Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/C3MQIKDv9NN0-VNmVZNbyZA0he4.roa
File: C3MQIKDv9NN0-VNmVZNbyZA0he4.roa (raw, json)
Hash identifier: RRpOfh8X688+VSy9dNSHUby94X6dIxwjno8tMkqfd3w=
Subject key identifier: 0B:73:10:20:A0:EF:F4:D3:74:F9:53:66:55:93:5B:C9:90:34:85:EE
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0192E3F203B295972218FD85A1AB48574BFE
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/C3MQIKDv9NN0-VNmVZNbyZA0he4.roa
Signing time: Thu 31 Oct 2024 18:59:01 +0000
ROA not before: Thu 31 Oct 2024 18:59:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
103.139.50.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a06:1184:33::/48 maxlen: 48
2a0a:2d06:33::/48 maxlen: 48
2a0c:7886:33::/48 maxlen: 48
2a0e:1a80:2541::/48 maxlen: 48
2a0e:1a83:66::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0e:f600:6c::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2e80::/29 maxlen: 29
2a0f:7d02:1::/48 maxlen: 48
2a0f:e1c6::/32 maxlen: 32
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:ecc4:2213::/48 maxlen: 48
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:9280::/32 maxlen: 32
2a13:e101:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 13 Nov 2024 16:14:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e3:f2:03:b2:95:97:22:18:fd:85:a1:ab:48:57:4b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 31 18:59:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b731020a0eff4d374f9536655935bc9903485ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8b:8e:66:4f:a0:f9:a8:40:0a:24:67:0b:c8:
d7:d3:67:21:97:c3:23:f1:4b:b9:a5:74:b2:a7:86:
83:ca:f7:36:df:c9:45:5d:29:d6:b1:13:68:a6:2d:
de:66:95:48:33:fd:d2:52:9a:12:a4:15:49:a9:27:
81:3b:e9:8e:47:0d:e6:7e:11:80:1f:07:ba:89:0c:
f0:01:81:a0:9c:e2:bb:d0:52:bd:a0:f3:66:b3:94:
48:1a:d5:f7:80:7a:86:a7:53:34:db:1c:6d:ef:29:
be:cd:aa:27:f6:ec:21:a9:a2:17:1e:f9:42:01:f3:
55:8b:3e:03:5f:3d:c6:46:0f:c7:ef:bb:92:c2:cb:
6f:d9:cf:c9:05:54:e0:1c:2e:38:4a:9e:05:ad:c7:
97:be:e2:92:69:ea:64:0e:5e:36:dd:36:95:df:7d:
d6:9d:79:d8:ad:2b:3c:c7:b4:8e:e9:c7:5c:25:4f:
54:a7:3a:08:f5:5c:47:09:a0:d2:89:89:d9:a9:f2:
05:88:91:2b:0b:1e:c6:bb:01:61:23:11:a4:58:66:
14:0b:c7:42:e3:4f:5b:7f:33:4d:8e:48:4d:fc:52:
69:7b:39:11:b3:e9:60:bc:ba:4b:6b:0b:4a:42:58:
a8:7e:f4:12:bf:0a:b6:6c:32:cd:7f:ca:79:10:7f:
0e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:73:10:20:A0:EF:F4:D3:74:F9:53:66:55:93:5B:C9:90:34:85:EE
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/C3MQIKDv9NN0-VNmVZNbyZA0he4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
103.139.50.0/24
193.164.199.0/24
IPv6:
2a06:1184:33::/48
2a0a:2d06:33::/48
2a0c:7886:33::/48
2a0e:1a80:2541::/48
2a0e:1a83:66::/48
2a0e:c780::/32
2a0e:f201:1::/48
2a0e:f600:6c::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2e80::/29
