Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/3dzCDtY_-zTJLqOAqqotsjgwb10.roa
File: 3dzCDtY_-zTJLqOAqqotsjgwb10.roa (raw, json)
Hash identifier: Gml6Os7dkgPkt1gz//vygx+etTonUveQDY7r7Q/510I=
Subject key identifier: DD:DC:C2:0E:D6:3F:FB:34:C9:2E:A3:80:AA:AA:2D:B2:38:30:6F:5D
Certificate issuer: /CN=79b5134b11f940911f0ff315c948daa53f732ee0
Certificate serial: 019765BB8617B0FF27BEDE7E408AB78E4228
Authority key identifier: 79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/3dzCDtY_-zTJLqOAqqotsjgwb10.roa
Signing time: Thu 12 Jun 2025 20:01:17 +0000
ROA not before: Thu 12 Jun 2025 20:01:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42216
IP address blocks: 46.254.49.0/24 maxlen: 24
46.254.50.0/24 maxlen: 24
46.254.51.0/24 maxlen: 24
46.254.52.0/24 maxlen: 24
46.254.53.0/24 maxlen: 24
46.254.54.0/24 maxlen: 24
46.254.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Jun 2025 20:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:bb:86:17:b0:ff:27:be:de:7e:40:8a:b7:8e:42:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79b5134b11f940911f0ff315c948daa53f732ee0
Validity
Not Before: Jun 12 20:01:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dddcc20ed63ffb34c92ea380aaaa2db238306f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cc:66:a1:3a:9d:14:d6:cc:37:26:df:8e:8c:
5b:14:4e:96:e6:3d:6f:7f:ea:36:cd:a5:5e:5a:66:
ea:ff:df:5b:e7:4e:87:73:41:2c:31:f6:9f:a5:c0:
a8:8d:59:60:db:19:d3:65:8e:35:49:19:a0:0b:9e:
45:30:44:6d:a5:71:2a:27:6e:89:d5:67:36:5b:88:
bb:aa:5d:73:7d:97:b1:67:6e:9b:f8:92:e3:af:cf:
69:94:28:35:cf:c5:17:d5:28:53:78:54:89:3a:87:
58:fc:3f:2d:2e:6c:a9:df:c8:22:26:34:26:9c:89:
eb:d3:ed:d9:83:e5:81:b0:de:0b:2a:7c:04:44:1c:
cc:f8:3d:ae:77:b5:2f:78:13:a3:5b:ee:cb:49:34:
3f:7f:5a:2e:a4:15:79:ee:72:25:17:9a:bd:ee:c8:
5c:53:c3:1c:61:df:9d:4c:49:a2:42:1d:5b:f7:96:
fe:91:7a:b7:a2:cc:3e:8c:2c:a5:d7:6f:d2:2b:43:
be:d9:3c:6c:e2:5f:53:dc:29:73:3a:22:dd:84:3c:
ff:0d:ab:2f:b0:bd:a5:bf:d0:ce:9a:85:89:23:6a:
b4:9a:ab:24:4a:85:d9:d8:5a:2f:6b:15:68:b4:58:
e2:a1:c9:06:b0:c2:3e:3e:96:59:d4:97:24:96:fa:
a8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DC:C2:0E:D6:3F:FB:34:C9:2E:A3:80:AA:AA:2D:B2:38:30:6F:5D
X509v3 Authority Key Identifier:
keyid:79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/3dzCDtY_-zTJLqOAqqotsjgwb10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.49.0-46.254.55.255
Signature Algorithm: sha256WithRSAEncryption
77:08:27:7f:1f:49:f8:68:29:8b:19:d1:0c:a7:e7:6e:a5:64:
