Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/ePB9VAn6RIuSVwpED-qlTLrdLlA.roa
File: ePB9VAn6RIuSVwpED-qlTLrdLlA.roa (raw, json)
Hash identifier: JFwvfymvPYUp3Ru2E9dEls7MPQC2VyYy5Iv7zTf1vqw=
Subject key identifier: 78:F0:7D:54:09:FA:44:8B:92:57:0A:44:0F:EA:A5:4C:BA:DD:2E:50
Certificate issuer: /CN=23d480b0795617e2e26e6e18264377e7a96c78f3
Certificate serial: 0195DAFDEF5401BEE67B9C0E927A823450B8
Authority key identifier: 23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/ePB9VAn6RIuSVwpED-qlTLrdLlA.roa
Signing time: Fri 28 Mar 2025 04:23:49 +0000
ROA not before: Fri 28 Mar 2025 04:23:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31059
IP address blocks: 46.227.164.0/24 maxlen: 24
46.227.167.0/24 maxlen: 24
95.143.0.0/21 maxlen: 24
95.143.4.0/24 maxlen: 24
95.143.8.0/23 maxlen: 23
95.143.10.0/24 maxlen: 24
95.143.11.0/24 maxlen: 24
95.143.12.0/24 maxlen: 24
185.72.225.0/24 maxlen: 24
185.72.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 08:29:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:da:fd:ef:54:01:be:e6:7b:9c:0e:92:7a:82:34:50:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d480b0795617e2e26e6e18264377e7a96c78f3
Validity
Not Before: Mar 28 04:23:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78f07d5409fa448b92570a440feaa54cbadd2e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e4:5e:85:e3:34:57:83:af:e6:f3:a8:e0:5f:
7d:51:6f:e7:49:1d:84:18:60:14:c9:5b:8f:92:04:
87:9e:0f:0e:6d:55:14:b2:63:ac:74:ba:a4:24:e3:
24:85:b0:ae:b5:24:02:59:78:c1:b8:5a:60:56:5c:
c9:00:76:ac:41:40:23:21:a0:7d:c8:5c:40:28:54:
1d:56:90:89:4b:7d:10:8e:0b:f6:26:87:52:35:3c:
03:c3:6e:58:80:14:b2:e8:49:99:b5:39:89:05:96:
4e:d7:98:c7:01:9d:d0:d4:0c:70:8f:5a:f7:ae:cf:
c2:12:a6:53:95:23:7e:8d:ef:83:26:71:5b:dc:d0:
fa:7f:72:83:98:6d:10:34:b2:74:d1:06:53:a5:85:
91:df:ca:75:d5:4b:71:e5:70:4d:cc:83:08:a1:4a:
b3:ac:a3:fc:af:0b:cd:e2:01:f5:97:33:1d:73:93:
63:6d:7c:e1:8f:09:31:73:b5:98:84:c7:b6:4c:04:
c2:0c:5b:c1:70:0d:80:9f:c2:d4:af:17:b4:2c:58:
16:24:eb:07:cd:3e:35:ef:24:3e:35:8c:68:00:ec:
ac:b5:9e:c1:89:76:a4:34:b4:34:50:7e:49:4e:39:
91:44:b3:95:97:78:00:1a:ca:42:d5:24:78:a0:49:
89:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F0:7D:54:09:FA:44:8B:92:57:0A:44:0F:EA:A5:4C:BA:DD:2E:50
X509v3 Authority Key Identifier:
keyid:23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/ePB9VAn6RIuSVwpED-qlTLrdLlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.164.0/24
46.227.167.0/24
95.143.0.0-95.143.12.255
185.72.225.0/24
185.72.227.0/24
Signature Algorithm: sha256WithRSAEncryption
84:5d:05:1e:fd:a7:6d:94:35:bc:14:13:d9:7d:bf:f2:a0:9f:
9c:e9:28:b7:75:64:6d:1e:78:fc:c6:d1:ec:cd:f4:c3:2c:92:
a4:45:93:de:f8:9a:3e:23:bf:e2:7a:43:19:8f:4b:a4:76:5b:
62:da:ea:dd:48:35:af:a2:72:51:2b:67:0a:33:63:78:08:01:
4c:f7:5f:3d:90:92:58:99:8b:bb:f9:5c:dd:a1:47:4b:04:bd:
19:98:41:fc:69:f2:ed:bf:cc:b5:0e:78:75:92:ae:8b:84:75:
b3:4a:d4:05:44:c7:33:2c:d4:56:11:f7:d8:dd:6b:da:16:fe:
f1:89:f2:4f:18:ba:55:69:66:4a:cc:c2:c2:77:b2:b7:66:8c:
47:62:e9:b8:35:96:0e:c5:a3:1f:f2:ec:c7:89:e5:fa:41:db:
0e:26:fd:bd:91:27:68:cd:e7:24:8d:e0:a4:12:d4:3e:19:fd:
72:5b:d8:bb:df:c0:f6:69:ac:c9:89:cf:c9:d7:b2:d1:76:b7:
98:40:b8:30:73:46:fb:75:bb:ba:13:e3:03:80:00:58:04:2f:
99:81:61:12:77:21:56:4b:74:8f:97:37:0d:ab:5a:0f:c1:8f:
9c:7d:bb:09:e7:db:83:b1:5f:46:ee:30:de:24:9b:b7:7e:3f:
62:f4:fa:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:34:19 2025 by rpki-client