Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/np_7rlPLYRqtluYQQpJPuDo4kF4.roa
File: np_7rlPLYRqtluYQQpJPuDo4kF4.roa (raw, json)
Hash identifier: IHW2UONGtIYXkTgUYUGBWOLOBW+CGnJOhsKipVJcXFc=
Subject key identifier: 9E:9F:FB:AE:53:CB:61:1A:AD:96:E6:10:42:92:4F:B8:3A:38:90:5E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195A9C75DE076BC4777107EB7DE671DE85C
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/np_7rlPLYRqtluYQQpJPuDo4kF4.roa
Signing time: Tue 18 Mar 2025 15:02:49 +0000
ROA not before: Tue 18 Mar 2025 15:02:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30633
IP address blocks: 45.86.247.0/24 maxlen: 24
45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
80.253.250.0/24 maxlen: 24
103.139.50.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a06:1184:33::/48 maxlen: 48
2a06:5280::/29 maxlen: 29
2a0a:2d06:33::/48 maxlen: 48
2a0c:7886:33::/48 maxlen: 48
2a0e:1a80:2541::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2e80::/29 maxlen: 29
2a0f:3d84::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:e1c6::/32 maxlen: 32
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:ecc4:2213::/48 maxlen: 48
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:9280::/32 maxlen: 32
2a13:9380::/29 maxlen: 29
2a13:df00::/29 maxlen: 29
2a13:e101:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 03 Apr 2025 10:58:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a9:c7:5d:e0:76:bc:47:77:10:7e:b7:de:67:1d:e8:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 18 15:02:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e9ffbae53cb611aad96e61042924fb83a38905e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d1:d3:cc:5a:24:b5:d4:f8:87:98:00:6b:4f:
72:b9:1a:e2:dd:30:ed:2a:c4:fa:90:a4:eb:93:92:
6f:d5:62:f2:42:8d:e9:46:84:58:a8:9d:c1:33:6a:
24:b4:02:d9:40:78:0d:5d:ab:1f:91:9c:24:28:3d:
6b:61:b5:1c:05:52:58:98:4e:6e:b8:9c:f1:97:45:
9e:ea:3f:2f:39:1a:e3:26:0a:1f:f0:6a:ca:c0:4e:
63:0b:a1:aa:84:9c:28:51:08:7b:fe:41:8b:54:f6:
b4:e9:b2:26:b7:6a:98:49:0d:6d:ef:51:f1:4c:a8:
54:d1:15:ad:4a:0a:9a:45:6d:d1:3c:a5:05:92:60:
d8:a1:98:27:5a:1f:13:4e:85:51:fb:02:1b:b7:3f:
08:fc:77:c9:56:95:53:69:e1:f3:98:64:f1:ba:61:
ae:a7:72:c7:76:b2:79:09:a0:37:e0:d3:83:d2:5b:
ff:ec:39:84:30:96:9c:05:e7:78:9c:6f:13:78:85:
12:92:3a:1c:ca:5c:77:b2:05:19:a4:35:d2:80:08:
ac:2d:ef:28:ca:0f:40:85:bc:37:87:7d:84:40:ed:
9c:2e:9a:c2:ab:02:c7:5e:5a:11:b1:6d:f9:cf:81:
75:a4:86:84:ce:9c:23:e2:53:92:fd:f8:df:5b:c9:
4a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9F:FB:AE:53:CB:61:1A:AD:96:E6:10:42:92:4F:B8:3A:38:90:5E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/np_7rlPLYRqtluYQQpJPuDo4kF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.247.0/24
45.129.127.0/24
45.135.37.0/24
80.253.250.0/24
103.139.50.0/24
193.164.199.0/24
IPv6:
2a06:1184:33::/48
2a06:5280::/29
2a0a:2d06:33::/48
2a0c:7886:33::/48
2a0e:1a80:2541::/48
