Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/I5pELXZi6IpXeU33NYuPrvAfFq8.roa
File: I5pELXZi6IpXeU33NYuPrvAfFq8.roa (raw, json)
Hash identifier: 9hKrFpNvgo1HAkXGnuqQDypM/qx+fSP6uAAfkmA0VAw=
Subject key identifier: 23:9A:44:2D:76:62:E8:8A:57:79:4D:F7:35:8B:8F:AE:F0:1F:16:AF
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0196B1ED72B5603F920ACBAFC888900657BB
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/I5pELXZi6IpXeU33NYuPrvAfFq8.roa
Signing time: Thu 08 May 2025 22:04:10 +0000
ROA not before: Thu 08 May 2025 22:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 18 May 2025 06:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:ed:72:b5:60:3f:92:0a:cb:af:c8:88:90:06:57:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: May 8 22:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=239a442d7662e88a57794df7358b8faef01f16af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ee:47:44:7e:ce:62:64:43:b9:ee:a6:8f:47:
de:7a:ef:b9:cb:fe:de:e4:09:0b:5b:20:04:6a:39:
5a:a9:be:28:f2:34:97:f7:7b:29:9d:92:42:95:a4:
81:20:dc:d9:fe:ba:8c:20:fa:05:11:76:a3:aa:f8:
c3:a1:9c:73:f0:3b:e5:c2:82:22:d7:be:27:fe:11:
6e:e7:31:21:fb:f5:78:1f:16:fa:ec:a6:09:6d:c7:
49:5b:2b:2f:04:19:d0:13:8f:69:72:af:d4:8c:ad:
1f:b8:29:16:16:42:9b:fb:ad:f3:6e:c5:26:8d:f8:
6f:7e:fa:e4:41:00:d9:d8:e5:15:2a:46:d9:83:cf:
06:a1:a3:c0:0c:7f:70:ea:a2:dd:ba:1f:ed:12:c6:
86:5d:a2:38:89:1b:7b:ed:d6:02:1f:5a:21:46:20:
b0:f8:07:c9:e6:44:ed:c0:8f:f9:28:53:b6:dc:2e:
5c:e9:68:15:34:cb:c7:d2:74:46:32:5e:a5:95:3b:
94:75:81:a1:82:f8:99:b1:54:f9:ce:a9:44:47:d6:
c4:d9:ff:43:83:50:1c:68:e9:76:b8:25:30:03:2b:
a9:74:9c:6d:4f:46:8b:82:e6:77:8f:e7:eb:46:43:
e3:f9:50:c2:24:1e:e1:85:e2:bc:4c:fd:67:80:9e:
b5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9A:44:2D:76:62:E8:8A:57:79:4D:F7:35:8B:8F:AE:F0:1F:16:AF
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/I5pELXZi6IpXeU33NYuPrvAfFq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
46.37.121.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:1e:29:c3:70:aa:b0:a3:13:d1:14:2f:3f:35:96:7d:7b:ee:
75:f7:bd:93:ae:8a:17:64:76:b6:dd:dd:7f:ab:cc:f8:52:76:
ad:d7:56:d7:c5:27:88:bc:e9:cd:99:56:39:12:b6:7c:95:6f:
80:06:74:02:9d:dd:49:28:e6:87:5d:c1:2c:bd:22:24:b3:e6:
b7:9a:8d:3e:c8:20:0f:7f:35:d7:ce:cc:9c:6b:bd:2a:3a:f7:
74:1e:ec:c6:30:c8:27:69:0b:dd:2e:4c:4d:a4:59:f6:14:d2:
b4:f0:5b:8d:64:0c:08:ab:5e:84:ba:a8:a4:e6:9a:97:9f:df:
fb:c9:b5:69:19:71:44:bd:b8:e3:24:57:65:33:1e:a5:ff:ca:
f5:ab:c9:c8:80:b7:a0:54:b7:7a:97:b8:76:9b:d8:6f:d2:62:
6a:de:22:7a:69:85:54:c5:e1:3d:1d:d1:ab:44:c4:05:4c:90:
44:db:71:6d:f3:4f:f0:b2:56:28:67:b8:85:e9:b4:ed:77:90:
dd:db:7e:9a:7d:a7:0b:2a:ce:70:d0:10:a3:2f:d8:15:02:3b:
cf:12:93:4d:6f:f6:a7:b5:b1:de:f1:b7:cb:c8:d3:1b:19:25:
fb:58:11:24:1a:8c:71:cf:02:0a:bc:11:6c:08:ab:e7:75:f0:
2f:6a:52:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:21:45 2025 by rpki-client