Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/MWhTJONlton-4hUEFWJuyyg_-Lg.roa
File: MWhTJONlton-4hUEFWJuyyg_-Lg.roa (raw, json)
Hash identifier: 1kOPMtky3zKPvlhaNueK4nluzCughfwTyZN/Y1jZh0U=
Subject key identifier: 31:68:53:24:E3:65:B6:89:FE:E2:15:04:15:62:6E:CB:28:3F:F8:B8
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 0197E3C5D4A714F316BE53740FCDD8F43F81
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/MWhTJONlton-4hUEFWJuyyg_-Lg.roa
Signing time: Mon 07 Jul 2025 07:24:42 +0000
ROA not before: Mon 07 Jul 2025 07:24:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24589
IP address blocks: 31.42.80.0/20 maxlen: 20
83.243.88.0/21 maxlen: 21
84.38.136.0/21 maxlen: 21
87.99.64.0/19 maxlen: 19
87.99.64.0/24 maxlen: 24
87.99.65.0/24 maxlen: 24
87.99.66.0/24 maxlen: 24
87.99.67.0/24 maxlen: 24
87.99.95.0/24 maxlen: 24
88.135.128.0/19 maxlen: 19
91.90.224.0/19 maxlen: 29
91.90.225.0/24 maxlen: 24
91.90.230.0/24 maxlen: 24
91.90.231.0/24 maxlen: 24
91.90.236.0/24 maxlen: 24
91.90.237.0/25 maxlen: 25
91.90.238.0/24 maxlen: 24
91.90.252.64/29 maxlen: 29
91.90.255.0/24 maxlen: 24
91.233.214.0/23 maxlen: 23
109.197.208.0/21 maxlen: 21
109.197.208.0/24 maxlen: 24
109.229.192.0/19 maxlen: 19
171.25.218.0/23 maxlen: 23
176.103.176.0/22 maxlen: 22
176.103.184.0/24 maxlen: 24
176.106.48.0/20 maxlen: 20
176.106.100.0/23 maxlen: 23
176.106.160.0/20 maxlen: 20
176.106.176.0/21 maxlen: 21
185.47.10.0/24 maxlen: 24
185.47.11.0/24 maxlen: 24
185.220.196.0/22 maxlen: 22
185.220.196.0/24 maxlen: 24
193.111.244.0/22 maxlen: 22
193.238.212.0/22 maxlen: 22
193.238.212.128/25 maxlen: 25
193.238.216.0/21 maxlen: 21
194.9.212.0/22 maxlen: 22
194.9.212.0/24 maxlen: 24
195.69.88.0/22 maxlen: 22
213.110.64.0/22 maxlen: 22
213.110.76.0/22 maxlen: 22
213.110.80.0/20 maxlen: 20
2a01:8ca0::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 10 Jul 2025 12:39:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e3:c5:d4:a7:14:f3:16:be:53:74:0f:cd:d8:f4:3f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Jul 7 07:24:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31685324e365b689fee2150415626ecb283ff8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:46:43:b7:5d:02:dc:7f:45:ae:6a:cf:e3:69:
e4:c2:16:76:41:74:3e:86:8b:f5:1c:26:0d:dc:5d:
f8:6b:69:62:b8:83:81:b4:ce:14:f2:d6:ae:38:94:
28:61:3f:c7:c3:60:80:3b:82:74:35:89:b9:f4:71:
93:79:b0:8a:ca:6a:cc:31:cc:88:ef:b5:1f:57:8b:
82:8c:f8:02:5d:70:f4:c8:2d:d8:ba:30:61:53:f7:
49:8f:3b:20:05:6f:5d:ba:c0:e8:23:b3:d3:1b:37:
21:bd:3e:14:96:01:af:04:30:01:6d:ea:07:8e:d5:
ad:ef:a8:08:0c:9a:b6:01:2d:ab:45:f9:cb:93:a5:
5f:e7:eb:1d:44:0e:17:98:49:e8:c2:34:c3:8c:21:
ed:dc:5f:35:0a:1f:33:2f:dd:36:57:b3:eb:45:e4:
f8:42:11:82:c7:af:f3:fb:75:ee:51:63:b8:59:1e:
f1:36:1a:1f:27:92:1e:56:d5:33:04:6e:48:50:fd:
be:0e:01:a8:74:4e:eb:ab:79:75:e0:e6:c4:01:f1:
8c:62:3a:8e:6f:82:ab:26:d1:d5:e5:d4:a4:a3:02:
02:3c:e5:77:61:25:bd:68:3b:a6:9e:10:dc:77:bb:
de:17:f3:d7:9e:e5:e7:29:df:15:c4:cb:77:0d:1b:
48:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:68:53:24:E3:65:B6:89:FE:E2:15:04:15:62:6E:CB:28:3F:F8:B8
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/MWhTJONlton-4hUEFWJuyyg_-Lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.80.0/20
83.243.88.0/21
84.38.136.0/21
87.99.64.0/19
88.135.128.0/19
91.90.224.0/19
91.233.214.0/23
109.197.208.0/21
109.229.192.0/19
171.25.218.0/23
176.103.176.0/22
176.103.184.0/24
176.106.48.0/20
176.106.100.0/23
176.106.160.0-176.106.183.255
185.47.10.0/23
185.220.196.0/22
193.111.244.0/22
193.238.212.0-193.238.223.255
194.9.212.0/22
195.69.88.0/22
213.110.64.0/22
213.110.76.0-213.110.95.255
IPv6:
2a01:8ca0::/32
Signature Algorithm: sha256WithRSAEncryption
76:2f:55:13:9a:52:7b:96:0a:09:e5:f2:83:cd:16:bf:8b:1f:
31:c9:2d:32:d3:17:ac:52:aa:87:86:93:d4:98:86:da:90:90:
f3:c3:28:75:6b:1d:1a:8b:1c:9e:e2:a8:f1:af:fb:b1:b2:a4:
dd:07:40:98:3b:16:a0:8a:ec:c6:32:de:61:37:b7:ab:7e:1a:
00:6b:5a:84:51:07:a5:bf:e9:46:a3:91:8b:55:83:0c:13:1e:
df:83:c8:ec:34:c2:f8:97:ca:8e:32:2a:21:04:07:b1:22:52:
05:20:4b:e7:29:89:50:3c:77:72:c3:f0:32:63:f3:7c:5b:f2:
e4:f1:2d:df:83:05:41:13:7b:8b:84:c4:f4:1c:fd:73:22:e4:
23:2c:da:ba:2f:22:ec:a9:58:81:d3:2a:0c:47:68:6a:a2:c0:
01:1d:df:fb:37:56:23:86:23:08:5d:24:0a:08:97:7b:da:42:
1a:b1:02:a0:76:40:23:f6:86:b3:e3:34:54:35:45:3a:fb:a8:
33:96:ed:e6:d6:f8:8a:ab:8d:05:9d:b1:d2:14:b0:93:7d:65:
15:ee:ff:ef:dd:73:2b:4f:94:4e:e9:a2:ca:1f:33:ae:c2:26:
17:ba:c7:7a:c9:67:96:a8:5b:27:3a:f7:7a:6c:5a:3a:06:82:
64:39:f7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 16:31:52 2025 by rpki-client