Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VUjdF703FoK8zb9DmJubs_yXZoc.roa
File: VUjdF703FoK8zb9DmJubs_yXZoc.roa (raw, json)
Hash identifier: moxCgy3Fu/Fqm2X0FxcB2lxhikx2WP9gV/OWN9/Agcc=
Subject key identifier: 55:48:DD:17:BD:37:16:82:BC:CD:BF:43:98:9B:9B:B3:FC:97:66:87
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01972C13F594E6C2D1135E150CD23226E526
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VUjdF703FoK8zb9DmJubs_yXZoc.roa
Signing time: Sun 01 Jun 2025 15:19:54 +0000
ROA not before: Sun 01 Jun 2025 15:19:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49304
IP address blocks: 46.3.32.0/20 maxlen: 24
46.3.40.0/21 maxlen: 24
46.3.96.0/20 maxlen: 24
46.3.192.0/22 maxlen: 24
46.3.216.0/21 maxlen: 24
46.232.48.0/21 maxlen: 24
46.232.56.0/21 maxlen: 24
46.232.104.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 15:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2c:13:f5:94:e6:c2:d1:13:5e:15:0c:d2:32:26:e5:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jun 1 15:19:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5548dd17bd371682bccdbf43989b9bb3fc976687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a5:75:2d:b1:30:ce:70:73:e9:5d:2b:20:fc:
4f:8d:ae:87:51:88:25:1a:e7:43:48:c8:33:64:b9:
67:7d:08:50:c6:5b:5d:37:aa:6c:55:5d:f0:a3:55:
5e:42:44:6f:ae:01:23:16:6b:33:3b:fe:94:36:30:
f9:ae:7c:16:96:c8:3d:1e:bd:88:11:9c:b3:02:48:
df:3d:9c:47:2c:60:f0:8b:fd:ab:4f:9a:b7:7e:4c:
ca:9e:7b:64:4a:96:60:40:ac:b7:95:f1:92:cf:89:
55:93:58:3a:e2:fc:3e:00:14:66:14:f9:1b:ba:9e:
e3:67:64:24:77:64:1a:5d:cd:f5:d8:89:2f:1f:1b:
b7:87:fb:22:15:af:a6:f9:88:90:85:d8:30:dc:06:
1b:f2:f0:8a:91:c5:25:90:cd:6b:02:c4:a5:b7:74:
fb:6c:c8:3e:c4:fd:e4:7c:09:da:cb:b3:2f:61:8c:
3a:b2:1d:d1:de:29:8b:39:a3:df:08:44:16:4a:f0:
60:b8:5a:a9:6e:32:b9:01:a2:02:14:2b:e1:ee:03:
b0:b9:bc:de:a8:c9:f1:00:4f:b4:d1:f7:9c:60:2c:
0e:ea:d0:c3:fb:e2:d2:f0:af:81:9d:9b:30:56:ff:
cf:9c:68:d6:23:e9:c3:5e:db:6d:48:b2:49:ff:1c:
54:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:48:DD:17:BD:37:16:82:BC:CD:BF:43:98:9B:9B:B3:FC:97:66:87
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VUjdF703FoK8zb9DmJubs_yXZoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.32.0/20
46.3.96.0/20
46.3.192.0/22
46.3.216.0/21
46.232.48.0/20
46.232.104.0/21
Signature Algorithm: sha256WithRSAEncryption
94:5a:d9:2e:37:03:a5:f0:77:69:e8:cc:6b:e5:69:20:c4:ea:
9d:51:d7:c2:1c:c1:a6:fa:1d:7f:97:32:b3:b1:a9:cb:a1:93:
6f:60:b6:f3:db:82:9a:1a:bd:48:50:0a:be:0e:d2:fa:22:f6:
82:83:42:aa:67:d7:43:2f:3c:f8:85:5d:f1:86:c8:ea:43:f0:
e9:8a:e3:35:e3:33:ae:4b:e4:fc:0a:78:7d:a0:28:1a:d1:c5:
8b:bf:69:b3:c9:fb:50:1b:d5:46:d9:22:ac:d3:65:67:ce:8f:
57:6c:c5:d4:49:f3:53:33:ec:a3:60:ec:51:99:45:73:28:af:
0b:07:01:45:07:8c:c5:71:30:0c:f8:f1:97:d9:53:71:8b:92:
ea:fe:23:9d:d2:dd:be:ed:d9:dd:38:1e:d8:ab:11:51:4f:99:
bb:20:6c:e6:40:3a:f2:71:7c:13:69:c3:9b:62:67:a1:53:c5:
e1:4d:e7:34:c0:c2:70:63:a9:77:ab:dc:fa:2b:db:43:4d:08:
25:8e:7f:cd:40:5f:1f:21:07:ea:4b:8f:e6:98:e1:be:a5:65:
7e:a5:7b:c7:4c:96:b6:6c:d8:6a:ad:1f:a0:64:35:29:2a:fc:
59:c9:fc:ad:34:45:c6:82:6d:32:73:80:4a:0f:2b:50:b2:ba:
bf:9e:a9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 09:28:47 2025 by rpki-client