Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/MJIE3P3TwoRTFuZ9Y__JTuK8_Rs.roa
File: MJIE3P3TwoRTFuZ9Y__JTuK8_Rs.roa (raw, json)
Hash identifier: 6Aka8MvXYyJu1PvQDwUroJ27yF+Lu+hGEWsQyL33gXk=
Subject key identifier: 30:92:04:DC:FD:D3:C2:84:53:16:E6:7D:63:FF:C9:4E:E2:BC:FD:1B
Certificate issuer: /CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Certificate serial: 019395EE3D1FB11A6090FF2A227B85F435D9
Authority key identifier: 68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/MJIE3P3TwoRTFuZ9Y__JTuK8_Rs.roa
Signing time: Thu 05 Dec 2024 08:27:18 +0000
ROA not before: Thu 05 Dec 2024 08:27:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200555
IP address blocks: 2.58.188.0/22 maxlen: 24
31.14.60.0/22 maxlen: 24
89.39.216.0/21 maxlen: 24
89.42.120.0/21 maxlen: 24
185.58.208.0/22 maxlen: 24
185.58.208.0/24 maxlen: 24
185.58.209.0/24 maxlen: 24
185.58.210.0/24 maxlen: 24
185.58.211.0/24 maxlen: 24
194.146.55.0/24 maxlen: 24
194.146.63.0/24 maxlen: 24
194.146.70.0/24 maxlen: 24
194.146.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:95:ee:3d:1f:b1:1a:60:90:ff:2a:22:7b:85:f4:35:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Validity
Not Before: Dec 5 08:27:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=309204dcfdd3c2845316e67d63ffc94ee2bcfd1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5e:08:21:cd:26:15:31:88:ec:65:00:07:24:
f9:fa:ab:9a:ce:f7:5e:d6:cd:92:39:e1:f6:12:87:
b2:d2:d3:27:37:63:81:d1:7d:4d:92:7d:b2:0c:89:
6f:e9:87:af:6f:fa:c7:3c:55:06:2e:7c:97:7d:5d:
3e:05:26:98:1d:c8:d9:ca:c9:d7:04:8c:19:13:ac:
c6:ba:7e:4a:7f:ea:b3:59:f2:45:40:c0:b3:c6:05:
78:8f:fb:28:4b:f4:57:41:0e:65:16:b6:d8:b1:da:
34:86:c1:bd:ac:2c:7f:e3:af:a1:05:eb:65:1c:fa:
4b:bc:4f:24:08:6e:f8:47:53:c1:c9:0f:11:5c:d0:
13:82:cc:de:9a:06:6d:ab:90:e0:4a:ac:ae:d3:3c:
31:48:05:73:41:f2:41:ef:44:c5:a7:d7:16:ae:22:
08:f6:1c:3b:07:31:ca:79:cf:29:63:27:d7:18:e2:
f5:d0:a3:57:40:83:9c:2a:d8:52:7b:87:e5:6f:4c:
da:78:7d:b1:cb:82:cd:9e:7b:31:b6:74:fd:1d:2b:
82:78:d6:22:38:be:03:f8:8c:c8:8e:18:c7:45:c6:
cd:07:43:25:e3:aa:f6:24:0f:cf:96:d2:e7:49:25:
9f:86:b5:80:de:c7:63:fd:d3:c7:5e:ca:0e:a5:8d:
53:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:92:04:DC:FD:D3:C2:84:53:16:E6:7D:63:FF:C9:4E:E2:BC:FD:1B
X509v3 Authority Key Identifier:
keyid:68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/MJIE3P3TwoRTFuZ9Y__JTuK8_Rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.188.0/22
31.14.60.0/22
89.39.216.0/21
89.42.120.0/21
185.58.208.0/22
194.146.55.0/24
194.146.63.0/24
