Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mJee4mOcESfsXjirEOdyJkCBWyk.roa
File: mJee4mOcESfsXjirEOdyJkCBWyk.roa (raw, json)
Hash identifier: RRxf4DENnSHdZ6GPC7KMx/7FXl9EGDYjJY4mJMTBnBU=
Subject key identifier: 98:97:9E:E2:63:9C:11:27:EC:5E:38:AB:10:E7:72:26:40:81:5B:29
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019428250F96654C4281E619E8BAE0D21533
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mJee4mOcESfsXjirEOdyJkCBWyk.roa
Signing time: Thu 02 Jan 2025 17:51:44 +0000
ROA not before: Thu 02 Jan 2025 17:51:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214238
IP address blocks: 62.76.226.0/24 maxlen: 24
62.76.227.0/24 maxlen: 24
185.72.10.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.182.0/24 maxlen: 24
192.124.188.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
193.124.4.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.24.0/24 maxlen: 24
194.87.33.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
194.87.90.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.229.0/24 maxlen: 24
194.87.231.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
212.192.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Jan 2025 15:53:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:0f:96:65:4c:42:81:e6:19:e8:ba:e0:d2:15:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98979ee2639c1127ec5e38ab10e7722640815b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:90:9c:ae:b6:02:ae:a8:03:44:73:1e:5c:e6:
d8:64:9c:46:3c:ae:e8:ce:23:b1:87:33:62:af:85:
12:aa:56:51:5f:22:90:dd:0f:50:ab:b7:47:29:ff:
23:c8:4e:88:50:6c:e5:90:3c:83:97:31:62:00:01:
e8:13:e5:c7:e5:74:91:1a:cf:9c:4f:77:aa:7b:1d:
fb:a4:23:69:3d:59:d5:8d:57:fe:76:e6:6e:9c:3e:
05:49:93:e9:aa:54:8b:42:35:fe:9f:19:32:4d:fa:
a7:97:ac:c5:c4:8d:d5:dc:c8:f3:b8:ee:56:fa:0b:
28:5a:30:e3:81:c3:36:38:47:f6:3b:3d:6a:fa:1b:
2d:ce:d8:49:2b:b2:39:1e:4c:90:04:10:fe:db:95:
be:35:6f:c7:4a:7a:ba:9a:e1:00:9d:ad:9e:94:62:
c9:2a:3a:a1:38:2a:23:25:8d:0d:94:da:79:a8:f1:
3e:8e:89:f7:f0:02:ca:06:b4:dc:66:92:e1:fa:8e:
b7:4d:0a:86:d3:79:4d:48:85:4c:57:9d:e0:0e:db:
d7:a9:77:11:18:b2:cf:0f:ab:55:2e:9e:5a:49:75:
a8:7d:e2:92:87:fd:d3:b7:d4:2c:69:03:8f:fe:4a:
4a:57:1e:c0:53:25:65:dd:a0:26:e5:04:aa:82:c6:
9b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:97:9E:E2:63:9C:11:27:EC:5E:38:AB:10:E7:72:26:40:81:5B:29
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mJee4mOcESfsXjirEOdyJkCBWyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.226.0/23
185.72.10.0/24
192.124.181.0-192.124.182.255
192.124.188.0/24
