Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/bgQPlMraEJMlZ9ay_Od1ndrVO-g.roa
File: bgQPlMraEJMlZ9ay_Od1ndrVO-g.roa (raw, json)
Hash identifier: yiUVjnwbmNzcf8fqqL5sMxpWWLXlT1qE5GBUUMZqITQ=
Subject key identifier: 6E:04:0F:94:CA:DA:10:93:25:67:D6:B2:FC:E7:75:9D:DA:D5:3B:E8
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01942747C95C99471AFFC6B2501800029DF8
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/bgQPlMraEJMlZ9ay_Od1ndrVO-g.roa
Signing time: Thu 02 Jan 2025 13:50:03 +0000
ROA not before: Thu 02 Jan 2025 13:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56971
IP address blocks: 46.8.64.0/24 maxlen: 24
46.8.224.0/24 maxlen: 24
46.8.225.0/24 maxlen: 24
46.8.226.0/24 maxlen: 24
46.8.227.0/24 maxlen: 24
46.8.228.0/24 maxlen: 24
46.8.229.0/24 maxlen: 24
46.8.230.0/24 maxlen: 24
46.8.231.0/24 maxlen: 24
46.8.236.0/24 maxlen: 24
46.8.237.0/24 maxlen: 24
46.8.238.0/24 maxlen: 32
95.182.101.0/24 maxlen: 24
109.248.160.0/22 maxlen: 24
188.130.154.0/24 maxlen: 24
188.130.206.0/24 maxlen: 32
188.130.207.0/24 maxlen: 32
Validation: Failed, certificate revoked on Thu 23 Jan 2025 14:12:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:c9:5c:99:47:1a:ff:c6:b2:50:18:00:02:9d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e040f94cada10932567d6b2fce7759ddad53be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:55:82:f9:b2:ee:15:ae:73:e6:64:c4:51:9a:
17:d7:6a:38:ed:c2:f6:81:5c:f0:15:c3:39:c8:08:
50:d3:58:0c:4a:22:49:d1:98:6f:2b:3a:d9:bb:bd:
8f:c2:a1:b3:24:7f:a4:4e:d5:d1:43:03:fa:8e:19:
99:f8:bc:c2:14:30:33:bd:5a:d2:6d:6c:39:f7:d4:
69:48:e3:d2:82:80:6c:17:fa:d5:b3:93:90:17:74:
f6:db:ee:31:6f:9c:cc:13:3c:de:73:ee:34:ed:38:
01:0a:59:1b:9b:d6:58:f9:4e:8d:64:24:81:dd:28:
99:b5:39:df:33:9e:f8:50:94:7e:74:4f:62:6f:8c:
c0:0b:6e:70:af:af:48:c8:83:9d:d7:27:25:b2:6b:
44:9d:2a:e9:5a:1d:ec:26:9b:95:e7:8d:9c:78:22:
33:58:9e:63:20:84:89:31:d6:8e:16:c4:92:a4:41:
31:bb:0b:9e:38:dc:66:a2:4c:67:e2:22:29:58:08:
d5:99:43:7a:23:fe:32:dc:ff:d1:39:5a:93:1c:dc:
0e:27:96:e6:6a:60:94:7c:4a:13:75:03:aa:97:20:
af:b5:0b:05:7b:e0:9e:ea:29:ba:94:df:81:0a:a0:
73:16:50:f3:3a:1c:3b:37:20:22:a8:bc:e0:ec:7a:
11:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:04:0F:94:CA:DA:10:93:25:67:D6:B2:FC:E7:75:9D:DA:D5:3B:E8
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/bgQPlMraEJMlZ9ay_Od1ndrVO-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.64.0/24
46.8.224.0/21
