Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/1j5RLttyJZMOxQNARmUzfjJljxQ.roa
File: 1j5RLttyJZMOxQNARmUzfjJljxQ.roa (raw, json)
Hash identifier: oyjJuVEIy8nfwBQBjykYNCWBWSTBvKaSSCtQgJpfKHA=
Subject key identifier: D6:3E:51:2E:DB:72:25:93:0E:C5:03:40:46:65:33:7E:32:65:8F:14
Certificate issuer: /CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Certificate serial: 0195B5C60AB5B68BA6539387082AE7E06F1C
Authority key identifier: 55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/1j5RLttyJZMOxQNARmUzfjJljxQ.roa
Signing time: Thu 20 Mar 2025 22:56:49 +0000
ROA not before: Thu 20 Mar 2025 22:56:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49318
IP address blocks: 46.28.248.0/21 maxlen: 21
46.28.248.0/23 maxlen: 23
46.28.248.0/24 maxlen: 24
46.28.249.0/24 maxlen: 24
46.28.250.0/23 maxlen: 23
46.28.250.0/24 maxlen: 24
46.28.251.0/24 maxlen: 24
46.28.252.0/23 maxlen: 23
46.28.252.0/24 maxlen: 24
46.28.253.0/24 maxlen: 24
46.28.254.0/23 maxlen: 23
46.28.254.0/24 maxlen: 24
46.28.255.0/24 maxlen: 24
188.93.176.0/21 maxlen: 21
188.93.176.0/24 maxlen: 24
188.93.177.0/24 maxlen: 24
188.93.178.0/24 maxlen: 24
188.93.179.0/24 maxlen: 24
188.93.180.0/24 maxlen: 24
188.93.181.0/24 maxlen: 24
188.93.182.0/24 maxlen: 24
188.93.183.0/24 maxlen: 24
194.110.124.0/23 maxlen: 23
194.110.124.0/24 maxlen: 24
194.110.125.0/24 maxlen: 24
194.110.130.0/23 maxlen: 23
194.110.130.0/24 maxlen: 24
194.110.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Mar 2025 12:49:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b5:c6:0a:b5:b6:8b:a6:53:93:87:08:2a:e7:e0:6f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Validity
Not Before: Mar 20 22:56:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d63e512edb7225930ec503404665337e32658f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ea:0a:d9:85:8e:61:38:49:66:95:9f:97:72:
69:dc:3c:37:23:ba:fa:79:cc:88:83:18:3e:9b:0b:
35:eb:af:e8:3f:1f:7c:c4:59:0b:6f:84:1c:08:ef:
86:d5:04:af:7b:28:f7:32:83:0c:20:02:4b:9f:93:
0e:26:bf:d5:35:c4:13:ef:f0:9c:1b:6b:5f:b0:f0:
07:fd:8b:9f:27:79:73:54:73:15:8f:f5:ce:9d:94:
9b:be:9b:bb:de:0c:35:6b:11:a5:8a:90:35:a2:6c:
39:a6:3d:35:11:aa:79:45:7e:d7:c1:a0:5f:6b:18:
26:54:26:40:b1:4c:3b:65:b9:6e:85:82:e3:08:cc:
47:64:18:17:3c:3e:c0:69:5f:ab:b0:80:19:91:ac:
df:ad:ba:1c:c8:74:46:46:db:1f:89:3b:50:2a:15:
ea:cd:3a:40:cd:d5:25:a3:99:12:c4:e8:a5:eb:2a:
69:0e:25:30:25:fe:6d:59:c9:aa:4c:50:90:d0:1d:
8c:17:38:cf:e9:31:fa:97:f6:a4:cd:5d:bf:b4:62:
ed:63:8b:cb:16:d3:e6:13:35:76:b5:fc:1f:65:c8:
da:f2:07:b7:c6:cf:22:23:10:cc:36:98:ef:11:25:
6d:82:bf:f7:ba:89:75:56:3c:d7:1b:2c:30:80:70:
54:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3E:51:2E:DB:72:25:93:0E:C5:03:40:46:65:33:7E:32:65:8F:14
X509v3 Authority Key Identifier:
