Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tLIHJq8VOSjKrwBJvLZDNNVEIVw.roa
File: tLIHJq8VOSjKrwBJvLZDNNVEIVw.roa (raw, json)
Hash identifier: PkUyhNnDT2l/E2FfU25GN6a/hrUbaYh+/aqbJv8OltU=
Subject key identifier: B4:B2:07:26:AF:15:39:28:CA:AF:00:49:BC:B6:43:34:D5:44:21:5C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019680638F2827B2B7CD4E51B4B28695DBD7
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tLIHJq8VOSjKrwBJvLZDNNVEIVw.roa
Signing time: Tue 29 Apr 2025 07:12:10 +0000
ROA not before: Tue 29 Apr 2025 07:12:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30633
IP address blocks: 45.86.247.0/24 maxlen: 24
45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
45.157.37.0/24 maxlen: 24
80.253.250.0/24 maxlen: 24
103.139.50.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
193.27.21.0/24 maxlen: 24
193.27.23.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a06:1184:33::/48 maxlen: 48
2a06:35c2::/32 maxlen: 32
2a0a:2d06:33::/48 maxlen: 48
2a0c:7886:33::/48 maxlen: 48
2a0e:1a80:2541::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2e80::/29 maxlen: 29
2a0f:3d84::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:e1c6::/32 maxlen: 32
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:ecc4:2213::/48 maxlen: 48
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:18c6:55::/48 maxlen: 48
2a13:9280::/32 maxlen: 32
2a13:e101:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 May 2025 16:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:63:8f:28:27:b2:b7:cd:4e:51:b4:b2:86:95:db:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 29 07:12:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4b20726af153928caaf0049bcb64334d544215c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:66:14:aa:f5:cf:34:e1:14:e3:5e:2a:6e:e3:
73:34:76:61:3f:dc:28:62:7f:97:83:43:b7:91:71:
74:59:f6:f1:4b:b0:82:d4:60:6a:b1:9c:67:24:d9:
5c:80:d9:15:b0:59:3f:b5:ec:8c:3e:a0:cb:56:58:
b7:82:57:fb:7d:02:41:4b:55:81:1b:fe:c4:e0:98:
18:55:5e:f4:6d:4e:7c:93:93:36:96:40:7e:44:35:
03:a9:5b:af:0e:4a:f9:d2:9b:db:b6:6e:b2:af:a4:
03:a2:41:56:2f:84:6a:c0:52:e3:6f:59:72:7b:34:
4d:37:37:d2:8c:1a:c4:d9:5f:a9:ca:b8:b1:db:74:
cd:c8:a3:c1:18:70:f6:c2:1d:b8:4f:fb:f5:96:1d:
67:6b:62:c2:a1:8a:2e:38:93:cd:91:19:35:83:4c:
3d:4d:75:80:0e:ce:7b:87:05:d2:4b:09:31:3d:f6:
d7:0e:d3:2d:d5:97:85:23:57:c8:d4:5f:28:f9:8a:
8a:43:a5:9f:90:8f:52:00:3f:ad:66:c3:b7:88:9a:
13:78:fe:1b:07:26:41:e5:df:b5:c2:d4:20:22:14:
c1:00:c6:12:af:b7:0f:87:87:92:8f:04:36:72:6b:
5f:97:e2:aa:b5:a1:fa:06:c1:03:0c:d3:0c:f1:ea:
dd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B2:07:26:AF:15:39:28:CA:AF:00:49:BC:B6:43:34:D5:44:21:5C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tLIHJq8VOSjKrwBJvLZDNNVEIVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.247.0/24
45.129.127.0/24
45.135.37.0/24
45.157.37.0/24
80.253.250.0/24
103.139.50.0/24
185.164.59.0/24
193.27.21.0/24
193.27.23.0/24
193.164.199.0/24
IPv6:
2a06:1184:33::/48
