Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/lzmfhzsYmsvFM5THuLTPVXkYPLs.roa
File: lzmfhzsYmsvFM5THuLTPVXkYPLs.roa (raw, json)
Hash identifier: edCkgCD+ffUdtM3kN33/nM9+c9ji3Ay6CiTVf4KH1es=
Subject key identifier: 97:39:9F:87:3B:18:9A:CB:C5:33:94:C7:B8:B4:CF:55:79:18:3C:BB
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019170B8C444DB0323E464A41401FE2CA61E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/lzmfhzsYmsvFM5THuLTPVXkYPLs.roa
Signing time: Tue 20 Aug 2024 16:57:22 +0000
ROA not before: Tue 20 Aug 2024 16:57:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
103.139.50.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a06:1184:33::/48 maxlen: 48
2a0a:2d06:33::/48 maxlen: 48
2a0a:2d06:55::/48 maxlen: 48
2a0c:7886:33::/48 maxlen: 48
2a0e:1a80:2541::/48 maxlen: 48
2a0e:1a83:66::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0e:f600:6c::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2e80::/29 maxlen: 29
2a0f:3d87::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:7d04:1::/48 maxlen: 48
2a0f:e1c6::/32 maxlen: 32
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:ecc4:2213::/48 maxlen: 48
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:e101:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 08 Sep 2024 12:34:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:70:b8:c4:44:db:03:23:e4:64:a4:14:01:fe:2c:a6:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 20 16:57:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97399f873b189acbc53394c7b8b4cf5579183cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:16:cf:26:c3:bf:cf:7e:62:97:d9:33:2d:c2:
75:1c:d9:18:43:e5:7d:c1:dc:6a:0f:3d:bc:ed:6f:
b6:57:b9:b0:51:76:77:fd:fc:cf:81:e6:bb:cc:e5:
c2:c6:1b:9c:a1:c3:ff:0b:eb:c1:e9:67:9e:bc:a3:
94:cb:82:8c:00:5d:b8:77:0e:56:6b:6a:23:eb:87:
c7:6a:52:0e:1a:18:21:76:e4:5d:77:a8:9b:e7:37:
8b:2e:a4:5f:6c:34:40:ac:1b:4f:f7:03:02:a2:43:
d7:1e:5b:fc:c0:68:d4:ce:5d:f0:ff:d7:b9:c6:f4:
7a:f2:47:c5:50:6a:44:bd:83:67:a1:4a:65:ec:20:
f6:14:45:34:c1:d4:1f:73:15:0b:c8:ee:73:87:a3:
ee:24:5f:f4:3b:40:8d:d1:6a:07:22:c2:51:e3:eb:
18:ea:52:88:95:ab:6b:3e:e3:4e:e2:24:08:1f:0f:
04:b8:31:23:0e:cb:cb:df:40:bd:24:81:43:10:1f:
85:5f:f2:49:a1:36:fd:8c:74:cd:6b:ae:ff:dc:fb:
4a:ac:c6:3a:f7:d1:e2:f3:5c:4e:2b:08:5c:a7:63:
8c:e9:cb:90:e8:39:49:23:0e:eb:49:1b:3b:24:3e:
e1:2e:20:c9:15:7b:d1:3d:56:de:9f:7d:56:9f:07:
7b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:39:9F:87:3B:18:9A:CB:C5:33:94:C7:B8:B4:CF:55:79:18:3C:BB
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/lzmfhzsYmsvFM5THuLTPVXkYPLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
103.139.50.0/24
193.164.199.0/24
IPv6:
2a06:1184:33::/48
2a0a:2d06:33::/48
2a0a:2d06:55::/48
2a0c:7886:33::/48
2a0e:1a80:2541::/48
2a0e:1a83:66::/48
2a0e:c780::/32
2a0e:f201:1::/48
2a0e:f600:6c::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2e80::/29
2a0f:3d87::/32
2a0f:7d02:1::/48
2a0f:7d04:1::/48
2a0f:e1c6::/32
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:ecc4:2213::/48
2a12:f540::/29
2a13:18c0:1::/48
2a13:e101:2::/48
Signature Algorithm: sha256WithRSAEncryption
5f:91:ce:25:09:e6:38:f0:57:9f:39:f9:d1:6c:b4:ea:b9:cb:
20:60:84:84:a3:4b:51:81:6a:f2:10:4c:25:64:fe:dd:6a:26:
80:90:f9:8a:5b:99:d5:08:a9:58:a5:7f:4c:ef:04:32:83:d5:
3b:0f:d7:2b:ed:e0:de:07:a6:1d:58:85:81:bc:f5:43:73:13:
29:b8:99:a4:9b:5b:15:9e:9b:78:b2:78:43:c4:4d:22:92:0e:
af:f7:1b:7a:be:28:39:98:2f:d9:78:f6:92:a0:30:cb:2b:f9:
25:22:96:4b:d4:5b:0c:91:de:c4:0f:34:fe:69:c9:a8:f5:b4:
24:3b:7a:41:a5:e5:c8:f7:c7:0c:76:58:57:90:80:4b:0f:72:
b0:ac:84:17:3a:0e:10:7f:b5:97:92:15:e5:5d:ad:60:00:57:
d9:c6:03:a3:50:71:e0:1d:5f:3e:d7:74:f1:65:ac:c1:4d:f3:
b6:d4:56:d7:86:29:aa:ef:a4:bd:39:83:45:24:c1:23:15:05:
18:0a:55:c0:07:e6:be:0a:6f:6f:b1:03:dd:61:02:c8:93:d3:
15:90:55:b5:d7:6b:d2:cc:46:28:38:42:5e:77:35:49:8d:a0:
38:ba:7a:c9:31:80:93:88:a7:76:21:ba:a9:43:25:08:79:a6:
e8:19:69:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:59:29 2025 by rpki-client