Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/zS9e4mpIw1t7KT8u0z6KIhz_rZs.roa
File: zS9e4mpIw1t7KT8u0z6KIhz_rZs.roa (raw, json)
Hash identifier: xaezI47tQGPfrch2i5FP+iVzbBL4BGYV4r82kEtU3L8=
Subject key identifier: CD:2F:5E:E2:6A:48:C3:5B:7B:29:3F:2E:D3:3E:8A:22:1C:FF:AD:9B
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 019861387EEED28E4AAE6812A321F81975E3
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/zS9e4mpIw1t7KT8u0z6KIhz_rZs.roa
Signing time: Thu 31 Jul 2025 16:02:29 +0000
ROA not before: Thu 31 Jul 2025 16:02:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 46.3.4.0/24 maxlen: 24
46.3.5.0/24 maxlen: 24
46.3.6.0/24 maxlen: 24
46.3.7.0/24 maxlen: 24
46.3.8.0/22 maxlen: 22
46.3.12.0/22 maxlen: 24
46.3.16.0/24 maxlen: 24
46.3.17.0/24 maxlen: 24
46.3.18.0/24 maxlen: 24
46.3.19.0/24 maxlen: 24
46.3.48.0/20 maxlen: 24
46.3.64.0/24 maxlen: 24
46.3.65.0/24 maxlen: 24
46.3.66.0/24 maxlen: 24
46.3.68.0/24 maxlen: 24
46.3.69.0/24 maxlen: 24
46.3.70.0/24 maxlen: 24
46.3.71.0/24 maxlen: 24
46.3.72.0/24 maxlen: 24
46.3.73.0/24 maxlen: 24
46.3.74.0/24 maxlen: 24
46.3.75.0/24 maxlen: 24
46.3.77.0/24 maxlen: 24
46.3.84.0/24 maxlen: 24
46.3.89.0/24 maxlen: 24
46.3.90.0/24 maxlen: 24
46.3.91.0/24 maxlen: 24
46.3.92.0/24 maxlen: 24
46.3.93.0/24 maxlen: 24
46.3.94.0/24 maxlen: 24
46.3.95.0/24 maxlen: 24
46.3.118.0/24 maxlen: 24
46.3.119.0/24 maxlen: 24
46.3.120.0/21 maxlen: 24
46.3.128.0/22 maxlen: 24
46.3.134.0/24 maxlen: 24
46.3.135.0/24 maxlen: 24
46.3.148.0/24 maxlen: 24
46.3.149.0/24 maxlen: 24
46.3.150.0/24 maxlen: 24
46.3.151.0/24 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.160.0/24 maxlen: 24
46.3.161.0/24 maxlen: 24
46.3.162.0/24 maxlen: 24
46.3.163.0/24 maxlen: 24
46.3.164.0/22 maxlen: 24
46.3.168.0/24 maxlen: 24
46.3.169.0/24 maxlen: 24
46.3.170.0/24 maxlen: 24
46.3.171.0/24 maxlen: 24
46.3.172.0/24 maxlen: 24
46.3.174.0/24 maxlen: 24
46.3.175.0/24 maxlen: 24
46.3.184.0/22 maxlen: 24
46.3.188.0/24 maxlen: 24
46.3.189.0/24 maxlen: 24
46.3.190.0/24 maxlen: 24
46.3.203.0/24 maxlen: 24
46.3.204.0/24 maxlen: 24
46.3.205.0/24 maxlen: 24
46.3.206.0/23 maxlen: 24
46.3.208.0/22 maxlen: 24
46.3.212.0/22 maxlen: 24
46.3.220.0/23 maxlen: 24
46.3.223.0/24 maxlen: 24
46.3.224.0/24 maxlen: 24
46.3.225.0/24 maxlen: 24
46.3.226.0/24 maxlen: 24
46.3.227.0/24 maxlen: 24
