Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/JXkflkbiRlWR4YVaOI-gbXCGJfU.roa
File: JXkflkbiRlWR4YVaOI-gbXCGJfU.roa (raw, json)
Hash identifier: /WRbDBwSxrK5jQYY6aEuxEAjigifljDO0OIDJQ+3Kk0=
Subject key identifier: 25:79:1F:96:46:E2:46:55:91:E1:85:5A:38:8F:A0:6D:70:86:25:F5
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0197365F342809D08DE6A89ED7DB3096D5D8
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/JXkflkbiRlWR4YVaOI-gbXCGJfU.roa
Signing time: Tue 03 Jun 2025 15:18:18 +0000
ROA not before: Tue 03 Jun 2025 15:18:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213541
IP address blocks: 46.3.252.0/23 maxlen: 24
46.232.4.0/23 maxlen: 24
149.126.195.0/24 maxlen: 24
149.126.198.0/24 maxlen: 24
149.126.201.0/24 maxlen: 24
149.126.205.0/24 maxlen: 24
149.126.208.0/24 maxlen: 24
149.126.210.0/24 maxlen: 24
149.126.214.0/24 maxlen: 24
149.126.224.0/24 maxlen: 24
149.126.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jun 2025 14:25:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:36:5f:34:28:09:d0:8d:e6:a8:9e:d7:db:30:96:d5:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jun 3 15:18:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25791f9646e2465591e1855a388fa06d708625f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:06:53:75:46:eb:e7:f4:a0:f1:ae:a8:08:8e:
de:14:c6:c8:f3:e1:2b:2c:9f:9b:b7:79:74:b5:78:
28:de:d3:c9:6a:07:b5:57:22:8d:d0:fb:09:5b:78:
dd:4f:bf:ad:df:9a:55:e0:df:46:25:98:aa:3e:4a:
38:4a:36:84:01:06:88:1e:10:f8:77:ea:1c:9c:2a:
de:86:72:eb:56:4d:48:4a:de:0f:d3:e7:68:18:25:
9a:e1:90:13:81:04:e4:e3:3f:a8:f7:bf:18:5c:72:
a9:04:5a:5c:78:74:de:bf:29:ff:ff:17:18:de:43:
0e:ce:c6:2d:d6:5c:d2:f6:09:79:17:fd:5f:e5:1d:
93:8e:94:75:a2:87:0b:cf:6e:56:26:d8:a1:14:a7:
94:e3:97:8c:42:7e:0f:b0:00:74:2e:da:11:81:a4:
ed:b3:9b:57:e8:5e:5f:57:9d:8c:a4:23:15:a9:7c:
02:fa:2e:be:67:08:d2:f8:d0:2c:d4:4d:75:6c:52:
b4:46:48:5f:7a:0d:37:86:e6:c0:a2:fd:e1:d6:98:
32:66:f3:53:b2:6f:ba:9d:8c:12:28:90:d9:46:c4:
c1:98:ff:0d:39:85:02:c9:f7:ac:55:66:03:d5:ca:
ad:f1:60:2e:96:e6:5d:d9:24:e5:8c:3b:93:55:21:
e1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:79:1F:96:46:E2:46:55:91:E1:85:5A:38:8F:A0:6D:70:86:25:F5
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/JXkflkbiRlWR4YVaOI-gbXCGJfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.252.0/23
46.232.4.0/23
149.126.195.0/24
149.126.198.0/24
149.126.201.0/24
149.126.205.0/24
149.126.208.0/24
149.126.210.0/24
149.126.214.0/24
149.126.224.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:5d:80:d6:a3:58:b9:82:63:26:f3:64:69:6d:5b:2d:86:c0:
54:db:af:37:34:d4:b2:1c:af:2a:27:dd:e9:68:60:3f:b7:90:
95:a5:0e:9f:3d:f7:13:73:59:28:17:3e:92:a4:c5:6f:35:1d:
6c:19:fc:7d:97:e0:32:46:2c:1d:3b:0b:fe:5e:48:dd:46:6e:
1e:13:f9:99:4e:d8:ce:d3:f7:a3:f2:5d:59:14:46:51:05:ca:
af:fd:3e:87:2a:9b:f0:20:d8:5a:79:17:3b:e8:5c:3a:59:95:
b4:25:3a:60:8c:62:7d:b8:53:89:6d:ff:90:d7:26:d1:6e:f5:
45:d4:a9:f2:32:9a:76:a3:15:ee:8f:b9:f1:40:61:c8:d6:b8:
52:49:f7:4f:31:5c:dc:12:57:fd:54:10:65:d6:cd:88:f3:02:
5a:e8:86:04:09:1b:3b:b6:28:08:75:86:3e:4f:b7:d6:90:11:
0a:cc:c8:8f:ff:a6:db:db:e4:5a:85:37:50:9f:58:b4:69:03:
ae:23:aa:26:0f:11:6f:2a:d2:a6:dc:13:76:11:e0:35:a4:b7:
37:69:30:d8:ab:72:09:1a:92:a6:14:f6:89:6e:e5:7f:00:d1:
6a:ea:28:10:9b:45:64:79:ab:43:54:17:28:62:91:08:eb:6b:
50:d8:c6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:22:05 2025 by rpki-client