Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/rD2zuN5ZLqoG0LFwmpjjDDoDO0s.roa
File: rD2zuN5ZLqoG0LFwmpjjDDoDO0s.roa (raw, json)
Hash identifier: pC9JJZdocJbNIUDe7J4S5FuUC+VdyhSN+w0Mx+d5jXU=
Subject key identifier: AC:3D:B3:B8:DE:59:2E:AA:06:D0:B1:70:9A:98:E3:0C:3A:03:3B:4B
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01963D5BD4E0DBA82FDFD0632090362A778D
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/rD2zuN5ZLqoG0LFwmpjjDDoDO0s.roa
Signing time: Wed 16 Apr 2025 06:49:10 +0000
ROA not before: Wed 16 Apr 2025 06:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209372
IP address blocks: 46.3.10.0/24 maxlen: 24
46.3.11.0/24 maxlen: 24
46.3.20.0/22 maxlen: 24
46.3.31.0/24 maxlen: 24
46.3.48.0/20 maxlen: 24
46.3.76.0/24 maxlen: 24
46.3.77.0/24 maxlen: 24
46.3.78.0/24 maxlen: 24
46.3.79.0/24 maxlen: 24
46.3.84.0/22 maxlen: 24
46.3.84.0/24 maxlen: 24
46.3.86.0/24 maxlen: 24
46.3.87.0/24 maxlen: 24
46.3.88.0/24 maxlen: 24
46.3.116.0/24 maxlen: 24
46.3.135.0/24 maxlen: 24
46.3.136.0/22 maxlen: 22
46.3.144.0/22 maxlen: 22
46.3.148.0/22 maxlen: 22
46.3.152.0/24 maxlen: 24
46.3.153.0/24 maxlen: 24
46.3.154.0/24 maxlen: 24
46.3.155.0/24 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.158.0/24 maxlen: 24
46.3.159.0/24 maxlen: 24
46.3.164.0/23 maxlen: 23
46.3.166.0/23 maxlen: 23
46.3.205.0/24 maxlen: 24
46.3.232.0/22 maxlen: 22
46.3.238.0/24 maxlen: 24
46.3.239.0/24 maxlen: 24
46.3.245.0/24 maxlen: 24
46.3.247.0/24 maxlen: 24
46.3.249.0/24 maxlen: 24
46.232.0.0/17 maxlen: 24
46.232.21.0/24 maxlen: 24
46.232.22.0/24 maxlen: 24
46.232.23.0/24 maxlen: 24
46.232.112.0/23 maxlen: 23
46.232.114.0/23 maxlen: 23
80.243.128.0/20 maxlen: 24
149.126.192.0/18 maxlen: 24
149.126.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Apr 2025 20:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:5b:d4:e0:db:a8:2f:df:d0:63:20:90:36:2a:77:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Apr 16 06:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac3db3b8de592eaa06d0b1709a98e30c3a033b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fe:7b:32:aa:dd:af:ad:37:e7:4f:72:b6:3a:
5e:cd:45:9b:31:7f:ec:9b:f5:d6:3b:96:3d:08:0f:
9f:f6:94:1f:ea:91:f4:2f:9d:15:0e:8d:ad:cb:72:
68:d2:e1:f4:a4:34:37:65:28:53:e2:cb:68:b8:e6:
e5:0e:fe:98:c1:f2:cb:03:e5:ce:d7:08:9d:9e:36:
dc:1f:dc:90:1b:9c:37:96:df:76:2d:ff:40:56:0b:
16:3d:86:6a:b3:52:0c:30:78:a2:d3:bf:5b:54:9b:
b9:39:09:b0:eb:82:10:34:33:6e:2b:31:b1:99:2e:
36:24:75:40:d7:91:6e:2a:f3:e0:07:71:f0:2a:ca:
79:c7:07:10:ae:65:a5:ea:a0:be:36:62:4f:2b:84:
e4:dc:40:7b:92:c5:31:ca:74:59:51:4a:65:16:7e:
d2:b2:bc:da:00:ba:9c:f0:cd:c5:21:ee:14:56:22:
6d:01:e9:ae:ab:33:ba:b4:37:e9:52:a4:6b:43:26:
0d:7a:c1:04:5f:b7:f0:8d:7b:6f:ae:09:f9:f1:23:
94:5a:90:2a:ce:8a:ea:62:62:bc:7e:21:45:a4:36:
80:48:ff:48:b3:47:07:1a:5b:d5:97:dd:71:64:0d:
82:cd:47:9f:fe:53:2a:12:a3:8e:3f:7e:2b:85:9a:
0b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3D:B3:B8:DE:59:2E:AA:06:D0:B1:70:9A:98:E3:0C:3A:03:3B:4B
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/rD2zuN5ZLqoG0LFwmpjjDDoDO0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.10.0/23
46.3.20.0/22
46.3.31.0/24
46.3.48.0/20
46.3.76.0/22
46.3.84.0-46.3.88.255
46.3.116.0/24
46.3.135.0-46.3.139.255
46.3.144.0/20
46.3.164.0/22
46.3.205.0/24
46.3.232.0/22
46.3.238.0/23
46.3.245.0/24
46.3.247.0/24
46.3.249.0/24
46.232.0.0/17
80.243.128.0/20
149.126.192.0/18
Signature Algorithm: sha256WithRSAEncryption
36:f5:27:28:a4:52:67:c3:66:90:85:bc:78:c1:15:48:1d:9e:
4f:86:cc:48:e8:9d:c3:ea:c3:58:97:52:b4:dd:93:11:27:2c:
b3:0c:fc:c0:ec:0d:ac:08:26:e8:71:91:98:9f:67:e7:2f:b2:
dc:ed:81:98:ca:eb:5b:9d:1a:cc:89:b7:73:5d:9d:f6:1e:df:
17:30:74:05:ba:cd:b5:bb:d6:ce:a7:20:6b:64:a5:d7:60:7d:
29:ee:8f:9f:2b:e0:94:4e:fd:0e:6b:63:46:37:51:13:8a:9e:
35:d5:e6:15:0c:c8:0f:79:1d:c4:27:48:27:ad:52:e9:59:a6:
9f:89:48:8f:5d:d6:bf:37:ce:64:d2:4c:67:6e:18:1e:6d:ba:
8d:43:39:43:49:d5:84:77:10:28:64:43:04:d8:b2:24:09:4b:
93:e3:ce:1f:45:4b:c0:fd:63:a4:6a:b1:41:f0:c8:4f:d1:78:
52:be:9b:ad:8d:cf:14:3e:7c:49:f4:f9:38:2f:f4:f0:1c:52:
e5:dd:f3:2c:f5:1c:8f:0f:a2:ea:34:e8:5e:ff:11:09:98:a8:
ff:d4:e3:be:c5:9a:3d:79:06:73:5d:3b:c8:64:df:9d:80:8d:
74:26:eb:df:06:23:25:22:18:14:15:33:21:aa:08:17:d2:50:
07:b7:db:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:15:32 2025 by rpki-client