Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/svyziwVMgq48GHf_h3gStnY41Zo.roa
File: svyziwVMgq48GHf_h3gStnY41Zo.roa (raw, json)
Hash identifier: g5tczNwZyT4JrpvmurwdGmbcJeuG2Nr7mzGqMuedNAs=
Subject key identifier: B2:FC:B3:8B:05:4C:82:AE:3C:18:77:FF:87:78:12:B6:76:38:D5:9A
Certificate issuer: /CN=4a7e8c622c87532f8c449f347433dae52b7738f0
Certificate serial: 01960FA53DF66F4B639CDB57E5CA2A57C14B
Authority key identifier: 4A:7E:8C:62:2C:87:53:2F:8C:44:9F:34:74:33:DA:E5:2B:77:38:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/svyziwVMgq48GHf_h3gStnY41Zo.roa
Signing time: Mon 07 Apr 2025 09:46:49 +0000
ROA not before: Mon 07 Apr 2025 09:46:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50477
IP address blocks: 5.149.200.0/22 maxlen: 22
5.149.204.0/22 maxlen: 22
5.149.204.0/24 maxlen: 24
5.149.205.0/24 maxlen: 24
5.149.206.0/24 maxlen: 24
46.19.112.0/23 maxlen: 23
46.19.114.0/24 maxlen: 24
46.19.115.0/24 maxlen: 24
46.19.116.0/22 maxlen: 22
109.236.208.0/23 maxlen: 23
109.236.210.0/24 maxlen: 24
109.236.211.0/24 maxlen: 24
109.236.212.0/22 maxlen: 22
109.236.216.0/21 maxlen: 21
134.19.144.0/21 maxlen: 21
134.19.152.0/24 maxlen: 24
134.19.153.0/24 maxlen: 24
134.19.154.0/23 maxlen: 23
134.19.154.0/24 maxlen: 24
134.19.156.0/22 maxlen: 22
2a04:6000::/29 maxlen: 29
2a04:6007::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 16 Apr 2025 06:47:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:a5:3d:f6:6f:4b:63:9c:db:57:e5:ca:2a:57:c1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7e8c622c87532f8c449f347433dae52b7738f0
Validity
Not Before: Apr 7 09:46:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2fcb38b054c82ae3c1877ff877812b67638d59a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:b8:45:3a:35:e8:cd:66:c3:17:e3:b4:38:
bc:ef:bd:4c:09:29:50:75:46:81:3b:35:17:c7:23:
4b:07:45:63:66:2d:87:84:71:f5:85:60:6e:a1:91:
59:66:2c:66:d1:cd:69:34:df:32:05:4b:cb:6d:6e:
8d:e6:df:71:76:74:b2:d6:e3:ba:e6:dc:e3:e8:f7:
09:83:24:fb:9f:75:14:7c:88:bc:ff:bc:db:85:c7:
d5:c8:61:ea:96:0a:fa:52:90:e2:4b:b0:71:28:c6:
84:91:46:35:30:e9:b4:03:07:ad:ba:d8:ef:b0:ba:
93:3a:29:3d:8e:b0:2f:67:80:cc:ff:89:2a:82:ec:
5d:59:4d:0f:11:5a:58:7e:f8:78:11:1e:21:94:a6:
43:1b:61:82:44:5c:93:46:50:56:27:c2:8c:ac:42:
2a:39:0e:c1:39:20:b2:45:d7:98:b9:c8:43:aa:5f:
db:29:6f:64:90:bb:0e:8e:40:a1:6e:e7:76:f4:96:
6f:c8:c5:d2:4c:2f:2c:1a:f5:76:30:4a:ef:82:61:
d8:db:81:a8:54:77:1a:e5:96:88:42:0a:bf:5b:24:
3c:84:8c:46:12:a5:8f:86:5e:06:4a:03:6d:ad:21:
a8:b4:e7:88:a3:b3:9f:ea:fa:15:a5:11:3a:12:05:
ce:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FC:B3:8B:05:4C:82:AE:3C:18:77:FF:87:78:12:B6:76:38:D5:9A
X509v3 Authority Key Identifier:
keyid:4A:7E:8C:62:2C:87:53:2F:8C:44:9F:34:74:33:DA:E5:2B:77:38:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/svyziwVMgq48GHf_h3gStnY41Zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.200.0/21
46.19.112.0/21
109.236.208.0/20
134.19.144.0/20
IPv6:
2a04:6000::/29
Signature Algorithm: sha256WithRSAEncryption
ac:4a:fd:8c:54:40:e0:16:3b:9c:1a:77:ce:49:e4:02:c6:2e:
bc:db:e5:ad:0b:8a:14:30:c4:e6:09:98:d8:dc:a3:99:fa:9d:
9f:d0:8d:b3:f5:23:ac:14:c5:53:2d:0f:78:f1:a0:e2:56:16:
26:ab:4e:a7:95:26:6a:29:f2:b0:78:4e:c5:3f:4b:b9:0c:e9:
9e:af:a9:d2:11:cb:37:30:18:40:af:4f:f5:cb:60:ac:bf:6a:
c8:d8:7a:a8:fb:8d:07:2b:9f:fb:e4:ba:29:d7:93:e5:a4:c9:
69:66:24:c7:df:6f:fb:4f:38:d5:43:8a:47:db:0c:7d:aa:29:
0d:9b:f5:50:b9:65:be:83:e3:9e:ce:f1:96:00:7f:14:5b:bc:
7f:ac:a5:89:50:a4:b8:ef:a1:d0:2e:f8:22:5b:10:da:b9:5f:
69:8d:b5:3b:da:ca:c9:2e:ae:a6:60:ab:7b:ca:c0:1b:38:c1:
cb:f8:8f:58:67:3e:10:ce:17:a4:98:b4:ab:46:3f:11:0d:52:
7b:5e:e1:09:ad:f2:75:7a:c9:6f:e4:5d:81:9d:83:df:50:e4:
46:79:91:c4:c5:f2:09:f9:19:a7:b9:d9:56:67:ec:0f:25:a4:
56:e8:57:8d:77:a9:a5:3b:0b:19:5e:8b:72:56:4f:59:bd:20:
4c:b2:2e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:55:14 2025 by rpki-client