194.146.70.0/24
194.146.99.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:8e:00:8a:9a:bb:f5:0d:38:0a:52:60:c2:78:e9:1c:8b:5b:
14:7f:15:4f:27:b7:6b:fc:ae:fb:5a:e6:99:e4:02:2d:64:af:
7d:9b:69:bb:36:df:e9:c0:7b:cf:94:14:0e:c5:a5:b1:11:64:
48:8e:79:6a:89:59:3a:e2:92:e0:e7:e6:6f:d2:51:36:b7:78:
87:90:35:e3:27:a1:c7:c6:29:11:d1:81:d6:b4:b2:67:7c:4d:
d8:f2:97:01:16:e8:f6:06:ee:9d:b8:93:e9:50:95:5c:5d:b6:
94:ab:f8:4e:6d:48:9c:00:56:cd:5a:a0:62:48:b5:5a:ca:33:
88:b3:62:88:73:af:ea:8d:9c:3a:a0:9f:0b:7c:30:9c:cf:f2:
78:76:6f:7f:f1:13:a8:08:39:5d:d1:d7:d7:5b:71:b3:ca:ec:
88:a6:f2:57:a4:1c:7f:91:68:de:dc:48:83:8f:59:7d:0a:ce:
0a:f6:45:da:91:da:23:49:47:11:da:1f:ad:0e:82:81:bd:8d:
3c:6e:c3:7e:b4:cd:b9:a6:2c:38:75:2e:b2:a6:d4:50:a3:f0:
f5:e2:4b:4a:96:b7:72:ce:8c:89:7a:fd:60:b7:ad:4b:4a:67:
97:72:09:63:dd:6f:7b:cd:ac:bd:57:c3:d8:b8:39:b8:be:82:
25:33:26:7e
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZOV7j0fsRpgkP8qInuF9DXZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZGRiZWY3ZjFjZGQ4YWQxMjcxNjBmMjBlYTBhM2Y2Yjcz
ZmE0YTIwHhcNMjQxMjA1MDgyNzE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDkyMDRkY2ZkZDNjMjg0NTMxNmU2N2Q2M2ZmYzk0ZWUyYmNmZDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6l4IIc0mFTGI7GUAByT5+quazvde
1s2SOeH2Eoey0tMnN2OB0X1Nkn2yDIlv6Yevb/rHPFUGLnyXfV0+BSaYHcjZysnX
BIwZE6zGun5Kf+qzWfJFQMCzxgV4j/soS/RXQQ5lFrbYsdo0hsG9rCx/46+hBetl
HPpLvE8kCG74R1PByQ8RXNATgszemgZtq5DgSqyu0zwxSAVzQfJB70TFp9cWriII
9hw7BzHKec8pYyfXGOL10KNXQIOcKthSe4flb0zaeH2xy4LNnnsxtnT9HSuCeNYi
OL4D+IzIjhjHRcbNB0Ml46r2JA/PltLnSSWfhrWA3sdj/dPHXsoOpY1TMwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFDCSBNz908KEUxbmfWP/yU7ivP0bMB8GA1UdIwQY
MBaAFGjdvvfxzditEnFg8g6go/a3P6SiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mMDMzZjEtMmY1ZC00NmQxLTkxOTQt
NjNmMzAxODg5NDg2LzEvTUpJRTNQM1R3b1JURnVaOVlfX0pUdUs4X1JzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9mMDMzZjEtMmY1ZC00NmQxLTkxOTQtNjNmMzAxODg5NDg2
LzEvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQCAjq8AwQC
Hw48AwQDWSfYAwQDWSp4AwQCuTrQAwQAwpI3AwQAwpI/AwQAwpJGAwQAwpJjMA0G
CSqGSIb3DQEBCwUAA4IBAQB9jgCKmrv1DTgKUmDCeOkci1sUfxVPJ7dr/K77WuaZ
5AItZK99m2m7Nt/pwHvPlBQOxaWxEWRIjnlqiVk64pLg5+Zv0lE2t3iHkDXjJ6HH
xikR0YHWtLJnfE3Y8pcBFuj2Bu6duJPpUJVcXbaUq/hObUicAFbNWqBiSLVayjOI
s2KIc6/qjZw6oJ8LfDCcz/J4dm9/8ROoCDld0dfXW3GzyuyIpvJXpBx/kWje3EiD
j1l9Cs4K9kXakdojSUcR2h+tDoKBvY08bsN+tM25piw4dS6yptRQo/D14ktKlrdy
zoyJev1gt61LSmeXcglj3W97zay9V8PYuDm4voIlMyZ+
-----END CERTIFICATE-----
Generated at Tue Apr 22 23:32:30 2025 by rpki-client