2a0f:7d02:1::/48
2a0f:e1c6::/32
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:ecc4:2213::/48
2a12:f540::/29
2a13:18c0:1::/48
2a13:9280::/32
2a13:e101:2::/48
Signature Algorithm: sha256WithRSAEncryption
07:7a:28:79:45:69:a5:05:62:c0:82:7d:a0:ed:a7:a9:fa:5b:
a6:5f:d3:5b:93:d4:55:90:10:e0:9f:1e:b8:67:0b:d4:78:fe:
db:7d:a4:d1:76:72:41:9a:0c:09:6a:15:8f:28:79:b8:dc:c7:
4b:8f:3a:59:d0:b6:27:65:7f:63:2d:48:69:84:39:10:b5:47:
ad:ed:3d:fe:10:52:10:e7:2a:7a:f1:69:9f:37:67:38:cd:bd:
65:c9:6d:6d:2c:6d:2c:a5:c4:53:02:f9:ba:05:f3:aa:1f:23:
01:23:8b:d8:c5:5d:61:a3:1e:fa:1f:6c:b4:6c:d5:7b:d0:88:
77:9e:b0:df:f4:c3:9b:9d:3c:e9:b0:21:58:8f:ee:6c:05:a8:
65:70:63:af:cb:ba:c2:bb:f4:5a:ba:10:ef:b3:b4:84:e7:9d:
a2:95:67:7c:9f:f7:c5:61:5e:76:35:6c:a7:5e:e4:68:60:1e:
7e:d2:c2:76:a8:d8:15:80:dd:cc:df:db:24:24:b7:86:11:34:
ec:b9:ca:2a:32:66:1f:4e:ca:ab:ea:22:71:47:82:26:ee:5c:
f4:e4:a3:88:00:62:b7:e9:81:a2:1c:5f:47:10:e4:07:a8:82:
24:b8:46:3b:f0:0b:93:b1:67:2d:55:93:9c:3c:eb:28:c0:2a:
d6:fa:01:b6
-----BEGIN CERTIFICATE-----
MIIGKDCCBRCgAwIBAgISAZLj8gOylZciGP2FoatIV0v+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQxMDMxMTg1OTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjczMTAyMGEwZWZmNGQzNzRmOTUzNjY1NTkzNWJjOTkwMzQ4NWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4uOZk+g+ahACiRnC8jX02chl8Mj
8Uu5pXSyp4aDyvc238lFXSnWsRNopi3eZpVIM/3SUpoSpBVJqSeBO+mORw3mfhGA
Hwe6iQzwAYGgnOK70FK9oPNms5RIGtX3gHqGp1M02xxt7ym+zaon9uwhqaIXHvlC
AfNViz4DXz3GRg/H77uSwstv2c/JBVTgHC44Sp4FrceXvuKSaepkDl423TaV333W
nXnYrSs8x7SO6cdcJU9UpzoI9VxHCaDSiYnZqfIFiJErCx7GuwFhIxGkWGYUC8dC
409bfzNNjkhN/FJpezkRs+lgvLpLawtKQliofvQSvwq2bDLNf8p5EH8O3wIDAQAB
o4IDNDCCAzAwHQYDVR0OBBYEFAtzECCg7/TTdPlTZlWTW8mQNIXuMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvQzNNUUlLRHY5Tk4wLVZObVZaTmJ5WkEwaGU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBSAYIKwYBBQUHAQcBAf8EggE3MIIBMzAeBAIAATAYAwQA
LYF/AwQALYclAwQAZ4syAwQAwaTHMIIBDwQCAAIwggEHAwcAKgYRhAAzAwcAKgot
BgAzAwcAKgx4hgAzAwcAKg4agCVBAwcAKg4agwBmAwUAKg7HgAMHACoO8gEAAQMH
ACoO9gAAbAMHACoPHgABIwMHACoPHgAEVgMHACoPHgAJhwMHACoPHgAKvAMHACoP
HgDe+QMHACoPHgEAAQMHACoPHoEAAgMHACoPHoESkwMHACoPHoFDGQMHACoPHoGS
6AMHACoPHoGj0AMHACoPHoHNrgMFAyoPLoADBwAqD30CAAEDBQAqD+HGAwUDKhBt
QAMFAyoR/YADBQEqEqxAAwcAKhLsxCITAwUDKhL1QAMHACoTGMAAAQMFACoTkoAD
BwAqE+EBAAIwDQYJKoZIhvcNAQELBQADggEBAAd6KHlFaaUFYsCCfaDtp6n6W6Zf
01uT1FWQEOCfHrhnC9R4/tt9pNF2ckGaDAlqFY8oebjcx0uPOlnQtidlf2MtSGmE
ORC1R63tPf4QUhDnKnrxaZ83ZzjNvWXJbW0sbSylxFMC+boF86ofIwEji9jFXWGj
HvofbLRs1XvQiHeesN/0w5udPOmwIViP7mwFqGVwY6/LusK79Fq6EO+ztITnnaKV
Z3yf98VhXnY1bKde5GhgHn7Swnao2BWA3czf2yQkt4YRNOy5yioyZh9OyqvqInFH
gibuXPTko4gAYrfpgaIcX0cQ5AeogiS4RjvwC5OxZy1Vk5w86yjAKtb6AbY=
-----END CERTIFICATE-----
Generated at Sun May 11 22:08:18 2025 by rpki-client