Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ojvKHePl5112mOtbjIvb1j7AEpQ.roa
File: ojvKHePl5112mOtbjIvb1j7AEpQ.roa (raw, json)
Hash identifier: MrsA3XvlbvpnhLUS/u41NuRNboRhxJKVjmntt0/5Er4=
Subject key identifier: A2:3B:CA:1D:E3:E5:E7:5D:76:98:EB:5B:8C:8B:DB:D6:3E:C0:12:94
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0193CAFC26E12EF61079E6BACF138A00BB95
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ojvKHePl5112mOtbjIvb1j7AEpQ.roa
Signing time: Sun 15 Dec 2024 15:42:22 +0000
ROA not before: Sun 15 Dec 2024 15:42:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
103.139.50.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a06:1184:33::/48 maxlen: 48
2a0a:2d06:33::/48 maxlen: 48
2a0c:7886:33::/48 maxlen: 48
2a0e:1a80:2541::/48 maxlen: 48
2a0e:1a83:66::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0e:f600:6c::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2e80::/29 maxlen: 29
2a0f:3d84::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:e1c6::/32 maxlen: 32
2a10:67c0::/29 maxlen: 29
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:ecc4:2213::/48 maxlen: 48
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:9280::/32 maxlen: 32
2a13:e101:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 16 Dec 2024 08:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ca:fc:26:e1:2e:f6:10:79:e6:ba:cf:13:8a:00:bb:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 15 15:42:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a23bca1de3e5e75d7698eb5b8c8bdbd63ec01294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1d:c5:81:25:a9:e6:7b:f4:f3:d6:fe:11:5f:
83:50:f9:f7:20:7d:38:38:71:d2:4f:bb:6e:e8:72:
19:81:43:e4:1d:1a:02:32:b7:36:48:ad:fb:21:b6:
b5:12:8f:f1:66:94:32:a1:e3:a3:42:39:51:7e:56:
81:1b:a6:52:dd:aa:81:6f:74:87:e1:25:ac:32:13:
f8:85:6b:ff:d8:36:c8:d7:47:ce:26:59:3e:48:37:
dd:70:d6:ff:1a:3b:52:a4:1b:a8:ba:ea:24:33:9e:
74:a1:20:7c:ad:88:7a:d2:d2:37:da:45:15:4b:46:
a0:94:e5:fe:bf:92:fb:9a:ad:87:53:23:2d:45:8b:
66:24:a6:8b:82:49:61:75:f5:35:bc:60:74:b8:c3:
e7:51:ea:2b:a1:c2:9f:2c:7e:ef:58:7a:51:81:25:
c1:d8:8e:1c:ed:70:f3:02:9e:b9:67:dd:93:08:48:
4a:26:c9:b7:51:38:d2:6b:72:19:42:6a:90:8f:6a:
0e:8c:3a:75:2c:f0:28:a8:74:7e:f9:f9:10:01:a3:
f8:3f:cb:53:53:a0:c8:1d:00:da:41:4a:15:10:d4:
0d:b7:44:53:e4:9c:87:95:5c:22:09:86:3b:73:36:
a1:e9:24:cd:2a:52:94:61:81:09:f6:a7:84:48:fd:
55:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3B:CA:1D:E3:E5:E7:5D:76:98:EB:5B:8C:8B:DB:D6:3E:C0:12:94
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ojvKHePl5112mOtbjIvb1j7AEpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
103.139.50.0/24
193.164.199.0/24
IPv6:
2a06:1184:33::/48
2a0a:2d06:33::/48
2a0c:7886:33::/48
2a0e:1a80:2541::/48
2a0e:1a83:66::/48
2a0e:c780::/32
2a0e:f201:1::/48
2a0e:f600:6c::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2e80::/29
