Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/b6fZIacmWvVvcFjdZB3jzWr_Lao.roa
File: b6fZIacmWvVvcFjdZB3jzWr_Lao.roa (raw, json)
Hash identifier: J1V9Bh773RVKEkJMbHsFFVITH1rQDvR/6g7rVx+bkus=
Subject key identifier: 6F:A7:D9:21:A7:26:5A:F5:6F:70:58:DD:64:1D:E3:CD:6A:FF:2D:AA
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0190CA2005F7A4604426354A2BAE994BE18A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/b6fZIacmWvVvcFjdZB3jzWr_Lao.roa
Signing time: Fri 19 Jul 2024 08:33:34 +0000
ROA not before: Fri 19 Jul 2024 08:33:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
103.139.50.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a0e:1a80:2541::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0e:f600:6c::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2e80::/29 maxlen: 29
2a0f:3d87::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:e1c6::/32 maxlen: 32
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 29 Jul 2024 07:59:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ca:20:05:f7:a4:60:44:26:35:4a:2b:ae:99:4b:e1:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 19 08:33:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6fa7d921a7265af56f7058dd641de3cd6aff2daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:48:77:1f:dd:4f:a5:8f:68:1e:45:ec:20:25:
a7:16:b8:8a:f4:67:3c:e0:cb:99:c7:57:ab:08:48:
70:f4:1c:e6:36:94:01:33:0f:05:e6:7f:95:ff:d0:
82:ea:33:77:a6:17:98:cb:ba:f1:5f:e5:5e:36:f3:
cc:66:da:7a:61:c1:db:6b:2f:69:4f:8d:6e:ae:5b:
d5:92:1e:47:a7:f8:1e:90:6f:e2:69:ae:29:b7:61:
68:86:a4:cb:06:1d:b1:b3:4d:75:cb:c7:6a:49:b0:
e4:a2:b0:71:59:ae:14:79:1c:b5:e6:1f:71:00:51:
6e:f2:eb:e4:67:84:b7:1c:73:f9:7d:c4:79:49:17:
d3:82:29:03:16:20:3d:e6:f3:1f:0d:09:61:c0:cd:
d1:b7:05:aa:38:b9:d0:cb:a6:37:2e:f0:dd:25:a9:
46:11:57:e0:f2:9c:17:d2:6c:83:0c:60:63:59:3c:
4a:10:64:2c:ef:46:88:51:b8:ff:d9:60:0e:23:c7:
45:25:43:5e:7f:50:05:e5:e5:08:dc:66:2f:23:bc:
42:2d:1c:34:86:aa:b4:ea:cf:94:c7:b0:8a:4d:fe:
20:10:fa:0c:f5:5a:c3:64:8b:20:3f:6e:c6:ff:3c:
8f:d9:5f:19:ad:f9:12:35:ed:6b:34:b3:71:c6:6c:
33:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A7:D9:21:A7:26:5A:F5:6F:70:58:DD:64:1D:E3:CD:6A:FF:2D:AA
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/b6fZIacmWvVvcFjdZB3jzWr_Lao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
103.139.50.0/24
193.164.199.0/24
IPv6:
2a0e:1a80:2541::/48
2a0e:c780::/32
2a0e:f201:1::/48
2a0e:f600:6c::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2e80::/29
2a0f:3d87::/32
2a0f:7d02:1::/48
2a0f:e1c6::/32
