Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qvldmrOnjAX_0Cg8EzXUSlGDgk4.roa
File: qvldmrOnjAX_0Cg8EzXUSlGDgk4.roa (raw, json)
Hash identifier: +Rc4SV34Q7BxMvtTbL0RJlQTldHFsvD+jPjSv2DRQcA=
Subject key identifier: AA:F9:5D:9A:B3:A7:8C:05:FF:D0:28:3C:13:35:D4:4A:51:83:82:4E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018CD9DF6FFE8C086C2478A81E1BB2E319BA
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qvldmrOnjAX_0Cg8EzXUSlGDgk4.roa
Signing time: Fri 05 Jan 2024 13:45:48 +0000
ROA not before: Fri 05 Jan 2024 13:45:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a0f:3d83::/32 maxlen: 32
2a11:fd80::/29 maxlen: 29
2a0f:e940::/29 maxlen: 29
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0e:f201:1::/48 maxlen: 48
2a13:4900::/29 maxlen: 29
2a05:b900::/29 maxlen: 29
2a0f:3d84::/32 maxlen: 32
2a13:fc00::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a06:5280::/29 maxlen: 29
2a0f:3d80:123::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a07:f300::/29 maxlen: 29
2a0e:1a80::/32 maxlen: 32
2a0f:1e81:1293::/48 maxlen: 48
2a0f:3d87::/32 maxlen: 32
2a0f:1e00:abc::/48 maxlen: 48
2a10:6d40::/29 maxlen: 29
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:7d01::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a0f:2100::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
2a13:18c3::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 09 Jan 2024 09:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d9:df:6f:fe:8c:08:6c:24:78:a8:1e:1b:b2:e3:19:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 5 13:45:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aaf95d9ab3a78c05ffd0283c1335d44a5183824e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:90:f5:97:95:02:ec:0f:af:b2:20:f1:2f:ff:
00:64:f3:39:85:8c:d1:84:8b:fe:0c:71:a2:51:d1:
f5:31:17:93:8e:5c:d0:3c:cf:a0:0b:ba:14:9d:b7:
e9:49:38:06:95:89:c2:09:e9:c3:86:28:ce:09:cf:
2d:5a:f2:9a:38:28:7a:33:96:72:1b:d1:4f:ad:0b:
58:c7:f5:c7:80:d2:eb:10:31:df:1c:d5:6f:db:14:
d6:60:81:1a:ac:8e:01:ea:74:db:38:12:99:08:6a:
66:61:18:8a:de:1c:18:61:b6:3b:59:69:1c:9e:b7:
11:47:f7:9d:1d:a3:75:64:1f:3a:b6:51:60:16:62:
73:be:bb:2c:0f:ff:c8:73:d9:9f:10:42:6b:a3:d6:
88:21:fa:03:4d:00:ca:70:21:7b:6e:f9:bc:3f:21:
31:aa:ab:90:09:9b:c1:ed:fa:da:2b:21:ca:5f:29:
c2:5f:ba:4d:54:95:b3:30:a9:0e:4a:5f:af:31:ea:
bd:2b:ce:74:91:2b:f9:c0:0f:4a:6c:9d:48:21:95:
32:7a:40:f8:16:fb:56:e7:74:83:f0:e8:ad:20:e9:
09:9e:dc:09:f2:d6:3d:05:3c:ba:4d:8b:48:e7:f2:
11:f8:75:5b:3d:91:1b:96:ae:d2:5b:d6:f7:f0:0e:
54:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F9:5D:9A:B3:A7:8C:05:FF:D0:28:3C:13:35:D4:4A:51:83:82:4E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qvldmrOnjAX_0Cg8EzXUSlGDgk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
193.164.199.0/24
IPv6:
2a05:b900::/29
2a06:5280::/29
2a07:f300::/29
2a0e:1a80::/32
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2100::/29
2a0f:3d80:123::/48
2a0f:3d82::-2a0f:3d84:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:3d87::/32
2a0f:7d01::/32
2a0f:e940::/29
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a13:18c0:1::/48
2a13:18c3::/32
2a13:4900::/29
2a13:fc00::/29
Signature Algorithm: sha256WithRSAEncryption
92:f3:21:e4:8d:17:39:b5:f1:61:f8:46:b8:4a:66:8c:e5:76:
80:55:7b:25:c5:03:87:a0:eb:c0:4a:2d:f3:e3:49:52:da:ad:
0a:80:b5:65:1b:25:11:cd:0b:84:26:be:3e:a6:93:ec:3d:57:
48:e1:53:24:34:5f:10:9e:a6:08:cf:96:94:b8:b0:4b:82:aa:
79:78:b6:60:df:24:51:84:6b:af:cd:59:65:b7:e7:c4:6c:41:
17:1c:0b:20:98:5b:8a:f8:00:ff:27:21:80:9b:3b:4c:23:11:
4b:11:f6:4c:79:41:50:85:51:d2:aa:43:8c:23:60:77:b2:35:
38:e9:21:a9:ed:ff:ce:bc:c6:81:af:9e:fe:7d:b6:7e:e5:ca:
e7:e2:88:52:ac:00:2d:20:eb:d6:b5:6d:4e:99:92:c3:5b:25:
f3:91:85:a7:1b:49:cf:17:a8:ce:9e:e7:39:1e:d7:d3:e3:8e:
19:0d:1b:df:47:bb:d6:83:60:cc:03:4e:35:e3:33:7e:5c:f4:
00:6c:a8:37:3f:8c:01:1a:e7:ca:7e:37:95:98:a1:bd:34:37:
98:2c:91:98:a4:0d:9c:21:52:50:1d:5b:25:f4:81:1a:de:2e:
50:0c:88:74:ee:05:ad:ac:6f:96:7d:6f:b6:61:45:f1:a3:58:
b1:a1:80:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:15:27 2025 by rpki-client