Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/ug8jauLXSX3hJZKRCp1uBANL82I.roa
File: ug8jauLXSX3hJZKRCp1uBANL82I.roa (raw, json)
Hash identifier: /2O/n14qyc84NhF2PxgEPYp0PSlAvbw0DSz9f86JMss=
Subject key identifier: BA:0F:23:6A:E2:D7:49:7D:E1:25:92:91:0A:9D:6E:04:03:4B:F3:62
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01964A9E9B43FFD30C37AFCE27EF48F1D2AD
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/ug8jauLXSX3hJZKRCp1uBANL82I.roa
Signing time: Fri 18 Apr 2025 20:37:10 +0000
ROA not before: Fri 18 Apr 2025 20:37:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209372
IP address blocks: 46.3.10.0/24 maxlen: 24
46.3.11.0/24 maxlen: 24
46.3.20.0/22 maxlen: 24
46.3.31.0/24 maxlen: 24
46.3.48.0/20 maxlen: 24
46.3.76.0/24 maxlen: 24
46.3.77.0/24 maxlen: 24
46.3.78.0/24 maxlen: 24
46.3.79.0/24 maxlen: 24
46.3.84.0/22 maxlen: 24
46.3.84.0/24 maxlen: 24
46.3.86.0/24 maxlen: 24
46.3.87.0/24 maxlen: 24
46.3.88.0/24 maxlen: 24
46.3.116.0/24 maxlen: 24
46.3.135.0/24 maxlen: 24
46.3.136.0/22 maxlen: 22
46.3.144.0/22 maxlen: 22
46.3.148.0/22 maxlen: 22
46.3.152.0/24 maxlen: 24
46.3.153.0/24 maxlen: 24
46.3.154.0/24 maxlen: 24
46.3.155.0/24 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.158.0/24 maxlen: 24
46.3.159.0/24 maxlen: 24
46.3.164.0/23 maxlen: 23
46.3.166.0/23 maxlen: 23
46.3.176.0/21 maxlen: 24
46.3.205.0/24 maxlen: 24
46.3.232.0/22 maxlen: 22
46.3.238.0/24 maxlen: 24
46.3.239.0/24 maxlen: 24
46.3.245.0/24 maxlen: 24
46.3.247.0/24 maxlen: 24
46.3.249.0/24 maxlen: 24
46.232.0.0/17 maxlen: 24
46.232.21.0/24 maxlen: 24
46.232.22.0/24 maxlen: 24
46.232.23.0/24 maxlen: 24
46.232.112.0/23 maxlen: 23
46.232.114.0/23 maxlen: 23
80.243.128.0/20 maxlen: 24
149.126.192.0/18 maxlen: 24
149.126.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Apr 2025 05:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:9e:9b:43:ff:d3:0c:37:af:ce:27:ef:48:f1:d2:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Apr 18 20:37:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba0f236ae2d7497de12592910a9d6e04034bf362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ff:29:47:e9:fd:15:ad:51:49:90:a7:52:b0:
49:91:56:20:c3:5f:c5:2f:4b:23:77:61:9e:4d:5e:
f0:e6:99:21:3a:98:d5:ed:65:e5:3a:f4:a7:37:54:
57:60:d9:ac:05:1c:22:54:8b:2d:41:1c:17:5a:6a:
4d:c8:62:82:54:74:f1:7b:69:12:ba:03:11:c2:08:
b7:f7:0c:fb:dc:d3:3c:8b:de:2c:b4:0a:00:b9:49:
7a:7f:73:f9:46:32:63:a1:c1:c0:75:28:90:dc:96:
fc:61:98:01:52:5e:73:a0:48:50:5a:29:fa:24:06:
dc:6b:17:b2:a3:10:1a:02:74:f8:60:47:c1:ee:0f:
2d:b7:02:e1:83:79:ef:bb:df:13:b9:47:1c:2a:77:
fb:94:17:71:48:3c:82:86:b8:9d:be:cb:99:58:7d:
04:f1:f0:c7:c2:53:d5:9c:31:d7:19:ac:92:c8:0a:
1c:d8:d1:86:f0:80:a7:c3:de:3c:7f:ac:dc:ab:92:
07:b4:6d:df:1e:bd:cd:5c:b3:19:16:67:d7:63:59:
4f:14:60:81:3d:14:b3:f5:07:27:f9:11:22:10:5a:
88:0e:dd:fd:12:fb:73:44:d3:64:9f:d0:2e:5f:52:
0e:e7:14:b0:d7:36:13:d3:48:05:79:e7:3e:e5:4a:
61:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0F:23:6A:E2:D7:49:7D:E1:25:92:91:0A:9D:6E:04:03:4B:F3:62
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/ug8jauLXSX3hJZKRCp1uBANL82I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.10.0/23
46.3.20.0/22
46.3.31.0/24
46.3.48.0/20
46.3.76.0/22
46.3.84.0-46.3.88.255
46.3.116.0/24
46.3.135.0-46.3.139.255
46.3.144.0/20
46.3.164.0/22
46.3.176.0/21
46.3.205.0/24
46.3.232.0/22
46.3.238.0/23
46.3.245.0/24
46.3.247.0/24
46.3.249.0/24
46.232.0.0/17
80.243.128.0/20
149.126.192.0/18
Signature Algorithm: sha256WithRSAEncryption
24:6b:c3:79:44:46:c5:88:70:6d:42:93:39:6c:f3:fb:fc:f2:
cd:42:11:76:19:b5:79:5b:bc:14:8b:5e:22:99:86:6f:9f:f2:
d3:6c:8b:a8:37:92:52:9e:9a:d8:75:d2:da:4f:33:4c:4c:c3:
f1:ee:6d:43:ca:c6:fd:7d:90:6f:46:ba:56:08:7e:6f:a5:c5:
ac:55:0e:b9:c6:a2:b6:53:e0:a1:92:ac:e9:d6:94:6f:9d:46:
ce:bd:ec:c6:e6:5c:4e:0c:61:22:d5:58:34:d6:dc:80:b3:51:
49:cc:a1:77:b2:a8:82:bd:dc:0b:9a:56:07:32:5a:0e:3c:d0:
3d:cb:11:af:58:a2:dc:cf:bc:c3:a7:9a:ff:5f:26:c0:05:01:
15:e0:1a:e7:89:14:ee:28:9b:7f:f6:e3:90:e0:86:a5:c6:0e:
b0:f9:75:ca:5e:c8:ae:5a:8e:a3:ae:59:a9:e4:29:b2:53:c3:
2e:15:1e:60:fe:93:b7:cf:f5:1c:ed:21:38:f2:3b:91:61:86:
20:87:03:e2:66:36:84:e5:d8:47:d9:f5:fe:cd:12:81:40:f2:
e3:d3:55:5b:27:41:89:81:1a:a7:24:c1:a1:14:3d:b8:7c:1d:
5f:87:a6:89:ba:3d:d9:a1:3c:60:42:fb:7b:e2:b2:dd:38:46:
ff:95:49:59
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgISAZZKnptD/9MMN6/OJ+9I8dKtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjUwNDE4MjAzNzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTBmMjM2YWUyZDc0OTdkZTEyNTkyOTEwYTlkNmUwNDAzNGJmMzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/8pR+n9Fa1RSZCnUrBJkVYgw1/F
L0sjd2GeTV7w5pkhOpjV7WXlOvSnN1RXYNmsBRwiVIstQRwXWmpNyGKCVHTxe2kS
ugMRwgi39wz73NM8i94stAoAuUl6f3P5RjJjocHAdSiQ3Jb8YZgBUl5zoEhQWin6
JAbcaxeyoxAaAnT4YEfB7g8ttwLhg3nvu98TuUccKnf7lBdxSDyChridvsuZWH0E
8fDHwlPVnDHXGaySyAoc2NGG8ICnw948f6zcq5IHtG3fHr3NXLMZFmfXY1lPFGCB
PRSz9Qcn+REiEFqIDt39EvtzRNNkn9AuX1IO5xSw1zYT00gFeec+5UphuQIDAQAB
o4ICkDCCAowwHQYDVR0OBBYEFLoPI2ri10l94SWSkQqdbgQDS/NiMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvdWc4amF1TFhTWDNoSlpLUkNwMXVCQU5MODJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGlBggrBgEFBQcBBwEB/wSBlTCBkjCBjwQCAAEwgYgDBAEu
AwoDBAIuAxQDBAAuAx8DBAQuAzADBAIuA0wwDAMEAi4DVAMEAC4DWAMEAC4DdDAM
AwQALgOHAwQCLgOIAwQELgOQAwQCLgOkAwQDLgOwAwQALgPNAwQCLgPoAwQBLgPu
AwQALgP1AwQALgP3AwQALgP5AwQHLugAAwQEUPOAAwQGlX7AMA0GCSqGSIb3DQEB
CwUAA4IBAQAka8N5REbFiHBtQpM5bPP7/PLNQhF2GbV5W7wUi14imYZvn/LTbIuo
N5JSnprYddLaTzNMTMPx7m1Dysb9fZBvRrpWCH5vpcWsVQ65xqK2U+Chkqzp1pRv
nUbOvezG5lxODGEi1Vg01tyAs1FJzKF3sqiCvdwLmlYHMloOPNA9yxGvWKLcz7zD
p5r/XybABQEV4BrniRTuKJt/9uOQ4Ialxg6w+XXKXsiuWo6jrlmp5CmyU8MuFR5g
/pO3z/Uc7SE48juRYYYghwPiZjaE5dhH2fX+zRKBQPLj01VbJ0GJgRqnJMGhFD24
fB1fh6aJuj3ZoTxgQvt74rLdOEb/lUlZ
-----END CERTIFICATE-----
Generated at Thu Jun 5 09:20:12 2025 by rpki-client