Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/SwZmeJUhEZJvccrYE8F5x7GA0Uw.roa
File: SwZmeJUhEZJvccrYE8F5x7GA0Uw.roa (raw, json)
Hash identifier: r+GRUIw4C4Lv6s7cHrVoh7FlsUP2lonaTvFpk361SSI=
Subject key identifier: 4B:06:66:78:95:21:11:92:6F:71:CA:D8:13:C1:79:C7:B1:80:D1:4C
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0195F2408789ACC6FB2D0F96BEEF5D8FFC6D
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/SwZmeJUhEZJvccrYE8F5x7GA0Uw.roa
Signing time: Tue 01 Apr 2025 16:47:49 +0000
ROA not before: Tue 01 Apr 2025 16:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 46.34.40.0/24 maxlen: 24
46.34.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Apr 2025 07:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f2:40:87:89:ac:c6:fb:2d:0f:96:be:ef:5d:8f:fc:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Apr 1 16:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b066678952111926f71cad813c179c7b180d14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:49:46:fe:01:31:01:88:02:27:1d:8b:0c:c9:
40:57:cb:76:ca:e4:f6:8e:7b:0e:fa:6f:24:f2:f3:
0d:25:14:88:d0:d8:00:0b:cc:2e:8f:88:8f:cf:dc:
b4:9e:a4:f1:eb:9e:45:e8:d7:c0:35:36:05:d3:85:
7d:3b:9b:7e:7b:2f:0b:02:cc:0f:d8:5f:93:19:96:
be:4c:6b:93:94:bf:ee:54:52:b6:63:57:70:92:29:
f3:69:b9:44:8d:87:d2:8a:4c:8d:e8:59:15:4d:d7:
62:b0:ad:67:43:d1:4f:d9:a8:e1:73:bd:70:c5:c0:
34:49:6a:d9:9c:f3:2a:31:45:6c:24:8a:b8:65:25:
28:be:d1:3b:1d:cb:56:5c:63:02:36:1f:65:31:25:
9d:bb:47:d2:bc:76:a9:7e:58:f3:d6:13:0d:fc:b3:
15:07:f0:99:73:a4:db:e3:9b:6c:a6:23:91:69:03:
0c:b9:58:05:b5:db:40:90:44:9e:1d:7a:d2:1e:5c:
bd:02:09:2d:ee:cc:4e:e2:d2:61:fb:66:8b:0f:ea:
ad:35:b8:e4:07:94:89:35:7a:ab:5c:c6:3d:51:8b:
31:89:36:92:c8:24:15:f4:c5:21:90:76:f1:a3:98:
44:81:3d:c8:74:4e:ef:b5:d2:fd:3f:92:57:a3:58:
ba:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:06:66:78:95:21:11:92:6F:71:CA:D8:13:C1:79:C7:B1:80:D1:4C
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/SwZmeJUhEZJvccrYE8F5x7GA0Uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.40.0/23
Signature Algorithm: sha256WithRSAEncryption
78:8e:2e:11:d1:2e:13:66:05:37:fe:96:61:49:75:48:62:63:
17:09:fc:50:d8:bc:d5:6a:75:75:c5:4b:9f:a6:a6:da:b3:4c:
b1:89:1d:22:a1:fb:71:dc:d6:31:36:e3:14:06:ea:27:d7:b6:
2a:2b:32:17:91:a9:a1:de:49:6b:ec:bd:88:47:a0:a5:df:ff:
d5:fd:d7:a1:0f:2d:f2:3f:c1:5c:cc:6d:0b:f1:32:94:6a:11:
d4:3e:0e:52:90:26:1c:c6:75:8a:0e:bf:65:6a:c7:c2:77:04:
8e:7a:75:08:5e:18:21:47:9c:95:5f:89:ec:cb:35:d4:65:7c:
ac:6a:15:1c:56:f3:17:8b:e5:ff:bd:3d:e5:e2:77:fc:d7:2d:
91:54:b3:21:55:e7:6a:52:21:59:8f:c7:cf:a3:62:bf:5a:34:
16:2a:35:33:93:99:33:52:85:53:33:02:a2:a0:c4:64:78:0c:
35:50:c8:05:06:45:16:e8:14:10:c5:ba:50:50:1a:20:9a:b6:
23:ea:08:21:4b:a3:21:5a:ac:6d:06:61:6f:72:73:9f:96:38:
d2:e6:ec:ba:1e:de:59:82:55:2c:7a:bc:ba:5f:1b:80:92:34:
34:a7:73:e3:95:47:6d:82:de:7e:2d:82:ec:b0:9e:91:89:0e:
f9:6b:cf:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:22:10 2025 by rpki-client