Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/GMsvwI_9FRbQvYL-hSO9bYR-tic.roa
File: GMsvwI_9FRbQvYL-hSO9bYR-tic.roa (raw, json)
Hash identifier: Cf5siqYnavfXGapa67Hplf+UUb185CqkgPFTtApYU+Q=
Subject key identifier: 18:CB:2F:C0:8F:FD:15:16:D0:BD:82:FE:85:23:BD:6D:84:7E:B6:27
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01963B3A2D4F2FF0B0461ABB7559C1E5CAE8
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/GMsvwI_9FRbQvYL-hSO9bYR-tic.roa
Signing time: Tue 15 Apr 2025 20:53:10 +0000
ROA not before: Tue 15 Apr 2025 20:53:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 46.3.8.0/22 maxlen: 22
46.3.12.0/22 maxlen: 24
46.3.28.0/23 maxlen: 24
46.3.40.0/21 maxlen: 24
46.3.48.0/20 maxlen: 24
46.3.77.0/24 maxlen: 24
46.3.84.0/24 maxlen: 24
46.3.89.0/24 maxlen: 24
46.3.90.0/24 maxlen: 24
46.3.91.0/24 maxlen: 24
46.3.118.0/24 maxlen: 24
46.3.119.0/24 maxlen: 24
46.3.120.0/21 maxlen: 24
46.3.128.0/22 maxlen: 24
46.3.134.0/24 maxlen: 24
46.3.135.0/24 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.160.0/24 maxlen: 24
46.3.161.0/24 maxlen: 24
46.3.162.0/24 maxlen: 24
46.3.163.0/24 maxlen: 24
46.3.164.0/22 maxlen: 24
46.3.168.0/22 maxlen: 24
46.3.169.0/24 maxlen: 24
46.3.170.0/24 maxlen: 24
46.3.171.0/24 maxlen: 24
46.3.172.0/24 maxlen: 24
46.3.174.0/24 maxlen: 24
46.3.184.0/22 maxlen: 24
46.3.188.0/24 maxlen: 24
46.3.189.0/24 maxlen: 24
46.3.190.0/24 maxlen: 24
46.3.205.0/24 maxlen: 24
46.3.206.0/23 maxlen: 24
46.3.208.0/22 maxlen: 24
46.3.212.0/22 maxlen: 24
46.3.220.0/23 maxlen: 24
46.3.223.0/24 maxlen: 24
46.3.228.0/23 maxlen: 24
46.3.230.0/23 maxlen: 24
46.3.236.0/23 maxlen: 24
46.3.243.0/24 maxlen: 24
46.3.244.0/24 maxlen: 24
46.3.246.0/24 maxlen: 24
46.3.248.0/24 maxlen: 24
46.3.251.0/24 maxlen: 24
46.3.252.0/22 maxlen: 24
46.3.253.0/24 maxlen: 24
46.3.254.0/24 maxlen: 24
46.3.255.0/24 maxlen: 24
46.232.0.0/22 maxlen: 24
46.232.16.0/23 maxlen: 24
46.232.18.0/23 maxlen: 24
46.232.64.0/24 maxlen: 24
46.232.65.0/24 maxlen: 24
46.232.66.0/24 maxlen: 24
46.232.68.0/24 maxlen: 24
46.232.116.0/23 maxlen: 24
46.232.118.0/23 maxlen: 24
46.232.124.0/23 maxlen: 24
46.232.126.0/23 maxlen: 24
149.126.193.0/24 maxlen: 24
149.126.196.0/24 maxlen: 24
149.126.198.0/24 maxlen: 24
149.126.204.0/24 maxlen: 24
149.126.208.0/24 maxlen: 24
149.126.224.0/24 maxlen: 24
149.126.225.0/24 maxlen: 24
149.126.226.0/24 maxlen: 24
149.126.228.0/24 maxlen: 24
149.126.231.0/24 maxlen: 24
149.126.236.0/22 maxlen: 24
149.126.242.0/24 maxlen: 24
149.126.244.0/24 maxlen: 24
149.126.245.0/24 maxlen: 24
149.126.247.0/24 maxlen: 24
149.126.248.0/24 maxlen: 24
149.126.249.0/24 maxlen: 24
149.126.250.0/24 maxlen: 24
149.126.253.0/24 maxlen: 24
