Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fcEbUXxI-K0qgYI4ReQLqw4gAeg.roa
File: fcEbUXxI-K0qgYI4ReQLqw4gAeg.roa (raw, json)
Hash identifier: HshGPab7eMJx5Y4UHp397vizSEEkdjG2ESIZ+90AqqQ=
Subject key identifier: 7D:C1:1B:51:7C:48:F8:AD:2A:81:82:38:45:E4:0B:AB:0E:20:01:E8
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01962B2D2010FCCCCE2B7250C9379E6E8B36
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fcEbUXxI-K0qgYI4ReQLqw4gAeg.roa
Signing time: Sat 12 Apr 2025 18:04:59 +0000
ROA not before: Sat 12 Apr 2025 18:04:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30633
IP address blocks: 45.86.247.0/24 maxlen: 24
45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
80.253.250.0/24 maxlen: 24
103.139.50.0/24 maxlen: 24
193.27.21.0/24 maxlen: 24
193.27.23.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a06:1184:33::/48 maxlen: 48
2a06:5280::/29 maxlen: 29
2a0a:2d06:33::/48 maxlen: 48
2a0c:7886:33::/48 maxlen: 48
2a0e:1a80:2541::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2e80::/29 maxlen: 29
2a0f:3d84::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:e1c6::/32 maxlen: 32
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:ecc4:2213::/48 maxlen: 48
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:9280::/32 maxlen: 32
2a13:e101:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 13 Apr 2025 08:20:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:2d:20:10:fc:cc:ce:2b:72:50:c9:37:9e:6e:8b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 12 18:04:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7dc11b517c48f8ad2a81823845e40bab0e2001e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d7:f7:c3:dc:83:49:19:9b:54:0b:e7:64:ef:
f6:be:51:ee:a5:40:e5:f4:47:1d:4e:9d:20:aa:45:
b8:4e:39:76:bc:77:1d:06:48:db:92:00:a9:5c:f1:
b2:9d:48:38:08:b5:fd:77:5c:8a:24:ee:71:92:a7:
f7:03:5c:7e:f6:34:41:0b:a6:0b:b7:bc:7a:b6:84:
10:4d:30:3c:76:8a:16:c0:5e:67:52:55:a0:ac:f8:
2f:43:11:cc:82:b8:42:b2:87:73:7a:96:68:f7:05:
e5:b1:e4:31:2e:dc:4f:43:83:40:32:ad:58:b2:51:
22:80:5b:48:6f:54:4a:14:2e:ec:6e:83:74:fd:f4:
94:21:4a:54:b5:00:c0:7b:02:d9:55:c2:e7:e0:17:
73:1b:a7:8f:cf:53:15:54:5d:b5:5e:3b:54:5d:e4:
ea:60:03:b9:05:8a:1f:2d:c0:8c:ab:4f:b9:f5:0a:
91:46:fd:31:26:41:b7:4a:5b:aa:c6:1a:49:e1:7e:
ed:3f:ec:88:4a:29:f2:d0:dd:9d:a2:1e:a3:f3:7a:
c6:15:5c:b6:7f:01:25:d9:3f:69:09:75:8d:05:74:
c2:d1:42:52:c9:22:67:91:e7:83:99:f7:b2:ea:c3:
6e:5a:6b:5a:57:af:02:df:40:f1:8f:ce:a8:0a:60:
3e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C1:1B:51:7C:48:F8:AD:2A:81:82:38:45:E4:0B:AB:0E:20:01:E8
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fcEbUXxI-K0qgYI4ReQLqw4gAeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.247.0/24
45.129.127.0/24
45.135.37.0/24
80.253.250.0/24
103.139.50.0/24
193.27.21.0/24
193.27.23.0/24
193.164.199.0/24
IPv6:
2a06:1184:33::/48
2a06:5280::/29
2a0a:2d06:33::/48
2a0c:7886:33::/48
2a0e:1a80:2541::/48
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2e80::/29
2a0f:3d84::/32
2a0f:7d02:1::/48
2a0f:e1c6::/32
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:ecc4:2213::/48
2a12:f540::/29
2a13:18c0:1::/48
2a13:9280::/32
2a13:e101:2::/48
Signature Algorithm: sha256WithRSAEncryption
26:b5:d9:ed:a8:77:19:6a:5d:49:e9:51:b3:d1:59:bf:14:b7:
f7:8e:fc:fa:70:2d:65:2e:fa:0d:87:b4:fa:97:09:ca:be:de:
de:fe:0e:57:82:d6:ba:02:d5:4a:e8:a1:d2:6a:23:dc:96:25:
df:e3:a4:0a:5c:24:cb:5c:81:d1:b2:2a:ef:80:40:68:ce:e7:
18:81:07:6d:bf:08:50:2a:2c:64:e5:5c:1e:45:ea:bd:2e:95:
61:b7:06:d2:40:0c:95:51:f2:bb:53:d7:aa:78:79:07:15:e7:
fc:39:8e:c7:15:cb:36:b8:9e:64:de:e9:bd:07:12:21:02:33:
a7:dc:03:04:4b:ef:fd:22:8f:7f:a1:62:b8:fb:b4:99:53:2d:
11:2f:8b:de:8e:cb:5f:b9:d3:3f:d8:72:c5:16:be:2b:29:32:
97:f9:85:c1:ab:2b:92:32:59:29:92:67:1c:3d:da:c9:da:11:
d0:f1:6e:3d:4d:1e:4d:d6:39:aa:75:ae:4b:3e:a3:02:83:e4:
b9:16:f1:ac:75:d9:b5:5e:e0:04:ee:82:d8:cb:81:e1:e1:c8:
de:b0:10:af:64:67:c1:ff:20:8d:7c:d4:d1:99:66:a4:ab:78:
1a:35:ff:a0:88:51:a6:00:7f:7a:3e:9b:57:6c:63:2f:3b:16:
b2:18:a8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:07:21 2025 by rpki-client