40:b7:b3:94:77:48:98:57:bc:e2:a9:c9:b8:91:bd:a3:4b:67:
93:46:fc:fd:d8:bd:83:5d:e8:0a:3b:ac:08:e8:10:46:dd:2f:
7c:ed:78:67:10:9e:8f:29:b4:d9:ac:3d:ad:0a:bd:1f:1e:34:
2c:8d:41:4d:75:00:1e:67:9c:70:88:88:54:77:16:8f:fa:51:
45:7c:7e:81:45:76:f6:0d:9a:69:31:60:b1:33:6f:0d:98:ac:
00:3d:a0:c7:e0:24:55:d5:2f:a5:8b:e3:ee:49:40:f1:bc:2a:
f6:0c:d9:c4:23:76:2b:17:29:3d:9e:4f:46:be:47:67:e4:5a:
ba:ca:9a:1d:b2:0e:16:b3:61:fd:58:6a:f0:cb:d0:89:4d:5d:
1d:b0:a8:08:62:76:a0:a7:2e:6a:23:8a:3d:ef:b3:cd:58:01:
9a:e2:c0:b6:db:51:df:90:3c:b1:75:65:fa:fb:49:1c:9b:da:
91:ae:fc:7b:22:a9:80:85:99:f1:0f:4b:bc:7d:6d:d9:11:fa:
e0:e8:0a:ee:67:30:1e:76:42:75:60:7c:f0:9f:fb:95:70:3d:
ff:09:13:8a:9d:6d:53:80:bc:29:f6:7d:e2:6c:a1:b7:2a:d5:
61:8e:3b:9d
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZdlu4YXsP8nvt5+QIq3jkIoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YjUxMzRiMTFmOTQwOTExZjBmZjMxNWM5NDhkYWE1M2Y3
MzJlZTAwHhcNMjUwNjEyMjAwMTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZGRjYzIwZWQ2M2ZmYjM0YzkyZWEzODBhYWFhMmRiMjM4MzA2ZjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MxmoTqdFNbMNybfjoxbFE6W5j1v
f+o2zaVeWmbq/99b506Hc0EsMfafpcCojVlg2xnTZY41SRmgC55FMERtpXEqJ26J
1Wc2W4i7ql1zfZexZ26b+JLjr89plCg1z8UX1ShTeFSJOodY/D8tLmyp38giJjQm
nInr0+3Zg+WBsN4LKnwERBzM+D2ud7UveBOjW+7LSTQ/f1oupBV57nIlF5q97shc
U8McYd+dTEmiQh1b95b+kXq3osw+jCyl12/SK0O+2Txs4l9T3ClzOiLdhDz/Dasv
sL2lv9DOmoWJI2q0mqskSoXZ2FovaxVotFjiockGsMI+PpZZ1JcklvqozwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFN3cwg7WP/s0yS6jgKqqLbI4MG9dMB8GA1UdIwQY
MBaAFHm1E0sR+UCRHw/zFclI2qU/cy7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWJVVFN4SDVRSkVmRF9NVnlVamFwVDl6THVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81ZTA5OTQtOTRkMi00NmUxLTgwNjYt
Y2VjMjJlYTc5NTEzLzEvM2R6Q0R0WV8telRKTHFPQXFxb3Rzamd3YjEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS81ZTA5OTQtOTRkMi00NmUxLTgwNjYtY2VjMjJlYTc5NTEz
LzEvZWJVVFN4SDVRSkVmRF9NVnlVamFwVDl6THVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAu/jED
BAMu/jAwDQYJKoZIhvcNAQELBQADggEBAHcIJ38fSfhoKYsZ0Qyn526lZEC3s5R3
SJhXvOKpybiRvaNLZ5NG/P3YvYNd6Ao7rAjoEEbdL3zteGcQno8ptNmsPa0KvR8e
NCyNQU11AB5nnHCIiFR3Fo/6UUV8foFFdvYNmmkxYLEzbw2YrAA9oMfgJFXVL6WL
4+5JQPG8KvYM2cQjdisXKT2eT0a+R2fkWrrKmh2yDhazYf1YavDL0IlNXR2wqAhi
dqCnLmojij3vs81YAZriwLbbUd+QPLF1Zfr7SRyb2pGu/HsiqYCFmfEPS7x9bdkR
+uDoCu5nMB52QnVgfPCf+5VwPf8JE4qdbVOAvCn2feJsobcq1WGOO50=
-----END CERTIFICATE-----
Generated at Thu Jun 19 18:58:46 2025 by rpki-client