Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/0p-aEg-GSU908LIi7BfrW2trqbM.roa
File: 0p-aEg-GSU908LIi7BfrW2trqbM.roa (raw, json)
Hash identifier: phDfGuiYD9kMh2ltN/ULDUNEuke4zbvHf/dZNtvxYzs=
Subject key identifier: D2:9F:9A:12:0F:86:49:4F:74:F0:B2:22:EC:17:EB:5B:6B:6B:A9:B3
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01972D86BF54D93758936881734414F63D02
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/0p-aEg-GSU908LIi7BfrW2trqbM.roa
Signing time: Sun 01 Jun 2025 22:04:54 +0000
ROA not before: Sun 01 Jun 2025 22:04:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
185.92.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 12:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2d:86:bf:54:d9:37:58:93:68:81:73:44:14:f6:3d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jun 1 22:04:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d29f9a120f86494f74f0b222ec17eb5b6b6ba9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e5:02:cb:0e:b2:31:a8:0d:f7:21:aa:aa:4b:
ee:8f:e9:37:8f:c0:be:bf:3d:03:57:ae:41:02:af:
c6:df:b6:e6:08:38:a8:e1:c0:fc:df:f7:a1:ef:07:
d8:57:77:a5:ae:99:f0:bb:1f:2a:9d:ad:69:94:73:
83:87:19:c2:7b:af:97:98:03:39:e3:df:93:ba:65:
1f:e7:b1:22:c1:85:9b:8b:67:25:c5:66:dd:a0:c2:
05:5f:e6:1f:5c:c7:8d:dd:8b:8f:11:1f:73:87:5c:
2c:00:54:df:1b:b6:5b:2a:6a:df:f5:64:38:fa:e1:
ad:14:54:11:e2:43:db:74:78:9e:a7:6a:8c:f4:0b:
7b:01:9b:b6:0d:da:4e:b3:40:0a:98:f5:28:8a:ee:
b7:a5:6a:84:66:9b:61:95:a3:c3:cc:58:72:5b:09:
63:c0:3f:a9:8e:ad:dd:8d:d3:a4:db:71:c4:01:d5:
4c:12:7b:df:e4:4f:79:f3:ab:7a:1a:d3:78:93:70:
da:2d:65:ca:8d:72:3e:63:19:5e:c1:12:b9:70:23:
cd:4c:23:3e:b4:ac:70:84:3b:63:28:80:f3:e8:ca:
73:c4:f4:9d:06:0b:4b:20:d7:73:5e:9f:b4:10:2a:
5c:b1:0f:38:1b:24:b3:c8:fa:04:80:2a:d3:e3:f6:
d3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9F:9A:12:0F:86:49:4F:74:F0:B2:22:EC:17:EB:5B:6B:6B:A9:B3
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/0p-aEg-GSU908LIi7BfrW2trqbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
185.92.44.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:7b:c8:a9:19:d8:5b:78:4b:e4:23:f8:fc:42:a9:15:9c:59:
1c:5d:87:33:b1:49:b5:83:da:20:d6:e9:d1:e3:95:95:95:0c:
c1:79:1b:7f:66:2e:31:dd:2c:28:f6:9c:27:bc:50:1a:79:d7:
6c:9c:93:eb:00:8b:e6:85:25:8d:3f:2d:5f:71:21:0c:cd:69:
32:a1:e6:f2:2e:ef:93:e9:3e:7d:79:82:83:42:91:3c:3a:c8:
39:ce:cb:c7:ea:80:57:f5:ef:69:87:52:ee:8e:6a:13:dd:f4:
5d:78:fa:27:16:4f:36:5b:f1:97:f1:23:2c:75:60:83:19:ab:
7b:d2:a8:01:a4:30:7c:86:eb:03:d8:46:3b:f6:97:8b:14:e8:
26:10:bb:a6:12:17:4e:ad:cd:8b:d9:91:02:7f:36:f0:30:69:
68:27:12:8b:e4:2b:27:69:aa:c2:f6:26:2c:dc:66:8a:04:76:
95:22:4d:35:d9:2c:2c:6b:d2:64:75:52:71:a1:f2:3c:51:b1:
56:ca:8c:3f:be:b1:77:24:ee:84:15:7a:5b:c3:ac:0a:01:2b:
5e:49:2f:8b:24:89:ea:b4:88:82:bc:06:4e:df:02:c6:dd:d4:
2c:98:66:01:47:ba:cb:7f:42:a4:92:12:06:40:e4:17:7e:13:
4c:31:55:fd
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZcthr9U2TdYk2iBc0QU9j0CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjUwNjAxMjIwNDU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjlmOWExMjBmODY0OTRmNzRmMGIyMjJlYzE3ZWI1YjZiNmJhOWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+UCyw6yMagN9yGqqkvuj+k3j8C+
vz0DV65BAq/G37bmCDio4cD83/eh7wfYV3elrpnwux8qna1plHODhxnCe6+XmAM5
49+TumUf57EiwYWbi2clxWbdoMIFX+YfXMeN3YuPER9zh1wsAFTfG7ZbKmrf9WQ4
+uGtFFQR4kPbdHiep2qM9At7AZu2DdpOs0AKmPUoiu63pWqEZpthlaPDzFhyWwlj
wD+pjq3djdOk23HEAdVMEnvf5E9586t6GtN4k3DaLWXKjXI+YxlewRK5cCPNTCM+
tKxwhDtjKIDz6MpzxPSdBgtLINdzXp+0ECpcsQ84GySzyPoEgCrT4/bT3QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNKfmhIPhklPdPCyIuwX61tra6mzMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvMHAtYUVnLUdTVTkwOExJaTdCZnJXMnRycWJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALiViAwQA
LiVxAwQAuVwsMA0GCSqGSIb3DQEBCwUAA4IBAQBve8ipGdhbeEvkI/j8QqkVnFkc
XYczsUm1g9og1unR45WVlQzBeRt/Zi4x3Swo9pwnvFAaeddsnJPrAIvmhSWNPy1f
cSEMzWkyoebyLu+T6T59eYKDQpE8Osg5zsvH6oBX9e9ph1LujmoT3fRdePonFk82
W/GX8SMsdWCDGat70qgBpDB8husD2EY79peLFOgmELumEhdOrc2L2ZECfzbwMGlo
JxKL5CsnaarC9iYs3GaKBHaVIk012Swsa9JkdVJxofI8UbFWyow/vrF3JO6EFXpb
w6wKASteSS+LJInqtIiCvAZO3wLG3dQsmGYBR7rLf0KkkhIGQOQXfhNMMVX9
-----END CERTIFICATE-----
Generated at Thu Jun 5 07:25:50 2025 by rpki-client