Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/E7jjs0-sQlyBfGS5iM-25Uz0IGU.roa
File: E7jjs0-sQlyBfGS5iM-25Uz0IGU.roa (raw, json)
Hash identifier: 7PfOYSUM2bxxgX5vrY6k/qWzzJkK8KL2pAl1jWbmyyU=
Subject key identifier: 13:B8:E3:B3:4F:AC:42:5C:81:7C:64:B9:88:CF:B6:E5:4C:F4:20:65
Certificate issuer: /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Certificate serial: 0197C021B1716A017CDCD7EC3689CE9FD4F8
Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/E7jjs0-sQlyBfGS5iM-25Uz0IGU.roa
Signing time: Mon 30 Jun 2025 09:18:42 +0000
ROA not before: Mon 30 Jun 2025 09:18:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48065
IP address blocks: 46.213.0.0/21 maxlen: 21
46.213.8.0/21 maxlen: 21
46.213.16.0/21 maxlen: 21
46.213.24.0/21 maxlen: 21
46.213.32.0/21 maxlen: 21
46.213.48.0/21 maxlen: 21
46.213.56.0/21 maxlen: 21
46.213.64.0/21 maxlen: 21
46.213.72.0/21 maxlen: 21
46.213.80.0/21 maxlen: 21
46.213.88.0/21 maxlen: 21
46.213.96.0/21 maxlen: 21
46.213.104.0/21 maxlen: 21
46.213.112.0/21 maxlen: 21
46.213.120.0/21 maxlen: 21
46.213.128.0/21 maxlen: 21
46.213.136.0/21 maxlen: 21
46.213.144.0/21 maxlen: 21
46.213.152.0/21 maxlen: 21
46.213.160.0/21 maxlen: 21
46.213.168.0/21 maxlen: 21
46.213.176.0/21 maxlen: 21
46.213.184.0/21 maxlen: 21
46.213.192.0/21 maxlen: 21
46.213.200.0/21 maxlen: 21
46.213.208.0/21 maxlen: 21
46.213.216.0/21 maxlen: 21
46.213.224.0/21 maxlen: 21
46.213.232.0/21 maxlen: 21
46.213.240.0/21 maxlen: 21
46.213.248.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 02 Jul 2025 12:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:21:b1:71:6a:01:7c:dc:d7:ec:36:89:ce:9f:d4:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Validity
Not Before: Jun 30 09:18:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13b8e3b34fac425c817c64b988cfb6e54cf42065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:59:21:c7:22:2d:ce:1c:0e:af:67:35:27:4f:
47:65:9e:b8:1c:58:a4:62:1c:36:85:86:1d:55:0a:
41:11:a2:4d:57:2f:f2:5f:e1:20:4a:0e:85:ed:88:
f2:48:a7:77:f6:3c:89:91:28:99:dd:f6:b9:26:ec:
91:d0:9a:de:ec:8f:bf:13:f0:0a:d1:8c:36:1b:fc:
55:5a:26:13:24:7d:c8:0f:2c:36:72:74:b9:4f:4f:
64:ce:03:63:2b:20:a8:48:b9:64:9e:39:07:b9:ac:
9e:5a:26:de:6c:13:31:5b:a3:ca:07:7c:bb:09:e4:
2c:8d:c2:7f:8b:0c:2c:c7:24:fa:cf:2a:61:2c:d9:
5d:b3:cc:f8:47:9b:b8:29:8e:d5:20:81:3f:d7:f5:
ed:4b:22:5a:66:3e:6d:9f:d2:df:10:99:24:8b:d2:
72:0a:b6:99:89:21:05:cf:12:64:76:c8:88:93:ba:
b8:5c:6d:55:df:84:f3:e0:01:d7:04:48:a4:60:da:
8e:9e:8b:8b:f4:9f:78:31:07:c4:84:29:81:6f:3a:
6f:14:67:98:20:da:5f:8a:29:3a:03:ab:b0:61:42:
10:a1:5d:e7:f9:8f:39:a1:14:82:01:3e:d9:70:de:
b3:28:32:ca:58:a7:07:55:14:24:6d:78:d5:38:c5:
1e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B8:E3:B3:4F:AC:42:5C:81:7C:64:B9:88:CF:B6:E5:4C:F4:20:65
X509v3 Authority Key Identifier:
keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/E7jjs0-sQlyBfGS5iM-25Uz0IGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.213.0.0-46.213.39.255
46.213.48.0-46.213.255.255
Signature Algorithm: sha256WithRSAEncryption
6f:5e:b5:a4:bc:6c:0e:dc:88:4e:ea:ff:48:4b:4d:b2:3e:a7:
16:c6:38:c1:77:db:0f:de:e4:da:75:94:17:6c:1c:f4:c5:0f:
85:ab:08:97:fa:8b:8e:23:4c:96:d7:e6:79:87:41:de:48:7a:
7d:7e:60:ea:9f:ed:b0:ac:0f:c0:b2:e5:7b:84:a2:ae:1d:50:
3e:59:4b:d4:10:42:ea:0b:88:b6:ae:1a:7c:d7:c8:7d:60:45:
41:6b:73:70:c2:b5:09:b9:4b:d3:97:8d:e9:65:b5:dc:37:0f:
f5:a7:1a:ea:00:5e:3d:9b:21:e4:3b:f8:ea:41:a5:a7:4d:a4:
f6:86:fe:9e:05:2d:83:90:41:b2:71:92:19:be:2c:ba:af:f6:
97:b0:b4:b7:39:8e:02:57:5f:24:1e:21:4a:69:fc:cf:54:59:
51:9d:17:fd:92:5a:2a:c5:86:9e:2f:7e:73:e8:89:0c:4c:e2:
23:36:55:32:2f:0c:af:af:96:66:b3:37:87:df:89:9c:d2:50:
cc:40:9b:11:93:7d:b9:4e:aa:a0:ff:a3:4a:63:f2:a8:0b:2c:
f6:28:6e:7c:5b:77:19:12:ee:bc:59:92:c6:d8:dc:24:12:6c:
13:0e:f6:dd:31:48:f0:17:ff:17:76:77:9e:3a:02:0d:ed:ee:
e7:5f:c8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:35:33 2025 by rpki-client