Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/JqFSn2NWGDUFBvpY6qgLDtL3ZMo.roa
File: JqFSn2NWGDUFBvpY6qgLDtL3ZMo.roa (raw, json)
Hash identifier: U52vsQN2iTHofSrnugdjKQwk2xJhzIePZn8ME8L910Q=
Subject key identifier: 26:A1:52:9F:63:56:18:35:05:06:FA:58:EA:A8:0B:0E:D2:F7:64:CA
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01942369EF88DA9B2A562AC9EA6E27E13B8C
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/JqFSn2NWGDUFBvpY6qgLDtL3ZMo.roa
Signing time: Wed 01 Jan 2025 19:48:52 +0000
ROA not before: Wed 01 Jan 2025 19:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49304
IP address blocks: 46.3.96.0/20 maxlen: 24
46.232.48.0/21 maxlen: 24
46.232.56.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 08:36:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:ef:88:da:9b:2a:56:2a:c9:ea:6e:27:e1:3b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 1 19:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26a1529f635618350506fa58eaa80b0ed2f764ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:eb:f1:04:77:f5:13:8b:3e:8b:4f:f7:ff:3e:
b1:34:21:37:f0:1d:f0:f7:50:1a:b6:c3:91:b6:72:
b1:f0:67:24:78:ce:74:38:84:41:64:59:32:a4:5d:
ce:b6:df:e6:7e:cd:06:0d:c0:23:62:c9:4c:45:67:
8a:37:5a:fa:4b:54:e8:9d:92:8d:39:cf:19:c1:a5:
3a:6d:e7:ce:c1:bd:2f:26:5a:c5:92:d5:55:60:76:
56:dd:04:fa:e1:63:0d:6e:f1:1c:c6:98:6e:3a:c9:
dc:5a:18:b3:ea:ef:a9:ca:1a:5b:d5:34:bc:32:9a:
80:47:c5:f7:90:bc:26:46:48:df:a2:f7:33:fe:26:
92:94:af:8b:40:a7:86:12:2d:d2:6a:88:2a:93:95:
59:04:be:76:55:80:62:ee:1b:81:68:be:69:0b:a2:
e3:db:0f:5b:98:26:b2:e6:57:e5:5f:e3:fc:e3:e9:
46:04:13:97:55:85:e6:ec:8b:e8:0f:c7:ca:fc:3a:
f7:4d:ad:9c:12:b7:a0:72:68:4c:bb:00:c8:27:69:
d4:9b:fa:0a:63:96:3d:1f:91:d9:98:b8:c9:32:a5:
77:e9:d4:0c:98:57:f1:34:18:7f:2a:a6:af:19:8c:
43:85:be:af:5d:54:b5:6a:dd:28:c6:c0:ef:14:a2:
80:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A1:52:9F:63:56:18:35:05:06:FA:58:EA:A8:0B:0E:D2:F7:64:CA
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/JqFSn2NWGDUFBvpY6qgLDtL3ZMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.96.0/20
46.232.48.0/20
Signature Algorithm: sha256WithRSAEncryption
0d:71:c9:c6:96:09:e5:41:fb:85:a1:70:21:f0:07:4a:a2:4b:
bd:73:3d:4c:82:a6:fd:d5:63:f6:ef:2d:b7:f1:4a:98:8a:23:
eb:ef:3b:d9:f6:2a:51:d7:02:81:4e:bc:c8:96:fd:08:36:36:
a4:f0:5e:a1:2b:11:f6:53:47:44:95:66:c3:ac:55:de:03:2d:
4a:9e:7a:fc:b5:ee:e4:8d:91:b2:de:54:d7:86:b0:ef:12:0f:
47:00:b6:00:2b:af:c4:e0:d9:1d:e4:44:5d:a7:05:73:53:d1:
e6:4b:02:6e:1a:07:4f:d9:33:22:b9:d5:f4:61:6d:93:2d:9f:
f4:b8:be:d0:53:41:d6:61:a9:09:eb:e7:db:d2:b1:ed:a3:8e:
31:08:0f:a9:6a:a3:99:aa:13:e6:1b:21:b6:73:6a:70:b7:f2:
61:cb:ac:d0:b5:ef:f7:30:83:5f:b3:51:02:18:fd:98:31:ab:
0a:ef:50:3e:0c:c8:3f:00:3f:ed:70:f2:41:a0:98:e6:40:d2:
3b:f7:2d:e3:09:8b:2a:ea:3d:78:de:0f:55:84:77:b3:b7:b2:
f4:bf:99:9d:39:43:94:6d:4e:14:53:f1:ed:0d:2c:d2:b5:9a:
95:88:19:a3:84:28:73:0a:ad:21:af:11:73:85:6e:f7:71:07:
4e:2f:e8:a4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQjae+I2psqVirJ6m4n4TuMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjUwMTAxMTk0ODUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmExNTI5ZjYzNTYxODM1MDUwNmZhNThlYWE4MGIwZWQyZjc2NGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyevxBHf1E4s+i0/3/z6xNCE38B3w
91AatsORtnKx8GckeM50OIRBZFkypF3Ott/mfs0GDcAjYslMRWeKN1r6S1TonZKN
Oc8ZwaU6befOwb0vJlrFktVVYHZW3QT64WMNbvEcxphuOsncWhiz6u+pyhpb1TS8
MpqAR8X3kLwmRkjfovcz/iaSlK+LQKeGEi3Saogqk5VZBL52VYBi7huBaL5pC6Lj
2w9bmCay5lflX+P84+lGBBOXVYXm7IvoD8fK/Dr3Ta2cEregcmhMuwDIJ2nUm/oK
Y5Y9H5HZmLjJMqV36dQMmFfxNBh/KqavGYxDhb6vXVS1at0oxsDvFKKAPwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCahUp9jVhg1BQb6WOqoCw7S92TKMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvSnFGU24yTldHRFVGQnZwWTZxZ0xEdEwzWk1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQELgNgAwQE
LugwMA0GCSqGSIb3DQEBCwUAA4IBAQANccnGlgnlQfuFoXAh8AdKoku9cz1Mgqb9
1WP27y238UqYiiPr7zvZ9ipR1wKBTrzIlv0INjak8F6hKxH2U0dElWbDrFXeAy1K
nnr8te7kjZGy3lTXhrDvEg9HALYAK6/E4Nkd5ERdpwVzU9HmSwJuGgdP2TMiudX0
YW2TLZ/0uL7QU0HWYakJ6+fb0rHto44xCA+paqOZqhPmGyG2c2pwt/Jhy6zQte/3
MINfs1ECGP2YMasK71A+DMg/AD/tcPJBoJjmQNI79y3jCYsq6j143g9VhHezt7L0
v5mdOUOUbU4UU/HtDSzStZqViBmjhChzCq0hrxFzhW73cQdOL+ik
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:16 2025 by rpki-client