Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/eJxp_4y2rWpY-Ezpqsl79_-AmhM.roa
File: eJxp_4y2rWpY-Ezpqsl79_-AmhM.roa (raw, json)
Hash identifier: X0GeFDvkfdMPCPMoANnhYPZjDyiJH6sAdEspKHoNNg0=
Subject key identifier: 78:9C:69:FF:8C:B6:AD:6A:58:F8:4C:E9:AA:C9:7B:F7:FF:80:9A:13
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01962E3CD1CDC9EC7E16E4F353A6E93726D6
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/eJxp_4y2rWpY-Ezpqsl79_-AmhM.roa
Signing time: Sun 13 Apr 2025 08:20:59 +0000
ROA not before: Sun 13 Apr 2025 08:20:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30633
IP address blocks: 45.86.247.0/24 maxlen: 24
45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
80.253.250.0/24 maxlen: 24
103.139.50.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
193.27.21.0/24 maxlen: 24
193.27.23.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a06:1184:33::/48 maxlen: 48
2a06:5280::/29 maxlen: 29
2a0a:2d06:33::/48 maxlen: 48
2a0c:7886:33::/48 maxlen: 48
2a0e:1a80:2541::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2e80::/29 maxlen: 29
2a0f:3d84::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:e1c6::/32 maxlen: 32
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:ecc4:2213::/48 maxlen: 48
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:9280::/32 maxlen: 32
2a13:e101:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 20 Apr 2025 20:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:3c:d1:cd:c9:ec:7e:16:e4:f3:53:a6:e9:37:26:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 13 08:20:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=789c69ff8cb6ad6a58f84ce9aac97bf7ff809a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:87:09:1e:a9:d4:b7:36:a0:57:e0:9d:ea:fd:
94:b8:a0:da:06:7f:f6:96:e1:23:ba:23:27:37:f5:
2f:4f:64:2f:32:25:82:d5:7d:c9:c2:dd:f4:df:6b:
12:af:b3:b7:98:7e:82:7b:a5:60:69:b9:84:8e:71:
84:07:29:ad:c3:1f:18:ff:00:b1:0e:ad:6a:68:21:
84:80:54:42:90:0d:83:8e:cd:89:38:f0:ac:f1:30:
b9:2c:ae:7c:8b:d2:10:f4:92:8d:48:1e:49:e6:2d:
68:c1:e0:3e:26:4e:ba:fa:04:3b:e0:60:59:c0:71:
a8:5c:dc:d4:5a:a5:5a:a2:d4:f8:b0:3a:a6:a6:a8:
06:cf:72:f0:9d:62:e6:9a:b7:3f:b6:55:29:fd:75:
e5:f1:8c:8a:82:82:27:fe:57:d2:dd:f3:30:e5:9c:
d0:05:54:8e:87:a4:5e:ad:dd:53:98:23:48:30:2d:
0c:24:1d:a1:99:7c:80:c0:df:82:56:06:25:58:d7:
58:6b:71:ab:0f:00:55:56:ab:35:7b:1f:e6:ce:38:
47:4e:ef:01:7f:72:41:11:5b:6d:1d:3a:fa:cd:63:
36:41:9e:93:b0:35:c8:a9:56:f4:4f:99:60:16:39:
00:cf:1b:75:e8:fe:ac:a8:8f:8a:9d:cd:3d:5a:82:
68:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9C:69:FF:8C:B6:AD:6A:58:F8:4C:E9:AA:C9:7B:F7:FF:80:9A:13
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/eJxp_4y2rWpY-Ezpqsl79_-AmhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.247.0/24
45.129.127.0/24
45.135.37.0/24
80.253.250.0/24
103.139.50.0/24
185.164.59.0/24
193.27.21.0/24
193.27.23.0/24
193.164.199.0/24
IPv6:
2a06:1184:33::/48
2a06:5280::/29
2a0a:2d06:33::/48
2a0c:7886:33::/48
2a0e:1a80:2541::/48
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2e80::/29
2a0f:3d84::/32
2a0f:7d02:1::/48
2a0f:e1c6::/32
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:ecc4:2213::/48
2a12:f540::/29
2a13:18c0:1::/48
2a13:9280::/32
2a13:e101:2::/48
Signature Algorithm: sha256WithRSAEncryption
78:db:64:9b:7c:74:9c:c3:6b:e3:d4:58:57:d7:b8:e5:51:9c:
0c:ef:34:5a:b0:e7:e1:50:67:42:b9:ef:ef:82:bb:eb:bd:c6:
4a:d5:c4:ec:a1:6c:97:60:bd:8c:b4:ff:0f:97:15:5a:b6:3a:
ee:5a:1a:d1:70:1a:47:81:db:f4:e9:7b:bc:ee:ce:db:64:3e:
04:58:9a:fd:05:a2:93:4d:6e:41:f1:09:57:b9:79:09:43:d9:
e2:8e:98:ef:87:0c:ba:19:10:33:16:af:81:ed:66:7e:b1:18:
02:0c:bf:3d:e8:72:0a:84:af:50:48:cc:fb:5c:4b:1d:55:58:
cb:67:34:0f:9e:2f:1a:a0:d3:62:46:b8:0a:ee:27:eb:c5:dd:
54:3f:9e:69:39:a9:58:8e:fa:9e:68:cb:1e:75:12:b3:f4:ca:
ab:01:1e:37:71:eb:82:ec:98:84:1e:52:d3:8a:b9:68:3c:98:
c6:eb:c9:ac:bc:25:f8:17:b8:be:98:e2:a3:5d:d3:d3:17:ff:
27:1a:84:27:dc:c5:07:0d:b3:7e:08:6c:5c:b5:d0:5e:be:5a:
d4:ef:29:7a:6b:66:3c:6b:e5:15:c6:91:8d:d0:40:31:48:6b:
1c:da:88:29:82:42:a8:cb:c5:9e:65:9a:c3:19:88:0f:3b:3e:
16:5e:f0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:43:24 2025 by rpki-client