Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/MG-5orNekCKQVfyv6J-sdUbKkCc.roa
File: MG-5orNekCKQVfyv6J-sdUbKkCc.roa (raw, json)
Hash identifier: Bln2WO72ae8FNpx3eypD95MFjiSm3ht+FLcNxFjDxu0=
Subject key identifier: 30:6F:B9:A2:B3:5E:90:22:90:55:FC:AF:E8:9F:AC:75:46:CA:90:27
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 019791B2CCF3E3D8B86CE7AC39EDFD76D1C8
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/MG-5orNekCKQVfyv6J-sdUbKkCc.roa
Signing time: Sat 21 Jun 2025 08:55:03 +0000
ROA not before: Sat 21 Jun 2025 08:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212496
IP address blocks: 77.83.245.0/24 maxlen: 24
185.24.109.0/24 maxlen: 24
185.58.114.0/24 maxlen: 24
185.73.183.0/24 maxlen: 24
185.76.240.0/24 maxlen: 24
185.76.241.0/24 maxlen: 24
185.76.242.0/24 maxlen: 24
185.95.230.0/24 maxlen: 24
185.97.79.0/24 maxlen: 24
185.104.148.0/24 maxlen: 24
185.105.47.0/24 maxlen: 24
185.111.25.0/24 maxlen: 24
185.112.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 21 Jun 2025 09:41:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:91:b2:cc:f3:e3:d8:b8:6c:e7:ac:39:ed:fd:76:d1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jun 21 08:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=306fb9a2b35e90229055fcafe89fac7546ca9027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2f:d5:00:1a:40:e5:9b:62:32:8e:61:a4:7f:
b7:88:7a:4b:d6:82:ab:ad:ce:fa:46:f6:09:27:26:
1c:af:10:9e:69:93:ff:8d:ec:ce:14:90:22:c9:a0:
b8:69:49:f5:3c:70:05:39:4d:78:d5:51:ee:31:01:
8f:93:e0:dc:1a:ff:45:03:3c:00:80:bd:4f:01:e6:
7e:4f:b7:27:8c:b5:95:93:19:3c:db:91:e2:f1:4c:
e2:b1:f7:c3:8b:2f:e9:0e:3c:4c:39:b8:97:e5:10:
41:75:80:ac:56:d8:b6:5a:f7:55:08:3a:e6:03:cf:
c0:5a:f6:91:1c:c2:60:02:3f:f3:d3:64:4a:03:87:
56:f4:87:01:8f:cf:8e:68:88:ba:f5:d8:8a:af:76:
86:18:55:c7:f2:55:c9:2e:89:87:44:15:0a:83:71:
ab:5b:93:5f:85:80:ca:16:43:b2:a7:c4:01:bc:6a:
95:42:64:18:5f:5d:ea:95:10:ee:15:ad:f1:a0:0c:
25:96:81:92:a2:af:67:dc:02:93:bd:62:2d:47:4e:
e1:56:b4:94:0b:a7:f3:9b:c9:9c:55:5a:05:bf:29:
e3:83:17:c6:60:11:de:a6:9b:e5:11:30:a9:4c:5b:
c2:1b:88:55:cb:9e:2a:4a:22:50:cc:b6:84:37:b9:
f9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6F:B9:A2:B3:5E:90:22:90:55:FC:AF:E8:9F:AC:75:46:CA:90:27
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/MG-5orNekCKQVfyv6J-sdUbKkCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.245.0/24
185.24.109.0/24
185.58.114.0/24
185.73.183.0/24
185.76.240.0-185.76.242.255
185.95.230.0/24
185.97.79.0/24
185.104.148.0/24
185.105.47.0/24
185.111.25.0/24
185.112.59.0/24
Signature Algorithm: sha256WithRSAEncryption
61:85:02:1a:9b:4b:92:7a:84:59:29:69:23:cb:7b:5a:1d:59:
6d:9e:f7:80:09:c0:fa:6d:f0:0b:5e:c4:4a:cf:81:52:ed:eb:
0e:68:8e:f0:3c:25:c1:57:ad:53:f7:53:e1:5c:b1:4b:b3:f6:
de:02:30:5f:ea:e3:01:29:48:58:29:fb:54:5c:89:7a:f0:45:
7d:50:c6:1b:3c:e7:d6:df:8e:40:0a:22:38:10:98:2a:9c:a8:
2b:26:f1:15:f4:00:a1:4f:16:02:35:42:b2:b4:3d:84:f2:2f:
53:72:77:46:2c:d0:fe:18:2e:95:4e:5f:d2:08:20:33:10:3b:
9e:97:a1:ed:ad:ce:91:cf:20:ad:6e:a3:48:5c:c0:81:b7:ff:
a6:f2:a2:0c:b5:85:75:9c:b9:f2:92:4b:73:c6:76:17:81:05:
40:2c:87:fb:6c:77:5c:10:e2:7b:c2:e2:74:6d:7b:e4:9b:93:
0e:ce:6c:2e:a2:b6:75:a0:ad:0b:9a:83:3f:bd:1c:b5:fc:03:
78:1e:60:f4:77:84:71:a9:dc:1b:fa:f7:3c:97:0b:55:4d:27:
da:0c:a7:ea:27:1d:d0:15:4d:ac:b8:84:a8:88:0e:d0:74:18:
c3:64:5a:5c:67:75:06:d8:03:dc:9c:76:87:be:62:71:ab:0f:
df:3a:53:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:47:33 2025 by rpki-client