Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/dshFPqdP-rsk3Fgt53DPPxohC7Q.roa
File: dshFPqdP-rsk3Fgt53DPPxohC7Q.roa (raw, json)
Hash identifier: 9QPRk8VTEdtsgbvkweIpFStuaegvDM34KBG42yyKj90=
Subject key identifier: 76:C8:45:3E:A7:4F:FA:BB:24:DC:58:2D:E7:70:CF:3F:1A:21:0B:B4
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0196CAF623186AF9C4DF22DCB466FA8E9600
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/dshFPqdP-rsk3Fgt53DPPxohC7Q.roa
Signing time: Tue 13 May 2025 18:44:10 +0000
ROA not before: Tue 13 May 2025 18:44:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28753
IP address blocks: 45.9.116.0/24 maxlen: 24
45.9.122.0/24 maxlen: 24
45.128.76.0/24 maxlen: 24
45.154.58.0/24 maxlen: 24
93.190.244.0/24 maxlen: 24
2a04:9f40::/29 maxlen: 29
2a06:1184:101::/48 maxlen: 48
2a06:3bc0::/29 maxlen: 29
2a07:8a40::/29 maxlen: 29
2a0a:2d06:102::/48 maxlen: 48
2a0a:2d06:103::/48 maxlen: 48
2a0c:7886:99::/48 maxlen: 48
2a0c:7886:100::/48 maxlen: 48
2a0e:15c7:99::/48 maxlen: 48
2a0e:1a83:77::/48 maxlen: 48
2a0f:140::/29 maxlen: 29
2a0f:1206:55::/48 maxlen: 48
2a0f:1206:66::/48 maxlen: 48
2a0f:2500::/29 maxlen: 29
2a0f:cc00::/29 maxlen: 29
2a0f:d200::/29 maxlen: 29
2a0f:da40::/29 maxlen: 29
2a0f:db40::/29 maxlen: 29
2a0f:dfc0::/29 maxlen: 29
2a0f:e040::/29 maxlen: 29
2a0f:e1c1:22::/48 maxlen: 48
2a0f:e202:44::/48 maxlen: 48
2a0f:e202:55::/48 maxlen: 48
2a0f:e4c0::/29 maxlen: 29
2a0f:e6c6:100::/48 maxlen: 48
2a0f:e6c6:101::/48 maxlen: 48
2a0f:e7c6:66::/48 maxlen: 48
2a0f:e7c6:77::/48 maxlen: 48
2a0f:e7c6:88::/48 maxlen: 48
2a0f:e844:22::/48 maxlen: 48
2a0f:ea44:66::/48 maxlen: 48
2a0f:ea44:77::/48 maxlen: 48
2a0f:fc00::/29 maxlen: 29
2a12:ac46:77::/48 maxlen: 48
2a12:ecc0:168::/48 maxlen: 48
2a12:ecc0:178::/48 maxlen: 48
2a13:18c6:77::/48 maxlen: 48
2a13:18c6:88::/48 maxlen: 48
2a13:7d80::/29 maxlen: 29
2a13:8c86:10a::/48 maxlen: 48
2a13:8c86:130::/48 maxlen: 48
2a13:c900:88::/48 maxlen: 48
2a13:c900:99::/48 maxlen: 48
2a13:e107:99::/48 maxlen: 48
2a13:e107:9c::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 13 May 2025 19:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:f6:23:18:6a:f9:c4:df:22:dc:b4:66:fa:8e:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 13 18:44:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76c8453ea74ffabb24dc582de770cf3f1a210bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:67:c8:ac:4d:8c:0d:e4:71:55:ac:43:07:a5:
aa:e6:44:04:df:b5:dd:ba:f9:58:22:28:57:2a:83:
c3:4d:13:ad:75:4c:cb:ed:79:c2:fd:1b:9f:84:02:
dd:d3:86:5b:3d:d5:ad:f4:7c:1a:83:bd:50:20:c7:
