0VAbaBjSfD6ATDNf5H64.roa (raw, json)
Hash identifier: 3QoruPjA1zDSX7xg8F/5Qfmj9/srnrQqCoaO92JABs4=
Subject key identifier: 68:AE:A4:91:A6:74:54:06:DA:06:34:9F:0F:A0:13:0C:D7:F9:1F:AE
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018F0A99482E751C68018923CCB03F8C81C7
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/aK6kkaZ0VAbaBjSfD6ATDNf5H64.roa
Signing time: Tue 23 Apr 2024 10:56:08 +0000
ROA not before: Tue 23 Apr 2024 10:56:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a0e:1a80::/32 maxlen: 32
2a0e:c780::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2100::/29 maxlen: 29
2a0f:2e80::/29 maxlen: 29
2a0f:2f80::/29 maxlen: 29
2a0f:3d84::/32 maxlen: 32
2a0f:3d87::/32 maxlen: 32
2a0f:7d07::/32 maxlen: 32
2a0f:e1c6::/32 maxlen: 32
2a0f:e1c7:1::/48 maxlen: 48
2a0f:e847:2::/48 maxlen: 48
2a0f:e940::/29 maxlen: 29
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:18c3::/32 maxlen: 32
2a13:18c6::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 27 Apr 2024 10:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0a:99:48:2e:75:1c:68:01:89:23:cc:b0:3f:8c:81:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 23 10:56:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68aea491a6745406da06349f0fa0130cd7f91fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:47:91:5e:21:d5:51:b7:7a:a5:33:97:b1:99:
df:78:62:55:c4:53:eb:82:bc:57:4f:a9:2a:5a:ae:
3b:90:64:31:6f:76:49:43:6c:7b:19:42:ad:0f:a9:
c3:7d:d6:b8:0e:11:0b:3a:e3:dc:bc:52:a0:0f:78:
6b:14:4f:40:35:00:c5:66:4c:43:36:92:37:6f:fa:
a5:f0:a2:05:aa:fd:02:b0:30:10:c3:75:f8:da:46:
14:7d:7f:03:39:2e:09:1a:4f:9f:84:1c:8f:18:cf:
92:6b:1e:9a:5b:fd:8b:92:c1:cf:3a:ed:16:88:5a:
e7:d9:aa:8f:97:af:94:80:35:f7:cf:42:1c:81:36:
03:f8:fe:be:15:f4:64:05:97:89:ec:5e:0b:d2:fa:
9e:e5:8c:c7:92:61:44:d5:dc:a0:d6:6e:7b:09:08:
94:e4:70:7d:8c:c3:67:81:bd:75:15:ae:76:d1:f2:
9d:6e:5c:6d:39:00:6e:61:58:4d:90:ba:32:81:a3:
57:ff:34:75:1a:c9:f0:89:28:9b:c6:b0:8b:86:98:
ce:c5:53:bb:2b:c5:1e:55:96:3a:9a:9d:0b:7c:e7:
e4:2f:58:90:17:be:6f:54:9d:79:5e:ab:8f:1c:d3:
71:c8:8c:e0:43:9c:a7:14:9d:93:4f:82:09:97:0d:
dd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AE:A4:91:A6:74:54:06:DA:06:34:9F:0F:A0:13:0C:D7:F9:1F:AE
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/aK6kkaZ0VAbaBjSfD6ATDNf5H64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
193.164.199.0/24
IPv6:
2a0e:1a80::/32
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2100::/29
2a0f:2e80::/29
2a0f:2f80::/29
2a0f:3d84::/32
2a0f:3d87::/32
2a0f:7d07::/32
2a0f:e1c6::/32
2a0f:e1c7:1::/48
2a0f:e847:2::/48
2a0f:e940::/29
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:f540::/29
2a13:18c0:1::/48
2a13:18c3::/32
2a13:18c6::/32
Signature Algorithm: sha256WithRSAEncryption
65:0b:16:0f:68:c4:48:98:97:91:89:e0:0b:f0:27:5d:7c:82:
e3:10:50:60:7b:6c:4e:74:0e:2f:82:64:4b:91:fd:92:fc:e3:
36:44:68:c0:3a:63:4f:f8:c2:21:26:97:6f:33:20:1a:49:28:
21:0b:01:d8:ca:4d:f4:d2:f6:47:aa:98:aa:88:80:8a:ca:4b:
eb:66:4b:66:58:e2:1c:74:40:78:73:f5:e2:ad:65:1f:c6:ff:
46:3a:73:ed:57:e7:59:40:74:af:2d:07:ad:e1:db:e7:b0:f6:
7e:9f:7a:c5:de:c4:f7:ea:a7:bd:98:d1:bb:7a:79:69:36:07:
f4:25:25:7d:94:8c:df:4b:21:38:26:e6:11:6b:cd:74:8a:25:
c1:83:a2:2b:c4:cb:24:8b:98:11:d5:5f:f8:f9:15:6e:c9:85:
74:27:7b:6d:a3:02:9e:7c:a9:ef:a1:3b:a6:b7:1d:2d:f5:db:
82:99:4d:f4:f2:5d:2c:70:94:8b:f9:d9:8c:47:9a:64:cd:4d:
50:9a:1a:6e:3a:59:45:a8:7d:85:ac:aa:d6:ce:e7:08:63:16:
b9:48:93:e0:5d:71:33:da:9b:db:7c:01:b4:1b:58:5e:de:e2:
be:05:54:4f:97:69:07:66:f7:03:2b:f4:51:c4:1f:45:9b:51:
d8:f8:d4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:00:45 2025 by rpki-client