Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Q5OGZ7tqXCsnck4yxrYilVHNft8.roa
File: Q5OGZ7tqXCsnck4yxrYilVHNft8.roa (raw, json)
Hash identifier: /80sWXdh7SE7TjxlLTqoelAosiGxtAp0TXTyLan5iOc=
Subject key identifier: 43:93:86:67:BB:6A:5C:2B:27:72:4E:32:C6:B6:22:95:51:CD:7E:DF
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0196AC0C51A9E0151819D0F253A0E92CCADC
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Q5OGZ7tqXCsnck4yxrYilVHNft8.roa
Signing time: Wed 07 May 2025 18:40:10 +0000
ROA not before: Wed 07 May 2025 18:40:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30633
IP address blocks: 45.85.160.0/24 maxlen: 24
45.86.247.0/24 maxlen: 24
45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
45.157.37.0/24 maxlen: 24
80.253.250.0/24 maxlen: 24
80.253.251.0/24 maxlen: 24
103.139.50.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
193.27.21.0/24 maxlen: 24
193.27.23.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
195.66.24.0/24 maxlen: 24
195.66.25.0/24 maxlen: 24
195.66.27.0/24 maxlen: 24
2a06:1180:1c5::/48 maxlen: 48
2a06:1181:100::/48 maxlen: 48
2a06:1184:33::/48 maxlen: 48
2a06:35c2::/32 maxlen: 32
2a07:bb40::/29 maxlen: 29
2a09:17c4::/32 maxlen: 32
2a0a:2d04:100::/48 maxlen: 48
2a0a:2d06:33::/48 maxlen: 48
2a0c:7886:b::/48 maxlen: 48
2a0c:7886:33::/48 maxlen: 48
2a0e:15c7:88::/48 maxlen: 48
2a0e:1a80:2541::/48 maxlen: 48
2a0e:1a81::/32 maxlen: 32
2a0e:1a83:66::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a0e:c781::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:1206:44::/48 maxlen: 48
2a0f:1583::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2e80::/29 maxlen: 29
2a0f:3045::/32 maxlen: 32
2a0f:3d84::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:7d02:100::/48 maxlen: 48
2a0f:7d06:fc9d::/48 maxlen: 48
2a0f:df44::/32 maxlen: 32
2a0f:e1c6::/32 maxlen: 32
2a0f:e6c5::/32 maxlen: 32
2a0f:e7c6:55::/48 maxlen: 48
2a0f:e844:8642::/48 maxlen: 48
2a10:30c0::/29 maxlen: 29
2a10:32c0::/29 maxlen: 29
2a10:35c0::/29 maxlen: 29
2a10:36c0::/29 maxlen: 29
2a10:3740::/29 maxlen: 29
2a10:37c0::/29 maxlen: 29
2a10:4a00::/29 maxlen: 29
2a10:5400::/29 maxlen: 29
2a10:6400::/29 maxlen: 29
2a10:6b00::/29 maxlen: 29
2a10:6d40::/29 maxlen: 29
2a10:7100::/29 maxlen: 29
2a10:7500::/29 maxlen: 29
2a10:7d00::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:ac45::/32 maxlen: 32
2a12:ecc0:271::/48 maxlen: 48
2a12:ecc0:3e2::/48 maxlen: 48
2a12:ecc4:2213::/48 maxlen: 48
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:18c4::/32 maxlen: 32
2a13:18c6:55::/48 maxlen: 48
2a13:18c6:c9a1::/48 maxlen: 48
2a13:8c84::/32 maxlen: 32
2a13:9280::/32 maxlen: 32
2a13:c904::/32 maxlen: 32
2a13:cf01::/32 maxlen: 32
2a13:cf06::/32 maxlen: 32
2a13:df00::/29 maxlen: 29
2a13:e100:1312::/48 maxlen: 48
2a13:e101:2::/48 maxlen: 48
2a13:e104::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 07 May 2025 18:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:0c:51:a9:e0:15:18:19:d0:f2:53:a0:e9:2c:ca:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 7 18:40:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43938667bb6a5c2b27724e32c6b6229551cd7edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:46:9d:68:c4:ec:f2:05:a4:93:70:ac:20:e8:
ca:eb:c6:4a:c5:03:23:e1:1f:a7:e7:ee:34:ee:a5:
f8:4a:5f:35:f5:03:13:1a:24:e6:1f:64:2b:39:3f:
ee:44:75:26:c7:0e:00:23:5d:6b:cf:98:c7:24:be:
21:cb:1d:b9:ec:f6:a1:67:82:d1:51:05:a0:40:16:
f5:83:f5:d6:76:c3:f1:e4:78:15:15:89:06:c5:fc:
cd:16:66:c7:89:70:7d:cb:d0:10:e9:d0:cc:9b:b0:
71:e8:f4:8f:72:27:18:77:b6:b2:e8:11:83:89:18:
f3:00:99:c4:92:c0:ad:5c:f4:cd:2a:ed:29:e5:09:
45:ea:af:ca:f1:44:54:5f:96:30:5f:f8:a6:c8:6d:
c7:6a:77:4d:44:2e:99:1d:fe:a4:eb:81:ac:46:ea:
5e:fa:00:a2:7c:7b:78:20:53:82:38:df:c2:74:c9:
20:99:dc:d8:a1:01:1b:de:f8:8f:76:00:c1:2b:46:
68:49:bb:11:60:8c:0e:86:4f:43:6e:91:63:25:71:
d7:04:ba:b7:4d:7b:03:3b:10:9a:fe:12:61:58:d4:
6a:66:cf:11:59:e2:b1:b6:cd:17:b8:58:45:16:bd:
d0:aa:30:a6:81:f3:12:1b:1d:1c:70:a5:9c:97:d9:
1c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:93:86:67:BB:6A:5C:2B:27:72:4E:32:C6:B6:22:95:51:CD:7E:DF
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Q5OGZ7tqXCsnck4yxrYilVHNft8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.160.0/24
45.86.247.0/24
45.129.127.0/24
45.135.37.0/24
45.157.37.0/24
80.253.250.0/23
103.139.50.0/24
185.164.59.0/24
193.27.21.0/24
193.27.23.0/24
193.164.199.0/24
195.66.24.0/23
195.66.27.0/24
IPv6:
2a06:1180:1c5::/48
2a06:1181:100::/48
2a06:1184:33::/48
2a06:35c2::/32
2a07:bb40::/29
2a09:17c4::/32
2a0a:2d04:100::/48
2a0a:2d06:33::/48
2a0c:7886:b::/48
2a0c:7886:33::/48
2a0e:15c7:88::/48
2a0e:1a80:2541::/48
2a0e:1a81::/32
2a0e:1a83:66::/48
2a0e:c780::/31
2a0e:f201:1::/48
2a0f:1206:44::/48
2a0f:1583::/32
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2e80::/29
2a0f:3045::/32
2a0f:3d84::/32
2a0f:7d02:1::/48
2a0f:7d02:100::/48
2a0f:7d06:fc9d::/48
2a0f:df44::/32
2a0f:e1c6::/32
2a0f:e6c5::/32
2a0f:e7c6:55::/48
2a0f:e844:8642::/48
2a10:30c0::/29
2a10:32c0::/29
2a10:35c0::/29
2a10:36c0::/29
2a10:3740::/29
2a10:37c0::/29
2a10:4a00::/29
2a10:5400::/29
2a10:6400::/29
2a10:6b00::/29
2a10:6d40::/29
2a10:7100::/29
2a10:7500::/29
2a10:7d00::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:ac45::/32
2a12:ecc0:271::/48
2a12:ecc0:3e2::/48
2a12:ecc4:2213::/48
2a12:f540::/29
2a13:18c0:1::/48
2a13:18c4::/32
2a13:18c6:55::/48
2a13:18c6:c9a1::/48
2a13:8c84::/32
2a13:9280::/32
2a13:c904::/32
2a13:cf01::/32
2a13:cf06::/32
2a13:df00::/29
2a13:e100:1312::/48
2a13:e101:2::/48
2a13:e104::/32
Signature Algorithm: sha256WithRSAEncryption
a7:d9:6f:85:c7:1d:ec:53:f1:7b:8a:fb:7b:f0:21:c5:70:56:
b7:7b:2d:a3:48:4b:5e:6a:65:af:17:aa:f1:7f:01:26:ea:ff:
6e:0c:78:80:8e:64:71:18:4a:63:f9:06:0d:90:77:78:22:1b:
8c:5b:7e:78:30:be:f3:c4:25:1e:79:2a:71:ac:67:26:3a:8e:
cf:88:4e:22:4e:07:ad:78:dc:37:61:0b:43:8a:97:33:7e:a7:
75:01:0c:1f:ca:c6:5b:88:56:ea:c7:3f:b3:00:9d:a1:98:ed:
7f:e7:0b:70:ec:67:bd:1b:d4:84:c6:76:62:ce:4a:83:ec:70:
c6:0e:e0:9b:ec:ec:7b:0b:a0:04:02:26:81:51:61:65:ec:d6:
d2:35:d4:5f:65:4b:29:b9:e5:b4:d2:85:5f:ec:74:bc:65:db:
8c:10:4a:57:4d:37:90:a9:d2:38:23:7d:fe:cc:33:f8:89:e2:
55:6a:06:6e:d2:85:e9:95:d7:94:d1:26:c9:c7:b0:40:7a:14:
d0:96:06:c1:11:bb:ee:c0:94:6d:b5:c3:2e:9a:54:e9:90:30:
cb:74:bb:65:a6:e9:46:76:42:80:a5:8c:b9:e3:de:55:6a:5f:
56:8a:74:9d:11:b9:7b:0d:76:38:c2:a2:cb:ab:9c:87:dd:31:
3c:58:4e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:44:27 2025 by rpki-client