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:f540::/29
2a13:18c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
2e:e7:f3:ec:0d:d3:01:60:1f:ca:22:9d:21:3e:0e:70:b7:40:
2c:c9:b6:f2:55:93:f0:1f:8a:8e:f4:cb:12:13:b7:7f:67:38:
3f:af:f5:71:86:ce:b6:87:9f:dd:0f:c9:0e:bd:e8:d6:a3:05:
13:18:25:e4:66:80:3a:a9:8f:a1:5e:dc:7f:96:00:10:bc:5d:
07:0d:64:58:46:f3:78:e2:79:4d:c5:a1:03:6a:25:3d:70:7c:
8b:97:2d:19:7b:b5:f8:5b:59:ff:56:f5:4e:88:b7:14:92:f9:
59:49:d0:ea:60:fc:92:1e:ce:90:1a:6e:2a:eb:ce:87:44:3c:
1a:65:5a:33:2b:c0:35:3d:d9:43:e7:7f:f0:ee:7d:df:eb:24:
c5:1e:e1:b2:fd:dc:28:d0:d0:5c:76:8a:87:a2:fd:bf:89:35:
8b:89:0a:61:0d:29:8c:61:58:67:e8:0a:21:09:04:16:09:d5:
85:64:94:10:18:d5:c1:55:93:79:05:11:cd:5a:84:9e:f4:a6:
94:6a:2b:e1:9d:cd:52:bc:4c:48:bb:80:21:84:54:53:fa:86:
a2:b4:62:8b:7e:8f:53:4b:fb:e4:6a:83:70:ff:c0:cf:2b:2c:
e0:25:ad:af:e2:04:27:f6:4e:6f:8e:60:5a:5b:26:3a:97:4e:
f1:8e:50:a6
-----BEGIN CERTIFICATE-----
MIIF7jCCBNagAwIBAgISAZDKIAX3pGBEJjVKK66ZS+GKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwNzE5MDgzMzM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmE3ZDkyMWE3MjY1YWY1NmY3MDU4ZGQ2NDFkZTNjZDZhZmYyZGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUh3H91PpY9oHkXsICWnFriK9Gc8
4MuZx1erCEhw9BzmNpQBMw8F5n+V/9CC6jN3pheYy7rxX+VeNvPMZtp6YcHbay9p
T41urlvVkh5Hp/gekG/iaa4pt2FohqTLBh2xs011y8dqSbDkorBxWa4UeRy15h9x
AFFu8uvkZ4S3HHP5fcR5SRfTgikDFiA95vMfDQlhwM3RtwWqOLnQy6Y3LvDdJalG
EVfg8pwX0myDDGBjWTxKEGQs70aIUbj/2WAOI8dFJUNef1AF5eUI3GYvI7xCLRw0
hqq06s+Ux7CKTf4gEPoM9VrDZIsgP27G/zyP2V8ZrfkSNe1rNLNxxmwzpQIDAQAB
o4IC+jCCAvYwHQYDVR0OBBYEFG+n2SGnJlr1b3BY3WQd481q/y2qMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvYjZmWklhY21XdlZ2Y0ZqZFpCM2p6V3JfTGFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBDgYIKwYBBQUHAQcBAf8Egf4wgfswHgQCAAEwGAMEAC2B
fwMEAC2HJQMEAGeLMgMEAMGkxzCB2AQCAAIwgdEDBwAqDhqAJUEDBQAqDseAAwcA
Kg7yAQABAwcAKg72AABsAwcAKg8eAAEjAwcAKg8eAARWAwcAKg8eAAmHAwcAKg8e
AAq8AwcAKg8eAN75AwcAKg8eAQABAwcAKg8egQACAwcAKg8egRKTAwcAKg8egUMZ
AwcAKg8egZLoAwcAKg8egaPQAwcAKg8egc2uAwUDKg8ugAMFACoPPYcDBwAqD30C
AAEDBQAqD+HGAwUDKhBtQAMFAyoR/YADBQEqEqxAAwUDKhL1QAMHACoTGMAAATAN
BgkqhkiG9w0BAQsFAAOCAQEALufz7A3TAWAfyiKdIT4OcLdALMm28lWT8B+KjvTL
EhO3f2c4P6/1cYbOtoef3Q/JDr3o1qMFExgl5GaAOqmPoV7cf5YAELxdBw1kWEbz
eOJ5TcWhA2olPXB8i5ctGXu1+FtZ/1b1Toi3FJL5WUnQ6mD8kh7OkBpuKuvOh0Q8
GmVaMyvANT3ZQ+d/8O593+skxR7hsv3cKNDQXHaKh6L9v4k1i4kKYQ0pjGFYZ+gK
IQkEFgnVhWSUEBjVwVWTeQURzVqEnvSmlGor4Z3NUrxMSLuAIYRUU/qGorRii36P
U0v75GqDcP/Azyss4CWtr+IEJ/ZOb45gWlsmOpdO8Y5Qpg==
-----END CERTIFICATE-----
Generated at Thu May 8 05:47:54 2025 by rpki-client