Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/2EAMxnStu2zsEyigCgNI7R8QN6A.roa
File: 2EAMxnStu2zsEyigCgNI7R8QN6A.roa (raw, json)
Hash identifier: SjjaguAH2AuIuoShC10aFg6Us+0ix5M6RJ2Z5DAsHFo=
Subject key identifier: D8:40:0C:C6:74:AD:BB:6C:EC:13:28:A0:0A:03:48:ED:1F:10:37:A0
Certificate issuer: /CN=c90b394ac63337607fa1bb0eaba11453a831f398
Certificate serial: 01970E6F271F5DF7AE1D449DEDDB93356E05
Authority key identifier: C9:0B:39:4A:C6:33:37:60:7F:A1:BB:0E:AB:A1:14:53:A8:31:F3:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/2EAMxnStu2zsEyigCgNI7R8QN6A.roa
Signing time: Mon 26 May 2025 21:10:54 +0000
ROA not before: Mon 26 May 2025 21:10:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50223
IP address blocks: 46.251.192.0/19 maxlen: 19
46.251.192.0/22 maxlen: 22
46.251.192.0/24 maxlen: 24
46.251.193.0/24 maxlen: 24
46.251.194.0/24 maxlen: 24
46.251.195.0/24 maxlen: 24
46.251.196.0/22 maxlen: 22
46.251.196.0/24 maxlen: 24
46.251.197.0/24 maxlen: 24
46.251.198.0/24 maxlen: 24
46.251.199.0/24 maxlen: 24
46.251.200.0/22 maxlen: 22
46.251.200.0/24 maxlen: 24
46.251.201.0/24 maxlen: 24
46.251.202.0/24 maxlen: 24
46.251.204.0/22 maxlen: 22
46.251.204.0/24 maxlen: 24
46.251.205.0/24 maxlen: 24
46.251.206.0/24 maxlen: 24
46.251.207.0/24 maxlen: 24
46.251.208.0/22 maxlen: 22
46.251.208.0/24 maxlen: 24
46.251.209.0/24 maxlen: 24
46.251.210.0/24 maxlen: 24
46.251.211.0/24 maxlen: 24
46.251.212.0/22 maxlen: 22
46.251.212.0/24 maxlen: 24
46.251.213.0/24 maxlen: 24
46.251.214.0/24 maxlen: 24
46.251.215.0/24 maxlen: 24
46.251.216.0/22 maxlen: 22
46.251.216.0/24 maxlen: 24
46.251.217.0/24 maxlen: 24
46.251.218.0/24 maxlen: 24
46.251.220.0/22 maxlen: 22
46.251.221.0/24 maxlen: 24
109.71.224.0/21 maxlen: 21
109.71.224.0/24 maxlen: 24
109.71.226.0/24 maxlen: 24
109.71.228.0/24 maxlen: 24
109.71.229.0/24 maxlen: 24
109.71.230.0/24 maxlen: 24
109.71.231.0/24 maxlen: 24
185.48.136.0/22 maxlen: 22
185.48.136.0/24 maxlen: 24
185.48.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Jun 2025 08:40:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0e:6f:27:1f:5d:f7:ae:1d:44:9d:ed:db:93:35:6e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c90b394ac63337607fa1bb0eaba11453a831f398
Validity
Not Before: May 26 21:10:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8400cc674adbb6cec1328a00a0348ed1f1037a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:41:1b:c7:05:85:31:2a:29:19:7c:1e:f5:f8:
38:77:83:5e:49:91:4d:9a:fa:4e:a5:b1:24:16:05:
ad:eb:f9:ea:56:6a:f0:21:e9:aa:6f:8b:9b:3f:44:
b3:a9:9b:9c:e8:fe:64:f5:e6:b0:a6:1e:f4:5d:44:
bd:6d:c5:0a:59:87:10:e9:32:e8:c6:6a:26:26:5c:
0f:11:ca:30:dc:1e:b7:a6:df:fc:fa:1d:c0:f6:52:
a7:1d:a2:52:d5:34:a1:3f:cd:3f:d7:d5:06:20:cc:
5b:00:4d:f1:a1:16:3c:f4:22:9f:0e:25:3e:5b:3b:
75:8e:97:9e:c1:b7:76:f0:74:9e:d7:11:f8:01:37:
75:bd:ce:5e:18:44:5f:b7:06:a3:cd:2e:58:a4:dc:
fd:99:a8:24:b9:c0:b6:81:d4:91:cb:ca:9a:12:9b:
2a:f0:d0:db:dc:6e:6e:47:65:e8:f9:6e:9c:df:85:
91:bf:95:a3:42:62:c4:69:9f:e8:7f:4a:ba:39:5d:
5b:79:fa:bc:a3:ba:06:b7:8c:2e:8a:c3:b6:1f:f4:
bc:2a:8d:f1:a4:67:49:50:11:17:f6:1f:f6:fa:75:
08:27:93:f9:1d:cc:b4:8c:6e:70:ec:fc:4c:18:50:
a8:4c:ae:58:65:8a:fb:90:e5:cf:dc:fa:7e:8b:c9:
37:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:40:0C:C6:74:AD:BB:6C:EC:13:28:A0:0A:03:48:ED:1F:10:37:A0
X509v3 Authority Key Identifier:
keyid:C9:0B:39:4A:C6:33:37:60:7F:A1:BB:0E:AB:A1:14:53:A8:31:F3:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/2EAMxnStu2zsEyigCgNI7R8QN6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.251.192.0/19
109.71.224.0/21
185.48.136.0/22
Signature Algorithm: sha256WithRSAEncryption
48:6c:3c:71:c4:4b:41:af:14:7a:b9:8d:da:cd:84:39:f1:be:
fc:6b:f2:ba:af:e7:e7:c3:0b:9a:94:7e:13:d4:ef:f3:fd:b1:
ec:c1:2f:09:ad:cf:8c:39:f7:b0:b7:af:e5:fc:56:7b:72:68:
df:dd:60:5d:97:21:3f:45:18:52:3b:6c:b8:9a:87:4b:8d:b6:
31:27:15:5e:fa:22:8b:2f:ee:42:9b:87:28:de:d6:ac:eb:f8:
ea:b4:50:67:9d:bf:06:af:c1:12:e4:9b:4a:d0:db:9f:f7:af:
04:54:99:6c:27:5b:cd:02:d8:ab:fd:5e:d8:2b:fd:3f:ec:03:
53:f6:2b:10:8a:0e:47:e7:95:36:d3:42:9b:f8:f9:71:e0:1c:
b1:6a:1e:98:35:ae:95:34:62:52:c9:e3:ec:fb:01:15:27:38:
28:72:c8:f3:43:b9:12:e1:5f:54:68:b2:78:29:07:a1:c2:d9:
a0:d7:11:cb:6a:35:27:da:62:3f:c3:20:5a:ba:be:2e:33:d3:
fe:94:2b:a8:0f:12:fb:91:90:03:47:04:53:d1:73:77:49:a7:
55:f1:c9:79:51:b2:6d:7f:ac:03:60:8a:ec:04:b9:1e:7c:f6:
79:02:17:d5:57:2f:2e:07:d0:78:0e:82:08:de:93:36:07:56:
00:ec:da:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:56:45 2025 by rpki-client