Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2S424txchz4UmLJbckC21SgR5TQ.roa
File: 2S424txchz4UmLJbckC21SgR5TQ.roa (raw, json)
Hash identifier: 5yHfGiJRy7SkULQjNxXff7yPSYE2SuQKNyCY9GK+t6c=
Subject key identifier: D9:2E:36:E2:DC:5C:87:3E:14:98:B2:5B:72:40:B6:D5:28:11:E5:34
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01965CA79C5795C331AD8B53A027FE5C0214
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2S424txchz4UmLJbckC21SgR5TQ.roa
Signing time: Tue 22 Apr 2025 08:40:10 +0000
ROA not before: Tue 22 Apr 2025 08:40:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30633
IP address blocks: 45.86.247.0/24 maxlen: 24
45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
80.253.250.0/24 maxlen: 24
103.139.50.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
193.27.21.0/24 maxlen: 24
193.27.23.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a06:1184:33::/48 maxlen: 48
2a0a:2d06:33::/48 maxlen: 48
2a0c:7886:33::/48 maxlen: 48
2a0e:1a80:2541::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2e80::/29 maxlen: 29
2a0f:3d84::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:e1c6::/32 maxlen: 32
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:ecc4:2213::/48 maxlen: 48
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:18c6:55::/48 maxlen: 48
2a13:9280::/32 maxlen: 32
2a13:e101:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 23 Apr 2025 13:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:a7:9c:57:95:c3:31:ad:8b:53:a0:27:fe:5c:02:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 22 08:40:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d92e36e2dc5c873e1498b25b7240b6d52811e534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6e:30:f6:01:f6:e9:f8:c0:47:9f:29:4b:09:
c5:7a:00:69:c0:92:00:9e:d4:2e:6a:88:5d:ad:88:
f6:4b:4f:8a:aa:0e:7b:88:83:2e:35:7b:e0:ea:fd:
8e:cf:e9:09:49:88:a2:7d:69:ac:d7:66:ed:40:b8:
bc:b1:46:9f:87:90:c3:20:ad:8a:b1:07:a6:29:26:
74:c1:c9:a3:26:e7:c9:80:75:04:cb:c6:86:54:60:
52:f5:c8:3d:4a:77:9c:8b:64:20:9c:e9:e8:a7:3a:
87:ec:50:30:be:73:4d:bc:25:5d:35:7f:dd:9f:a5:
3b:ec:39:19:02:b5:5d:3e:86:05:e3:4b:7e:9d:1f:
51:ba:30:c3:66:ae:d1:2d:92:64:84:03:62:a2:8f:
f5:ec:0c:16:9c:0b:47:73:8f:76:83:dc:d0:fa:52:
3c:e8:9e:fa:f2:71:36:e4:c9:72:94:fe:a9:13:03:
02:0b:ad:75:50:c9:e7:9e:35:e4:e2:cc:f7:49:c7:
9e:7c:39:f7:c8:54:d0:52:e3:ee:aa:d8:32:6e:34:
73:05:22:29:eb:af:85:03:0e:c9:ce:44:de:74:59:
3e:ca:42:08:33:45:bc:f1:35:12:63:9f:d8:a8:60:
e4:6f:a0:a5:af:b3:a0:c0:10:6f:f4:bf:d6:d7:54:
83:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2E:36:E2:DC:5C:87:3E:14:98:B2:5B:72:40:B6:D5:28:11:E5:34
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2S424txchz4UmLJbckC21SgR5TQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.247.0/24
45.129.127.0/24
45.135.37.0/24
80.253.250.0/24
103.139.50.0/24
185.164.59.0/24
193.27.21.0/24
193.27.23.0/24
193.164.199.0/24
IPv6:
2a06:1184:33::/48
2a0a:2d06:33::/48
2a0c:7886:33::/48
2a0e:1a80:2541::/48
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2e80::/29
2a0f:3d84::/32
2a0f:7d02:1::/48
2a0f:e1c6::/32
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:ecc4:2213::/48
2a12:f540::/29
2a13:18c0:1::/48
2a13:18c6:55::/48
2a13:9280::/32
2a13:e101:2::/48
Signature Algorithm: sha256WithRSAEncryption
0a:16:b2:f2:6d:61:96:01:76:87:a1:f1:37:69:66:ed:7e:60:
5b:49:1c:dc:37:13:2d:3e:3c:22:ef:c7:dd:70:ed:77:da:37:
ef:eb:ad:62:da:6f:93:10:92:cc:13:a4:ab:5c:5e:f1:e8:75:
a2:b8:50:e4:2a:50:fc:e7:45:dc:19:03:28:f2:c0:ef:75:7a:
94:a8:fa:0e:4b:31:2d:45:81:66:a5:38:42:51:31:2a:09:42:
f4:c5:97:25:f7:4a:8b:74:d3:18:91:33:e5:81:d0:10:db:40:
9d:ad:31:f7:12:f0:e3:0a:02:84:f3:93:95:14:b4:e5:0d:4f:
c5:bc:dc:c9:3b:fd:fc:3d:b9:a6:55:bc:f8:ce:00:80:d9:5c:
b0:c2:bd:b5:c5:26:b3:01:46:6a:8b:9a:ca:06:27:40:80:f8:
42:78:cc:8e:63:b4:df:31:72:42:8c:64:97:9d:f6:d7:6c:65:
25:fb:f4:01:ef:1f:26:f8:34:f5:82:a8:19:f7:d1:37:40:77:
71:be:5e:6d:a0:00:95:4b:32:8d:ad:f6:7a:43:0b:41:0c:99:
06:fb:4c:a1:d1:d8:af:c7:28:3d:93:80:ff:94:5e:d1:73:10:
27:54:12:88:6d:46:9a:b8:9b:ed:e3:c1:ed:3f:e6:7a:b0:12:
df:23:eb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 12:29:48 2025 by rpki-client