Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/pr4asJAsnq79_MwhFbJWkr1X44k.roa
File: pr4asJAsnq79_MwhFbJWkr1X44k.roa (raw, json)
Hash identifier: LPZ9jgx3a+kZMvzozL9kKHFN0xcNAo0Q6O+hlk+/CTA=
Subject key identifier: A6:BE:1A:B0:90:2C:9E:AE:FD:FC:CC:21:15:B2:56:92:BD:57:E3:89
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0196F49124F25D1344CC18665558A488D1E1
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/pr4asJAsnq79_MwhFbJWkr1X44k.roa
Signing time: Wed 21 May 2025 20:37:54 +0000
ROA not before: Wed 21 May 2025 20:37:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49304
IP address blocks: 46.3.40.0/21 maxlen: 24
46.3.96.0/20 maxlen: 24
46.3.192.0/22 maxlen: 24
46.3.216.0/21 maxlen: 24
46.232.48.0/21 maxlen: 24
46.232.56.0/21 maxlen: 24
46.232.104.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Jun 2025 15:19:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f4:91:24:f2:5d:13:44:cc:18:66:55:58:a4:88:d1:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: May 21 20:37:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6be1ab0902c9eaefdfccc2115b25692bd57e389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0c:a3:8e:17:f9:b1:9d:22:5a:28:49:ab:b6:
b7:fa:46:66:c5:b5:29:f7:3b:92:1a:1c:33:16:ce:
a5:19:9c:77:ed:25:29:20:85:75:4f:90:95:33:39:
e9:55:a8:49:55:de:56:f3:dd:24:ba:4a:16:31:49:
1b:a5:8d:f5:9b:dc:8c:fe:a4:b6:54:52:90:2e:d4:
ee:fc:55:e8:81:2b:47:da:3c:60:68:cb:3b:9e:b3:
90:4a:0c:7b:62:e5:ab:73:7b:51:72:7e:47:88:c3:
ae:25:20:01:4f:93:64:02:6f:1f:49:2f:2a:12:f0:
ee:ec:13:91:e6:48:5e:75:3e:5e:f2:ea:86:7c:23:
d2:bf:ca:e5:eb:20:6b:66:84:43:49:95:fe:2b:2f:
73:a8:bf:05:94:c6:58:8c:ab:9e:a2:69:1d:7f:8f:
b8:13:04:ad:e8:03:f3:8b:53:68:28:ce:8f:1f:9f:
60:81:10:5b:38:ca:8d:83:d6:1d:1d:7c:05:71:7e:
d5:57:b6:52:17:bf:6d:3c:bf:6c:96:b9:23:fa:3d:
35:f9:db:e0:47:a4:f8:cf:b1:e0:a3:00:24:44:90:
8d:80:8d:3c:90:c8:78:d1:4c:5a:06:17:59:c8:2f:
bb:c6:c1:56:d6:1e:df:c2:09:5f:33:db:1a:46:76:
96:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BE:1A:B0:90:2C:9E:AE:FD:FC:CC:21:15:B2:56:92:BD:57:E3:89
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/pr4asJAsnq79_MwhFbJWkr1X44k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.40.0/21
46.3.96.0/20
46.3.192.0/22
46.3.216.0/21
46.232.48.0/20
46.232.104.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:39:b7:ac:69:ef:d6:6c:df:07:84:eb:b4:b9:15:91:b6:e7:
e5:94:ba:8a:2a:1f:a7:11:1f:68:a4:e1:2c:fd:94:9e:85:64:
8e:14:fd:49:b2:75:fe:e8:af:99:7e:6f:26:f8:f4:7c:c1:6b:
aa:d6:d3:61:c3:03:d2:5b:43:fe:dd:10:35:cc:71:97:93:55:
7f:7d:70:d1:cb:35:3a:c1:64:ff:4b:80:c9:3c:60:00:15:81:
92:a8:82:82:90:28:09:92:df:35:c6:33:69:a1:97:25:cb:41:
1c:b0:3a:ad:4b:37:22:e4:4e:9d:db:ad:94:de:02:d2:de:4d:
82:d5:64:e8:b4:b2:c9:66:78:ed:82:f7:df:0d:d2:e8:14:8b:
a1:38:48:5f:09:d4:56:b5:f1:dc:aa:9d:50:1e:0c:1c:53:82:
d4:9f:91:ee:1b:26:2c:42:ba:74:ff:cf:8e:23:f7:dc:3f:6a:
c6:ed:af:2e:ad:66:2f:c6:04:ba:85:ff:6d:8c:6b:de:29:d5:
03:58:6d:b5:cc:1a:cc:59:48:9d:4d:81:7a:1d:e4:13:de:cd:
d6:27:6d:2e:04:7c:93:ae:7e:95:94:49:ef:4f:47:c3:0c:a8:
3e:b8:6b:d0:b9:84:49:96:44:60:67:5e:9e:1e:b0:78:dc:25:
48:f0:9d:0b
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZb0kSTyXRNEzBhmVVikiNHhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjUwNTIxMjAzNzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmJlMWFiMDkwMmM5ZWFlZmRmY2NjMjExNWIyNTY5MmJkNTdlMzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gyjjhf5sZ0iWihJq7a3+kZmxbUp
9zuSGhwzFs6lGZx37SUpIIV1T5CVMznpVahJVd5W890kukoWMUkbpY31m9yM/qS2
VFKQLtTu/FXogStH2jxgaMs7nrOQSgx7YuWrc3tRcn5HiMOuJSABT5NkAm8fSS8q
EvDu7BOR5khedT5e8uqGfCPSv8rl6yBrZoRDSZX+Ky9zqL8FlMZYjKueomkdf4+4
EwSt6APzi1NoKM6PH59ggRBbOMqNg9YdHXwFcX7VV7ZSF79tPL9slrkj+j01+dvg
R6T4z7HgowAkRJCNgI08kMh40UxaBhdZyC+7xsFW1h7fwglfM9saRnaWUQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFKa+GrCQLJ6u/fzMIRWyVpK9V+OJMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvcHI0YXNKQXNucTc5X013aEZiSldrcjFYNDRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQDLgMoAwQE
LgNgAwQCLgPAAwQDLgPYAwQELugwAwQDLuhoMA0GCSqGSIb3DQEBCwUAA4IBAQB9
Obesae/WbN8HhOu0uRWRtufllLqKKh+nER9opOEs/ZSehWSOFP1JsnX+6K+Zfm8m
+PR8wWuq1tNhwwPSW0P+3RA1zHGXk1V/fXDRyzU6wWT/S4DJPGAAFYGSqIKCkCgJ
kt81xjNpoZcly0EcsDqtSzci5E6d262U3gLS3k2C1WTotLLJZnjtgvffDdLoFIuh
OEhfCdRWtfHcqp1QHgwcU4LUn5HuGyYsQrp0/8+OI/fcP2rG7a8urWYvxgS6hf9t
jGveKdUDWG21zBrMWUidTYF6HeQT3s3WJ20uBHyTrn6VlEnvT0fDDKg+uGvQuYRJ
lkRgZ16eHrB43CVI8J0L
-----END CERTIFICATE-----
Generated at Thu Jun 5 09:16:16 2025 by rpki-client