Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/QtbHklDkWaJ3JiK55dRXPR_kTr0.roa
File: QtbHklDkWaJ3JiK55dRXPR_kTr0.roa (raw, json)
Hash identifier: 5x+fj6xlAgUsfTFQs4cJc30kGezNS2ts7BntKzu46UQ=
Subject key identifier: 42:D6:C7:92:50:E4:59:A2:77:26:22:B9:E5:D4:57:3D:1F:E4:4E:BD
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01974078A698C71722D651ABE6EA7F6825EB
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/QtbHklDkWaJ3JiK55dRXPR_kTr0.roa
Signing time: Thu 05 Jun 2025 14:22:18 +0000
ROA not before: Thu 05 Jun 2025 14:22:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209372
IP address blocks: 46.3.0.0/22 maxlen: 24
46.3.10.0/24 maxlen: 24
46.3.11.0/24 maxlen: 24
46.3.20.0/22 maxlen: 24
46.3.48.0/20 maxlen: 24
46.3.76.0/24 maxlen: 24
46.3.77.0/24 maxlen: 24
46.3.78.0/24 maxlen: 24
46.3.79.0/24 maxlen: 24
46.3.84.0/22 maxlen: 24
46.3.84.0/24 maxlen: 24
46.3.86.0/24 maxlen: 24
46.3.87.0/24 maxlen: 24
46.3.88.0/24 maxlen: 24
46.3.116.0/24 maxlen: 24
46.3.135.0/24 maxlen: 24
46.3.136.0/22 maxlen: 22
46.3.144.0/22 maxlen: 22
46.3.148.0/22 maxlen: 22
46.3.152.0/24 maxlen: 24
46.3.153.0/24 maxlen: 24
46.3.154.0/24 maxlen: 24
46.3.155.0/24 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.158.0/24 maxlen: 24
46.3.159.0/24 maxlen: 24
46.3.164.0/23 maxlen: 23
46.3.166.0/23 maxlen: 23
46.3.176.0/21 maxlen: 24
46.3.205.0/24 maxlen: 24
46.3.232.0/22 maxlen: 22
46.3.238.0/24 maxlen: 24
46.3.239.0/24 maxlen: 24
46.3.245.0/24 maxlen: 24
46.3.247.0/24 maxlen: 24
46.3.249.0/24 maxlen: 24
46.232.0.0/17 maxlen: 24
46.232.21.0/24 maxlen: 24
46.232.22.0/24 maxlen: 24
46.232.23.0/24 maxlen: 24
46.232.112.0/23 maxlen: 23
46.232.114.0/23 maxlen: 23
80.243.128.0/20 maxlen: 24
149.126.192.0/18 maxlen: 24
149.126.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jun 2025 15:57:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:40:78:a6:98:c7:17:22:d6:51:ab:e6:ea:7f:68:25:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jun 5 14:22:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42d6c79250e459a2772622b9e5d4573d1fe44ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9e:99:fd:44:92:a8:b4:b7:4e:8a:c3:eb:2f:
a7:ed:3b:65:5c:d2:b3:dc:b9:9f:f1:22:f8:25:62:
1e:d3:3a:d2:be:0d:22:19:fc:85:43:72:c1:04:aa:
c4:a1:bf:9f:86:cd:0a:63:1f:d4:c4:1e:4c:b1:78:
4c:61:fc:aa:1b:fc:0b:1e:09:11:93:e2:93:03:9a:
7a:8a:9f:f5:72:15:eb:cb:fa:71:cf:1d:9a:f3:62:
a6:4a:92:66:61:28:51:16:a5:15:c7:45:5a:02:dc:
22:6b:58:61:95:dd:a5:5e:f4:f7:31:be:71:00:fb:
70:34:3e:74:e3:bd:88:d0:86:c8:36:2d:2a:e3:b4:
7f:5b:44:21:ad:5a:7a:af:18:d8:61:0d:20:c9:b7:
0d:66:f8:4e:78:18:84:95:b2:71:3c:1b:a3:0e:67:
73:fa:29:db:13:6a:05:a1:7b:3b:97:f1:f9:9f:ae:
1d:79:82:76:1d:6f:6c:4e:6b:8b:d9:1d:5c:15:a3:
df:a4:58:5f:0a:4d:79:0b:76:a4:6f:a5:45:3b:da:
e4:17:31:7d:d4:f4:fb:87:d6:6b:97:65:4f:b8:6c:
f2:4a:5a:ac:82:6a:88:2f:17:ea:c7:e5:b3:43:24:
57:af:4b:ca:91:7c:f5:a0:26:96:08:08:5e:68:57:
7d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D6:C7:92:50:E4:59:A2:77:26:22:B9:E5:D4:57:3D:1F:E4:4E:BD
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/QtbHklDkWaJ3JiK55dRXPR_kTr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.0.0/22
46.3.10.0/23
46.3.20.0/22
46.3.48.0/20
46.3.76.0/22
46.3.84.0-46.3.88.255
46.3.116.0/24
46.3.135.0-46.3.139.255
46.3.144.0/20
46.3.164.0/22
46.3.176.0/21
46.3.205.0/24
46.3.232.0/22
46.3.238.0/23
46.3.245.0/24
46.3.247.0/24
46.3.249.0/24
46.232.0.0/17
80.243.128.0/20
149.126.192.0/18
Signature Algorithm: sha256WithRSAEncryption
58:2d:af:78:40:de:f6:f2:46:09:17:21:01:29:c0:ab:dd:3d:
1d:ed:98:9a:4f:fc:b7:3d:48:9b:1c:8a:c7:31:c9:c2:cc:a9:
12:52:84:9c:e2:a9:29:39:9c:a9:a9:49:ae:10:7e:78:e7:b5:
b9:d5:3f:aa:aa:55:dc:42:12:8e:83:8c:f2:97:bf:3c:a1:49:
3e:c3:a7:a1:f0:d0:bb:49:0a:86:d1:d6:a4:c3:44:ad:11:17:
75:c5:e0:9e:15:84:21:31:06:67:3e:da:71:52:6e:a8:76:a2:
a0:05:04:c0:76:00:39:39:fb:9e:30:2c:09:95:47:fc:5f:8e:
17:45:ea:8a:2d:1e:96:c2:7e:91:33:c0:46:22:7f:c8:bb:d5:
c4:10:37:98:29:39:f5:b8:0d:37:cc:d6:4e:a2:fe:57:a4:4a:
16:e0:eb:df:6b:95:b4:38:33:c4:51:f1:d3:ca:50:02:5e:b4:
41:11:9d:d1:81:81:c5:64:9e:2d:ff:08:e3:9d:c3:44:c3:36:
b6:dd:52:49:07:70:f8:50:14:6f:a1:d5:71:fd:27:0c:e6:8c:
2c:5a:36:e9:6f:1c:ee:23:72:77:13:02:7d:ab:7b:f0:08:90:
bb:fe:bd:4f:ba:6a:77:a8:4c:be:c2:b5:3c:64:d1:d7:da:52:
82:eb:a5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:05:37 2025 by rpki-client