Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS60647.roa
File: AS60647.roa (raw, json)
Hash identifier: wrotfDkQ6XGGUZRtvpCIkES9sGixR53LoawgaOmXn74=
Subject key identifier: 3E:A2:26:86:A5:14:30:7A:3C:ED:B7:75:47:34:06:80:ED:8A:1F:46
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 021A2986181F4EB83EBF32AA15AE3038BD7661E6
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS60647.roa
Signing time: Wed 09 Apr 2025 19:32:12 +0000
ROA not before: Wed 09 Apr 2025 19:27:12 +0000
ROA not after: Wed 08 Apr 2026 19:32:12 +0000
asID: 60647
IP address blocks: 46.203.182.0/24 maxlen: 24
46.203.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Apr 2025 15:22:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:1a:29:86:18:1f:4e:b8:3e:bf:32:aa:15:ae:30:38:bd:76:61:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 9 19:27:12 2025 GMT
Not After : Apr 8 19:32:12 2026 GMT
Subject: CN=3EA22686A514307A3CEDB77547340680ED8A1F46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d6:9c:44:0e:59:cf:c2:25:8d:58:87:2b:16:
78:90:8c:24:f5:5b:ec:30:a9:01:d8:aa:6d:b4:e2:
f5:d5:b3:15:f8:5c:de:ba:56:78:2b:9d:76:63:70:
52:7e:0e:b2:47:b3:a9:a4:02:8f:e7:f4:60:99:18:
d1:fc:dc:6c:3c:8b:bf:89:42:db:f8:9b:19:1c:80:
aa:dd:be:f7:49:80:72:6d:48:31:a9:29:c5:20:b6:
c4:15:4d:5a:f4:dc:8c:83:0a:4c:81:0d:63:5c:1c:
95:dc:a6:a9:62:d9:2e:bf:ff:60:5d:5b:00:3f:b2:
d1:d5:38:17:d8:4e:fb:d4:03:30:a5:5e:dc:a3:da:
df:97:26:0a:5b:83:0f:80:6c:7a:08:da:d4:d9:5d:
f2:ae:72:ec:9c:b5:81:0b:f2:5c:24:73:c2:dc:a4:
98:7b:45:3c:6c:de:c6:39:15:90:8c:3a:5a:c9:74:
15:16:d2:3d:7a:f0:01:6c:1b:88:f1:44:5c:d1:29:
05:9b:19:69:68:8c:6c:1c:2b:5a:f5:d0:8f:23:20:
7d:39:3d:f3:36:f7:52:3f:cc:41:cf:a4:54:f9:37:
e4:9e:63:99:18:16:b3:30:d5:cc:4e:83:8e:ff:73:
59:f5:b9:69:87:83:9a:99:48:67:83:6a:d0:01:19:
66:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A2:26:86:A5:14:30:7A:3C:ED:B7:75:47:34:06:80:ED:8A:1F:46
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS60647.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.182.0/24
46.203.248.0/24
Signature Algorithm: sha256WithRSAEncryption
25:65:15:97:57:12:75:3f:9b:dc:44:06:71:83:91:50:ac:87:
58:d6:5a:2b:3b:40:19:d2:de:86:f6:d2:47:cf:d7:c9:93:9e:
4a:07:06:08:0c:b0:d8:39:f0:fb:26:f0:15:c6:07:e1:56:fd:
ce:01:94:86:69:c5:0a:51:a9:2c:23:f3:15:15:f1:1d:a8:ce:
01:1e:b5:02:cd:7a:3a:bc:9b:ee:7e:1f:15:eb:a3:01:5a:78:
5c:f2:5a:af:8f:45:4e:cc:17:3d:c9:c2:83:ed:70:8b:16:65:
93:fc:b3:8c:da:01:05:d8:04:18:2b:aa:61:2f:ea:ba:8f:75:
4b:f3:50:bc:de:cd:41:40:14:72:bc:63:b2:e8:bf:51:3b:cc:
e3:e1:21:10:60:de:01:8e:02:73:dd:86:91:79:e9:46:7d:28:
fd:d2:ec:20:f9:0f:2a:93:3e:b5:03:c5:d2:0c:21:88:a2:3d:
8f:d9:47:3b:e8:3a:16:0d:48:fa:15:d4:19:60:96:12:97:eb:
5f:25:16:cc:a2:83:d3:2f:20:21:0b:2e:4e:aa:6d:ec:17:0c:
2a:28:11:e5:3b:29:48:93:36:fb:bf:2a:ee:29:7f:64:5b:ef:
f6:41:2e:b8:a9:fe:25:f8:da:cd:9f:4d:79:37:e7:7b:6b:d9:
1b:6d:74:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:37:39 2025 by rpki-client