Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/MKQPTYWUfZU3AXyjYOXZ6KtdZmA.roa
File: MKQPTYWUfZU3AXyjYOXZ6KtdZmA.roa (raw, json)
Hash identifier: J4scNb03p8/nwY25pdXud7EDhLMMlofMLDOWH8q8S3I=
Subject key identifier: 30:A4:0F:4D:85:94:7D:95:37:01:7C:A3:60:E5:D9:E8:AB:5D:66:60
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0195F2408828CE37DC865000ECD88FC846BC
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/MKQPTYWUfZU3AXyjYOXZ6KtdZmA.roa
Signing time: Tue 01 Apr 2025 16:47:50 +0000
ROA not before: Tue 01 Apr 2025 16:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.32.0/22 maxlen: 22
46.34.36.0/24 maxlen: 24
46.34.62.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Apr 2025 07:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f2:40:88:28:ce:37:dc:86:50:00:ec:d8:8f:c8:46:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Apr 1 16:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30a40f4d85947d9537017ca360e5d9e8ab5d6660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f0:0a:ab:dd:8c:80:1e:93:14:02:db:c8:34:
33:3b:81:c5:51:31:68:e4:00:eb:cd:e8:6c:c2:38:
45:e1:db:11:d6:01:52:7b:58:15:90:e7:50:38:54:
49:18:1e:1e:36:16:be:99:69:71:6c:f0:ab:da:2f:
7f:16:d1:d5:15:6e:70:7f:bf:3f:d4:28:c3:04:20:
6b:27:d2:c3:5c:fc:0e:91:23:be:07:55:4f:e0:0e:
20:01:82:ec:50:2b:1d:1a:b6:d8:dd:42:42:28:19:
18:24:ca:31:a6:ec:1f:34:a2:51:60:a1:05:11:5e:
74:67:8f:cd:78:68:fd:0e:ba:40:3e:f6:82:76:b4:
04:e3:d1:f3:91:a6:eb:43:54:fa:88:35:bf:c0:1c:
82:a2:df:11:8a:7f:fe:d2:6b:7a:ce:34:3a:50:3c:
dc:db:40:f3:c3:e8:4a:f9:ff:a3:31:31:ee:da:b0:
4d:d1:aa:17:6b:e6:0b:cf:ce:38:d8:45:4f:7a:e6:
8a:c9:a5:90:c5:0d:8f:7d:22:54:8e:93:93:2d:92:
5e:28:6f:13:27:47:68:ff:2e:89:03:91:25:cd:ea:
4c:8e:c7:90:d5:ab:ee:21:27:60:84:91:99:aa:fe:
f7:41:1a:af:da:fd:d5:ce:bf:8d:d3:46:8c:75:1c:
eb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A4:0F:4D:85:94:7D:95:37:01:7C:A3:60:E5:D9:E8:AB:5D:66:60
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/MKQPTYWUfZU3AXyjYOXZ6KtdZmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.62.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:92:b4:d7:0a:dc:f3:10:8f:c2:a6:12:c9:88:64:68:c4:dd:
a9:c2:04:83:43:3a:e4:14:d5:ec:37:5c:39:b6:0f:43:46:89:
f8:38:52:53:18:34:3c:37:8c:db:a9:4f:00:e6:80:90:52:90:
67:bd:20:a0:a1:25:7a:5e:a0:d9:10:23:48:e3:76:55:2e:a5:
a4:fa:4c:85:84:8f:f6:79:96:ec:15:66:c8:0e:b4:ce:4c:c1:
d4:3c:10:3e:4d:3e:19:cf:45:f7:3d:b5:3e:ea:5b:a2:f9:0e:
04:f6:84:6c:a4:be:05:f7:68:80:15:5a:c3:67:73:a7:8c:6a:
32:c3:cb:f1:e9:45:c8:2b:31:01:d1:c3:5c:57:f3:a4:f4:10:
63:7c:37:40:84:5a:6a:e8:20:09:45:48:f1:41:fb:4a:b7:6b:
6d:9b:9e:89:a9:3b:75:f3:87:93:ef:8d:e1:5b:a4:52:01:78:
dc:94:7c:3a:8c:82:d3:58:a7:9a:32:34:62:39:d3:0a:81:d1:
29:72:ab:da:77:d0:e8:26:58:c9:51:08:34:67:79:c5:02:21:
01:1d:72:31:ad:87:29:cd:4e:87:37:69:fa:71:c9:46:0a:2e:
98:47:2f:56:db:7b:df:54:b3:58:e9:27:00:77:b6:ce:82:51:
ee:79:c5:13
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:15:14 2025 by rpki-client