2a06:35c2::/32
2a0a:2d06:33::/48
2a0c:7886:33::/48
2a0e:1a80:2541::/48
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2e80::/29
2a0f:3d84::/32
2a0f:7d02:1::/48
2a0f:e1c6::/32
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:ecc4:2213::/48
2a12:f540::/29
2a13:18c0:1::/48
2a13:18c6:55::/48
2a13:9280::/32
2a13:e101:2::/48
Signature Algorithm: sha256WithRSAEncryption
66:21:83:89:a7:b4:ca:45:c4:f6:d1:65:bb:4e:23:03:0c:dd:
6b:ab:39:44:7d:60:d8:de:db:4a:fd:0e:0b:0d:53:ed:24:18:
2e:96:45:ad:cc:db:7d:02:86:15:b7:58:0e:87:07:7a:a3:e3:
8d:e6:7e:09:9d:10:6d:2f:ad:46:52:83:7d:34:47:7f:f1:49:
39:6f:21:fe:bf:2e:61:fd:51:b2:c9:e6:ad:e3:55:0e:72:12:
c1:2f:0a:cc:ca:12:1e:f1:ff:13:61:98:2b:6a:db:77:67:90:
9a:e6:f0:86:b6:8d:fb:6c:41:54:5c:b6:64:9e:e1:51:91:cd:
53:8b:6d:9c:a0:45:64:31:f8:ea:f5:c7:0c:df:24:b5:d8:cd:
94:b8:ef:58:cf:bb:fc:5a:f0:53:90:7e:e2:85:a0:d7:c9:bf:
b8:1a:da:6e:cd:9d:ce:0a:fc:59:b5:ec:4c:68:09:11:ce:01:
59:9e:37:eb:fe:de:91:ee:54:4f:0c:86:6c:ac:25:93:00:83:
9f:02:8c:35:25:41:f0:16:7c:ad:d8:58:85:92:52:ad:69:29:
65:92:48:ad:69:1b:9c:bc:eb:26:b2:8d:23:a3:9b:e0:da:04:
f0:5e:5d:4b:db:1a:25:d0:24:e9:63:2e:f0:2d:51:cf:22:49:
ac:78:93:5f
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgISAZaAY48oJ7K3zU5RtLKGldvXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwNDI5MDcxMjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGIyMDcyNmFmMTUzOTI4Y2FhZjAwNDliY2I2NDMzNGQ1NDQyMTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02YUqvXPNOEU414qbuNzNHZhP9wo
Yn+Xg0O3kXF0WfbxS7CC1GBqsZxnJNlcgNkVsFk/teyMPqDLVli3glf7fQJBS1WB
G/7E4JgYVV70bU58k5M2lkB+RDUDqVuvDkr50pvbtm6yr6QDokFWL4RqwFLjb1ly
ezRNNzfSjBrE2V+pyrix23TNyKPBGHD2wh24T/v1lh1na2LCoYouOJPNkRk1g0w9
TXWADs57hwXSSwkxPfbXDtMt1ZeFI1fI1F8o+YqKQ6WfkI9SAD+tZsO3iJoTeP4b
ByZB5d+1wtQgIhTBAMYSr7cPh4eSjwQ2cmtfl+KqtaH6BsEDDNMM8erdNwIDAQAB
o4IDXTCCA1kwHQYDVR0OBBYEFLSyByavFTkoyq8ASby2QzTVRCFcMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvdExJSEpxOFZPU2pLcndCSnZMWkROTlZFSVZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBcQYIKwYBBQUHAQcBAf8EggFgMIIBXDBCBAIAATA8AwQA
LVb3AwQALYF/AwQALYclAwQALZ0lAwQAUP36AwQAZ4syAwQAuaQ7AwQAwRsVAwQA
wRsXAwQAwaTHMIIBFAQCAAIwggEMAwcAKgYRhAAzAwUAKgY1wgMHACoKLQYAMwMH
ACoMeIYAMwMHACoOGoAlQQMFACoOx4ADBwAqDvIBAAEDBwAqDx4AASMDBwAqDx4A
BFYDBwAqDx4ACYcDBwAqDx4ACrwDBwAqDx4A3vkDBwAqDx4BAAEDBwAqDx6BAAID
BwAqDx6BEpMDBwAqDx6BQxkDBwAqDx6BkugDBwAqDx6Bo9ADBwAqDx6Bza4DBQMq
Dy6AAwUAKg89hAMHACoPfQIAAQMFACoP4cYDBQMqEG1AAwUDKhH9gAMFASoSrEAD
BwAqEuzEIhMDBQMqEvVAAwcAKhMYwAABAwcAKhMYxgBVAwUAKhOSgAMHACoT4QEA
AjANBgkqhkiG9w0BAQsFAAOCAQEAZiGDiae0ykXE9tFlu04jAwzda6s5RH1g2N7b
Sv0OCw1T7SQYLpZFrczbfQKGFbdYDocHeqPjjeZ+CZ0QbS+tRlKDfTRHf/FJOW8h
/r8uYf1RssnmreNVDnISwS8KzMoSHvH/E2GYK2rbd2eQmubwhraN+2xBVFy2ZJ7h
UZHNU4ttnKBFZDH46vXHDN8ktdjNlLjvWM+7/FrwU5B+4oWg18m/uBrabs2dzgr8
WbXsTGgJEc4BWZ436/7eke5UTwyGbKwlkwCDnwKMNSVB8BZ8rdhYhZJSrWkpZZJI
rWkbnLzrJrKNI6Ob4NoE8F5dS9saJdAk6WMu8C1RzyJJrHiTXw==
-----END CERTIFICATE-----
Generated at Thu May 8 20:36:37 2025 by rpki-client