Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/KQDEmY9AZbsa6WgFu7LyDJpizmU.roa
File: KQDEmY9AZbsa6WgFu7LyDJpizmU.roa (raw, json)
Hash identifier: W2NPICuYjyTNxplLQTdx0j4B+i3ix/LFnVNXQLrIwTY=
Subject key identifier: 29:00:C4:99:8F:40:65:BB:1A:E9:68:05:BB:B2:F2:0C:9A:62:CE:65
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018ED19E28DF36F0B9D0334F4D0443A88D38
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/KQDEmY9AZbsa6WgFu7LyDJpizmU.roa
Signing time: Fri 12 Apr 2024 09:23:07 +0000
ROA not before: Fri 12 Apr 2024 09:23:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a0e:1a80::/32 maxlen: 32
2a0e:c780::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2100::/29 maxlen: 29
2a0f:2e80::/29 maxlen: 29
2a0f:2f80::/29 maxlen: 29
2a0f:3d84::/32 maxlen: 32
2a0f:3d87::/32 maxlen: 32
2a0f:e1c6::/32 maxlen: 32
2a0f:e1c7:1::/48 maxlen: 48
2a0f:e847:2::/48 maxlen: 48
2a0f:e940::/29 maxlen: 29
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:18c3::/32 maxlen: 32
2a13:18c6::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 23 Apr 2024 10:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d1:9e:28:df:36:f0:b9:d0:33:4f:4d:04:43:a8:8d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 12 09:23:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2900c4998f4065bb1ae96805bbb2f20c9a62ce65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4f:ee:07:0a:7b:e0:f9:4d:ef:b4:ac:0b:54:
89:83:4e:df:07:4e:96:ca:ac:51:5b:2f:1c:11:25:
ab:6a:be:55:f5:8b:5e:2b:9b:c2:1c:de:36:b4:6c:
e9:ff:45:94:58:00:37:45:65:56:c1:36:b2:97:44:
8a:c6:8c:1a:b1:f6:55:44:05:5f:da:01:b5:8a:74:
38:ca:d1:fc:da:2c:34:2c:07:07:19:30:c9:ff:42:
3a:07:77:a0:ac:df:ed:b8:cf:b4:b7:2b:23:f5:b7:
f9:fd:ad:82:7b:c4:7d:fb:26:77:d6:46:71:a5:c7:
cd:a2:09:ac:c5:00:e3:05:a8:3e:6d:03:35:d8:bd:
d0:e4:71:97:aa:6b:02:f5:0c:e6:7a:ef:f2:86:45:
f0:9a:ab:a1:24:3b:82:48:03:9f:7d:96:4e:5c:2d:
56:76:1e:48:b1:eb:31:7c:b6:60:d4:1c:c3:97:10:
ce:7f:e2:4b:0b:f4:e7:55:6c:45:35:d3:e1:20:fd:
0d:67:28:ba:ae:05:3a:e8:61:83:aa:45:a0:44:72:
bc:7b:fd:ed:24:90:de:5a:ec:fc:99:86:5f:cc:74:
31:49:68:8c:f8:1f:00:44:e3:24:fb:fa:c4:23:c0:
63:9b:87:ab:b8:7e:2e:3a:b5:96:d7:e4:d9:e0:2e:
2a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:00:C4:99:8F:40:65:BB:1A:E9:68:05:BB:B2:F2:0C:9A:62:CE:65
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/KQDEmY9AZbsa6WgFu7LyDJpizmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
193.164.199.0/24
IPv6:
2a0e:1a80::/32
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2100::/29
2a0f:2e80::/29
2a0f:2f80::/29
2a0f:3d84::/32
2a0f:3d87::/32
2a0f:e1c6::/32
2a0f:e1c7:1::/48
2a0f:e847:2::/48
2a0f:e940::/29
