Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/vE9GmmxcE3vEOXbYDmkYHKWBtBI.roa
File: vE9GmmxcE3vEOXbYDmkYHKWBtBI.roa (raw, json)
Hash identifier: EJUaGMP3JSlN5um3xt88Lht7/GaxwSEZn08G7TwZkSY=
Subject key identifier: BC:4F:46:9A:6C:5C:13:7B:C4:39:76:D8:0E:69:18:1C:A5:81:B4:12
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018DF5F8EF1D10A0849DFB632A655885D88B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/vE9GmmxcE3vEOXbYDmkYHKWBtBI.roa
Signing time: Thu 29 Feb 2024 17:45:48 +0000
ROA not before: Thu 29 Feb 2024 17:45:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a0e:1a80::/32 maxlen: 32
2a0e:c780::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2100::/29 maxlen: 29
2a0f:2e80::/29 maxlen: 29
2a0f:2f80::/29 maxlen: 29
2a0f:3d80:123::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
2a0f:3d83::/32 maxlen: 32
2a0f:3d84::/32 maxlen: 32
2a0f:3d87::/32 maxlen: 32
2a0f:e847:2::/48 maxlen: 48
2a0f:e940::/29 maxlen: 29
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:d5c0::/29 maxlen: 29
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:18c3::/32 maxlen: 32
2a13:18c6::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 02 Mar 2024 12:51:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f5:f8:ef:1d:10:a0:84:9d:fb:63:2a:65:58:85:d8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 29 17:45:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc4f469a6c5c137bc43976d80e69181ca581b412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2c:e1:71:c1:c2:f3:90:2f:d4:2e:8c:6d:53:
5f:68:dc:68:fb:d6:c4:97:2e:80:1f:80:21:0c:a2:
2b:e5:b1:60:f3:b0:a6:1f:61:52:05:be:66:6c:a2:
74:4d:33:1a:37:14:ca:77:72:ba:8c:cc:2e:75:b4:
26:db:40:35:1c:3c:53:0d:26:4e:71:6b:93:7d:a1:
36:19:a6:24:59:cd:b0:85:53:f2:3d:83:8b:8e:bd:
c1:6a:0c:a8:51:9a:8c:06:70:ee:88:5a:50:be:51:
f0:a7:3b:2d:75:98:5d:15:94:90:90:f8:f2:bd:39:
cf:ce:99:66:6d:23:61:c6:f2:b3:4b:d2:b7:d7:0c:
4d:6c:58:b5:60:72:2c:ff:e6:1d:ec:89:48:dc:8a:
0d:02:e1:44:ac:c5:39:5a:9a:bc:7a:a4:bb:b0:65:
96:88:23:2e:2d:12:01:05:a8:0d:c5:6d:80:a7:82:
3a:bc:06:a4:32:a2:b7:86:8b:90:8f:58:5b:14:e8:
25:2d:ed:39:be:82:63:90:c3:48:41:6d:5b:75:73:
d0:80:ef:f7:34:1a:55:c1:23:cb:8b:09:ff:3a:1b:
11:e9:0f:19:1b:a0:4c:8d:e1:b9:5a:eb:e6:09:a1:
63:0c:71:b3:f9:77:92:8c:e5:cb:4c:1a:49:56:95:
68:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4F:46:9A:6C:5C:13:7B:C4:39:76:D8:0E:69:18:1C:A5:81:B4:12
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/vE9GmmxcE3vEOXbYDmkYHKWBtBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
193.164.199.0/24
IPv6:
2a0e:1a80::/32
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2100::/29
2a0f:2e80::/29
2a0f:2f80::/29
2a0f:3d80:123::/48
2a0f:3d82::-2a0f:3d84:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:3d87::/32