46.3.228.0/23 maxlen: 24
46.3.230.0/24 maxlen: 24
46.3.231.0/24 maxlen: 24
46.3.236.0/23 maxlen: 24
46.3.243.0/24 maxlen: 24
46.3.244.0/24 maxlen: 24
46.3.246.0/24 maxlen: 24
46.3.248.0/24 maxlen: 24
46.3.251.0/24 maxlen: 24
46.3.252.0/24 maxlen: 24
46.3.253.0/24 maxlen: 24
46.3.254.0/24 maxlen: 24
46.3.255.0/24 maxlen: 24
46.232.0.0/22 maxlen: 24
46.232.4.0/23 maxlen: 24
46.232.16.0/23 maxlen: 24
46.232.18.0/23 maxlen: 24
46.232.22.0/24 maxlen: 24
46.232.23.0/24 maxlen: 24
46.232.64.0/24 maxlen: 24
46.232.65.0/24 maxlen: 24
46.232.66.0/24 maxlen: 24
46.232.68.0/24 maxlen: 24
46.232.116.0/23 maxlen: 24
46.232.118.0/23 maxlen: 24
46.232.124.0/23 maxlen: 24
46.232.126.0/23 maxlen: 24
149.126.193.0/24 maxlen: 24
149.126.195.0/24 maxlen: 24
149.126.196.0/24 maxlen: 24
149.126.198.0/24 maxlen: 24
149.126.201.0/24 maxlen: 24
149.126.202.0/24 maxlen: 24
149.126.204.0/24 maxlen: 24
149.126.205.0/24 maxlen: 24
149.126.206.0/24 maxlen: 24
149.126.208.0/24 maxlen: 24
149.126.210.0/24 maxlen: 24
149.126.214.0/24 maxlen: 24
149.126.224.0/24 maxlen: 24
149.126.225.0/24 maxlen: 24
149.126.226.0/24 maxlen: 24
149.126.228.0/24 maxlen: 24
149.126.231.0/24 maxlen: 24
149.126.236.0/22 maxlen: 24
149.126.242.0/24 maxlen: 24
149.126.244.0/24 maxlen: 24
149.126.245.0/24 maxlen: 24
149.126.247.0/24 maxlen: 24
149.126.248.0/24 maxlen: 24
149.126.249.0/24 maxlen: 24
149.126.250.0/24 maxlen: 24
149.126.253.0/24 maxlen: 24
149.126.254.0/24 maxlen: 24
149.126.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Aug 2025 18:59:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:61:38:7e:ee:d2:8e:4a:ae:68:12:a3:21:f8:19:75:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jul 31 16:02:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd2f5ee26a48c35b7b293f2ed33e8a221cffad9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d4:c7:a4:2a:7d:97:c3:9b:d7:e2:15:b2:6f:
bf:11:a4:b8:2e:b3:f3:d5:9f:4c:e1:d8:8c:1c:2d:
c8:29:79:8e:5c:78:10:5b:eb:dd:26:5d:03:fe:a0:
c0:40:8c:08:a1:b2:c6:42:a2:84:ec:9a:34:f9:5b:
c6:66:90:07:56:7e:63:3c:f7:a7:0f:e8:1b:63:75:
88:cf:01:6f:67:49:a7:48:e5:19:40:4d:57:be:3f:
d7:49:b0:8a:72:02:c6:59:a2:8f:48:20:b9:74:09:
d9:22:92:b3:60:7f:64:75:03:d3:08:d6:46:81:bd:
f0:23:6e:6b:6b:09:f8:63:23:62:25:78:5e:b7:60:
b3:bd:92:46:27:15:62:40:63:a0:99:24:99:62:a2:
