Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NB3cm2z7Y0M7Fi4_xhObd-9VfQ0.roa
File: NB3cm2z7Y0M7Fi4_xhObd-9VfQ0.roa (raw, json)
Hash identifier: JLb+Sag2S5T62tH543ZyVxvunM4LrWb0wLfCfQGNgkg=
Subject key identifier: 34:1D:DC:9B:6C:FB:63:43:3B:16:2E:3F:C6:13:9B:77:EF:55:7D:0D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019154D60C674F691684501973C3CA2F512C
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NB3cm2z7Y0M7Fi4_xhObd-9VfQ0.roa
Signing time: Thu 15 Aug 2024 06:59:59 +0000
ROA not before: Thu 15 Aug 2024 06:59:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
103.139.50.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a06:1184:33::/48 maxlen: 48
2a0a:2d06:33::/48 maxlen: 48
2a0a:2d06:55::/48 maxlen: 48
2a0c:7886:33::/48 maxlen: 48
2a0e:1a80:2541::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0e:f600:6c::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2e80::/29 maxlen: 29
2a0f:3d87::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:7d04:1::/48 maxlen: 48
2a0f:e1c6::/32 maxlen: 32
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:ecc4:2213::/48 maxlen: 48
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:e101:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 15 Aug 2024 14:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:54:d6:0c:67:4f:69:16:84:50:19:73:c3:ca:2f:51:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 15 06:59:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=341ddc9b6cfb63433b162e3fc6139b77ef557d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:43:f3:35:6f:a2:c9:5c:d3:3f:07:67:4b:c6:
ca:b6:94:e9:57:30:d4:2c:10:05:d2:c7:48:ac:59:
40:d6:62:f5:c4:6d:a9:e8:63:50:c3:15:57:0a:64:
28:10:75:31:7f:5e:85:c5:40:30:6b:f2:ca:8c:dd:
e7:a8:79:e7:6c:df:9f:95:74:de:35:99:4a:4c:0c:
28:d0:5f:a2:1e:e2:25:17:e7:12:c3:53:05:9b:23:
df:74:a6:54:f4:f9:1e:73:8b:0e:6b:62:b7:17:11:
cf:87:0d:ef:07:1e:06:cf:88:e6:28:82:aa:1e:38:
3a:78:de:02:af:49:05:e5:c3:11:84:39:1c:bd:1f:
48:e6:3c:2c:a0:a0:9e:a6:ab:31:a5:82:8c:62:9b:
a1:1d:2a:12:75:8e:ef:7b:09:38:f3:28:be:b9:3c:
99:4b:19:33:c6:2c:46:46:8f:5d:a0:a8:50:5a:78:
bd:bb:5e:bd:40:48:7c:67:12:6d:e9:2a:21:89:29:
50:49:e9:5a:4b:bc:28:f7:41:ff:6d:39:11:64:33:
68:36:55:38:62:66:57:92:97:75:f9:e7:fd:6f:d8:
87:dd:74:10:78:2d:a2:05:d8:9c:87:05:a9:7e:2a:
30:c5:b6:37:6f:fb:d5:c7:e5:e6:78:7a:7d:cd:fc:
7b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1D:DC:9B:6C:FB:63:43:3B:16:2E:3F:C6:13:9B:77:EF:55:7D:0D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NB3cm2z7Y0M7Fi4_xhObd-9VfQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
103.139.50.0/24
193.164.199.0/24
IPv6:
2a06:1184:33::/48
2a0a:2d06:33::/48
2a0a:2d06:55::/48
2a0c:7886:33::/48
2a0e:1a80:2541::/48
2a0e:c780::/32
2a0e:f201:1::/48
2a0e:f600:6c::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2e80::/29
2a0f:3d87::/32
2a0f:7d02:1::/48
2a0f:7d04:1::/48
2a0f:e1c6::/32
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:ecc4:2213::/48
2a12:f540::/29
2a13:18c0:1::/48
2a13:e101:2::/48
Signature Algorithm: sha256WithRSAEncryption
55:da:6b:7e:86:67:25:5c:fd:01:87:3d:69:5c:51:f1:ea:1e:
e1:cc:f8:94:46:1b:df:af:9b:a4:69:fc:81:65:8f:18:bd:45:
a5:b7:69:2a:59:04:ce:e0:e1:2a:50:2c:c4:07:0e:a3:58:4d:
13:76:57:00:c9:3d:0a:78:bf:23:c3:b4:a1:87:cd:11:35:0f:
85:1a:d6:97:98:65:a4:f0:ba:46:7c:13:d4:67:31:1e:7d:47:
a9:21:05:3f:61:7f:58:0c:94:7f:b9:47:06:48:99:04:dd:25:
38:b6:ee:f4:6b:64:24:87:2d:4a:fb:34:39:70:73:18:d9:ec:
41:77:02:3e:ee:ed:65:40:51:50:2e:61:36:74:3b:03:27:3c:
fb:5c:2f:bf:cb:90:50:24:59:bc:a0:e2:ca:db:18:0c:05:f8:
21:cb:c4:c8:f7:8e:7f:c1:33:47:86:1d:b0:88:5c:aa:68:21:
60:fb:ca:42:96:52:3d:9e:ff:bd:61:e4:4c:76:08:3a:7a:2c:
f0:8f:25:04:37:a9:48:89:5d:0b:e1:f7:c0:be:54:8d:f2:45:
ba:a2:81:34:7a:e4:75:26:38:f1:fb:38:1b:c0:f2:7c:8a:1a:
b5:59:0d:e9:aa:b6:d8:db:75:00:e1:8f:30:c2:e2:1d:b2:9e:
e5:22:e5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:14:06 2025 by rpki-client