Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/_UAVnH30tgSBc_SphtX0dIDHNwU.roa
File: _UAVnH30tgSBc_SphtX0dIDHNwU.roa (raw, json)
Hash identifier: 62ys9T6sHdSCTVARiLlhQ6bdAMamPmRJL9+UtUAIz3I=
Subject key identifier: FD:40:15:9C:7D:F4:B6:04:81:73:F4:A9:86:D5:F4:74:80:C7:37:05
Certificate issuer: /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Certificate serial: 019734939C12ECAA6C1BF1D1043DCA427014
Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/_UAVnH30tgSBc_SphtX0dIDHNwU.roa
Signing time: Tue 03 Jun 2025 06:56:18 +0000
ROA not before: Tue 03 Jun 2025 06:56:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29386
IP address blocks: 46.213.0.0/21 maxlen: 21
46.213.128.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 06 Jun 2025 06:12:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:34:93:9c:12:ec:aa:6c:1b:f1:d1:04:3d:ca:42:70:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Validity
Not Before: Jun 3 06:56:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd40159c7df4b6048173f4a986d5f47480c73705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fa:53:1a:f6:41:1f:4b:b9:2d:75:29:05:81:
68:68:39:58:64:f0:7a:ee:69:9a:cd:43:21:0c:11:
f9:b0:d8:bd:29:2a:2c:75:9e:53:cf:92:4c:87:07:
17:a4:09:bc:8c:3e:c0:57:27:bb:a7:2d:c3:6a:c2:
99:f3:e8:c3:36:68:1f:e9:c7:bd:67:a4:20:52:53:
78:3c:e0:13:a3:88:9d:94:cf:7d:65:15:19:dd:77:
9f:e2:aa:05:ba:6b:30:a5:c4:17:47:6a:e3:a7:d5:
4d:c9:b3:5f:2c:17:04:30:2a:d7:a1:ea:ad:e5:e5:
4d:db:7f:e9:84:a9:5b:df:cf:e8:14:79:7b:19:4c:
cc:5f:f9:0b:6c:c2:ca:5a:f5:86:79:05:2e:8c:1d:
66:37:fd:86:e8:45:d1:f2:ea:f7:ae:b6:d6:a9:e1:
7b:31:14:15:1a:66:39:30:08:cf:88:d3:b1:b1:4d:
d9:9a:90:03:7a:93:58:8a:8c:68:ac:e2:ed:e0:82:
3d:e1:60:a2:5f:8c:be:27:76:75:17:fb:e5:e0:2d:
73:9c:ce:bd:55:08:45:68:8d:bc:6a:5f:65:a1:b9:
27:72:98:df:52:0c:56:ee:f6:5c:9a:20:f9:d2:5e:
a7:3e:e2:f1:63:74:d1:0e:08:c1:1c:fc:36:34:03:
48:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:40:15:9C:7D:F4:B6:04:81:73:F4:A9:86:D5:F4:74:80:C7:37:05
X509v3 Authority Key Identifier:
keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/_UAVnH30tgSBc_SphtX0dIDHNwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.213.0.0/21
46.213.128.0/21
Signature Algorithm: sha256WithRSAEncryption
2e:74:1a:e5:36:35:f8:ab:d9:f5:42:45:3c:37:9c:55:74:28:
f5:a7:a2:b2:8c:ac:1f:87:be:78:c5:a5:c2:b8:78:11:2d:1d:
14:6d:c2:28:c6:04:a6:d3:c0:5d:e8:d3:4b:49:dd:fb:b9:9c:
30:43:e8:c8:ad:cd:b4:7b:fd:bd:ce:64:5b:31:cc:e6:f5:e4:
25:92:04:a1:1c:71:34:6e:d4:99:21:16:35:8d:05:d8:15:b4:
c9:d6:5a:6d:ae:b3:a7:6d:0c:f7:75:59:07:aa:38:a4:bb:5e:
4b:e0:de:7b:bc:70:6e:5a:25:2c:4a:ea:4e:57:77:56:b8:ef:
1e:c9:33:3d:bf:5f:68:79:fe:ca:a7:35:2b:0d:4c:e1:a7:cd:
e9:b0:f9:8f:31:00:2f:b2:55:b6:4e:18:f5:5a:8a:3c:42:e5:
ba:ef:3a:6b:4a:e2:fc:f1:a4:3e:eb:bc:14:9b:40:cf:de:6a:
d6:9a:e5:02:9a:2c:4a:c0:f6:f9:ee:b7:d2:71:ef:bf:9a:c1:
9a:09:25:9d:7d:77:5c:61:ad:36:f0:97:66:ad:f5:b0:8e:25:
ed:01:02:61:af:3a:d4:ad:16:7b:ce:78:72:48:c7:7d:bb:a6:
9e:32:a8:62:9e:fb:9b:91:53:19:c7:ad:b5:e8:55:eb:ae:53:
68:06:de:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:35:24 2025 by rpki-client