Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/uqPqjRdAF09NM6juZ5Pwcbu__D8.roa
File: uqPqjRdAF09NM6juZ5Pwcbu__D8.roa (raw, json)
Hash identifier: pPby4qVPxdO+KnwQ5nIANIUWsilKhneLa3P60+fsX1o=
Subject key identifier: BA:A3:EA:8D:17:40:17:4F:4D:33:A8:EE:67:93:F0:71:BB:BF:FC:3F
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01963B35997193DE1A18BB2FD15762EE1510
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/uqPqjRdAF09NM6juZ5Pwcbu__D8.roa
Signing time: Tue 15 Apr 2025 20:48:10 +0000
ROA not before: Tue 15 Apr 2025 20:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209372
IP address blocks: 46.3.10.0/24 maxlen: 24
46.3.11.0/24 maxlen: 24
46.3.20.0/22 maxlen: 24
46.3.31.0/24 maxlen: 24
46.3.48.0/20 maxlen: 24
46.3.76.0/24 maxlen: 24
46.3.77.0/24 maxlen: 24
46.3.78.0/24 maxlen: 24
46.3.79.0/24 maxlen: 24
46.3.84.0/22 maxlen: 24
46.3.84.0/24 maxlen: 24
46.3.86.0/24 maxlen: 24
46.3.87.0/24 maxlen: 24
46.3.88.0/24 maxlen: 24
46.3.116.0/24 maxlen: 24
46.3.135.0/24 maxlen: 24
46.3.136.0/22 maxlen: 22
46.3.144.0/22 maxlen: 22
46.3.148.0/22 maxlen: 22
46.3.152.0/24 maxlen: 24
46.3.153.0/24 maxlen: 24
46.3.154.0/24 maxlen: 24
46.3.155.0/24 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.158.0/24 maxlen: 24
46.3.159.0/24 maxlen: 24
46.3.164.0/23 maxlen: 23
46.3.166.0/23 maxlen: 23
46.3.205.0/24 maxlen: 24
46.3.232.0/22 maxlen: 22
46.3.238.0/24 maxlen: 24
46.3.239.0/24 maxlen: 24
46.3.245.0/24 maxlen: 24
46.3.247.0/24 maxlen: 24
46.3.249.0/24 maxlen: 24
46.232.0.0/17 maxlen: 24
46.232.21.0/24 maxlen: 24
46.232.22.0/24 maxlen: 24
46.232.23.0/24 maxlen: 24
46.232.112.0/23 maxlen: 23
46.232.114.0/23 maxlen: 23
80.243.128.0/20 maxlen: 24
149.126.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Apr 2025 06:49:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:35:99:71:93:de:1a:18:bb:2f:d1:57:62:ee:15:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Apr 15 20:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=baa3ea8d1740174f4d33a8ee6793f071bbbffc3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e4:fb:d5:ae:fd:03:89:16:62:bb:05:d8:e1:
6d:85:0c:3d:a8:a7:85:37:aa:96:e6:53:0b:96:e6:
92:eb:9c:85:07:a8:62:6d:d9:95:26:c8:a3:97:73:
58:5b:c8:7b:1f:78:61:84:5d:24:37:19:f7:c3:ad:
86:87:60:a2:f8:ce:66:e5:e2:2d:26:e4:a1:ef:a1:
65:1b:69:99:15:f5:35:a7:40:15:39:03:4a:4b:96:
b0:47:f7:52:48:d4:7d:af:05:ad:08:6f:bd:db:16:
3f:3b:3e:40:59:db:6f:c8:85:ca:ba:d8:89:6b:bc:
24:bc:aa:d1:62:1b:0c:0e:9a:49:c8:c3:48:6d:64:
bd:9e:5d:13:2d:77:f6:17:8c:9a:bf:c4:d0:9c:fe:
ca:4f:21:7c:ac:bb:ff:99:bc:bb:ac:bd:0c:05:04:
f5:9a:10:7b:ea:94:48:a0:f0:7e:28:07:b6:31:a9:
99:13:bf:e6:57:9b:2f:1f:ba:57:a0:5d:8e:10:93:
6a:91:19:c9:e4:66:c3:73:71:56:45:7d:4d:2a:ba:
12:79:9f:63:52:52:22:89:b2:62:c8:c1:dd:9e:f8:
3f:3a:8c:4b:fb:7c:2f:cd:e4:5b:c3:f0:fe:9c:e0:
ed:f2:1a:4d:85:15:f0:0f:b8:5f:98:7a:3b:af:fc:
