Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/LbBe2lQRjVAlHZ_d2RXHtjf2218.roa
File: LbBe2lQRjVAlHZ_d2RXHtjf2218.roa (raw, json)
Hash identifier: HBxQFHDtfelIHLC7fPBavUdJQpzMdjHSGfSqniTGoCI=
Subject key identifier: 2D:B0:5E:DA:54:11:8D:50:25:1D:9F:DD:D9:15:C7:B6:37:F6:DB:5F
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 01970DEC3B94582F57F2B3019EEBFF8D89C4
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/LbBe2lQRjVAlHZ_d2RXHtjf2218.roa
Signing time: Mon 26 May 2025 18:47:54 +0000
ROA not before: Mon 26 May 2025 18:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207569
IP address blocks: 46.243.1.0/24 maxlen: 24
46.243.4.0/24 maxlen: 24
46.243.6.0/24 maxlen: 24
185.37.193.0/24 maxlen: 24
185.37.194.0/24 maxlen: 24
185.37.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 May 2025 08:16:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0d:ec:3b:94:58:2f:57:f2:b3:01:9e:eb:ff:8d:89:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: May 26 18:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2db05eda54118d50251d9fddd915c7b637f6db5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1c:10:25:e3:d7:97:7e:4d:be:98:9e:f2:73:
e2:08:df:da:7a:6c:3f:5e:56:5c:5c:54:9e:51:76:
ac:c8:af:d9:d7:7b:de:08:b6:f8:6e:5a:ee:47:51:
87:35:0c:77:14:6a:09:aa:c5:23:5b:6e:f0:83:90:
f2:43:23:c6:fd:69:1d:f2:02:50:89:66:8f:69:c5:
90:94:96:39:2a:c0:cb:9c:30:d4:81:cf:6c:d3:82:
0b:a6:bb:9c:3b:31:11:10:bf:e5:54:f8:a2:54:12:
1d:6d:c5:54:93:9d:11:20:55:12:9f:b6:b7:c3:f4:
2c:d2:42:6f:25:c2:a2:99:3e:7f:76:f9:ef:be:7d:
ac:82:61:d0:14:93:f6:62:ed:83:74:89:ae:eb:f9:
8b:d9:17:7d:62:43:a4:30:98:e1:84:ef:0b:0e:5a:
2d:c7:a1:d6:0e:7e:e3:a7:18:09:3f:0f:33:ae:26:
fd:be:06:6c:25:8a:91:e8:a8:34:64:90:99:f4:36:
d4:a9:5c:e8:0f:39:d2:0e:2a:ee:98:75:6b:d5:71:
f9:f4:11:39:9f:4c:c7:30:8d:0e:20:87:78:c2:fb:
11:3c:80:e9:94:6d:e9:4a:53:2d:2b:3b:bf:ec:8a:
3b:8a:9e:ca:f6:cd:97:85:e0:1c:0e:81:86:8b:46:
18:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B0:5E:DA:54:11:8D:50:25:1D:9F:DD:D9:15:C7:B6:37:F6:DB:5F
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/LbBe2lQRjVAlHZ_d2RXHtjf2218.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.1.0/24
46.243.4.0/24
46.243.6.0/24
185.37.193.0-185.37.195.255
Signature Algorithm: sha256WithRSAEncryption
be:81:ae:47:4a:42:fd:61:e3:55:20:53:99:72:56:e2:79:bd:
f2:93:69:3c:e8:18:c8:aa:a2:e4:ce:3d:d4:9d:c7:c1:43:d7:
fe:e5:c4:e5:79:59:17:d7:97:2c:cd:4e:31:63:f3:e3:e7:9e:
1a:48:77:12:81:a9:fb:77:42:22:84:6f:f6:f4:dd:7f:22:8b:
26:64:de:6f:77:a4:06:8e:b3:d2:0e:29:6f:a5:07:b5:9a:9b:
db:b3:a2:b8:2f:7b:1f:5c:46:17:8a:05:36:c9:14:4c:84:40:
a3:7f:7e:6c:e3:49:cb:04:ee:87:55:64:d6:2e:b7:7d:51:64:
83:05:e7:30:14:b5:9d:e9:d9:9e:7f:04:bd:8e:48:1a:7d:06:
9a:1d:4f:54:4c:8b:cd:b4:e5:53:b2:24:14:2a:a7:b4:4c:36:
08:34:59:bd:9d:2d:92:f1:f2:59:2e:93:0f:c3:3e:19:dc:6f:
a2:d7:ef:27:04:74:57:a0:4d:61:14:68:4a:78:37:2e:af:53:
39:ce:7f:68:99:36:53:81:b4:b0:04:f6:49:26:5a:c3:c7:eb:
71:50:19:9b:90:98:62:e6:53:db:5f:a3:b9:a9:ed:06:48:46:
48:01:f9:2d:9b:3f:33:e5:ca:cb:69:e0:4e:5d:1c:8a:a3:e8:
29:47:ed:99
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZcN7DuUWC9X8rMBnuv/jYnEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx
ZmE4MzkwHhcNMjUwNTI2MTg0NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZGIwNWVkYTU0MTE4ZDUwMjUxZDlmZGRkOTE1YzdiNjM3ZjZkYjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBwQJePXl35Nvpie8nPiCN/aemw/
XlZcXFSeUXasyK/Z13veCLb4blruR1GHNQx3FGoJqsUjW27wg5DyQyPG/Wkd8gJQ
iWaPacWQlJY5KsDLnDDUgc9s04ILprucOzEREL/lVPiiVBIdbcVUk50RIFUSn7a3
w/Qs0kJvJcKimT5/dvnvvn2sgmHQFJP2Yu2DdImu6/mL2Rd9YkOkMJjhhO8LDlot
x6HWDn7jpxgJPw8zrib9vgZsJYqR6Kg0ZJCZ9DbUqVzoDznSDirumHVr1XH59BE5
n0zHMI0OIId4wvsRPIDplG3pSlMtKzu/7Io7ip7K9s2XheAcDoGGi0YYRwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFC2wXtpUEY1QJR2f3dkVx7Y39ttfMB8GA1UdIwQY
MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt
MzA0OTVmNDAzNzg0LzEvTGJCZTJsUVJqVkFsSFpfZDJSWEh0amYyMjE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0
LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQALvMBAwQA
LvMEAwQALvMGMAwDBAC5JcEDBAK5JcAwDQYJKoZIhvcNAQELBQADggEBAL6BrkdK
Qv1h41UgU5lyVuJ5vfKTaTzoGMiqouTOPdSdx8FD1/7lxOV5WRfXlyzNTjFj8+Pn
nhpIdxKBqft3QiKEb/b03X8iiyZk3m93pAaOs9IOKW+lB7Wam9uzorgvex9cRheK
BTbJFEyEQKN/fmzjScsE7odVZNYut31RZIMF5zAUtZ3p2Z5/BL2OSBp9BpodT1RM
i8205VOyJBQqp7RMNgg0Wb2dLZLx8lkukw/DPhncb6LX7ycEdFegTWEUaEp4Ny6v
UznOf2iZNlOBtLAE9kkmWsPH63FQGZuQmGLmU9tfo7mp7QZIRkgB+S2bPzPlystp
4E5dHIqj6ClH7Zk=
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:21:07 2025 by rpki-client