2a0f:3d84::/32
2a0f:7d02:1::/48
2a0f:e1c6::/32
2a10:67c0::/29
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:ecc4:2213::/48
2a12:f540::/29
2a13:18c0:1::/48
2a13:9280::/32
2a13:e101:2::/48
Signature Algorithm: sha256WithRSAEncryption
83:d0:4a:8b:bf:6f:18:05:e3:d2:44:bd:d5:b4:c9:fc:67:b3:
b9:1c:c5:fa:37:6c:04:28:7a:39:67:3d:4c:b8:4e:83:b2:11:
37:4b:f2:08:07:6c:a0:da:74:4a:9a:ca:f3:fb:83:f4:1d:4b:
45:98:fb:9e:61:80:34:ae:b7:fe:22:97:98:a7:56:b6:04:1d:
48:d9:b1:96:34:1d:e8:52:38:e2:9b:86:90:2a:45:d7:2e:16:
30:37:27:8f:95:c4:2f:6f:0a:66:c8:3d:47:dc:d1:aa:b9:89:
71:b9:4d:69:3b:22:38:b4:43:1d:ae:f5:2b:d6:d1:c2:b7:f7:
ff:00:47:00:67:eb:69:fb:3c:ba:6e:66:81:6c:21:e4:fa:e1:
e5:db:21:13:00:fc:94:c8:a9:d0:a1:7b:f2:65:9d:bd:76:de:
79:22:eb:8b:68:d7:09:25:7b:bc:24:3d:b4:36:62:5b:ae:45:
a1:17:dd:5d:ea:50:24:4d:68:ca:ea:f8:05:ba:55:8d:aa:3e:
f0:cc:54:bf:a9:9d:4f:47:18:79:7a:92:a2:5c:58:8a:df:58:
97:4f:bf:ab:fd:24:d8:64:b5:68:9a:e1:9e:2b:fb:41:86:38:
84:07:69:3a:3b:e2:3f:d3:ce:1d:04:8e:55:da:f0:29:8e:f2:
ee:a1:90:9c
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgISAZPK/CbhLvYQeea6zxOKALuVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQxMjE1MTU0MjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjNiY2ExZGUzZTVlNzVkNzY5OGViNWI4YzhiZGJkNjNlYzAxMjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyR3FgSWp5nv089b+EV+DUPn3IH04
OHHST7tu6HIZgUPkHRoCMrc2SK37Iba1Eo/xZpQyoeOjQjlRflaBG6ZS3aqBb3SH
4SWsMhP4hWv/2DbI10fOJlk+SDfdcNb/GjtSpBuouuokM550oSB8rYh60tI32kUV
S0aglOX+v5L7mq2HUyMtRYtmJKaLgklhdfU1vGB0uMPnUeorocKfLH7vWHpRgSXB
2I4c7XDzAp65Z92TCEhKJsm3UTjSa3IZQmqQj2oOjDp1LPAoqHR++fkQAaP4P8tT
U6DIHQDaQUoVENQNt0RT5JyHlVwiCYY7czah6STNKlKUYYEJ9qeESP1VcQIDAQAB
o4IDQjCCAz4wHQYDVR0OBBYEFKI7yh3j5edddpjrW4yL29Y+wBKUMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvb2p2S0hlUGw1MTEybU90YmpJdmIxajdBRXBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBVgYIKwYBBQUHAQcBAf8EggFFMIIBQTAeBAIAATAYAwQA
LYF/AwQALYclAwQAZ4syAwQAwaTHMIIBHQQCAAIwggEVAwcAKgYRhAAzAwcAKgot
BgAzAwcAKgx4hgAzAwcAKg4agCVBAwcAKg4agwBmAwUAKg7HgAMHACoO8gEAAQMH
ACoO9gAAbAMHACoPHgABIwMHACoPHgAEVgMHACoPHgAJhwMHACoPHgAKvAMHACoP
HgDe+QMHACoPHgEAAQMHACoPHoEAAgMHACoPHoESkwMHACoPHoFDGQMHACoPHoGS
6AMHACoPHoGj0AMHACoPHoHNrgMFAyoPLoADBQAqDz2EAwcAKg99AgABAwUAKg/h
xgMFAyoQZ8ADBQMqEG1AAwUDKhH9gAMFASoSrEADBwAqEuzEIhMDBQMqEvVAAwcA
KhMYwAABAwUAKhOSgAMHACoT4QEAAjANBgkqhkiG9w0BAQsFAAOCAQEAg9BKi79v
GAXj0kS91bTJ/GezuRzF+jdsBCh6OWc9TLhOg7IRN0vyCAdsoNp0SprK8/uD9B1L
RZj7nmGANK63/iKXmKdWtgQdSNmxljQd6FI44puGkCpF1y4WMDcnj5XEL28KZsg9
R9zRqrmJcblNaTsiOLRDHa71K9bRwrf3/wBHAGfrafs8um5mgWwh5Prh5dshEwD8
lMip0KF78mWdvXbeeSLri2jXCSV7vCQ9tDZiW65FoRfdXepQJE1oyur4BbpVjao+
8MxUv6mdT0cYeXqSolxYit9Yl0+/q/0k2GS1aJrhniv7QYY4hAdpOjviP9POHQSO
VdrwKY7y7qGQnA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:05:16 2025 by rpki-client