Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/RGMttOG_I7gRYmq6EX4Y61jzfRs.roa
File: RGMttOG_I7gRYmq6EX4Y61jzfRs.roa (raw, json)
Hash identifier: EGXDkyVGVe4f0+W/I16s67GnK+e3KtjaYXDN08V0dro=
Subject key identifier: 44:63:2D:B4:E1:BF:23:B8:11:62:6A:BA:11:7E:18:EB:58:F3:7D:1B
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0196639A7A753940DA9B32DA5E065CAC646B
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/RGMttOG_I7gRYmq6EX4Y61jzfRs.roa
Signing time: Wed 23 Apr 2025 17:03:10 +0000
ROA not before: Wed 23 Apr 2025 17:03:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.32.0/22 maxlen: 22
46.34.36.0/24 maxlen: 24
46.34.40.0/24 maxlen: 24
46.34.50.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Apr 2025 12:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:63:9a:7a:75:39:40:da:9b:32:da:5e:06:5c:ac:64:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Apr 23 17:03:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44632db4e1bf23b811626aba117e18eb58f37d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:34:cd:b7:e3:b1:da:c4:ff:0e:96:ed:3b:
d1:7d:9a:1e:fd:c6:e7:cb:e4:1d:d7:dd:77:37:62:
a4:b5:9c:a8:eb:06:56:6b:79:14:67:a7:74:45:8a:
ef:3f:31:f8:65:85:6a:ab:0c:8b:a1:3d:45:65:ea:
65:1a:52:59:cf:8c:4a:1a:d1:4e:bd:a5:5a:6f:36:
87:26:44:76:4f:b6:9d:16:ea:f1:d9:11:c1:3c:a1:
2f:45:31:0d:75:da:89:6a:1b:e6:6e:29:ec:53:ec:
2e:12:0a:e1:1c:2b:87:c9:19:da:13:db:4b:c8:e8:
09:58:29:80:2d:73:bc:b3:a7:cc:b1:12:3b:ec:c9:
66:d1:83:09:f7:09:5c:23:f3:67:48:02:c2:9f:5d:
5e:85:00:90:9f:5b:78:9c:62:15:ad:b9:0e:e1:e2:
db:c2:33:1a:a9:7d:30:3e:c1:8f:db:f9:ca:54:d6:
68:0d:93:96:ca:4d:f3:6a:ac:dc:e4:a7:ce:b3:09:
d3:42:b3:4e:a3:a0:c5:a6:33:eb:8b:84:d8:9c:27:
78:9b:f4:ab:c2:ac:26:b5:54:d3:3f:f7:5d:b4:8e:
b2:f1:59:7d:10:7c:59:08:2d:99:f2:70:d9:59:d4:
2c:7d:43:90:65:0f:2d:0a:9c:c8:2a:7f:71:ad:7a:
40:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:63:2D:B4:E1:BF:23:B8:11:62:6A:BA:11:7E:18:EB:58:F3:7D:1B
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/RGMttOG_I7gRYmq6EX4Y61jzfRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.40.0/24
46.34.50.0/24
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
17:48:40:7f:af:02:bc:9b:0f:4a:64:44:e8:ff:80:12:41:08:
c9:ac:2a:c2:9c:64:99:4a:86:da:a9:73:19:44:c6:0d:0d:28:
2f:17:7b:d6:55:64:02:d4:6e:61:51:31:6c:f8:7a:fa:d8:b9:
4e:b4:98:fc:d9:98:2c:fc:83:ab:08:c4:84:bf:e7:07:20:95:
de:43:60:5e:4c:f6:84:ff:b8:93:5f:0d:3d:df:8c:da:12:c6:
fe:f8:5d:bf:56:f6:01:fe:b3:18:43:1c:56:2a:c9:b6:ad:ec:
3b:ca:3f:ab:e8:38:6e:93:cd:4f:d9:2d:8f:77:f0:d9:38:8c:
bf:f2:28:f7:8d:98:69:c4:07:de:9b:ae:bc:2c:c2:d8:51:15:
38:b8:4e:65:af:d2:fe:65:1b:20:be:bc:09:16:88:9d:0b:5b:
e0:f8:60:5a:f8:f1:d9:8e:11:9f:f6:bb:8d:05:40:c3:d0:f6:
d2:25:f3:20:91:60:15:b2:b8:90:89:41:7e:92:9f:be:5b:99:
4a:f2:ae:5c:42:7f:b7:ba:35:13:28:4a:89:84:5d:70:c6:c0:
01:53:1c:12:30:ec:4a:16:38:56:55:38:84:0a:64:06:e6:0f:
41:84:a6:c2:00:6f:4d:96:1e:c6:39:af:15:83:85:81:eb:3e:
33:41:50:8c
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZZjmnp1OUDamzLaXgZcrGRrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw
N2VmY2UwHhcNMjUwNDIzMTcwMzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDYzMmRiNGUxYmYyM2I4MTE2MjZhYmExMTdlMThlYjU4ZjM3ZDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8A0zbfjsdrE/w6W7TvRfZoe/cbn
y+Qd1913N2KktZyo6wZWa3kUZ6d0RYrvPzH4ZYVqqwyLoT1FZeplGlJZz4xKGtFO
vaVabzaHJkR2T7adFurx2RHBPKEvRTENddqJahvmbinsU+wuEgrhHCuHyRnaE9tL
yOgJWCmALXO8s6fMsRI77Mlm0YMJ9wlcI/NnSALCn11ehQCQn1t4nGIVrbkO4eLb
wjMaqX0wPsGP2/nKVNZoDZOWyk3zaqzc5KfOswnTQrNOo6DFpjPri4TYnCd4m/Sr
wqwmtVTTP/ddtI6y8Vl9EHxZCC2Z8nDZWdQsfUOQZQ8tCpzIKn9xrXpA1wIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFERjLbThvyO4EWJquhF+GOtY830bMB8GA1UdIwQY
MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt
YTZiOTkxZjRmYWY4LzEvUkdNdHRPR19JN2dSWW1xNkVYNFk2MWp6ZlJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4
LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAUuIiAD
BAAuIiQDBAAuIigDBAAuIjIDBAAuIj8wDQYJKoZIhvcNAQELBQADggEBABdIQH+v
ArybD0pkROj/gBJBCMmsKsKcZJlKhtqpcxlExg0NKC8Xe9ZVZALUbmFRMWz4evrY
uU60mPzZmCz8g6sIxIS/5wcgld5DYF5M9oT/uJNfDT3fjNoSxv74Xb9W9gH+sxhD
HFYqybat7DvKP6voOG6TzU/ZLY938Nk4jL/yKPeNmGnEB96brrwswthRFTi4TmWv
0v5lGyC+vAkWiJ0LW+D4YFr48dmOEZ/2u40FQMPQ9tIl8yCRYBWyuJCJQX6Sn75b
mUryrlxCf7e6NRMoSomEXXDGwAFTHBIw7EoWOFZVOIQKZAbmD0GEpsIAb02WHsY5
rxWDhYHrPjNBUIw=
-----END CERTIFICATE-----
Generated at Mon May 12 02:31:53 2025 by rpki-client