192.124.190.0/24
193.124.4.0/24
194.87.3.0/24
194.87.24.0/24
194.87.33.0/24
194.87.36.0/24
194.87.90.0/24
194.87.165.0-194.87.166.255
194.87.229.0/24
194.87.231.0/24
195.133.35.0/24
212.192.242.0/24
Signature Algorithm: sha256WithRSAEncryption
03:fa:9c:77:4d:bd:63:d0:06:27:03:f7:65:d6:23:16:a0:b5:
e2:c8:ea:0f:3d:da:bd:34:3a:c2:a6:be:93:20:a4:d8:5d:5c:
65:95:18:d3:53:35:da:29:b4:1b:d6:e4:96:a4:c3:67:1a:cc:
59:d9:4d:f9:63:21:df:ee:8e:95:eb:9d:d4:33:d5:8b:c3:62:
bb:1a:84:d8:95:87:7b:78:9c:62:b8:07:4f:07:13:3b:6b:f9:
0b:a0:29:8f:1d:b2:bd:98:c3:26:96:27:7d:db:d1:c9:eb:e9:
a9:c9:d8:8e:9b:93:ff:df:a4:83:7a:79:39:74:8d:9d:63:ed:
9b:e3:47:cc:76:55:b0:21:f2:bb:fe:71:74:45:dc:07:65:87:
0c:05:e9:2d:63:57:ab:ee:98:0d:87:04:34:eb:59:fa:9b:90:
f8:09:c1:25:b5:3e:79:2c:6e:84:b4:82:64:e4:34:ed:88:c3:
1f:7f:68:97:1b:6d:fc:fa:f4:fa:f0:a2:9c:8f:6d:e5:1d:c6:
cd:21:02:e8:cc:90:3e:6e:0c:b8:ab:e6:fc:74:56:12:42:20:
28:02:bf:b7:83:62:f0:38:85:0b:31:e8:a0:c2:c6:23:5f:9c:
ca:2f:8a:9d:bc:2a:b0:b9:73:91:58:82:69:e6:03:40:e9:88:
56:d4:28:f2
-----BEGIN CERTIFICATE-----
MIIFaDCCBFCgAwIBAgISAZQoJQ+WZUxCgeYZ6Lrg0hUzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjUwMTAyMTc1MTQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODk3OWVlMjYzOWMxMTI3ZWM1ZTM4YWIxMGU3NzIyNjQwODE1YjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZCcrrYCrqgDRHMeXObYZJxGPK7o
ziOxhzNir4USqlZRXyKQ3Q9Qq7dHKf8jyE6IUGzlkDyDlzFiAAHoE+XH5XSRGs+c
T3eqex37pCNpPVnVjVf+duZunD4FSZPpqlSLQjX+nxkyTfqnl6zFxI3V3MjzuO5W
+gsoWjDjgcM2OEf2Oz1q+hstzthJK7I5HkyQBBD+25W+NW/HSnq6muEAna2elGLJ
KjqhOCojJY0NlNp5qPE+jon38ALKBrTcZpLh+o63TQqG03lNSIVMV53gDtvXqXcR
GLLPD6tVLp5aSXWofeKSh/3Tt9QsaQOP/kpKVx7AUyVl3aAm5QSqgsab9wIDAQAB
o4ICdDCCAnAwHQYDVR0OBBYEFJiXnuJjnBEn7F44qxDnciZAgVspMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvbUplZTRtT2NFU2ZzWGppckVPZHlKa0NCV3lrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGJBggrBgEFBQcBBwEB/wR6MHgwdgQCAAEwcAMEAT5M4gME
ALlICjAMAwQAwHy1AwQAwHy2AwQAwHy8AwQAwHy+AwQAwXwEAwQAwlcDAwQAwlcY
AwQAwlchAwQAwlckAwQAwldaMAwDBADCV6UDBADCV6YDBADCV+UDBADCV+cDBADD
hSMDBADUwPIwDQYJKoZIhvcNAQELBQADggEBAAP6nHdNvWPQBicD92XWIxagteLI
6g892r00OsKmvpMgpNhdXGWVGNNTNdoptBvW5Jakw2cazFnZTfljId/ujpXrndQz
1YvDYrsahNiVh3t4nGK4B08HEztr+QugKY8dsr2YwyaWJ33b0cnr6anJ2I6bk//f
pIN6eTl0jZ1j7ZvjR8x2VbAh8rv+cXRF3AdlhwwF6S1jV6vumA2HBDTrWfqbkPgJ
wSW1PnksboS0gmTkNO2Iwx9/aJcbbfz69PrwopyPbeUdxs0hAujMkD5uDLir5vx0
VhJCICgCv7eDYvA4hQsx6KDCxiNfnMovip28KrC5c5FYgmnmA0DpiFbUKPI=
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:03:35 2025 by rpki-client