Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/rLIA-IrYlHPAEhCWh9sfEpMW8i4.roa
File: rLIA-IrYlHPAEhCWh9sfEpMW8i4.roa (raw, json)
Hash identifier: ywV8MI7z3UinV7gRvNrbIgqnDWCAdp0KicGKCQN8S0A=
Subject key identifier: AC:B2:00:F8:8A:D8:94:73:C0:12:10:96:87:DB:1F:12:93:16:F2:2E
Certificate issuer: /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Certificate serial: 0197C9C8B1EFDE2617F6788331586D61498C
Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/rLIA-IrYlHPAEhCWh9sfEpMW8i4.roa
Signing time: Wed 02 Jul 2025 06:17:42 +0000
ROA not before: Wed 02 Jul 2025 06:17:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29386
IP address blocks: 46.213.0.0/21 maxlen: 21
46.213.8.0/21 maxlen: 21
46.213.16.0/21 maxlen: 21
46.213.24.0/21 maxlen: 21
46.213.32.0/21 maxlen: 21
46.213.48.0/21 maxlen: 21
46.213.56.0/21 maxlen: 21
46.213.64.0/21 maxlen: 21
46.213.72.0/21 maxlen: 21
46.213.80.0/21 maxlen: 21
46.213.88.0/21 maxlen: 21
46.213.96.0/21 maxlen: 21
46.213.104.0/21 maxlen: 21
46.213.112.0/21 maxlen: 21
46.213.120.0/21 maxlen: 21
46.213.128.0/21 maxlen: 21
46.213.136.0/21 maxlen: 21
46.213.144.0/21 maxlen: 21
46.213.152.0/21 maxlen: 21
46.213.160.0/21 maxlen: 21
46.213.168.0/21 maxlen: 21
46.213.176.0/21 maxlen: 21
46.213.184.0/21 maxlen: 21
46.213.192.0/21 maxlen: 21
46.213.200.0/21 maxlen: 21
46.213.208.0/21 maxlen: 21
46.213.216.0/21 maxlen: 21
46.213.224.0/21 maxlen: 21
46.213.232.0/21 maxlen: 21
46.213.240.0/21 maxlen: 21
46.213.248.0/21 maxlen: 21
94.252.183.0/24 maxlen: 24
185.136.144.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 02 Jul 2025 12:19:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:c8:b1:ef:de:26:17:f6:78:83:31:58:6d:61:49:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Validity
Not Before: Jul 2 06:17:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acb200f88ad89473c012109687db1f129316f22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:65:27:eb:0c:71:2f:26:fc:8c:75:c9:12:95:
7c:fe:75:80:ac:02:ca:72:8f:b4:2a:9f:32:65:3d:
8b:88:9b:c9:0d:b8:fe:c6:71:76:8e:60:8a:8e:09:
7c:86:ca:2c:24:d7:93:6b:b6:38:af:f7:7c:9f:8c:
d5:00:6c:22:ab:66:a3:cf:b5:d6:1e:e9:65:03:40:
bc:71:a3:2a:9e:ba:71:cc:46:a7:e0:6f:74:d3:e3:
34:d7:f4:62:37:ab:1d:4a:2d:d8:74:bf:1e:ad:4b:
ea:22:5a:33:55:e1:4e:6b:ea:73:3a:d9:90:aa:66:
1b:72:b5:18:5c:94:03:e1:6b:00:67:2b:27:d1:38:
52:df:98:4a:01:ee:1c:09:10:be:1d:65:c0:f6:2c:
7f:b3:51:07:c3:a7:ff:bb:9c:f1:ad:95:35:d0:e5:
d0:16:27:17:34:97:df:52:41:ae:87:54:20:f2:dc:
f1:f9:96:82:b2:fc:a4:3b:52:7f:93:77:c4:ba:57:
67:4f:91:4e:fe:5c:dd:c4:bb:ad:bf:a9:8e:c0:dd:
cf:3d:c2:7b:ca:2a:3f:e7:ce:36:75:bd:a4:d7:33:
08:5b:0a:ff:68:d9:0d:6d:ae:a6:b5:43:d6:33:12:
89:f0:2a:4f:8c:97:4d:5a:e7:a0:40:94:e2:b6:2f:
e9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B2:00:F8:8A:D8:94:73:C0:12:10:96:87:DB:1F:12:93:16:F2:2E
X509v3 Authority Key Identifier:
keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/rLIA-IrYlHPAEhCWh9sfEpMW8i4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.213.0.0-46.213.39.255
46.213.48.0-46.213.255.255
94.252.183.0/24
185.136.144.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:a1:91:69:d9:ad:5c:0e:70:38:69:29:69:b3:c9:6c:6b:53:
05:76:96:fa:c3:08:a9:a3:37:bf:5a:75:0c:20:b0:ef:cb:d8:
74:51:95:09:67:9e:5c:fd:c5:5d:2a:b0:a4:43:88:9d:d5:a6:
a0:82:46:22:22:e6:3b:cf:67:c3:1f:d6:dc:79:b3:86:66:ad:
15:71:50:a4:c7:e9:a3:9b:7e:4a:99:15:79:a2:4e:9b:a0:04:
ea:ec:ca:e7:95:23:da:76:a5:17:e8:96:a6:90:46:85:27:28:
70:f9:d7:6a:d6:06:85:f9:03:ac:7f:ed:45:dc:ea:aa:aa:7d:
c9:53:b0:a8:41:5c:cc:9f:1d:db:c1:5f:79:0f:7b:70:c6:10:
cd:95:eb:98:14:f3:5c:b1:85:f6:31:41:c9:06:4b:bf:75:1d:
c1:c9:7e:b7:f8:d7:82:c1:08:e9:ea:cf:63:83:fd:25:59:72:
dc:2d:44:01:02:40:7a:90:d5:5c:ed:7e:28:2e:e5:da:2d:59:
88:df:7f:cd:e7:57:d0:55:b5:7d:2b:87:4e:8b:bd:03:e8:e8:
c1:a2:3a:19:ea:4c:3a:a9:b9:ae:0d:64:21:70:f3:9e:74:71:
b7:6f:65:d6:09:5e:81:d3:b8:cf:09:f3:ff:fc:6d:48:39:a9:
f2:5d:3b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:37:49 2025 by rpki-client