c3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A3:EA:8D:17:40:17:4F:4D:33:A8:EE:67:93:F0:71:BB:BF:FC:3F
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/uqPqjRdAF09NM6juZ5Pwcbu__D8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.10.0/23
46.3.20.0/22
46.3.31.0/24
46.3.48.0/20
46.3.76.0/22
46.3.84.0-46.3.88.255
46.3.116.0/24
46.3.135.0-46.3.139.255
46.3.144.0/20
46.3.164.0/22
46.3.205.0/24
46.3.232.0/22
46.3.238.0/23
46.3.245.0/24
46.3.247.0/24
46.3.249.0/24
46.232.0.0/17
80.243.128.0/20
149.126.213.0/24
Signature Algorithm: sha256WithRSAEncryption
58:a9:b5:37:77:e6:60:a1:c4:ad:2e:d6:b9:d9:35:11:27:01:
49:e0:0e:0f:18:72:31:c1:98:20:73:14:2e:b0:0f:85:74:8e:
ec:c0:00:38:d1:db:94:2b:c1:07:30:2b:bc:2d:7b:15:08:bc:
9b:c6:d5:b7:45:56:9c:52:61:06:e7:5b:63:6f:8e:74:c0:9e:
26:46:bd:ed:9c:b4:b2:a2:61:18:d3:66:6c:6d:28:e4:e9:60:
de:83:ec:b9:a3:97:b6:c5:0b:33:9e:65:6d:7c:47:90:f4:a1:
9d:56:ca:5b:aa:06:fc:22:61:16:92:d4:bf:5f:c2:9d:a8:8b:
7d:e7:6e:b1:99:88:8d:f2:17:99:cf:16:73:3f:18:e4:cb:d3:
05:45:75:aa:56:ec:5e:43:6f:fb:5d:e1:2a:60:d2:82:72:f7:
06:ca:b7:91:38:97:0e:5c:53:7c:3e:9f:e0:06:8f:70:1c:c6:
12:bf:80:1c:49:bc:43:40:99:fe:0d:00:78:ee:bd:dd:9d:db:
89:ad:10:61:7c:5b:d3:43:c5:08:3c:ef:1d:1f:28:50:08:97:
b7:aa:01:cb:3f:51:6e:b3:81:62:c4:c9:cb:ea:8b:3b:26:56:
82:21:32:ce:5f:3a:b2:38:31:24:9f:d9:e5:ec:bf:69:54:9a:
d4:0e:ac:77
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgISAZY7NZlxk94aGLsv0Vdi7hUQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjUwNDE1MjA0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWEzZWE4ZDE3NDAxNzRmNGQzM2E4ZWU2NzkzZjA3MWJiYmZmYzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+T71a79A4kWYrsF2OFthQw9qKeF
N6qW5lMLluaS65yFB6hibdmVJsijl3NYW8h7H3hhhF0kNxn3w62Gh2Ci+M5m5eIt
JuSh76FlG2mZFfU1p0AVOQNKS5awR/dSSNR9rwWtCG+92xY/Oz5AWdtvyIXKutiJ
a7wkvKrRYhsMDppJyMNIbWS9nl0TLXf2F4yav8TQnP7KTyF8rLv/mby7rL0MBQT1
mhB76pRIoPB+KAe2MamZE7/mV5svH7pXoF2OEJNqkRnJ5GbDc3FWRX1NKroSeZ9j
UlIiibJiyMHdnvg/OoxL+3wvzeRbw/D+nODt8hpNhRXwD7hfmHo7r/zD+wIDAQAB
o4ICijCCAoYwHQYDVR0OBBYEFLqj6o0XQBdPTTOo7meT8HG7v/w/MB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvdXFQcWpSZEFGMDlOTTZqdVo1UHdjYnVfX0Q4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGfBggrBgEFBQcBBwEB/wSBjzCBjDCBiQQCAAEwgYIDBAEu
AwoDBAIuAxQDBAAuAx8DBAQuAzADBAIuA0wwDAMEAi4DVAMEAC4DWAMEAC4DdDAM
AwQALgOHAwQCLgOIAwQELgOQAwQCLgOkAwQALgPNAwQCLgPoAwQBLgPuAwQALgP1
AwQALgP3AwQALgP5AwQHLugAAwQEUPOAAwQAlX7VMA0GCSqGSIb3DQEBCwUAA4IB
AQBYqbU3d+ZgocStLta52TURJwFJ4A4PGHIxwZggcxQusA+FdI7swAA40duUK8EH
MCu8LXsVCLybxtW3RVacUmEG51tjb450wJ4mRr3tnLSyomEY02ZsbSjk6WDeg+y5
o5e2xQsznmVtfEeQ9KGdVspbqgb8ImEWktS/X8KdqIt9526xmYiN8heZzxZzPxjk
y9MFRXWqVuxeQ2/7XeEqYNKCcvcGyreROJcOXFN8Pp/gBo9wHMYSv4AcSbxDQJn+
DQB47r3dnduJrRBhfFvTQ8UIPO8dHyhQCJe3qgHLP1Fus4FixMnL6os7JlaCITLO
XzqyODEkn9nl7L9pVJrUDqx3
-----END CERTIFICATE-----
Generated at Mon Apr 21 16:11:34 2025 by rpki-client