Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/r2YJhj-Qz-Aw8cJwIs7VCA8m5hA.roa
File: r2YJhj-Qz-Aw8cJwIs7VCA8m5hA.roa (raw, json)
Hash identifier: 6YPR22a24tcH0fS5kmn/KieKUpcsGkbBVjEx3XCqo3w=
Subject key identifier: AF:66:09:86:3F:90:CF:E0:30:F1:C2:70:22:CE:D5:08:0F:26:E6:10
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018CCE919DA4275EE19C8454179124A8FE3F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/r2YJhj-Qz-Aw8cJwIs7VCA8m5hA.roa
Signing time: Wed 03 Jan 2024 09:04:58 +0000
ROA not before: Wed 03 Jan 2024 09:04:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a0f:3d83::/32 maxlen: 32
2a11:fd80::/29 maxlen: 29
2a0f:e940::/29 maxlen: 29
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0e:f201:1::/48 maxlen: 48
2a13:4900::/29 maxlen: 29
2a0f:3d84::/32 maxlen: 32
2a13:fc00::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a06:5280::/29 maxlen: 29
2a0f:3d80:123::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a07:f300::/29 maxlen: 29
2a0e:1a80::/32 maxlen: 32
2a0f:1e81:1293::/48 maxlen: 48
2a13:2b40::/29 maxlen: 29
2a0f:3d87::/32 maxlen: 32
2a0f:1e00:abc::/48 maxlen: 48
2a10:6d40::/29 maxlen: 29
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:7d01::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a0f:2100::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
2a13:18c3::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 04 Jan 2024 14:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ce:91:9d:a4:27:5e:e1:9c:84:54:17:91:24:a8:fe:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 3 09:04:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af6609863f90cfe030f1c27022ced5080f26e610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:be:08:f0:43:be:e0:60:30:79:b3:e5:e5:f0:
5d:a9:62:55:f1:d3:8b:a4:f8:04:ba:27:97:4c:52:
07:43:36:23:5f:e6:cf:c3:c0:c6:69:87:ee:a6:b8:
91:14:56:e4:4f:7f:56:b5:ec:b7:dd:27:de:c7:87:
d7:f7:ba:ce:f8:12:46:69:f1:32:00:ca:6e:7a:b8:
36:c1:46:13:19:5b:41:d4:6b:48:43:8d:80:a1:22:
75:6d:52:66:9c:f9:70:8e:6c:17:88:b5:2d:c7:32:
f2:27:30:1c:42:25:3e:d2:93:12:2a:36:4c:71:cd:
1c:ad:75:57:25:72:29:1d:48:28:b7:ab:6a:84:15:
f9:ed:2d:6c:a6:f6:b1:47:74:a7:92:56:38:03:c3:
ff:51:b7:43:59:69:5f:4a:a1:80:2c:82:34:e1:ae:
45:f6:6c:52:5c:b7:b7:5f:95:99:13:4f:30:7a:bf:
bd:00:2c:b5:b6:51:f6:31:ed:82:80:f6:96:9c:be:
4b:36:86:85:4b:e3:db:bd:e8:f6:d8:52:b9:4c:28:
1f:31:a8:e8:3f:12:cb:f9:27:b4:b8:a5:32:01:8f:
13:1f:6b:75:79:ef:67:71:a0:ca:15:65:6d:ee:3e:
9c:d4:7a:2d:fa:50:fb:01:e2:dc:b3:02:37:60:1f:
c2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:66:09:86:3F:90:CF:E0:30:F1:C2:70:22:CE:D5:08:0F:26:E6:10
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/r2YJhj-Qz-Aw8cJwIs7VCA8m5hA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
193.164.199.0/24
IPv6:
2a06:5280::/29
2a07:f300::/29
2a0e:1a80::/32
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2100::/29