149.126.254.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Apr 2025 06:55:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:3a:2d:4f:2f:f0:b0:46:1a:bb:75:59:c1:e5:ca:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Apr 15 20:53:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18cb2fc08ffd1516d0bd82fe8523bd6d847eb627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:55:b2:bb:fe:30:c5:e0:39:d9:12:ea:eb:bd:
a2:1f:94:29:7f:99:14:9c:b8:00:95:25:4b:c0:9f:
37:7b:40:f2:5c:4b:aa:d6:7e:17:b1:57:7c:5c:31:
bc:ee:4f:dc:29:6f:1b:ce:03:8b:1f:f0:10:04:92:
a3:d2:4c:3f:47:a9:3d:cd:04:23:c3:f7:03:ae:5f:
dc:93:b0:76:0f:3c:8a:60:1f:ec:94:e4:5e:bb:57:
a2:13:da:c1:f5:43:a7:9a:51:c7:bb:d2:a5:8a:0b:
3f:f1:b1:52:3a:37:c1:4f:6b:d4:c4:4b:64:a8:3e:
3f:76:a0:60:c4:45:8e:45:81:6c:dd:6c:16:95:23:
37:ce:55:3a:31:f4:c8:f9:90:55:f1:96:bf:97:70:
50:b7:ad:7c:d2:98:83:cd:06:45:9a:76:c7:94:16:
89:99:9a:db:4f:20:89:a5:78:ff:dd:0d:1c:0e:6f:
3a:36:c2:4b:a0:bd:ea:df:4e:c8:82:a5:fb:34:09:
ba:5c:5e:a4:2f:06:64:af:af:27:90:d9:f3:18:73:
c4:cf:b7:16:09:74:78:d0:ef:cd:07:67:c1:2e:95:
93:a5:24:fd:7f:61:46:07:40:48:a1:e1:19:44:78:
f4:87:de:d0:56:54:d4:e1:97:89:c7:56:af:f9:86:
90:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CB:2F:C0:8F:FD:15:16:D0:BD:82:FE:85:23:BD:6D:84:7E:B6:27
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/GMsvwI_9FRbQvYL-hSO9bYR-tic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.8.0/21
46.3.28.0/23
46.3.40.0-46.3.63.255
46.3.77.0/24
46.3.84.0/24
46.3.89.0-46.3.91.255
46.3.118.0-46.3.131.255
46.3.134.0/23
46.3.156.0/23
46.3.160.0-46.3.172.255
46.3.174.0/24
46.3.184.0-46.3.190.255
46.3.205.0-46.3.215.255
46.3.220.0/23
46.3.223.0/24
46.3.228.0/22
46.3.236.0/23
46.3.243.0-46.3.244.255
46.3.246.0/24
46.3.248.0/24
46.3.251.0-46.3.255.255
46.232.0.0/22
46.232.16.0/22
46.232.64.0-46.232.66.255
46.232.68.0/24
46.232.116.0/22
46.232.124.0/22
149.126.193.0/24
149.126.196.0/24
149.126.198.0/24
149.126.204.0/24
149.126.208.0/24
149.126.224.0-149.126.226.255
149.126.228.0/24
149.126.231.0/24
149.126.236.0/22
149.126.242.0/24
149.126.244.0/23
149.126.247.0-149.126.250.255
149.126.253.0-149.126.255.255
Signature Algorithm: sha256WithRSAEncryption
38:1c:f2:d7:15:47:34:1d:dc:a7:f0:ad:33:32:30:11:11:9f:
d4:a1:a1:36:97:97:12:60:55:a9:f6:e1:89:57:fe:64:29:7e:
c1:11:97:c4:23:3f:17:96:ba:05:23:d1:5c:80:0d:88:8f:4d:
4d:cb:47:21:a3:bd:0b:14:01:2a:2e:7b:06:67:ca:1b:71:91:
97:b3:f6:9b:81:91:dd:45:0c:a4:61:a4:c7:18:1d:a5:bd:0d:
66:fd:b0:72:44:fa:ed:19:d0:4c:26:6e:ab:c6:3d:ad:09:26:
8f:df:3e:db:b2:0b:1d:1c:a1:92:3f:12:7e:26:8c:c4:81:9d:
33:6c:45:f8:3f:35:b9:04:f7:f0:73:38:3f:19:c1:f5:d5:37:
99:a1:3b:1a:04:f9:68:bc:2b:67:b6:14:55:9b:b3:61:f2:ca:
a7:21:61:52:a1:6d:32:71:07:d1:49:13:cb:f2:0b:0a:7e:99:
08:82:3e:48:b6:02:5c:59:15:5b:f4:cf:71:3a:17:2a:69:1c:
af:10:c5:ef:84:b0:1d:a4:19:52:5a:29:7c:41:6a:be:f1:d6:
c8:6b:6b:a1:9c:07:f4:16:27:70:b9:f7:75:20:67:9a:20:95:
10:31:28:ff:e8:37:24:6f:58:dc:79:e8:4d:60:6e:80:25:ee:
a5:e6:32:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:17:44 2025 by rpki-client