Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/6L244C8Wym0Bs4AdxT1iXphCnck.roa
File: 6L244C8Wym0Bs4AdxT1iXphCnck.roa (raw, json)
Hash identifier: y2FSS941+HCQYKoZMgYQ5AH387FP/uWKRUCX4nadV3o=
Subject key identifier: E8:BD:B8:E0:2F:16:CA:6D:01:B3:80:1D:C5:3D:62:5E:98:42:9D:C9
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 019710D0E56475B1390EC5FBCACA171AD130
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/6L244C8Wym0Bs4AdxT1iXphCnck.roa
Signing time: Tue 27 May 2025 08:16:54 +0000
ROA not before: Tue 27 May 2025 08:16:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207569
IP address blocks: 46.243.1.0/24 maxlen: 24
46.243.4.0/24 maxlen: 24
46.243.6.0/24 maxlen: 24
185.37.193.0/24 maxlen: 24
185.37.194.0/24 maxlen: 24
185.37.195.0/24 maxlen: 24
194.79.60.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 28 May 2025 07:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:10:d0:e5:64:75:b1:39:0e:c5:fb:ca:ca:17:1a:d1:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: May 27 08:16:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8bdb8e02f16ca6d01b3801dc53d625e98429dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c4:f5:66:b1:ce:16:9a:61:93:05:82:f4:65:
6c:61:1b:c3:c7:e5:bd:4f:9e:ba:b1:f2:c5:5b:80:
43:21:f2:cb:06:9f:ae:0c:7d:94:a5:a4:1c:aa:c4:
54:2d:fc:eb:06:21:4d:4d:67:64:13:f3:5a:91:e1:
af:e7:b2:0e:2b:64:1c:b1:b5:e2:3b:5a:a4:1f:c1:
ab:53:6e:56:ce:87:66:bb:f8:34:97:31:48:39:3c:
da:40:f5:f0:9c:de:ab:0f:23:59:38:02:fe:8b:70:
93:b4:51:ba:9a:2a:e0:51:01:37:c9:ec:e7:f0:36:
dd:91:ec:68:b5:67:4e:99:16:cd:2a:56:c0:e5:ec:
2e:09:f0:10:2d:1d:17:d8:6e:4a:86:28:6f:5e:f2:
b4:ff:b4:a9:5e:70:17:01:eb:2f:7e:3c:05:4b:3d:
de:d8:de:8a:55:d1:b9:a2:0e:89:08:1f:eb:78:53:
4d:7f:e1:9e:8c:61:92:75:84:69:2b:87:f4:cd:ea:
d8:53:42:c4:50:64:ab:49:cf:e0:8b:e1:e1:53:c1:
91:aa:f3:85:9f:fc:8d:c4:14:1b:e8:82:23:6b:80:
34:ba:4a:32:a8:d7:0b:06:36:69:19:4e:42:bf:b0:
7b:d3:c3:92:ce:f3:79:2b:3b:3a:95:dc:9f:c8:8c:
f3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BD:B8:E0:2F:16:CA:6D:01:B3:80:1D:C5:3D:62:5E:98:42:9D:C9
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/6L244C8Wym0Bs4AdxT1iXphCnck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.1.0/24
46.243.4.0/24
46.243.6.0/24
185.37.193.0-185.37.195.255
194.79.60.0/22
Signature Algorithm: sha256WithRSAEncryption
40:70:57:7b:ae:4e:f5:51:70:f8:e5:3d:14:a4:e4:0e:2b:d4:
20:37:01:1d:ec:17:31:e1:19:83:c1:6c:ec:b4:8e:6c:c6:59:
5f:61:0b:13:55:bb:e5:16:9d:6d:ce:fd:42:30:67:e4:18:f0:
51:60:dd:aa:1a:79:13:76:4d:16:7d:f6:0a:33:fb:2c:4c:76:
78:2f:ec:6a:ad:dc:7c:98:ca:76:e9:9a:83:2c:46:42:76:22:
62:6e:4a:de:d8:6d:ec:bf:71:8d:a9:ba:a7:df:7c:7f:49:49:
9a:3b:8e:a6:4e:44:35:21:dd:47:b4:4b:0e:2c:01:3f:31:3a:
81:34:00:5c:70:06:93:a6:1c:7b:91:bf:0e:d1:a6:11:c4:96:
f2:ae:7d:94:7e:4a:cb:0c:06:85:6a:b0:60:fd:85:60:8b:fa:
9d:32:51:47:97:11:9c:0b:1b:1e:5d:52:db:de:e5:02:3b:d7:
b3:8e:56:1d:a9:45:19:2d:1d:2d:83:b1:4f:b5:cb:4d:96:c0:
30:63:28:42:89:07:3d:38:e3:b8:cb:08:20:e0:12:e6:fc:87:
2b:fe:dc:35:c5:9d:90:33:c2:9f:fb:95:f2:eb:b0:c5:83:4e:
c4:51:a2:ec:84:57:e5:2c:7a:c5:f0:66:6a:37:80:1a:0b:ac:
8b:c6:0b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:58:31 2025 by rpki-client