Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/naqXFI07S0fHCwCQVo2-CRVik00.roa
File: naqXFI07S0fHCwCQVo2-CRVik00.roa (raw, json)
Hash identifier: QzH25vlq5zsDhmqrsmOM00/fZjHrUgbO8wACQLDduIs=
Subject key identifier: 9D:AA:97:14:8D:3B:4B:47:C7:0B:00:90:56:8D:BE:09:15:62:93:4D
Certificate issuer: /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Certificate serial: 0197CB12486C6FA3820F5BFDF4E6CD2B6BE2
Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/naqXFI07S0fHCwCQVo2-CRVik00.roa
Signing time: Wed 02 Jul 2025 12:17:42 +0000
ROA not before: Wed 02 Jul 2025 12:17:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48065
IP address blocks: 46.213.0.0/21 maxlen: 21
46.213.8.0/21 maxlen: 21
46.213.16.0/21 maxlen: 21
46.213.24.0/21 maxlen: 21
46.213.32.0/21 maxlen: 21
46.213.40.0/21 maxlen: 21
46.213.48.0/21 maxlen: 21
46.213.56.0/21 maxlen: 21
46.213.64.0/21 maxlen: 21
46.213.72.0/21 maxlen: 21
46.213.80.0/21 maxlen: 21
46.213.88.0/21 maxlen: 21
46.213.96.0/21 maxlen: 21
46.213.104.0/21 maxlen: 21
46.213.112.0/21 maxlen: 21
46.213.120.0/21 maxlen: 21
46.213.128.0/21 maxlen: 21
46.213.136.0/21 maxlen: 21
46.213.144.0/21 maxlen: 21
46.213.152.0/21 maxlen: 21
46.213.160.0/21 maxlen: 21
46.213.168.0/21 maxlen: 21
46.213.176.0/21 maxlen: 21
46.213.184.0/21 maxlen: 21
46.213.192.0/21 maxlen: 21
46.213.200.0/21 maxlen: 21
46.213.208.0/21 maxlen: 21
46.213.216.0/21 maxlen: 21
46.213.224.0/21 maxlen: 21
46.213.232.0/21 maxlen: 21
46.213.240.0/21 maxlen: 21
46.213.248.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 03 Jul 2025 09:28:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:12:48:6c:6f:a3:82:0f:5b:fd:f4:e6:cd:2b:6b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Validity
Not Before: Jul 2 12:17:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9daa97148d3b4b47c70b0090568dbe091562934d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f5:a9:81:ee:6d:68:20:a4:91:f9:dc:f1:40:
28:45:97:b3:ec:06:8b:6c:f3:8f:77:f3:b4:64:3c:
03:7a:63:16:8b:45:ae:97:26:5a:93:e1:d8:86:ef:
70:ae:71:7d:6f:92:6f:f4:b8:c7:43:0a:ce:5c:e5:
04:2c:6d:62:d4:8a:e6:58:7d:f1:ce:9f:ab:38:63:
0c:e7:91:90:c9:ea:62:a5:b9:95:54:34:81:44:d3:
e2:bd:02:36:28:b0:77:06:e6:2c:96:64:44:57:a5:
12:66:0d:a3:3f:7b:4a:57:52:c0:66:aa:1c:00:20:
f8:e2:f8:3b:49:bf:22:f9:e0:f1:d6:98:ef:d9:31:
d0:1b:6c:39:cf:f2:1d:df:ce:9f:45:b2:fd:5e:f5:
20:90:cf:64:6e:32:b3:28:7a:92:60:50:d1:e4:c4:
58:12:c8:a8:34:41:f9:b3:ef:b0:6a:41:f1:30:e2:
28:17:24:d7:85:66:0f:2d:94:05:0c:f1:a4:9e:22:
d2:0d:b6:e4:da:a0:d3:08:e1:63:12:41:a5:f5:96:
86:e1:5d:65:d4:3c:a6:38:8e:3e:6d:27:ce:0c:d8:
20:c2:4b:54:eb:ec:84:5c:37:71:78:0e:e8:3f:0b:
99:53:ee:e8:9c:af:f9:50:4b:72:90:84:85:d4:bf:
dd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AA:97:14:8D:3B:4B:47:C7:0B:00:90:56:8D:BE:09:15:62:93:4D
X509v3 Authority Key Identifier:
keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/naqXFI07S0fHCwCQVo2-CRVik00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.213.0.0/16
Signature Algorithm: sha256WithRSAEncryption
13:7b:af:62:6b:2c:75:38:14:4c:1d:59:30:4e:0a:aa:fa:e9:
3e:1d:76:f1:3c:f9:40:6f:a3:f1:b6:93:e5:be:e6:1e:db:83:
36:2e:74:b2:10:65:18:ce:88:79:14:f6:ba:e1:d2:d5:b8:5f:
bf:79:de:c9:07:07:ef:5d:cf:c3:51:2e:2c:eb:aa:8e:15:ce:
ec:b6:e0:4d:33:eb:69:63:a5:1d:4d:15:27:ea:1a:23:8a:86:
ca:c2:c6:cd:67:0b:7b:91:e2:c9:14:76:22:da:7d:bf:89:e8:
01:07:96:96:7d:29:bb:e9:26:f9:5a:6d:ae:e7:70:10:7d:19:
7c:6f:33:0a:ab:a9:68:ac:5d:7e:5b:99:55:9d:73:af:23:81:
65:7f:ff:86:7d:1b:fe:27:f9:4c:b1:c4:63:b6:7d:a9:3f:4c:
c5:68:69:a5:ed:26:68:a8:dd:90:e7:1f:23:67:48:f4:bb:ad:
38:e4:53:d5:4d:8d:3d:90:fd:a0:37:c8:84:4c:18:a5:2c:bc:
24:20:0c:d2:1c:35:45:2a:eb:b5:6f:2b:01:09:fa:84:e0:23:
d9:17:83:35:a1:fd:1a:c0:a2:96:21:0e:32:d3:e1:4b:6b:a9:
6c:c2:e9:46:ad:d1:33:97:15:0f:68:19:ce:f6:4a:91:fa:eb:
45:a4:a7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:36:09 2025 by rpki-client