Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/s0E-mT5g9fZMweCnChm99-Pw-aU.roa
File: s0E-mT5g9fZMweCnChm99-Pw-aU.roa (raw, json)
Hash identifier: TzCTjauSiRbERZfgdkh56EiLZONw5riQYEm+aUSd2ak=
Subject key identifier: B3:41:3E:99:3E:60:F5:F6:4C:C1:E0:A7:0A:19:BD:F7:E3:F0:F9:A5
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018D0C623B98BF62B4B9081790A7DC6BE330
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/s0E-mT5g9fZMweCnChm99-Pw-aU.roa
Signing time: Mon 15 Jan 2024 09:09:40 +0000
ROA not before: Mon 15 Jan 2024 09:09:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a0f:3d83::/32 maxlen: 32
2a0f:e940::/29 maxlen: 29
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0e:f201:1::/48 maxlen: 48
2a13:4900::/29 maxlen: 29
2a05:b900::/29 maxlen: 29
2a0f:3d84::/32 maxlen: 32
2a13:fc00::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:3d80:123::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0e:1a80::/32 maxlen: 32
2a0f:1e81:1293::/48 maxlen: 48
2a0f:3d87::/32 maxlen: 32
2a0f:1e00:abc::/48 maxlen: 48
2a10:6d40::/29 maxlen: 29
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:7d01::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a0f:2100::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
2a13:18c3::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 16 Jan 2024 11:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0c:62:3b:98:bf:62:b4:b9:08:17:90:a7:dc:6b:e3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 15 09:09:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3413e993e60f5f64cc1e0a70a19bdf7e3f0f9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3d:95:4a:46:21:61:51:6e:5e:df:9a:56:24:
1e:14:d5:07:60:2b:df:39:37:ef:91:f9:1c:bf:f3:
7b:3b:c8:0c:ad:59:54:77:31:ec:da:a0:cd:86:45:
18:90:7b:27:40:d4:0f:f9:1b:07:6c:2f:fc:08:41:
ce:5d:b2:9c:59:70:9b:ea:e5:36:bf:53:2e:d8:5e:
dc:7d:66:fd:12:35:b4:f1:df:a1:79:a5:69:76:71:
ad:e9:68:33:94:db:9b:ef:23:43:ba:7f:3a:f7:71:
10:84:1a:a1:8f:90:2b:3b:d2:f4:18:7b:28:8b:3e:
b6:8f:3a:47:44:78:dd:db:13:8b:7d:eb:26:73:74:
ed:66:ce:b8:f4:34:9e:5f:85:93:8d:47:be:cd:7f:
ef:d1:79:c7:16:99:78:92:21:c4:b1:8e:4c:6a:c2:
4c:4e:5c:eb:13:3b:70:f5:b6:c5:87:b1:87:23:81:
d6:9f:e9:f3:91:16:24:3b:51:94:36:61:70:e5:dc:
66:75:8a:c9:11:58:d7:ab:82:d2:97:67:2b:e9:dd:
aa:4e:58:05:c2:73:d3:6f:42:76:84:34:49:6b:0e:
14:41:b4:3a:8b:ab:85:a5:a2:5b:e4:ba:2e:0c:2c:
d2:d5:cf:a4:b3:c5:02:9f:8a:89:83:22:2a:35:71:
60:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:41:3E:99:3E:60:F5:F6:4C:C1:E0:A7:0A:19:BD:F7:E3:F0:F9:A5
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/s0E-mT5g9fZMweCnChm99-Pw-aU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
193.164.199.0/24
IPv6:
2a05:b900::/29
2a0e:1a80::/32
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2100::/29
2a0f:3d80:123::/48
2a0f:3d82::-2a0f:3d84:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:3d87::/32
2a0f:7d01::/32
2a0f:e940::/29
2a10:6d40::/29
2a12:ac40::/31
2a13:18c0:1::/48
2a13:18c3::/32
2a13:4900::/29
2a13:fc00::/29
Signature Algorithm: sha256WithRSAEncryption
9a:6f:04:e6:d9:68:85:c6:23:e7:d9:8e:f7:10:2e:cf:6e:c0:
e8:e5:84:62:54:3f:e6:20:97:22:98:64:35:c6:23:3c:4b:f5:
01:20:5d:0e:57:b8:cf:4f:22:aa:e0:41:6a:f1:bf:d5:0f:98:
2d:07:f9:e7:9e:34:cc:9e:9d:08:68:95:33:44:79:09:11:44:
0a:9e:ce:c6:b7:c4:c8:45:ae:f1:05:71:c8:bf:5d:9e:64:c8:
7d:90:17:25:08:54:f3:28:10:62:a6:dd:19:30:18:5c:3d:24:
4d:ad:97:8f:ac:a6:be:ad:8c:e4:59:e9:08:1c:63:65:6a:26:
03:12:63:0d:5e:54:d9:78:c6:60:d7:a0:0b:01:98:f2:e7:df:
d3:0d:3f:f6:76:39:b3:26:4a:ef:84:84:52:3c:f2:63:87:d4:
1c:c9:cf:63:13:5d:63:46:13:b3:64:7a:0f:cf:94:69:b0:e4:
91:32:3d:e6:a1:90:77:15:d7:1c:ba:da:b1:6d:0c:28:15:d2:
7d:b5:76:0f:38:7d:73:cd:f3:05:d2:9f:30:42:1e:c2:3b:93:
fb:c5:db:0c:9d:9b:4e:b8:88:82:12:3c:65:1a:68:75:41:97:
fb:3a:be:78:16:7b:c7:4f:13:72:88:13:53:25:c9:fb:8b:6c:
a7:b0:fa:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:42:42 2025 by rpki-client