2a0f:3d80:123::/48
2a0f:3d82::-2a0f:3d84:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:3d87::/32
2a0f:7d01::/32
2a0f:e940::/29
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a13:18c0:1::/48
2a13:18c3::/32
2a13:2b40::/29
2a13:4900::/29
2a13:fc00::/29
Signature Algorithm: sha256WithRSAEncryption
08:90:06:f4:c1:ba:68:8c:51:6d:c8:10:04:a9:c5:ef:de:8d:
68:e5:cd:8d:7c:9b:cf:7f:17:4a:c7:f1:27:fc:d0:75:7c:f2:
a6:ff:2d:31:74:29:bf:b0:d6:98:65:68:70:b2:46:57:16:13:
d3:b3:d3:23:16:dc:f9:9a:13:c1:f0:33:0f:f2:80:57:b1:72:
57:c4:8d:6c:25:5f:7d:aa:fa:3a:d5:cb:40:d0:54:d8:c9:53:
80:47:0c:ce:48:5c:21:66:94:e1:40:43:41:4b:c5:83:93:26:
d3:9b:c2:b1:be:d8:e4:41:4a:81:1a:ac:e6:bc:99:02:9a:16:
13:f1:b3:53:b5:00:08:b6:65:73:59:df:f9:50:23:02:2e:df:
b6:3d:86:16:8e:a4:cf:1a:04:9d:68:20:1d:33:df:e7:b4:6e:
7f:cd:10:d8:81:0a:1d:27:2a:bd:fe:e7:e8:20:6e:95:36:db:
d2:cd:b6:78:3f:2a:2e:1b:79:13:40:ff:8d:99:cb:fb:76:bb:
8b:72:77:97:37:0e:8c:00:17:85:47:e8:3e:2c:33:fc:0c:26:
b3:8f:00:d3:2d:94:3b:a7:7c:66:56:b2:0c:a9:4c:46:2f:db:
09:35:7f:65:51:69:dd:93:4e:e6:fd:a5:35:f2:4c:c6:0e:28:
b1:6e:7c:d8
-----BEGIN CERTIFICATE-----
MIIGGzCCBQOgAwIBAgISAYzOkZ2kJ17hnIRUF5EkqP4/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwMTAzMDkwNDU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjY2MDk4NjNmOTBjZmUwMzBmMWMyNzAyMmNlZDUwODBmMjZlNjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb4I8EO+4GAwebPl5fBdqWJV8dOL
pPgEuieXTFIHQzYjX+bPw8DGaYfupriRFFbkT39Wtey33Sfex4fX97rO+BJGafEy
AMpuerg2wUYTGVtB1GtIQ42AoSJ1bVJmnPlwjmwXiLUtxzLyJzAcQiU+0pMSKjZM
cc0crXVXJXIpHUgot6tqhBX57S1spvaxR3SnklY4A8P/UbdDWWlfSqGALII04a5F
9mxSXLe3X5WZE08wer+9ACy1tlH2Me2CgPaWnL5LNoaFS+Pbvej22FK5TCgfMajo
PxLL+Se0uKUyAY8TH2t1ee9ncaDKFWVt7j6c1Hot+lD7AeLcswI3YB/C2wIDAQAB
o4IDJzCCAyMwHQYDVR0OBBYEFK9mCYY/kM/gMPHCcCLO1QgPJuYQMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvcjJZSmhqLVF6LUF3OGNKd0lzN1ZDQThtNWhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBOwYIKwYBBQUHAQcBAf8EggEqMIIBJjAYBAIAATASAwQA
LYF/AwQALYclAwQAwaTHMIIBCAQCAAIwggEAAwUDKgZSgAMFAyoH8wADBQAqDhqA
AwUAKg7HgAMHACoO8gEAAQMHACoPHgABIwMHACoPHgAEVgMHACoPHgAJhwMHACoP
HgAKvAMHACoPHgDe+QMHACoPHgEAAQMHACoPHoEAAgMHACoPHoESkwMHACoPHoFD
GQMHACoPHoGS6AMHACoPHoGj0AMHACoPHoHNrgMFAyoPIQADBwAqDz2AASMwDgMF
ASoPPYIDBQAqDz2EAwUAKg89hwMFACoPfQEDBQMqD+lAAwUDKhBtQAMFAyoR/YAD
BQEqEqxAAwcAKhMYwAABAwUAKhMYwwMFAyoTK0ADBQMqE0kAAwUDKhP8ADANBgkq
hkiG9w0BAQsFAAOCAQEACJAG9MG6aIxRbcgQBKnF796NaOXNjXybz38XSsfxJ/zQ
dXzypv8tMXQpv7DWmGVocLJGVxYT07PTIxbc+ZoTwfAzD/KAV7FyV8SNbCVffar6
OtXLQNBU2MlTgEcMzkhcIWaU4UBDQUvFg5Mm05vCsb7Y5EFKgRqs5ryZApoWE/Gz
U7UACLZlc1nf+VAjAi7ftj2GFo6kzxoEnWggHTPf57Ruf80Q2IEKHScqvf7n6CBu
lTbb0s22eD8qLht5E0D/jZnL+3a7i3J3lzcOjAAXhUfoPiwz/Awms48A0y2UO6d8
ZlayDKlMRi/bCTV/ZVFp3ZNO5v2lNfJMxg4osW582A==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:52 2025 by rpki-client