Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/e10yuFdeoQfGACthRdp9XmFbrFA.roa
File: e10yuFdeoQfGACthRdp9XmFbrFA.roa (raw, json)
Hash identifier: 3f0W/1/yQl5vcplnz+9qonvDmxewLlDsrH/RSYMaC2c=
Subject key identifier: 7B:5D:32:B8:57:5E:A1:07:C6:00:2B:61:45:DA:7D:5E:61:5B:AC:50
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0197E6C2B24B13F4600768D3DCE412D2B35A
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/e10yuFdeoQfGACthRdp9XmFbrFA.roa
Signing time: Mon 07 Jul 2025 21:20:08 +0000
ROA not before: Mon 07 Jul 2025 21:20:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.104.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 13 Jul 2025 01:23:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e6:c2:b2:4b:13:f4:60:07:68:d3:dc:e4:12:d2:b3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jul 7 21:20:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b5d32b8575ea107c6002b6145da7d5e615bac50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:65:75:a0:65:ef:e7:d0:a4:80:c4:e8:e9:f1:
50:d8:9c:ca:88:e7:63:7c:f5:a4:96:31:3c:04:c9:
fc:2c:e0:65:73:3a:d1:47:97:7e:ad:17:d9:66:18:
4b:d5:37:ce:ff:63:13:c8:44:d0:d6:b0:88:87:a3:
a4:ec:e0:fd:67:75:6a:48:c7:1c:23:f2:81:98:cd:
cf:fa:91:88:cc:8b:84:ac:12:4d:5c:5b:90:26:ef:
5f:aa:c5:9a:e0:e6:11:94:a1:4c:db:de:54:4d:3a:
1e:e5:09:7a:51:b9:83:d8:ba:33:a9:7d:a9:65:66:
2e:18:5f:3f:9d:d1:56:36:e3:79:42:6e:eb:6d:19:
27:be:c8:e5:a6:22:2a:77:b9:6d:84:52:9f:78:2e:
5c:06:e9:71:7a:61:d1:a4:00:f0:7c:67:23:15:0f:
49:17:81:6f:5e:30:93:bd:3d:f5:8f:0f:a0:77:ae:
5d:41:bd:aa:26:7e:4c:38:1c:89:d5:64:d8:fa:de:
2d:cb:ef:a6:87:f0:0f:e1:82:20:11:9f:b1:ce:2b:
df:cd:0a:e5:47:36:a5:18:53:b4:ca:ff:b8:8b:a8:
47:58:bd:ae:5c:d3:24:dd:53:14:90:62:2f:c4:0d:
15:e6:f9:f6:27:3e:ab:0c:14:ab:a9:86:f3:3d:a0:
e9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5D:32:B8:57:5E:A1:07:C6:00:2B:61:45:DA:7D:5E:61:5B:AC:50
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/e10yuFdeoQfGACthRdp9XmFbrFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.104.0/24
46.37.113.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:e7:8a:f1:25:f4:2c:f9:22:75:28:a6:da:1c:d7:2a:97:03:
de:26:61:df:27:f2:a9:c5:5b:c9:5e:9e:fa:8b:00:39:7f:f0:
35:9d:bc:7c:13:c0:4a:8f:35:ab:7a:d6:98:6a:83:5c:7e:ae:
5c:83:f1:a5:ce:26:b2:ee:89:7b:5e:e1:65:99:52:27:c9:c7:
91:1a:4e:5a:de:3b:ff:4d:e8:5c:2c:a9:0f:4c:17:80:a4:65:
8d:0d:e6:cc:82:7d:eb:93:45:d0:42:a4:62:c0:b0:d8:fa:41:
f7:4f:86:f8:2a:11:4f:35:ac:8a:7c:c5:27:21:54:e3:f0:de:
54:f1:e3:c7:46:51:61:e8:be:4d:20:fb:89:c9:8a:be:f5:63:
3d:e9:da:12:4d:04:af:21:7e:84:7e:f8:89:f9:ec:0a:53:0d:
b3:76:cf:d3:53:76:5f:f0:bc:b5:a3:3e:c2:19:65:ec:71:27:
28:41:de:7f:3d:79:35:67:b8:db:d2:08:88:ae:fe:1f:54:27:
33:e9:c6:fd:a2:1b:69:fa:3c:a1:00:af:e9:f0:90:92:c4:cc:
75:ea:0e:ba:6c:78:4a:d4:95:f4:c9:c8:d8:c2:5f:b7:34:34:
33:14:53:89:b2:bb:09:37:78:07:cb:27:e5:4b:88:50:87:53:
a0:75:4b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:21:10 2025 by rpki-client