Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/rwzsGMgrlY3ldrpepjrHqH5BsbQ.roa
File: rwzsGMgrlY3ldrpepjrHqH5BsbQ.roa (raw, json)
Hash identifier: 6TgpTgCICeRmJVn4u2gOu2EoJSU9gbUdCm4BGChHWYs=
Subject key identifier: AF:0C:EC:18:C8:2B:95:8D:E5:76:BA:5E:A6:3A:C7:A8:7E:41:B1:B4
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018F641AEAD8F1D058163F78CFEA60EF82D4
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/rwzsGMgrlY3ldrpepjrHqH5BsbQ.roa
Signing time: Fri 10 May 2024 20:03:56 +0000
ROA not before: Fri 10 May 2024 20:03:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a0e:1a80::/32 maxlen: 32
2a0e:c780::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2100::/29 maxlen: 29
2a0f:2e80::/29 maxlen: 29
2a0f:2f80::/29 maxlen: 29
2a0f:3d84::/32 maxlen: 32
2a0f:3d87::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:7d07::/32 maxlen: 32
2a0f:e1c6::/32 maxlen: 32
2a0f:e1c7:1::/48 maxlen: 48
2a0f:e847:2::/48 maxlen: 48
2a0f:e940::/29 maxlen: 29
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:18c6::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 14 May 2024 20:25:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:64:1a:ea:d8:f1:d0:58:16:3f:78:cf:ea:60:ef:82:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 10 20:03:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af0cec18c82b958de576ba5ea63ac7a87e41b1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6c:46:cc:ee:f7:89:3d:7b:72:0c:bd:fc:2d:
bd:66:40:fe:98:7a:e2:bd:19:4e:df:bf:67:81:05:
a6:38:92:68:67:5a:82:9e:07:67:62:58:9e:7f:46:
a0:92:6f:db:ec:9c:99:b2:88:a7:3b:61:80:14:1a:
c3:d4:e4:0b:40:90:21:9a:17:6f:86:4f:d1:48:11:
43:db:87:f8:fb:0f:81:a3:31:6a:69:de:3c:6a:4a:
27:26:d7:31:65:51:53:dd:7c:36:0e:77:4b:0e:3e:
1f:64:51:6a:97:2a:87:f3:c6:d0:41:f8:d8:e3:df:
23:19:4c:ef:62:f2:d2:4d:60:9b:96:e1:56:7b:7f:
a1:1e:63:65:af:4a:45:a5:b6:e8:e6:a2:49:dc:4b:
98:bc:d8:9d:ae:01:e7:9a:df:ad:3b:aa:fa:da:f9:
4d:97:ce:59:fb:ec:b4:48:ca:11:6d:ba:98:74:6a:
bf:65:22:6c:1e:d6:83:f3:15:b8:25:01:fd:2f:21:
08:05:b0:62:af:45:48:08:40:1d:5f:56:56:60:ef:
a8:f7:f9:b5:aa:e3:cf:86:be:4a:83:6a:87:45:d9:
a5:93:cc:b1:70:47:e8:a3:f9:38:a2:47:8e:45:6a:
f7:30:f9:59:ac:c8:b2:40:2b:52:1f:03:4c:7e:8a:
46:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0C:EC:18:C8:2B:95:8D:E5:76:BA:5E:A6:3A:C7:A8:7E:41:B1:B4
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/rwzsGMgrlY3ldrpepjrHqH5BsbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
193.164.199.0/24
IPv6:
2a0e:1a80::/32
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2100::/29
2a0f:2e80::/29
2a0f:2f80::/29
2a0f:3d84::/32
2a0f:3d87::/32
2a0f:7d02:1::/48
2a0f:7d07::/32
2a0f:e1c6::/32
2a0f:e1c7:1::/48
2a0f:e847:2::/48
2a0f:e940::/29
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:f540::/29
2a13:18c0:1::/48
2a13:18c6::/32
Signature Algorithm: sha256WithRSAEncryption
87:17:d1:2c:51:5e:09:47:83:ac:9e:62:d0:6c:f0:2b:28:b9:
97:72:71:ca:c8:fe:c7:cb:a2:2b:d6:b8:6a:8d:2a:c9:ad:d5:
3c:91:d2:16:9e:2c:d8:52:69:4f:11:ce:cc:74:37:12:74:a4:
53:e6:4e:a1:a2:6d:4d:eb:39:04:b5:6e:71:3c:c4:f1:4a:5d:
ae:61:f9:c7:af:23:3f:05:7d:f3:6d:b2:b3:e2:b7:66:09:c5:
e1:f7:48:25:d8:36:08:f6:d2:a1:27:e7:ae:02:59:1c:2f:ac:
a4:99:b5:5b:b9:bc:f5:ac:b4:24:09:fa:fa:19:9f:b4:db:bd:
cc:42:37:30:58:91:04:a7:eb:7b:b5:c8:54:32:57:cf:71:89:
f7:8d:ba:44:10:38:64:ae:1c:fc:45:29:c5:7e:cb:2b:b6:3c:
82:21:a0:0b:70:a8:b6:3c:08:c0:2e:b9:d6:ee:69:b7:01:65:
a8:e0:c4:f2:4a:cd:95:20:c8:e5:4c:be:5e:ae:d9:c7:9d:5d:
5c:a9:01:3b:9d:40:7c:82:98:88:02:a5:2d:24:87:2b:bf:c6:
68:d9:2b:16:f0:7b:20:df:c8:31:fc:b8:1d:7c:56:ec:83:71:
93:fa:72:68:fa:3c:5d:4a:4f:57:50:b2:a6:60:5a:cc:f1:61:
29:43:79:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:07:07 2025 by rpki-client