Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/bfDNTF5g1lCFuDT4Cp6Qpea5X5c.roa
File: bfDNTF5g1lCFuDT4Cp6Qpea5X5c.roa (raw, json)
Hash identifier: oS0PhrClmalwCRsNJZ5DxADKCpROejwURYD5CQlUj6E=
Subject key identifier: 6D:F0:CD:4C:5E:60:D6:50:85:B8:34:F8:0A:9E:90:A5:E6:B9:5F:97
Certificate issuer: /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Certificate serial: 0197CF9FBFCCA72A658CF26DCE3D4E9D12A4
Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/bfDNTF5g1lCFuDT4Cp6Qpea5X5c.roa
Signing time: Thu 03 Jul 2025 09:30:42 +0000
ROA not before: Thu 03 Jul 2025 09:30:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48065
IP address blocks: 46.213.0.0/21 maxlen: 21
46.213.8.0/21 maxlen: 21
46.213.16.0/21 maxlen: 21
46.213.24.0/21 maxlen: 21
46.213.32.0/21 maxlen: 21
46.213.40.0/21 maxlen: 21
46.213.48.0/21 maxlen: 21
46.213.56.0/21 maxlen: 21
46.213.64.0/21 maxlen: 21
46.213.72.0/21 maxlen: 21
46.213.80.0/21 maxlen: 21
46.213.88.0/21 maxlen: 21
46.213.96.0/21 maxlen: 21
46.213.104.0/21 maxlen: 21
46.213.112.0/21 maxlen: 21
46.213.120.0/21 maxlen: 21
46.213.128.0/21 maxlen: 21
46.213.136.0/21 maxlen: 21
46.213.144.0/21 maxlen: 21
46.213.152.0/21 maxlen: 21
46.213.160.0/21 maxlen: 21
46.213.168.0/21 maxlen: 21
46.213.176.0/21 maxlen: 21
46.213.184.0/21 maxlen: 21
46.213.192.0/21 maxlen: 21
46.213.200.0/21 maxlen: 21
46.213.208.0/21 maxlen: 21
46.213.216.0/21 maxlen: 21
46.213.224.0/21 maxlen: 21
46.213.232.0/21 maxlen: 21
46.213.240.0/21 maxlen: 21
46.213.248.0/21 maxlen: 21
94.252.192.0/21 maxlen: 21
94.252.200.0/21 maxlen: 21
94.252.208.0/21 maxlen: 21
94.252.216.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 24 Jul 2025 06:38:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:9f:bf:cc:a7:2a:65:8c:f2:6d:ce:3d:4e:9d:12:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Validity
Not Before: Jul 3 09:30:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6df0cd4c5e60d65085b834f80a9e90a5e6b95f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f7:e4:69:3a:65:ac:41:e9:4b:92:34:6f:21:
9a:9b:ba:da:1c:49:bc:e0:8a:a9:e4:f1:92:56:f8:
bb:8c:62:2f:1d:65:db:25:fd:36:fe:8d:69:b5:ab:
01:1e:7e:9a:ad:5c:59:01:d4:2c:5b:19:ad:8d:77:
56:13:53:6a:96:01:91:c3:5e:9a:71:92:b1:f8:03:
4e:0b:05:c4:9e:1d:9b:29:9f:c0:78:83:0c:d7:cb:
71:93:cf:62:9a:19:ac:c4:cb:6c:fc:e7:9f:b9:33:
bf:5f:e2:a3:66:97:ac:36:2c:26:39:9a:e8:7b:b1:
3b:e1:9e:27:72:4b:68:b5:c4:ce:87:49:ea:11:64:
0b:cb:53:7d:f9:65:37:f2:90:26:be:84:54:1f:5c:
f6:d6:be:77:b6:a5:90:00:ff:86:1f:36:2d:6a:0a:
37:d6:7a:dd:64:16:f3:03:76:e2:74:e1:b7:2d:c4:
a0:18:e8:12:18:d1:43:e8:bc:dd:58:40:05:81:5a:
e7:ef:8e:ee:7c:b7:67:61:51:fb:c8:22:62:43:f7:
54:75:09:68:d1:82:74:e6:e0:17:02:17:3c:8d:29:
10:9b:c7:3b:25:2d:d9:df:e3:fb:47:71:60:e3:c0:
00:c6:6d:0c:6b:1f:5c:80:b6:a8:14:4f:f5:b6:85:
07:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F0:CD:4C:5E:60:D6:50:85:B8:34:F8:0A:9E:90:A5:E6:B9:5F:97
X509v3 Authority Key Identifier:
keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/bfDNTF5g1lCFuDT4Cp6Qpea5X5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.213.0.0/16
94.252.192.0/19
Signature Algorithm: sha256WithRSAEncryption
08:c2:01:c5:a7:96:b8:ed:a0:13:38:eb:72:74:31:62:05:73:
7d:ea:96:17:46:46:d6:e2:dc:10:6d:77:35:51:3a:84:3d:46:
11:02:a9:21:53:6d:ce:51:79:ce:22:23:b1:6e:c9:41:02:e0:
13:98:f9:d2:09:3d:d9:7d:3e:bd:11:1f:d4:02:9b:ae:ce:bc:
72:00:2e:10:82:ac:23:38:dd:6d:d8:62:b5:26:f4:1d:02:b5:
f2:ec:8b:05:ef:f7:9c:f7:4b:1a:c3:c5:c4:60:cd:ea:c7:5c:
09:2d:59:bb:27:93:49:89:28:59:de:92:5d:24:1a:3a:fe:2a:
94:71:38:1c:a0:c6:a7:bd:22:40:e3:eb:10:18:62:93:9b:63:
53:3f:72:0a:2a:9d:93:08:91:00:94:e7:d5:f6:40:f9:87:2d:
5d:66:d2:6f:e6:b3:0f:df:0a:29:ca:f8:04:b9:61:59:76:68:
68:84:0e:54:ec:8c:c9:bb:1f:45:8a:03:f3:98:47:f2:7e:2f:
12:b1:ef:ce:5a:d4:79:21:49:ab:e6:8b:2c:75:b2:73:f9:9f:
1e:2c:f7:73:1f:d4:75:18:7d:14:bf:7e:c0:60:84:d0:49:64:
3a:49:ef:c0:96:f7:af:c0:ec:6d:3f:57:1e:b5:d9:eb:7d:7b:
a2:b8:33:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:32:27 2025 by rpki-client