Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/jVB6drMwXJObOMUbrd2E6yCspKQ.roa
File: jVB6drMwXJObOMUbrd2E6yCspKQ.roa (raw, json)
Hash identifier: xWV5LwgHYtkKl50j5plJqDUxWS6GZ+7RVITURKXreKM=
Subject key identifier: 8D:50:7A:76:B3:30:5C:93:9B:38:C5:1B:AD:DD:84:EB:20:AC:A4:A4
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0196FD83CA800006807048A8BC335ED48490
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/jVB6drMwXJObOMUbrd2E6yCspKQ.roa
Signing time: Fri 23 May 2025 14:19:54 +0000
ROA not before: Fri 23 May 2025 14:19:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.32.0/22 maxlen: 22
46.34.36.0/24 maxlen: 24
46.34.40.0/24 maxlen: 24
46.34.41.0/24 maxlen: 24
46.34.50.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 09:34:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fd:83:ca:80:00:06:80:70:48:a8:bc:33:5e:d4:84:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: May 23 14:19:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d507a76b3305c939b38c51baddd84eb20aca4a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ac:89:18:d7:45:24:63:0b:83:ff:8a:f3:14:
00:b1:e4:90:1f:ef:9a:0c:58:eb:b3:71:54:ce:a2:
8d:08:5f:7c:e2:f3:bc:66:df:69:86:31:64:a9:3d:
c2:5b:0f:f2:16:29:c0:bf:0f:2b:e5:48:5b:5c:39:
40:14:16:de:0f:34:f5:67:80:52:6a:54:be:0f:4c:
15:8d:10:75:57:1d:76:f5:84:a8:25:36:cf:83:10:
fe:cd:ce:69:29:4f:49:14:1b:c7:7b:d8:8d:99:be:
ff:fa:da:6b:77:38:17:82:b7:c3:09:35:0f:ea:17:
29:70:eb:cf:d4:b2:96:bc:94:87:18:cd:52:2b:4f:
c8:92:1c:2f:02:30:ec:43:00:35:ca:6c:8c:4e:7c:
8f:11:00:58:2a:76:66:7c:43:f3:77:ca:7c:73:f7:
02:d7:02:d6:49:20:08:a5:de:1f:78:41:37:73:d2:
37:60:df:b3:7f:a5:c4:78:11:b3:c3:f0:64:59:3a:
17:18:af:ea:10:3e:d4:b5:fa:ac:a9:b6:1c:b8:a3:
0c:56:4d:18:99:6f:35:73:44:34:f7:93:ce:1f:4e:
3c:40:d7:3d:b9:58:66:63:5d:64:df:f1:ea:1a:34:
31:ad:76:2f:f6:0c:c4:e8:aa:e4:a2:f7:d8:db:f9:
3c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:50:7A:76:B3:30:5C:93:9B:38:C5:1B:AD:DD:84:EB:20:AC:A4:A4
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/jVB6drMwXJObOMUbrd2E6yCspKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.40.0/23
46.34.50.0/24
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
26:22:a2:04:1e:23:77:08:0b:e5:b4:12:65:b7:fa:eb:c3:25:
e6:7a:2e:04:0b:01:1c:f2:6a:67:47:56:c4:29:cc:09:d9:ca:
09:dc:f4:cf:a1:b9:96:29:f6:50:06:f8:cd:fd:74:ef:a9:3f:
93:5f:2f:ca:51:76:5b:73:38:23:87:88:d8:e2:b1:d6:fd:ee:
bf:31:f2:df:4a:09:84:10:3e:1d:35:72:89:ee:76:77:1a:86:
ba:1c:c6:a5:85:52:e8:01:55:1b:b5:45:d3:bd:3f:e7:fa:0e:
91:f5:d3:0b:99:cf:92:46:3d:42:43:48:82:18:97:38:57:77:
51:d7:8a:e6:c5:91:ee:54:ad:7f:ab:49:6c:d9:c1:08:22:6c:
7e:1e:a6:0c:d2:1e:7b:1e:ff:3c:09:50:f1:88:2e:c3:9d:67:
f0:c9:49:75:40:2b:db:72:05:91:0b:99:24:7e:c7:3a:9e:54:
ec:ff:48:98:15:49:a8:94:bc:b6:60:89:e0:82:75:77:5a:da:
2d:21:86:09:9b:5b:37:a1:7d:c6:52:dc:74:f2:d4:ed:50:e4:
cc:5d:b0:cd:32:cf:a4:fc:65:0e:90:8c:70:9d:cf:d1:16:93:
90:e7:a0:e1:50:22:c3:88:d6:af:89:cd:02:98:c2:79:65:19:
65:33:8b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:20:10 2025 by rpki-client