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2e80::/29
2a0f:3d84::/32
2a0f:7d02:1::/48
2a0f:e1c6::/32
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:ecc4:2213::/48
2a12:f540::/29
2a13:18c0:1::/48
2a13:9280::/32
2a13:9380::/29
2a13:df00::/29
2a13:e101:2::/48
Signature Algorithm: sha256WithRSAEncryption
42:eb:74:bd:ab:ef:91:06:40:e6:a2:25:52:79:7d:2c:50:07:
12:a1:35:cb:4f:98:2a:c4:6c:ed:d5:95:2b:d4:ee:4e:fe:c8:
6b:7c:ab:4a:7c:4d:2b:24:bd:97:30:2c:aa:bb:1e:29:55:1d:
04:c7:c5:b8:52:d8:9d:c3:9f:16:b3:d1:58:5b:21:18:ed:34:
06:25:af:94:6e:83:a5:db:4b:04:53:25:bb:ac:e9:e4:2e:0e:
ea:25:6d:31:f1:51:c9:44:8a:5f:37:26:5c:50:16:08:dc:84:
c4:44:e3:c0:6c:15:ee:70:5f:27:29:2d:62:a2:5d:0a:63:f9:
d5:ec:90:63:12:14:78:d9:bc:0a:b7:7f:c6:89:95:ec:62:fe:
0e:1c:4a:f8:18:ab:e7:bc:64:b3:57:7d:39:21:1c:07:6b:e8:
94:77:c4:01:76:e4:7b:55:7b:1d:e8:0e:17:91:1a:ed:71:1a:
0f:58:07:e9:66:18:44:41:14:04:3c:89:60:92:9c:6b:d6:96:
9d:66:3f:e3:5e:9f:8a:66:b9:c2:13:65:83:fb:38:47:82:47:
b5:81:6a:4f:04:5c:7e:a4:c1:50:b6:c6:57:82:71:ec:81:99:
27:ca:f8:7d:d9:c1:90:49:5f:9c:bc:8a:75:60:69:97:0c:77:
11:4e:ee:a8
-----BEGIN CERTIFICATE-----
MIIGPjCCBSagAwIBAgISAZWpx13gdrxHdxB+t95nHehcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwMzE4MTUwMjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTlmZmJhZTUzY2I2MTFhYWQ5NmU2MTA0MjkyNGZiODNhMzg5MDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntHTzFoktdT4h5gAa09yuRri3TDt
KsT6kKTrk5Jv1WLyQo3pRoRYqJ3BM2oktALZQHgNXasfkZwkKD1rYbUcBVJYmE5u
uJzxl0We6j8vORrjJgof8GrKwE5jC6GqhJwoUQh7/kGLVPa06bImt2qYSQ1t71Hx
TKhU0RWtSgqaRW3RPKUFkmDYoZgnWh8TToVR+wIbtz8I/HfJVpVTaeHzmGTxumGu
p3LHdrJ5CaA34NOD0lv/7DmEMJacBed4nG8TeIUSkjocylx3sgUZpDXSgAisLe8o
yg9Ahbw3h32EQO2cLprCqwLHXloRsW35z4F1pIaEzpwj4lOS/fjfW8lKiwIDAQAB
o4IDSjCCA0YwHQYDVR0OBBYEFJ6f+65Ty2EarZbmEEKST7g6OJBeMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvbnBfN3JsUExZUnF0bHVZUVFwSlB1RG80a0Y0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBXgYIKwYBBQUHAQcBAf8EggFNMIIBSTAqBAIAATAkAwQA
LVb3AwQALYF/AwQALYclAwQAUP36AwQAZ4syAwQAwaTHMIIBGQQCAAIwggERAwcA
KgYRhAAzAwUDKgZSgAMHACoKLQYAMwMHACoMeIYAMwMHACoOGoAlQQMFACoOx4AD
BwAqDvIBAAEDBwAqDx4AASMDBwAqDx4ABFYDBwAqDx4ACYcDBwAqDx4ACrwDBwAq
Dx4A3vkDBwAqDx4BAAEDBwAqDx6BAAIDBwAqDx6BEpMDBwAqDx6BQxkDBwAqDx6B
kugDBwAqDx6Bo9ADBwAqDx6Bza4DBQMqDy6AAwUAKg89hAMHACoPfQIAAQMFACoP
4cYDBQMqEG1AAwUDKhH9gAMFASoSrEADBwAqEuzEIhMDBQMqEvVAAwcAKhMYwAAB
AwUAKhOSgAMFAyoTk4ADBQMqE98AAwcAKhPhAQACMA0GCSqGSIb3DQEBCwUAA4IB
AQBC63S9q++RBkDmoiVSeX0sUAcSoTXLT5gqxGzt1ZUr1O5O/shrfKtKfE0rJL2X
MCyqux4pVR0Ex8W4Utidw58Ws9FYWyEY7TQGJa+UboOl20sEUyW7rOnkLg7qJW0x
8VHJRIpfNyZcUBYI3ITEROPAbBXucF8nKS1iol0KY/nV7JBjEhR42bwKt3/GiZXs
Yv4OHEr4GKvnvGSzV305IRwHa+iUd8QBduR7VXsd6A4XkRrtcRoPWAfpZhhEQRQE
PIlgkpxr1padZj/jXp+KZrnCE2WD+zhHgke1gWpPBFx+pMFQtsZXgnHsgZknyvh9
2cGQSV+cvIp1YGmXDHcRTu6o
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:49:31 2025 by rpki-client