a3:09:5c:fb:32:d5:f3:f2:21:20:b5:65:5c:b7:92:
90:fa:5e:8d:dc:12:6d:a0:b2:87:23:7e:17:aa:84:
c7:70:a0:6c:b8:5f:db:82:23:5e:6c:bd:64:a3:6d:
01:d2:04:72:b7:83:c5:91:58:59:09:26:a4:47:d9:
07:5e:ee:9d:11:6e:4a:6b:30:26:13:4b:3f:28:68:
fd:40:93:26:79:77:e1:05:25:4d:1a:60:65:cd:e6:
1c:4a:44:ee:24:5a:6b:67:6d:a7:4a:43:75:76:7b:
80:33:80:36:9f:f1:98:08:c7:2e:7e:cf:1e:f0:3d:
dd:8b:aa:08:54:1f:cb:b7:f7:4d:26:c0:2b:b4:86:
3e:6f:20:f3:e2:61:3e:2f:62:d3:b5:f5:90:2a:bd:
0b:9d:64:cc:b6:51:34:f1:ca:bf:0f:4d:85:0b:45:
ea:b4:e5:38:c7:69:2f:c3:9b:07:ea:98:90:9a:ba:
a0:66:41:3a:2f:e8:ce:e2:f1:52:40:97:a5:45:dd:
29:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C8:45:3E:A7:4F:FA:BB:24:DC:58:2D:E7:70:CF:3F:1A:21:0B:B4
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/dshFPqdP-rsk3Fgt53DPPxohC7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.116.0/24
45.9.122.0/24
45.128.76.0/24
45.154.58.0/24
93.190.244.0/24
IPv6:
2a04:9f40::/29
2a06:1184:101::/48
2a06:3bc0::/29
2a07:8a40::/29
2a0a:2d06:102::/47
2a0c:7886:99::/48
2a0c:7886:100::/48
2a0e:15c7:99::/48
2a0e:1a83:77::/48
2a0f:140::/29
2a0f:1206:55::/48
2a0f:1206:66::/48
2a0f:2500::/29
2a0f:cc00::/29
2a0f:d200::/29
2a0f:da40::/29
2a0f:db40::/29
2a0f:dfc0::/29
2a0f:e040::/29
2a0f:e1c1:22::/48
2a0f:e202:44::/48
2a0f:e202:55::/48
2a0f:e4c0::/29
2a0f:e6c6:100::/47
2a0f:e7c6:66::/48
2a0f:e7c6:77::/48
2a0f:e7c6:88::/48
2a0f:e844:22::/48
2a0f:ea44:66::/48
2a0f:ea44:77::/48
2a0f:fc00::/29
2a12:ac46:77::/48
2a12:ecc0:168::/48
2a12:ecc0:178::/48
2a13:18c6:77::/48
2a13:18c6:88::/48
2a13:7d80::/29
2a13:8c86:10a::/48
2a13:8c86:130::/48
2a13:c900:88::/48
2a13:c900:99::/48
2a13:e107:99::/48
2a13:e107:9c::/48
Signature Algorithm: sha256WithRSAEncryption
26:a1:31:a7:c3:66:b5:19:0c:cc:48:71:eb:d6:c1:e2:1f:de:
76:a3:91:9d:5c:4c:d0:91:f2:ac:15:25:f2:32:ea:71:57:f1:
c1:65:b9:6f:87:85:fe:01:cb:08:69:97:3c:39:48:69:51:18:
26:d1:56:36:a2:b0:90:ac:d0:39:be:dc:2e:1f:ec:6c:c8:1b:
02:0b:b3:69:80:86:a6:4b:4a:e5:f6:0d:75:ba:c1:2e:72:41:
11:dd:dd:ad:91:80:5d:99:dc:5c:93:0e:c6:9e:26:c2:79:13:
59:d8:23:e1:73:71:24:be:7f:d2:06:b0:9d:76:43:f7:a1:2d:
7b:cb:6b:80:ba:ba:3a:47:82:c5:a9:13:62:b2:48:d7:a5:8e:
47:fb:67:76:6c:21:a3:12:3d:ad:56:ca:12:ea:8b:88:ff:ab:
fa:bf:16:1e:51:0b:95:f3:16:ff:06:a9:bc:18:40:7b:96:93:
4d:8d:41:9d:1c:01:61:53:e8:d7:3f:64:65:fe:a0:7d:b1:e4:
7d:a4:5f:0e:07:67:c3:be:34:b8:6b:9a:f4:74:c5:11:71:d0:
90:6b:20:32:71:c9:a5:ed:da:47:20:75:5d:4b:de:46:1d:75:
ba:5d:d1:29:73:e5:e2:fe:db:0f:3b:ff:a3:19:b2:f1:7a:25:
a4:ad:25:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:05:33 2025 by rpki-client