2a0f:e847:2::/48
2a0f:e940::/29
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:d5c0::/29
2a12:f540::/29
2a13:18c0:1::/48
2a13:18c3::/32
2a13:18c6::/32
Signature Algorithm: sha256WithRSAEncryption
0f:be:61:0b:6f:7b:78:52:d5:84:f0:e1:1f:d0:5c:62:6f:b4:
83:7b:a4:eb:7e:0e:4b:00:1d:3d:3f:87:52:c3:f6:cb:f3:e0:
33:ca:40:c9:6a:d6:27:66:eb:5d:c5:f5:be:86:2e:64:1b:94:
b2:ac:4c:ee:ce:9f:12:4f:d6:b7:ce:31:aa:b5:96:f7:8a:b1:
57:36:09:42:d1:f1:96:45:e5:9c:62:bd:ad:04:a7:fd:b5:68:
c4:0d:af:99:95:2d:94:48:ce:59:fd:95:2b:92:62:b5:c2:8d:
40:50:2b:75:39:d3:cd:09:62:eb:2a:f2:92:9f:30:b7:7e:f7:
ab:91:05:98:3d:08:cd:c5:43:08:56:b4:77:a7:27:4d:30:ea:
55:eb:4a:a0:67:51:83:d7:fb:f4:38:53:46:31:aa:5d:ac:19:
67:d8:72:3a:ca:2a:ef:d2:7f:45:c9:4e:c9:8e:b4:e7:17:6b:
c6:59:d0:e6:2f:60:3b:60:64:02:7b:8a:e7:30:1c:7a:e0:ab:
13:89:de:09:a4:ad:79:78:64:7e:69:00:43:c8:cb:ab:c4:d6:
73:8c:bd:7a:12:14:47:f9:0f:c3:ab:02:24:e9:4a:7b:ea:57:
db:6b:77:00:a4:8f:d7:f2:0a:46:88:4e:1b:da:13:90:ee:b3:
76:de:f7:87
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgISAY31+O8dEKCEnftjKmVYhdiLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwMjI5MTc0NTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzRmNDY5YTZjNWMxMzdiYzQzOTc2ZDgwZTY5MTgxY2E1ODFiNDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyzhccHC85Av1C6MbVNfaNxo+9bE
ly6AH4AhDKIr5bFg87CmH2FSBb5mbKJ0TTMaNxTKd3K6jMwudbQm20A1HDxTDSZO
cWuTfaE2GaYkWc2whVPyPYOLjr3BagyoUZqMBnDuiFpQvlHwpzstdZhdFZSQkPjy
vTnPzplmbSNhxvKzS9K31wxNbFi1YHIs/+Yd7IlI3IoNAuFErMU5Wpq8eqS7sGWW
iCMuLRIBBagNxW2Ap4I6vAakMqK3houQj1hbFOglLe05voJjkMNIQW1bdXPQgO/3
NBpVwSPLiwn/OhsR6Q8ZG6BMjeG5WuvmCaFjDHGz+XeSjOXLTBpJVpVoFQIDAQAB
o4IDKTCCAyUwHQYDVR0OBBYEFLxPRppsXBN7xDl22A5pGBylgbQSMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvdkU5R21teGNFM3ZFT1hiWURta1lIS1dCdEJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBPQYIKwYBBQUHAQcBAf8EggEsMIIBKDAYBAIAATASAwQA
LYF/AwQALYclAwQAwaTHMIIBCgQCAAIwggECAwUAKg4agAMFACoOx4ADBwAqDvIB
AAEDBwAqDx4AASMDBwAqDx4ABFYDBwAqDx4ACYcDBwAqDx4ACrwDBwAqDx4A3vkD
BwAqDx4BAAEDBwAqDx6BAAIDBwAqDx6BEpMDBwAqDx6BQxkDBwAqDx6BkugDBwAq
Dx6Bo9ADBwAqDx6Bza4DBQMqDyEAAwUDKg8ugAMFAyoPL4ADBwAqDz2AASMwDgMF
ASoPPYIDBQAqDz2EAwUAKg89hwMHACoP6EcAAgMFAyoP6UADBQMqEG1AAwUDKhH9
gAMFASoSrEADBQMqEtXAAwUDKhL1QAMHACoTGMAAAQMFACoTGMMDBQAqExjGMA0G
CSqGSIb3DQEBCwUAA4IBAQAPvmELb3t4UtWE8OEf0Fxib7SDe6Trfg5LAB09P4dS
w/bL8+AzykDJatYnZutdxfW+hi5kG5SyrEzuzp8ST9a3zjGqtZb3irFXNglC0fGW
ReWcYr2tBKf9tWjEDa+ZlS2USM5Z/ZUrkmK1wo1AUCt1OdPNCWLrKvKSnzC3fver
kQWYPQjNxUMIVrR3pydNMOpV60qgZ1GD1/v0OFNGMapdrBln2HI6yirv0n9FyU7J
jrTnF2vGWdDmL2A7YGQCe4rnMBx64KsTid4JpK15eGR+aQBDyMurxNZzjL16EhRH
+Q/DqwIk6Up76lfba3cApI/X8gpGiE4b2hOQ7rN23veH
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:07 2025 by rpki-client