Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/xEm2Q_4YA-eMHcnJpbP6vgGglaE.roa
File: xEm2Q_4YA-eMHcnJpbP6vgGglaE.roa (raw, json)
Hash identifier: y86FxOsks75lAnbUdLYoVCHoWbKRoMsz5PquiAqH9+o=
Subject key identifier: C4:49:B6:43:FE:18:03:E7:8C:1D:C9:C9:A5:B3:FA:BE:01:A0:95:A1
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 019783609298F1B90BBADA900C365630EC41
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/xEm2Q_4YA-eMHcnJpbP6vgGglaE.roa
Signing time: Wed 18 Jun 2025 14:10:33 +0000
ROA not before: Wed 18 Jun 2025 14:10:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48449
IP address blocks: 46.20.97.0/24 maxlen: 24
46.20.103.0/24 maxlen: 24
46.20.106.0/24 maxlen: 24
46.20.111.0/24 maxlen: 24
185.160.194.0/24 maxlen: 24
185.160.195.0/24 maxlen: 24
185.169.220.0/24 maxlen: 24
185.169.221.0/24 maxlen: 24
185.169.222.0/24 maxlen: 24
185.169.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Jun 2025 21:21:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:60:92:98:f1:b9:0b:ba:da:90:0c:36:56:30:ec:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Jun 18 14:10:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c449b643fe1803e78c1dc9c9a5b3fabe01a095a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ec:de:bd:6e:58:6b:b2:b4:34:11:01:07:15:
27:82:ba:cf:4e:52:18:78:6a:e8:09:7c:9b:10:2d:
b1:7e:59:f3:d1:73:41:e1:00:f2:2c:2d:d7:70:a1:
9c:90:8c:a6:06:78:a0:f1:1d:c0:f6:8d:de:7d:1e:
06:b8:54:0d:10:bc:f3:d6:57:97:36:9b:e9:dd:18:
30:4f:db:4d:f0:62:36:27:39:16:6c:11:b7:42:c2:
dc:c3:68:34:37:02:b0:48:96:06:1a:03:1e:7b:c5:
0c:bf:28:f0:29:ec:0d:ea:f9:b0:1a:e5:38:9f:d3:
71:ae:75:5a:aa:63:cf:49:9f:70:fd:21:cb:0e:ed:
45:1e:b4:0b:85:a1:25:1c:e1:89:04:7b:94:e8:2a:
69:28:34:3a:bf:04:72:b3:6f:a9:da:ef:de:6b:93:
2a:9d:1c:fe:13:28:85:e5:53:0f:c9:0a:a3:c5:db:
f5:2c:64:88:f8:68:a6:7e:4a:d4:ae:ee:c0:a0:29:
35:c5:3c:70:74:10:8f:16:e1:32:33:77:35:ac:72:
9c:69:e7:25:ed:31:37:ca:fb:ef:d8:c9:14:04:91:
a4:bc:8b:79:8d:11:ca:8f:9b:28:4d:17:ba:29:ae:
9c:9e:c3:30:70:b2:2c:3f:9d:41:b8:ae:04:37:68:
40:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:49:B6:43:FE:18:03:E7:8C:1D:C9:C9:A5:B3:FA:BE:01:A0:95:A1
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/xEm2Q_4YA-eMHcnJpbP6vgGglaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.97.0/24
46.20.103.0/24
46.20.106.0/24
46.20.111.0/24
185.160.194.0/23
185.169.220.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:92:07:42:43:d0:40:bf:7f:0b:6c:38:8d:0f:e5:6f:d9:17:
13:41:bd:db:a1:99:86:30:b0:da:eb:f9:5d:da:63:99:6e:d2:
37:14:32:98:55:f9:7e:6d:97:dc:54:00:c3:67:63:22:5c:e2:
19:fd:24:7e:8c:8a:b3:84:da:9e:d6:3b:03:13:79:19:ff:01:
01:1b:21:90:97:5b:58:d5:dc:42:78:56:0d:7e:0d:44:05:01:
58:47:dd:d7:3d:f0:cd:43:3a:b7:00:b0:4a:e9:d5:4a:c3:42:
d6:e0:00:af:ee:2e:e5:0c:ec:4f:99:b6:0b:26:40:46:29:80:
8e:00:f2:56:ee:77:18:aa:a8:10:88:34:5d:2d:cc:ce:d9:85:
67:a1:a4:0e:88:3b:ec:7b:50:37:05:a0:6d:16:7d:08:e3:fb:
e1:8e:6c:6e:12:85:ac:be:db:ef:da:f8:74:0a:d2:78:2c:dc:
2d:34:d1:ba:5e:c1:9b:00:8a:0f:03:e6:fb:74:e2:bb:55:cd:
79:84:20:82:33:c8:26:9b:44:97:ba:c2:ca:ff:15:d5:27:19:
b4:b4:e0:30:7e:40:f9:27:5a:f4:ae:60:3c:0c:a4:8b:1b:4b:
74:67:c8:60:88:e0:b0:e6:87:d1:ee:35:c7:b9:1d:17:1c:eb:
b4:63:11:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:58:54 2025 by rpki-client