Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/t3G-8rdLCayNsUsyhNHndH8CL5c.roa
File: t3G-8rdLCayNsUsyhNHndH8CL5c.roa (raw, json)
Hash identifier: TgtZ30vvJqGMqJFoEJnnfV1clNV+52lIOsWuYje/ALI=
Subject key identifier: B7:71:BE:F2:B7:4B:09:AC:8D:B1:4B:32:84:D1:E7:74:7F:02:2F:97
Certificate issuer: /CN=79b5134b11f940911f0ff315c948daa53f732ee0
Certificate serial: 019765B1743748E1837B1CB24E8F836F5B38
Authority key identifier: 79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/t3G-8rdLCayNsUsyhNHndH8CL5c.roa
Signing time: Thu 12 Jun 2025 19:50:17 +0000
ROA not before: Thu 12 Jun 2025 19:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52033
IP address blocks: 46.254.48.0/24 maxlen: 24
46.254.49.0/24 maxlen: 24
46.254.50.0/24 maxlen: 24
46.254.51.0/24 maxlen: 24
46.254.52.0/24 maxlen: 24
46.254.53.0/24 maxlen: 24
46.254.54.0/24 maxlen: 24
46.254.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Jun 2025 20:46:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:b1:74:37:48:e1:83:7b:1c:b2:4e:8f:83:6f:5b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79b5134b11f940911f0ff315c948daa53f732ee0
Validity
Not Before: Jun 12 19:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b771bef2b74b09ac8db14b3284d1e7747f022f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:92:99:ac:1a:97:0b:51:4f:39:17:c8:85:77:
7f:80:b7:e8:b1:21:2c:e8:35:5a:07:87:2a:50:05:
a2:17:05:69:f2:2a:ab:ce:e9:bd:1f:de:15:6f:45:
30:bd:9b:54:86:6d:44:73:c6:e7:6f:08:45:df:e3:
09:f0:d7:cb:de:38:ce:2e:b3:93:99:74:37:2c:6b:
4d:e9:4b:0c:93:64:d6:ed:f4:98:0e:87:16:25:71:
1e:c3:52:22:a9:f7:54:12:2f:16:71:3e:44:b8:06:
9a:3a:b0:df:11:05:b2:b6:06:bf:f1:36:f7:31:01:
9c:b4:98:bc:29:de:15:40:15:19:75:bd:73:4d:a9:
1d:28:51:ad:6f:bb:9e:f3:2b:8b:1b:80:31:c5:e9:
31:6b:f0:e6:50:37:a6:1f:91:e0:96:1d:a6:9c:97:
9c:15:94:d8:e5:0e:fe:33:5f:6f:f3:d6:26:03:bb:
53:e5:d8:c7:0a:b5:8b:25:6d:ad:ab:00:9a:52:e4:
98:0b:d5:ee:49:53:86:bb:17:da:4a:53:07:39:dd:
44:8c:ef:c2:87:e5:80:6f:5b:13:65:32:ce:d9:85:
d3:85:e0:da:59:e1:73:ca:87:cc:8b:7c:11:b3:1b:
e3:9a:17:34:e7:bd:e8:10:aa:1b:66:8a:96:a2:f8:
ef:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:71:BE:F2:B7:4B:09:AC:8D:B1:4B:32:84:D1:E7:74:7F:02:2F:97
X509v3 Authority Key Identifier:
keyid:79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/t3G-8rdLCayNsUsyhNHndH8CL5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.48.0/21
Signature Algorithm: sha256WithRSAEncryption
82:e3:76:55:fe:94:2a:57:c8:b4:38:f2:f1:44:9d:8b:58:1d:
4e:66:22:e0:8a:f4:63:24:89:9d:c3:fc:57:cc:a3:34:ca:36:
ca:1a:e7:9d:d3:2a:81:c4:c0:95:00:ff:5f:e5:0f:84:46:a7:
13:9d:21:e2:aa:69:c3:10:f9:ba:82:04:71:32:ca:7b:30:82:
1c:6d:0f:fa:5d:93:ae:73:4e:21:26:3f:dd:1d:15:d9:db:54:
70:41:77:14:4a:ff:80:c4:63:fa:fa:1b:3e:d9:ee:ea:85:82:
a8:4e:3e:04:a8:9f:55:fc:28:c3:5f:34:ec:99:75:1d:e4:7e:
4b:59:bc:d4:ca:f0:c2:86:8d:86:41:29:07:e1:b2:b9:95:26:
72:00:4d:b8:5c:4e:fb:6e:57:4f:11:ce:a2:c8:c6:50:a5:0d:
c9:75:af:3a:f2:ae:5b:1c:ec:b7:89:58:6a:47:e4:c3:5e:4a:
c2:5c:3e:48:23:86:cb:19:75:b9:33:57:d6:19:77:5b:5d:98:
03:b7:8e:ee:79:73:0d:98:14:67:e9:3f:41:53:37:cc:14:9d:
d4:d3:c7:8f:fd:c9:48:69:73:b9:44:88:2c:25:d4:93:18:6b:
08:2f:3c:72:2b:2e:b5:34:a4:3c:f0:61:75:7f:20:90:7f:f8:
49:1a:a1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 14:34:04 2025 by rpki-client