keyid:55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/1j5RLttyJZMOxQNARmUzfjJljxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.248.0/21
188.93.176.0/21
194.110.124.0/23
194.110.130.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:bb:4b:82:7e:57:55:9f:fe:ef:ce:76:aa:c6:3d:88:e0:37:
b7:4e:44:d2:c3:6d:c6:ba:a1:6b:38:c7:9b:44:36:c8:1d:0c:
ed:58:03:77:c6:74:18:e1:fa:bb:dd:0b:a4:c4:7f:e3:69:3b:
79:cb:80:25:df:80:40:c2:c5:83:84:8d:d8:6d:28:63:0a:3f:
e4:fa:98:ec:9a:0c:03:4f:4b:c8:81:4f:93:8c:31:26:c0:70:
81:a9:40:17:20:0f:1f:7c:1c:30:bb:e2:a7:08:4b:3a:a5:8c:
e2:b1:2c:f4:08:8b:7d:f4:f5:9a:61:de:4b:6b:85:d6:6f:e4:
fc:7f:6a:a3:e1:1c:c2:02:d2:4b:04:5a:fd:0c:12:bc:84:23:
05:8f:57:70:bd:a4:6b:ad:01:d7:91:c3:77:27:3f:21:fe:ef:
a4:ea:19:8c:df:07:c9:7c:ba:2f:90:ff:65:f9:7c:11:a7:ed:
34:37:98:e5:00:46:e1:7f:a3:cb:42:d2:52:3a:c5:c6:88:b4:
33:d6:08:56:b9:6f:68:db:a4:3e:56:23:5c:ee:bd:ba:8d:e0:
b5:e9:f3:84:8f:41:a5:20:4b:98:c3:e8:0f:f9:47:1a:b7:c4:
c6:38:f8:22:8e:c8:5a:8e:03:c1:8d:9a:eb:d8:d2:d1:14:01:
16:59:b3:14
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZW1xgq1toumU5OHCCrn4G8cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1M2NhN2IyZTZjMWUxN2Y1ZjNlZGJlMzc1ZTE5ZWNlMzk1
MzM5MTAwHhcNMjUwMzIwMjI1NjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjNlNTEyZWRiNzIyNTkzMGVjNTAzNDA0NjY1MzM3ZTMyNjU4ZjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeoK2YWOYThJZpWfl3Jp3Dw3I7r6
ecyIgxg+mws166/oPx98xFkLb4QcCO+G1QSveyj3MoMMIAJLn5MOJr/VNcQT7/Cc
G2tfsPAH/YufJ3lzVHMVj/XOnZSbvpu73gw1axGlipA1omw5pj01Eap5RX7XwaBf
axgmVCZAsUw7ZbluhYLjCMxHZBgXPD7AaV+rsIAZkazfrbocyHRGRtsfiTtQKhXq
zTpAzdUlo5kSxOil6yppDiUwJf5tWcmqTFCQ0B2MFzjP6TH6l/akzV2/tGLtY4vL
FtPmEzV2tfwfZcja8ge3xs8iIxDMNpjvESVtgr/3uol1VjzXGywwgHBUPQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFNY+US7bciWTDsUDQEZlM34yZY8UMB8GA1UdIwQY
MBaAFFU8p7LmweF/Xz7b43Xhns45UzkQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlR5bnN1YkI0WDlmUHR2amRlR2V6amxUT1JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kNTcyYzMtMzUwZi00NzliLWE3YjMt
MTUzZTkxODJhZjQxLzEvMWo1Ukx0dHlKWk1PeFFOQVJtVXpmakpsanhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kNTcyYzMtMzUwZi00NzliLWE3YjMtMTUzZTkxODJhZjQx
LzEvVlR5bnN1YkI0WDlmUHR2amRlR2V6amxUT1JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDLhz4AwQD
vF2wAwQBwm58AwQBwm6CMA0GCSqGSIb3DQEBCwUAA4IBAQA7u0uCfldVn/7vznaq
xj2I4De3TkTSw23GuqFrOMebRDbIHQztWAN3xnQY4fq73QukxH/jaTt5y4Al34BA
wsWDhI3YbShjCj/k+pjsmgwDT0vIgU+TjDEmwHCBqUAXIA8ffBwwu+KnCEs6pYzi
sSz0CIt99PWaYd5La4XWb+T8f2qj4RzCAtJLBFr9DBK8hCMFj1dwvaRrrQHXkcN3
Jz8h/u+k6hmM3wfJfLovkP9l+XwRp+00N5jlAEbhf6PLQtJSOsXGiLQz1ghWuW9o
26Q+ViNc7r26jeC16fOEj0GlIEuYw+gP+Ucat8TGOPgijshajgPBjZrr2NLRFAEW
WbMU
-----END CERTIFICATE-----
Generated at Tue Apr 15 05:22:31 2025 by rpki-client