8b:7d:c4:29:37:b7:81:46:d7:3a:c7:6f:a8:9c:5e:
c4:8a:8b:4d:90:08:49:0e:7e:dc:0e:9d:7c:18:c2:
59:4b:da:e6:6e:af:e0:d5:c7:7d:b8:c0:23:c8:c6:
3c:8c:1d:6e:d6:31:b2:a0:a4:08:ce:e8:0c:5a:78:
87:70:32:2a:42:a4:7e:a0:86:e6:8f:66:37:c5:83:
80:be:b7:fc:33:fe:e1:7b:98:93:4a:62:7e:be:8b:
ed:f3:ff:89:6a:a2:05:22:a1:73:74:32:69:50:8c:
27:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2F:5E:E2:6A:48:C3:5B:7B:29:3F:2E:D3:3E:8A:22:1C:FF:AD:9B
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/zS9e4mpIw1t7KT8u0z6KIhz_rZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.4.0-46.3.19.255
46.3.48.0-46.3.66.255
46.3.68.0-46.3.75.255
46.3.77.0/24
46.3.84.0/24
46.3.89.0-46.3.95.255
46.3.118.0-46.3.131.255
46.3.134.0/23
46.3.148.0/22
46.3.156.0/23
46.3.160.0-46.3.172.255
46.3.174.0/23
46.3.184.0-46.3.190.255
46.3.203.0-46.3.215.255
46.3.220.0/23
46.3.223.0-46.3.231.255
46.3.236.0/23
46.3.243.0-46.3.244.255
46.3.246.0/24
46.3.248.0/24
46.3.251.0-46.3.255.255
46.232.0.0-46.232.5.255
46.232.16.0/22
46.232.22.0/23
46.232.64.0-46.232.66.255
46.232.68.0/24
46.232.116.0/22
46.232.124.0/22
149.126.193.0/24
149.126.195.0-149.126.196.255
149.126.198.0/24
149.126.201.0-149.126.202.255
149.126.204.0-149.126.206.255
149.126.208.0/24
149.126.210.0/24
149.126.214.0/24
149.126.224.0-149.126.226.255
149.126.228.0/24
149.126.231.0/24
149.126.236.0/22
149.126.242.0/24
149.126.244.0/23
149.126.247.0-149.126.250.255
149.126.253.0-149.126.255.255
Signature Algorithm: sha256WithRSAEncryption
9a:e1:cc:9a:55:eb:4e:99:1e:5f:6e:a8:9e:9f:eb:22:fb:62:
0e:e4:c3:18:9e:76:05:e4:db:f3:58:4e:55:94:84:1a:88:f6:
d3:b6:11:e8:c3:a8:50:71:40:80:98:26:85:8c:1b:c3:6a:a9:
65:b6:91:ac:14:4d:3c:f0:7e:ee:fe:42:c0:8d:bc:7b:66:8e:
75:32:f0:71:8a:93:e4:92:e4:22:7a:7d:aa:0d:a1:40:74:3e:
d1:eb:50:b2:e3:b8:eb:57:fc:2f:bf:f6:d5:f9:22:e7:ee:da:
1f:6c:01:5a:1f:78:71:24:a0:3e:5c:36:d1:0a:a3:93:66:fb:
f4:0f:89:06:e2:58:d2:61:07:a4:71:09:73:01:54:85:cd:b1:
ae:fa:b6:48:fc:fd:17:cc:4f:cb:35:a8:56:58:da:ab:7c:8f:
a5:3c:61:e2:0f:1d:e4:9d:f6:81:cd:e5:2e:f7:c7:b0:db:c2:
4b:14:89:42:23:98:8c:9f:10:f8:5b:a8:05:ff:a4:c3:76:18:
34:5f:13:ee:6b:04:62:c7:11:72:de:02:43:34:83:02:50:7a:
41:60:f7:25:3c:1a:5e:d9:ef:d2:ce:17:53:cb:61:44:57:c3:
49:71:64:bd:0e:70:0e:d2:b9:59:d7:40:86:76:ed:e2:af:4d:
ab:43:5a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:38:49 2025 by rpki-client