Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/gSGRoN7lvoMDtUNt0jcpcSmiWHg.roa
File: gSGRoN7lvoMDtUNt0jcpcSmiWHg.roa (raw, json)
Hash identifier: /BQVNijohfoISuxNIF9VgsSRiI5OM9wzxV0/LzdcubI=
Subject key identifier: 81:21:91:A0:DE:E5:BE:83:03:B5:43:6D:D2:37:29:71:29:A2:58:78
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 019715BF68260D800498F0D74F665C6C0346
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/gSGRoN7lvoMDtUNt0jcpcSmiWHg.roa
Signing time: Wed 28 May 2025 07:15:54 +0000
ROA not before: Wed 28 May 2025 07:15:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207569
IP address blocks: 46.243.1.0/24 maxlen: 24
46.243.4.0/24 maxlen: 24
46.243.6.0/24 maxlen: 24
185.37.193.0/24 maxlen: 24
185.37.194.0/24 maxlen: 24
185.37.195.0/24 maxlen: 24
194.79.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Jun 2025 12:10:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:15:bf:68:26:0d:80:04:98:f0:d7:4f:66:5c:6c:03:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: May 28 07:15:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=812191a0dee5be8303b5436dd237297129a25878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:24:e2:83:82:5d:bc:93:1c:2c:ee:33:bf:67:
6a:13:26:f5:07:c3:1f:84:27:4c:06:69:a3:d0:20:
98:86:50:f8:3c:b5:29:0c:c2:55:1a:ae:27:4c:20:
8c:74:4e:9d:65:b8:e6:66:50:64:d8:a5:c9:c3:b0:
f8:cd:96:28:9e:ba:2a:b3:db:8f:50:9c:f6:40:b6:
3d:0c:ef:d5:d5:b6:45:41:ed:df:73:57:cb:55:83:
c5:4b:71:a9:ab:e9:d2:06:8e:29:91:a1:62:f6:6e:
a4:c2:ea:8a:31:73:e5:68:54:d4:16:fd:08:cf:7b:
91:56:e9:9d:2a:9a:2e:e6:71:9f:d0:71:bb:cb:71:
1b:4d:ee:df:6c:a4:7b:d2:9c:52:92:49:98:08:1a:
c9:0e:59:e5:d7:02:72:60:0f:4a:0c:ed:ad:7e:c5:
a7:5f:f5:c9:18:74:3d:24:35:12:54:a9:0a:6f:42:
58:ec:27:2f:28:69:75:03:26:ec:37:45:0f:95:ac:
00:b0:2f:5a:02:28:d8:84:59:c3:2a:dc:49:a6:16:
db:a9:af:84:bf:10:0e:74:47:21:91:49:c9:bf:56:
77:4d:e7:45:e6:6b:cd:aa:82:c4:95:9d:11:64:65:
1d:94:5f:51:e3:ef:90:71:86:e8:2d:8b:d7:ea:5a:
57:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:21:91:A0:DE:E5:BE:83:03:B5:43:6D:D2:37:29:71:29:A2:58:78
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/gSGRoN7lvoMDtUNt0jcpcSmiWHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.1.0/24
46.243.4.0/24
46.243.6.0/24
185.37.193.0-185.37.195.255
194.79.60.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:e2:bc:57:34:d0:44:1a:aa:47:39:b1:fc:c1:55:91:8b:29:
bd:75:d9:b4:28:f4:e8:09:45:63:d3:49:02:7c:dd:75:7f:67:
3d:bc:cf:37:f0:c6:6f:00:3a:05:d6:32:ae:f3:c4:71:9f:a9:
9f:7d:c8:1f:8f:c4:ca:8b:2e:31:b0:97:21:f1:a3:f2:e3:5c:
df:8c:39:b9:29:73:cd:2a:28:93:09:d5:17:6b:9d:a9:d4:12:
9f:24:69:cb:cf:c9:2a:fa:27:3d:ce:00:13:5a:1c:1c:bf:ce:
c2:a4:3c:5a:b9:06:ea:e2:6e:41:13:17:1e:56:19:e4:17:35:
6b:81:e6:b7:41:28:c9:6d:13:ba:42:88:aa:82:25:dd:e8:55:
0f:79:d8:be:7f:5f:6c:6a:28:bc:c7:d7:26:9c:14:0d:f0:a3:
d9:78:65:84:5f:b2:da:3d:68:7e:11:ed:27:17:2c:fb:ea:21:
db:3f:87:03:e3:93:cf:f2:46:4a:98:96:15:78:43:a4:06:5e:
c2:ae:f9:02:d7:29:c9:13:58:de:d4:5e:2f:73:d3:45:f2:04:
06:8e:fa:e5:03:b0:e7:9c:91:91:27:9a:5c:75:63:f2:71:4b:
42:df:8c:cd:2f:a1:27:cb:df:a8:c3:51:bf:46:34:01:3a:68:
10:7e:8f:74
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZcVv2gmDYAEmPDXT2ZcbANGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx
ZmE4MzkwHhcNMjUwNTI4MDcxNTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTIxOTFhMGRlZTViZTgzMDNiNTQzNmRkMjM3Mjk3MTI5YTI1ODc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSTig4JdvJMcLO4zv2dqEyb1B8Mf
hCdMBmmj0CCYhlD4PLUpDMJVGq4nTCCMdE6dZbjmZlBk2KXJw7D4zZYonroqs9uP
UJz2QLY9DO/V1bZFQe3fc1fLVYPFS3Gpq+nSBo4pkaFi9m6kwuqKMXPlaFTUFv0I
z3uRVumdKpou5nGf0HG7y3EbTe7fbKR70pxSkkmYCBrJDlnl1wJyYA9KDO2tfsWn
X/XJGHQ9JDUSVKkKb0JY7CcvKGl1AybsN0UPlawAsC9aAijYhFnDKtxJphbbqa+E
vxAOdEchkUnJv1Z3TedF5mvNqoLElZ0RZGUdlF9R4++QcYboLYvX6lpXbQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFIEhkaDe5b6DA7VDbdI3KXEpolh4MB8GA1UdIwQY
MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt
MzA0OTVmNDAzNzg0LzEvZ1NHUm9ON2x2b01EdFVOdDBqY3BjU21pV0hnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0
LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQALvMBAwQA
LvMEAwQALvMGMAwDBAC5JcEDBAK5JcADBADCTzwwDQYJKoZIhvcNAQELBQADggEB
ADrivFc00EQaqkc5sfzBVZGLKb112bQo9OgJRWPTSQJ83XV/Zz28zzfwxm8AOgXW
Mq7zxHGfqZ99yB+PxMqLLjGwlyHxo/LjXN+MObkpc80qKJMJ1RdrnanUEp8kacvP
ySr6Jz3OABNaHBy/zsKkPFq5BuribkETFx5WGeQXNWuB5rdBKMltE7pCiKqCJd3o
VQ952L5/X2xqKLzH1yacFA3wo9l4ZYRfsto9aH4R7ScXLPvqIds/hwPjk8/yRkqY
lhV4Q6QGXsKu+QLXKckTWN7UXi9z00XyBAaO+uUDsOeckZEnmlx1Y/JxS0LfjM0v
oSfL36jDUb9GNAE6aBB+j3Q=
-----END CERTIFICATE-----
Generated at Sat Jun 21 14:07:59 2025 by rpki-client