46.8.236.0-46.8.238.255
95.182.101.0/24
109.248.160.0/22
188.130.154.0/24
188.130.206.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:fb:5b:e8:5b:99:5b:89:1e:7d:96:77:c4:c4:41:8f:6d:b3:
6e:85:c2:24:b3:03:ce:3e:c8:55:f6:e3:96:7a:6a:c0:cb:aa:
3c:75:e0:b9:42:6f:25:1a:36:69:b9:c1:0b:7b:28:3a:15:7f:
5f:f0:ea:54:bd:24:f6:6b:3e:17:8f:40:3f:0a:a6:64:ed:a1:
ea:e6:7b:f0:a6:0e:88:51:51:24:6a:ab:b9:8d:3f:33:a9:47:
0c:4b:25:d4:14:55:59:cd:e4:f7:b5:90:95:7a:18:95:72:f4:
01:8a:a1:56:02:1e:5c:e5:d6:06:ed:71:26:ee:e6:90:ad:6d:
c5:25:ef:ea:13:3a:e6:1a:dc:96:fb:e0:9f:fe:01:a6:44:21:
69:1b:0c:26:5a:2a:4f:b3:3c:7e:74:65:b3:b2:2e:4f:71:ba:
c4:fe:7a:6f:31:f7:b7:3d:4a:f9:90:6d:cd:74:ec:9a:7c:6c:
e7:f1:2f:99:0e:2f:68:2b:1a:30:bf:29:48:5f:38:76:bc:2e:
6b:0f:ae:bc:59:1f:69:ea:6d:21:0a:55:54:b1:24:9c:1e:2b:
be:b8:7f:9a:a2:d0:cc:4f:b5:dc:5a:dd:e0:68:9b:2b:87:5a:
84:ed:d9:d7:26:20:97:9e:c7:37:4f:e8:71:ab:46:37:c3:4a:
2e:e2:1b:67
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAZQnR8lcmUca/8ayUBgAAp34MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0
MjAzYjQwHhcNMjUwMTAyMTM1MDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTA0MGY5NGNhZGExMDkzMjU2N2Q2YjJmY2U3NzU5ZGRhZDUzYmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lWC+bLuFa5z5mTEUZoX12o47cL2
gVzwFcM5yAhQ01gMSiJJ0ZhvKzrZu72PwqGzJH+kTtXRQwP6jhmZ+LzCFDAzvVrS
bWw599RpSOPSgoBsF/rVs5OQF3T22+4xb5zMEzzec+407TgBClkbm9ZY+U6NZCSB
3SiZtTnfM574UJR+dE9ib4zAC25wr69IyIOd1yclsmtEnSrpWh3sJpuV542ceCIz
WJ5jIISJMdaOFsSSpEExuwueONxmokxn4iIpWAjVmUN6I/4y3P/ROVqTHNwOJ5bm
amCUfEoTdQOqlyCvtQsFe+Ce6im6lN+BCqBzFlDzOhw7NyAiqLzg7HoRVwIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFG4ED5TK2hCTJWfWsvzndZ3a1TvoMB8GA1UdIwQY
MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt
MTY2OTljOTZkZDVlLzEvYmdRUGxNcmFFSk1sWjlheV9PZDFuZHJWTy1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl
LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQALghAAwQD
LgjgMAwDBAIuCOwDBAAuCO4DBABftmUDBAJt+KADBAC8gpoDBAG8gs4wDQYJKoZI
hvcNAQELBQADggEBAC/7W+hbmVuJHn2Wd8TEQY9ts26FwiSzA84+yFX245Z6asDL
qjx14LlCbyUaNmm5wQt7KDoVf1/w6lS9JPZrPhePQD8KpmTtoerme/CmDohRUSRq
q7mNPzOpRwxLJdQUVVnN5Pe1kJV6GJVy9AGKoVYCHlzl1gbtcSbu5pCtbcUl7+oT
OuYa3Jb74J/+AaZEIWkbDCZaKk+zPH50ZbOyLk9xusT+em8x97c9SvmQbc107Jp8
bOfxL5kOL2grGjC/KUhfOHa8LmsPrrxZH2nqbSEKVVSxJJweK764f5qi0MxPtdxa
3eBomyuHWoTt2dcmIJeexzdP6HGrRjfDSi7iG2c=
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:32:31 2025 by rpki-client