Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/nU9ZXt77uN4MZzz87k59uHAHSdw.roa
File: nU9ZXt77uN4MZzz87k59uHAHSdw.roa (raw, json)
Hash identifier: bJmGqfmlH9sVIurlM4bjDXs4lcGlFpxyTKUxV5a+nME=
Subject key identifier: 9D:4F:59:5E:DE:FB:B8:DE:0C:67:3C:FC:EE:4E:7D:B8:70:07:49:DC
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 01982DC4C1984FD6103D51A5153C76E1FA8B
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/nU9ZXt77uN4MZzz87k59uHAHSdw.roa
Signing time: Mon 21 Jul 2025 16:15:25 +0000
ROA not before: Mon 21 Jul 2025 16:15:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207569
IP address blocks: 46.243.1.0/24 maxlen: 24
46.243.4.0/24 maxlen: 24
46.243.6.0/24 maxlen: 24
95.81.112.0/24 maxlen: 24
95.81.113.0/24 maxlen: 24
95.81.120.0/24 maxlen: 24
95.81.121.0/24 maxlen: 24
95.81.122.0/24 maxlen: 24
95.81.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Jul 2025 09:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2d:c4:c1:98:4f:d6:10:3d:51:a5:15:3c:76:e1:fa:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jul 21 16:15:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d4f595edefbb8de0c673cfcee4e7db8700749dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:73:47:87:59:4b:d9:f9:ce:86:35:f1:61:a2:
1c:6e:4f:f8:14:be:79:ad:79:49:39:36:84:7f:5d:
50:4a:bb:b0:17:9c:39:5b:54:13:5a:dc:99:1a:01:
2f:8e:11:3c:6c:47:70:bf:ff:19:17:bb:d2:38:1a:
76:c3:fa:00:a4:6c:2d:f1:5c:d0:e4:99:3d:7b:8f:
6e:d2:e6:68:3a:c4:dd:b8:7d:fd:5b:6c:7a:27:1d:
54:15:4d:60:85:0e:bc:ee:ed:69:9a:49:36:a7:48:
f1:09:ba:26:0b:1b:0c:93:a6:ad:61:f6:24:25:f1:
66:e1:4c:7b:9e:89:5c:35:6a:26:b9:0a:e9:25:75:
d9:a8:ca:f0:8e:a6:69:97:d5:12:14:1f:17:52:0f:
4d:82:97:cb:db:7e:52:b7:43:18:53:c2:29:56:c3:
50:e4:23:ea:30:83:9a:c2:69:3e:a0:d9:50:57:65:
9f:d5:6f:f1:96:fd:ad:f3:59:c7:c6:9d:1a:c7:59:
35:4d:bd:c5:f1:a1:10:37:aa:56:37:a7:ab:23:3c:
41:2d:8c:09:c2:a2:bf:75:b7:b3:6a:15:0d:51:dd:
7d:d3:51:fd:5a:63:cb:23:97:bb:a5:b1:c1:49:09:
a4:b0:0c:8f:a0:c1:6c:d3:25:cf:3a:2e:27:b5:d3:
b0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4F:59:5E:DE:FB:B8:DE:0C:67:3C:FC:EE:4E:7D:B8:70:07:49:DC
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/nU9ZXt77uN4MZzz87k59uHAHSdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.1.0/24
46.243.4.0/24
46.243.6.0/24
95.81.112.0/23
95.81.120.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:1f:fc:b1:40:a7:e6:de:c4:a4:43:db:96:aa:a8:44:61:d4:
34:56:0c:81:12:e2:78:d2:64:9d:b8:8d:0a:9a:90:87:14:3d:
74:b2:f2:1e:a1:31:b0:2c:f7:be:fb:be:98:8d:81:e8:6f:0e:
bc:b6:60:36:6c:70:24:60:5d:81:81:59:22:f7:6b:4b:a3:1b:
fd:85:62:81:e5:4d:aa:16:73:58:92:8b:57:e5:6a:d8:03:1c:
e1:e4:5c:5e:a6:d9:b9:e2:05:4d:66:55:16:db:d8:a0:58:be:
6d:16:2c:7e:b7:c1:1a:56:4f:a3:f0:53:a0:c8:36:d3:d9:1d:
39:c3:fc:dd:7a:a5:86:55:f6:34:3f:12:0d:15:6c:98:6d:7a:
56:d6:80:82:c6:06:cd:cd:50:99:c3:78:8a:48:d4:59:7e:0f:
31:7f:a1:6d:95:4e:ec:c1:f6:f5:d8:d0:df:6c:02:8f:2c:4b:
f9:86:5a:57:0b:95:e4:08:15:56:5d:77:07:94:84:4b:49:e2:
99:17:a9:23:7a:b8:4a:cb:7d:1f:a0:84:a5:9f:ce:4a:8a:3c:
f4:4d:22:de:a1:32:37:a2:5e:1b:b7:58:96:f2:32:91:8a:f0:
c2:df:10:6a:69:74:73:32:85:f1:47:39:20:27:ea:69:cd:88:
6a:88:7e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:21:10 2025 by rpki-client