Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/MGmWcGSabo2wRI1QCmsRLVtPnwg.roa
File: MGmWcGSabo2wRI1QCmsRLVtPnwg.roa (raw, json)
Hash identifier: WDesFU5yvVyLtcYuywEfncrUkoWbIhfX5+CKduzim74=
Subject key identifier: 30:69:96:70:64:9A:6E:8D:B0:44:8D:50:0A:6B:11:2D:5B:4F:9F:08
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0197F2DEAC5B2A1981F3DC46B87575F66593
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/MGmWcGSabo2wRI1QCmsRLVtPnwg.roa
Signing time: Thu 10 Jul 2025 05:46:08 +0000
ROA not before: Thu 10 Jul 2025 05:46:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213887
IP address blocks: 193.233.134.0/24 maxlen: 24
193.233.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Jul 2025 15:21:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f2:de:ac:5b:2a:19:81:f3:dc:46:b8:75:75:f6:65:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jul 10 05:46:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30699670649a6e8db0448d500a6b112d5b4f9f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:aa:a1:df:d0:a7:c6:fa:1c:03:da:06:25:6b:
ae:6e:83:67:dd:c6:58:f0:87:d7:58:07:73:33:0c:
c7:a4:37:f7:91:ff:59:84:fd:01:75:28:23:e4:93:
fa:2c:01:6d:89:9b:93:43:79:d7:ed:3a:cf:63:51:
6a:7a:1a:40:8f:b8:5c:fc:f2:78:f0:93:03:c7:c0:
91:67:3d:55:d1:11:ec:2c:25:49:78:58:23:62:60:
94:00:11:f2:87:52:5f:82:cc:ad:3a:8d:02:da:f4:
00:15:4e:77:52:e1:b9:d5:c6:13:c5:49:1f:ad:bc:
8c:07:bb:83:37:ae:11:8e:b1:a0:95:f6:bd:22:b1:
c2:9e:98:ae:1e:67:2b:ed:ec:24:7f:c2:8f:75:90:
bf:82:e4:15:5a:c2:2b:8a:20:c9:1e:90:23:4c:5f:
27:46:02:6f:03:97:28:49:6c:68:c9:b9:12:38:8b:
3a:22:7b:67:08:16:ff:2f:8a:67:53:ee:51:20:2d:
89:c9:03:c0:a2:4a:a4:8b:bd:6a:a5:ef:0e:30:84:
4f:04:ad:11:ff:02:00:66:9d:e8:f0:bf:88:e1:0e:
3f:ee:5b:d4:50:b4:36:8f:d7:2e:bb:41:04:7c:fb:
87:91:e8:bd:15:a5:6d:53:3d:e6:c4:e6:a1:07:62:
0c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:69:96:70:64:9A:6E:8D:B0:44:8D:50:0A:6B:11:2D:5B:4F:9F:08
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/MGmWcGSabo2wRI1QCmsRLVtPnwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.134.0/24
193.233.195.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:58:c7:4d:93:c4:f2:24:a3:e4:45:97:02:ff:1d:ba:ad:8d:
78:81:95:00:51:28:6b:1f:14:68:dc:aa:46:96:fc:d2:24:42:
79:01:53:92:07:38:2e:94:99:97:64:63:ce:42:32:bc:3f:ca:
90:bd:b4:68:fa:d0:e5:1b:54:c8:a9:00:ea:d4:7c:98:b0:4e:
36:8c:50:27:98:2f:58:ce:f5:21:e7:c4:22:ab:74:4e:29:44:
6c:13:0b:26:4d:7e:d2:d3:d2:8d:2f:34:77:25:45:d5:44:66:
87:f6:7c:8c:28:9e:b6:26:ff:9c:54:14:77:b4:fc:0d:d7:71:
9f:ce:a8:3d:25:57:c3:68:cd:ac:f2:3d:a6:e9:ff:03:00:a1:
dd:9d:bd:72:61:00:79:77:d2:84:65:94:39:d4:d1:65:33:23:
10:2e:0d:b9:c3:ac:fc:b6:85:ea:b3:9c:d6:68:e6:79:e3:63:
58:50:73:0e:ad:f9:b4:68:f4:fd:8e:d1:20:52:2d:5f:0e:a7:
a4:82:14:16:01:77:88:1d:27:86:28:f9:44:f3:de:c9:af:45:
b9:f0:3a:11:c3:f2:90:8e:60:dc:ac:2a:82:73:54:cc:c3:00:
f1:bd:61:35:fb:32:d4:af:8a:5f:9f:9f:4c:80:d9:a3:db:f9:
b1:f7:58:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:30:22 2025 by rpki-client