Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/VBGObYzDsjlajyzid7p0hG-W35M.roa
File: VBGObYzDsjlajyzid7p0hG-W35M.roa (raw, json)
Hash identifier: BEw+7vTdhtaiM99MkWlH0A4GZ2RtAfA5AeqC2WjSzjY=
Subject key identifier: 54:11:8E:6D:8C:C3:B2:39:5A:8F:2C:E2:77:BA:74:84:6F:96:DF:93
Certificate issuer: /CN=c90b394ac63337607fa1bb0eaba11453a831f398
Certificate serial: 01970E4075D35720BCB1F87D1841DA52F786
Authority key identifier: C9:0B:39:4A:C6:33:37:60:7F:A1:BB:0E:AB:A1:14:53:A8:31:F3:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/VBGObYzDsjlajyzid7p0hG-W35M.roa
Signing time: Mon 26 May 2025 20:19:54 +0000
ROA not before: Mon 26 May 2025 20:19:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50223
IP address blocks: 46.251.192.0/24 maxlen: 24
46.251.193.0/24 maxlen: 24
46.251.194.0/24 maxlen: 24
46.251.195.0/24 maxlen: 24
46.251.196.0/22 maxlen: 22
46.251.196.0/24 maxlen: 24
46.251.197.0/24 maxlen: 24
46.251.198.0/24 maxlen: 24
46.251.199.0/24 maxlen: 24
46.251.200.0/24 maxlen: 24
46.251.201.0/24 maxlen: 24
46.251.202.0/24 maxlen: 24
46.251.204.0/22 maxlen: 22
46.251.204.0/24 maxlen: 24
46.251.205.0/24 maxlen: 24
46.251.206.0/24 maxlen: 24
46.251.207.0/24 maxlen: 24
46.251.208.0/24 maxlen: 24
46.251.209.0/24 maxlen: 24
46.251.210.0/24 maxlen: 24
46.251.211.0/24 maxlen: 24
46.251.212.0/22 maxlen: 22
46.251.212.0/24 maxlen: 24
46.251.213.0/24 maxlen: 24
46.251.214.0/24 maxlen: 24
46.251.215.0/24 maxlen: 24
46.251.216.0/22 maxlen: 22
46.251.216.0/24 maxlen: 24
46.251.217.0/24 maxlen: 24
46.251.218.0/24 maxlen: 24
46.251.221.0/24 maxlen: 24
109.71.224.0/24 maxlen: 24
109.71.226.0/24 maxlen: 24
109.71.229.0/24 maxlen: 24
109.71.230.0/24 maxlen: 24
109.71.231.0/24 maxlen: 24
185.48.136.0/22 maxlen: 22
185.48.136.0/24 maxlen: 24
185.48.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 May 2025 21:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0e:40:75:d3:57:20:bc:b1:f8:7d:18:41:da:52:f7:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c90b394ac63337607fa1bb0eaba11453a831f398
Validity
Not Before: May 26 20:19:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54118e6d8cc3b2395a8f2ce277ba74846f96df93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ee:3a:e0:6b:ae:e8:69:ef:99:64:08:44:0e:
fc:39:84:76:f9:48:b1:2d:3f:c0:65:9c:4d:b6:83:
c1:5b:93:5d:24:3b:db:98:05:b4:8b:81:e8:7c:a2:
57:a5:0c:d1:61:2a:df:b4:1b:5a:90:dc:29:98:f3:
45:eb:5a:99:f4:66:8e:41:6e:6a:c5:68:5e:bb:e5:
15:f1:c3:1e:fb:17:ed:a7:e1:96:38:a4:e8:3e:e9:
d4:f6:d7:29:34:9c:14:31:8e:55:07:01:23:6e:e7:
53:94:c6:ea:25:a9:42:5b:36:48:e9:96:97:0d:82:
51:34:d6:83:d0:4a:11:04:5a:5f:10:e8:60:fd:42:
29:ea:ff:3e:35:ef:39:68:31:7c:96:e5:af:f7:68:
a1:67:70:69:33:07:a5:5c:a9:48:6f:ba:21:c5:b3:
4a:80:b7:dd:10:29:55:d5:f0:ab:ee:36:69:22:ba:
88:b8:5b:eb:22:bb:fe:21:10:71:e9:02:7b:5c:5e:
76:c7:e2:ba:1e:37:9f:29:8b:58:4b:24:53:cb:2a:
00:d5:22:9f:0c:93:4d:1f:ad:d3:05:bd:37:93:45:
2e:79:be:c3:44:eb:22:36:fe:9c:64:a9:94:c5:5b:
41:3b:41:e3:d6:43:19:99:be:5e:38:77:98:fb:40:
e8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:11:8E:6D:8C:C3:B2:39:5A:8F:2C:E2:77:BA:74:84:6F:96:DF:93
X509v3 Authority Key Identifier:
keyid:C9:0B:39:4A:C6:33:37:60:7F:A1:BB:0E:AB:A1:14:53:A8:31:F3:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/VBGObYzDsjlajyzid7p0hG-W35M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.251.192.0-46.251.202.255
46.251.204.0-46.251.219.255
46.251.221.0/24
109.71.224.0/24
109.71.226.0/24
109.71.229.0-109.71.231.255
185.48.136.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:a5:15:a2:e0:33:de:af:e9:c1:52:7b:aa:bb:09:e7:f6:b9:
5f:76:c8:1e:33:c4:41:e7:91:ec:80:aa:df:c4:5c:63:c0:c7:
0f:69:c1:09:e6:a1:b5:fc:90:76:44:a0:b7:5d:e5:62:41:8e:
b6:c1:57:00:a7:ce:bb:42:96:e8:43:01:2d:80:40:3b:e9:dd:
0b:fe:c9:ad:25:9d:81:98:9a:2a:5a:1e:b2:23:b6:41:7a:75:
07:79:cb:fc:cf:7b:5e:d9:32:6a:6f:ae:0c:b7:f4:ff:6c:41:
4d:71:81:5c:02:2e:2b:f5:8d:12:6d:08:1a:25:94:59:b4:24:
74:d0:8c:a1:67:56:9d:0e:24:65:29:5b:3e:21:fd:bf:57:0d:
01:66:ce:f9:48:8a:bf:e8:f1:f9:1c:00:9d:df:ef:4b:b2:41:
a3:a9:1f:af:92:13:49:09:52:3f:2a:69:bd:85:28:a5:2b:3f:
b6:4f:d8:02:62:80:ea:54:5b:17:28:ea:18:70:f5:90:9e:42:
8c:fc:cc:e0:4f:3e:a9:c5:4a:fa:66:dc:7a:d2:41:f4:c8:fd:
c7:f2:19:d8:e7:fb:9a:36:9f:6f:f5:26:f4:10:ff:99:56:eb:
fd:38:8a:6c:27:53:82:b9:04:94:b5:fa:f3:08:34:c4:83:df:
d7:29:e0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 04:00:54 2025 by rpki-client