Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wz4EXthZ3XY90eYa75XhBOosdb4.roa
File: wz4EXthZ3XY90eYa75XhBOosdb4.roa (raw, json)
Hash identifier: pospT3MwahJNLRzeoR7CJfho7t2xvkzg88LBZsKcpmI=
Subject key identifier: C3:3E:04:5E:D8:59:DD:76:3D:D1:E6:1A:EF:95:E1:04:EA:2C:75:BE
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018D12E723391E6648FD5C8A5EDB7BDE3107
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wz4EXthZ3XY90eYa75XhBOosdb4.roa
Signing time: Tue 16 Jan 2024 15:32:34 +0000
ROA not before: Tue 16 Jan 2024 15:32:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a05:b900::/29 maxlen: 29
2a0e:1a80::/32 maxlen: 32
2a0e:c780::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2100::/29 maxlen: 29
2a0f:3d80:123::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
2a0f:3d83::/32 maxlen: 32
2a0f:3d84::/32 maxlen: 32
2a0f:3d87::/32 maxlen: 32
2a0f:7d01::/32 maxlen: 32
2a0f:e940::/29 maxlen: 29
2a10:6d40::/29 maxlen: 29
2a12:ac41::/32 maxlen: 32
2a13:18c0:1::/48 maxlen: 48
2a13:18c3::/32 maxlen: 32
2a13:18c6::/32 maxlen: 32
2a13:4900::/29 maxlen: 29
2a13:fc00::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 19 Jan 2024 07:56:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:12:e7:23:39:1e:66:48:fd:5c:8a:5e:db:7b:de:31:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 16 15:32:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c33e045ed859dd763dd1e61aef95e104ea2c75be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7d:26:f5:1a:33:7a:9b:21:fb:9f:83:e3:36:
00:71:97:5a:8a:4b:32:95:eb:43:41:c1:69:9f:06:
17:96:2c:54:eb:85:ec:f2:ab:23:2e:a7:2c:35:08:
01:4d:04:cf:60:43:de:21:7d:9c:2d:72:5a:2c:c2:
63:c6:f1:13:60:d5:0b:20:21:17:e6:f0:3d:6c:dd:
d2:0f:a4:28:5a:09:3b:bd:bb:6f:dc:b6:16:7d:bb:
5e:76:0a:23:3c:40:df:d3:9c:bb:3e:dd:c8:e6:43:
3f:60:bd:8b:1e:30:14:c1:a9:9a:fd:a1:11:5d:2f:
d4:ac:ce:3a:ed:f7:55:b1:ea:2f:fa:ff:c6:13:59:
b3:9f:e1:08:60:6f:e1:c0:55:32:a9:d8:05:b5:5f:
42:4f:c9:0b:5f:23:ed:ab:91:be:7d:b9:a8:e1:e1:
54:be:b1:86:4a:9e:14:55:57:8f:1a:86:6d:e8:8c:
0b:38:7e:47:23:a7:5a:78:71:45:d5:6f:71:89:cb:
f9:84:df:8a:e3:29:78:db:4d:39:26:60:33:36:45:
4e:94:93:46:20:3d:4f:e5:5c:d4:a6:87:ed:e6:dc:
ef:2d:4f:b6:c0:f7:41:dd:f0:91:ca:f8:85:52:f4:
19:4a:71:eb:f0:c3:c4:0b:9b:ae:e9:e3:ad:04:cb:
39:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3E:04:5E:D8:59:DD:76:3D:D1:E6:1A:EF:95:E1:04:EA:2C:75:BE
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wz4EXthZ3XY90eYa75XhBOosdb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
193.164.199.0/24
IPv6:
2a05:b900::/29
2a0e:1a80::/32
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2100::/29
2a0f:3d80:123::/48
2a0f:3d82::-2a0f:3d84:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:3d87::/32
2a0f:7d01::/32
2a0f:e940::/29
2a10:6d40::/29
2a12:ac41::/32
2a13:18c0:1::/48
2a13:18c3::/32
2a13:18c6::/32
2a13:4900::/29
2a13:fc00::/29
Signature Algorithm: sha256WithRSAEncryption
89:65:64:64:33:a4:7e:b3:4b:f9:af:a8:c8:f7:4e:b3:d6:f2:
1b:d2:b8:0c:a6:f9:d7:43:1c:df:a7:2c:bf:c5:0f:5c:2a:8f:
12:33:61:2c:6e:98:48:b3:09:29:e8:bb:57:40:83:ee:60:65:
87:c6:51:ec:33:9b:f1:44:14:e7:d2:eb:b4:27:89:90:52:07:
4e:10:51:85:54:56:80:36:d9:94:88:fb:84:3f:d4:36:6e:d6:
26:db:1b:8e:fd:1b:16:56:e0:de:e0:a9:a4:f0:c9:7b:18:fb:
e3:81:c3:51:37:7e:c9:bb:16:09:ed:c5:f1:5e:09:ed:94:5b:
a5:1e:ac:a5:7d:66:b1:39:1c:c9:af:b8:b7:f9:11:10:18:ed:
6f:59:8d:08:b9:f2:42:c7:3c:92:4e:84:59:7e:f7:40:49:1c:
70:4c:ac:40:96:29:38:5f:32:76:12:c1:da:df:3a:92:92:af:
f5:c7:39:0a:6d:e1:87:3b:3f:74:72:6a:fe:b7:1b:47:f7:b7:
af:58:e7:84:bd:0b:8a:e4:62:16:1c:59:0c:61:eb:48:86:37:
0c:57:1c:da:73:d3:f2:ee:d8:c0:83:fc:f5:43:98:4e:0b:cf:
b4:bb:3b:6a:87:74:7f:be:be:95:ad:b7:a1:0c:2e:25:61:7a:
a0:23:74:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:52:09 2025 by rpki-client