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:f540::/29
2a13:18c0:1::/48
2a13:18c3::/32
2a13:18c6::/32
Signature Algorithm: sha256WithRSAEncryption
3d:3d:cc:f3:2c:30:3b:a3:13:cb:07:32:6f:5e:82:04:cb:61:
cf:7f:7d:69:48:7f:9c:da:15:ef:cd:2f:05:61:71:ce:d7:07:
87:83:b6:9c:eb:24:c4:ce:14:9f:8b:65:8b:e1:29:11:69:8d:
a7:46:c7:28:1f:19:c9:c2:15:01:22:d7:8f:ce:b6:23:e7:4f:
5e:99:8b:bd:b2:18:7a:09:08:6f:8c:f7:97:2e:51:06:14:5f:
8a:9d:71:ce:f4:59:02:ef:b7:c1:0f:5b:cb:7c:b3:e0:11:12:
4d:af:62:de:d1:fa:29:c4:11:ea:b4:b1:06:41:37:44:a7:a2:
41:be:1a:9a:55:e0:d4:23:49:3e:8a:5c:41:02:57:73:82:f4:
e7:00:75:d5:c1:49:22:d7:7b:d3:ac:87:a9:35:e5:49:8a:0e:
0a:6e:c7:77:ee:44:c0:35:b8:6f:e0:ee:2b:62:2c:fa:ff:37:
e7:46:ed:ac:7c:ce:77:92:1b:98:95:41:c9:af:ea:ca:dc:71:
50:94:d0:9b:11:5d:91:0a:d7:15:99:9e:e4:10:73:7d:35:cf:
19:e7:36:97:15:0a:90:6e:63:52:6f:59:33:18:bc:48:51:8b:
67:38:e6:19:37:80:1d:99:e5:2b:e2:03:c3:79:66:02:e2:ae:
86:eb:70:f4
-----BEGIN CERTIFICATE-----
MIIGEzCCBPugAwIBAgISAY7RnijfNvC50DNPTQRDqI04MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwNDEyMDkyMzA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTAwYzQ5OThmNDA2NWJiMWFlOTY4MDViYmIyZjIwYzlhNjJjZTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApk/uBwp74PlN77SsC1SJg07fB06W
yqxRWy8cESWrar5V9YteK5vCHN42tGzp/0WUWAA3RWVWwTayl0SKxowasfZVRAVf
2gG1inQ4ytH82iw0LAcHGTDJ/0I6B3egrN/tuM+0tysj9bf5/a2Ce8R9+yZ31kZx
pcfNogmsxQDjBag+bQM12L3Q5HGXqmsC9Qzmeu/yhkXwmquhJDuCSAOffZZOXC1W
dh5IsesxfLZg1BzDlxDOf+JLC/TnVWxFNdPhIP0NZyi6rgU66GGDqkWgRHK8e/3t
JJDeWuz8mYZfzHQxSWiM+B8AROMk+/rEI8Bjm4eruH4uOrWW1+TZ4C4qmQIDAQAB
o4IDHzCCAxswHQYDVR0OBBYEFCkAxJmPQGW7GuloBbuy8gyaYs5lMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvS1FERW1ZOUFaYnNhNldnRnU3THlESnBpem1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBMwYIKwYBBQUHAQcBAf8EggEiMIIBHjAYBAIAATASAwQA
LYF/AwQALYclAwQAwaTHMIIBAAQCAAIwgfkDBQAqDhqAAwUAKg7HgAMHACoO8gEA
AQMHACoPHgABIwMHACoPHgAEVgMHACoPHgAJhwMHACoPHgAKvAMHACoPHgDe+QMH
ACoPHgEAAQMHACoPHoEAAgMHACoPHoESkwMHACoPHoFDGQMHACoPHoGS6AMHACoP
HoGj0AMHACoPHoHNrgMFAyoPIQADBQMqDy6AAwUDKg8vgAMFACoPPYQDBQAqDz2H
AwUAKg/hxgMHACoP4ccAAQMHACoP6EcAAgMFAyoP6UADBQMqEG1AAwUDKhH9gAMF
ASoSrEADBQMqEvVAAwcAKhMYwAABAwUAKhMYwwMFACoTGMYwDQYJKoZIhvcNAQEL
BQADggEBAD09zPMsMDujE8sHMm9eggTLYc9/fWlIf5zaFe/NLwVhcc7XB4eDtpzr
JMTOFJ+LZYvhKRFpjadGxygfGcnCFQEi14/OtiPnT16Zi72yGHoJCG+M95cuUQYU
X4qdcc70WQLvt8EPW8t8s+AREk2vYt7R+inEEeq0sQZBN0SnokG+GppV4NQjST6K
XEECV3OC9OcAddXBSSLXe9Osh6k15UmKDgpux3fuRMA1uG/g7itiLPr/N+dG7ax8
zneSG5iVQcmv6srccVCU0JsRXZEK1xWZnuQQc301zxnnNpcVCpBuY1JvWTMYvEhR
i2c45hk3gB2Z5SviA8N5ZgLirobrcPQ=
-----END CERTIFICATE-----
Generated at Sun May 11 16:02:29 2025 by rpki-client