Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/dW2dzHgZu0Cuq3LCbm9PpU45dmo.roa
File: dW2dzHgZu0Cuq3LCbm9PpU45dmo.roa (raw, json)
Hash identifier: vsalZPK+k1zQluf+Cl6gIWQrsm5FpToeFUKSpXvIFBU=
Subject key identifier: 75:6D:9D:CC:78:19:BB:40:AE:AB:72:C2:6E:6F:4F:A5:4E:39:76:6A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0190A1D206B45BEFC0E6F3E093E6F306AB75
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/dW2dzHgZu0Cuq3LCbm9PpU45dmo.roa
Signing time: Thu 11 Jul 2024 12:43:34 +0000
ROA not before: Thu 11 Jul 2024 12:43:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
103.139.50.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a0e:1a80:2541::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2e80::/29 maxlen: 29
2a0f:3d83::/32 maxlen: 32
2a0f:3d87::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:e1c6::/32 maxlen: 32
2a0f:e1c7:1::/48 maxlen: 48
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 15 Jul 2024 16:15:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a1:d2:06:b4:5b:ef:c0:e6:f3:e0:93:e6:f3:06:ab:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 11 12:43:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=756d9dcc7819bb40aeab72c26e6f4fa54e39766a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:31:01:01:aa:4e:db:07:47:b3:04:6c:9b:f6:
df:c3:09:b4:5e:69:7b:3c:a1:fe:20:1c:5b:6e:17:
7d:db:c6:74:96:91:a4:f2:71:6d:e9:f9:7c:9a:45:
a4:dd:d9:65:38:7d:ad:2b:8d:bd:1b:90:09:c7:b7:
23:64:92:2d:bb:8a:91:c9:0c:5d:1f:3a:c9:26:64:
72:16:94:ff:d9:4b:00:1d:6d:33:cd:d6:c8:62:e1:
a2:e1:55:ab:88:19:50:3e:fc:6e:00:14:8e:9a:78:
f5:6a:d5:8f:44:32:00:87:30:df:b7:b2:99:ae:b5:
64:cf:eb:2f:1a:cd:79:1f:48:a4:98:4e:0b:3c:32:
85:9b:8b:11:7d:2b:5b:97:8c:d7:fb:90:b5:b6:85:
52:78:84:76:c9:d8:b0:f2:74:b1:f1:fa:42:aa:c8:
eb:02:a2:29:a3:c7:ff:f4:75:62:ce:0e:07:39:29:
3b:4f:93:e6:f8:04:34:37:c6:25:99:9f:8c:b6:c1:
0b:8d:ff:a1:f3:ad:fa:12:2e:16:15:e7:6e:54:4a:
12:38:4c:58:2e:5c:26:4b:5c:22:ae:80:2c:a8:28:
19:d8:7f:5e:23:f0:e2:cf:75:14:ed:2a:29:bb:60:
1c:cf:46:e2:ef:df:58:9e:fe:75:5e:3f:55:f5:d1:
1b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6D:9D:CC:78:19:BB:40:AE:AB:72:C2:6E:6F:4F:A5:4E:39:76:6A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/dW2dzHgZu0Cuq3LCbm9PpU45dmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
103.139.50.0/24
193.164.199.0/24
IPv6:
2a0e:1a80:2541::/48
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2e80::/29
2a0f:3d83::/32
2a0f:3d87::/32
2a0f:7d02:1::/48
2a0f:e1c6::/32
2a0f:e1c7:1::/48
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:f540::/29
2a13:18c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
bd:4c:40:74:6b:eb:e1:2c:43:9b:fc:6a:d0:d5:cf:fd:cf:6a:
d9:c1:d9:a8:84:3d:20:23:b2:b9:c8:0d:8a:6f:b7:8e:8b:1a:
74:a3:f8:c3:87:56:6f:16:15:00:de:4e:68:6a:ae:bb:70:41:
d5:26:4e:57:32:4d:00:57:97:4e:90:77:99:46:18:46:fc:91:
d1:1f:05:1b:00:8c:a7:5b:75:db:d6:31:ca:c0:ca:8c:9b:6d:
4c:b9:f2:d3:3c:b9:54:78:ae:2c:85:9b:da:78:7e:38:49:ab:
03:09:b0:cb:ea:9f:9b:83:38:d0:00:d6:f6:44:1d:04:c2:2b:
aa:3a:a8:db:63:e5:71:02:ef:f6:1a:42:67:fc:f7:58:e9:d0:
ec:67:49:46:2f:fe:f7:87:82:07:0a:fb:29:d1:09:5b:67:60:
aa:b0:c4:40:f8:1e:1a:39:4d:d1:c0:8a:b4:40:da:3b:82:7c:
7d:99:f0:9b:2e:0e:72:cd:8d:43:ce:9c:e2:82:3e:ee:96:11:
9a:96:e6:0f:f4:f7:a6:76:8e:68:ba:3c:2b:7d:77:43:0f:47:
ec:5d:c8:78:da:57:c2:fe:83:5d:92:92:8a:35:0b:1b:27:6f:
45:e1:0a:23:5b:0e:fb:09:42:6c:1d:fa:1e:82:1e:18:9e:c4:
d5:de:d8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:19 2025 by rpki-client