Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/MWc5tMDzgsY1-vAPQqsNg7cq02I.roa
File: MWc5tMDzgsY1-vAPQqsNg7cq02I.roa (raw, json)
Hash identifier: rY3aE3uRrIoJhMPdBLe585i+UrNrLI7JeKMMwh+hCmU=
Subject key identifier: 31:67:39:B4:C0:F3:82:C6:35:FA:F0:0F:42:AB:0D:83:B7:2A:D3:62
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 0196FD99C3E4759A3EF0A1717B62802E8608
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/MWc5tMDzgsY1-vAPQqsNg7cq02I.roa
Signing time: Fri 23 May 2025 14:43:54 +0000
ROA not before: Fri 23 May 2025 14:43:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6830
IP address blocks: 80.81.39.0/24 maxlen: 24
80.81.47.0/24 maxlen: 24
80.81.48.0/24 maxlen: 24
80.81.53.0/24 maxlen: 24
80.81.58.0/24 maxlen: 24
80.255.224.0/20 maxlen: 20
80.255.232.0/21 maxlen: 21
83.223.128.0/24 maxlen: 24
83.223.129.0/24 maxlen: 24
83.223.130.0/24 maxlen: 24
83.223.131.0/24 maxlen: 24
83.223.134.0/24 maxlen: 24
83.223.135.0/24 maxlen: 24
83.223.137.0/24 maxlen: 24
83.223.138.0/24 maxlen: 24
83.223.140.0/24 maxlen: 24
83.223.142.0/24 maxlen: 24
83.223.144.0/24 maxlen: 24
83.223.148.0/24 maxlen: 24
83.223.152.0/24 maxlen: 24
83.223.153.0/24 maxlen: 24
83.223.154.0/24 maxlen: 24
83.223.156.0/24 maxlen: 24
83.223.157.0/24 maxlen: 24
83.223.158.0/24 maxlen: 24
85.254.41.0/24 maxlen: 24
85.254.46.0/24 maxlen: 24
85.254.52.0/24 maxlen: 24
85.254.53.0/24 maxlen: 24
85.254.54.0/24 maxlen: 24
85.254.55.0/24 maxlen: 24
85.254.66.0/24 maxlen: 24
85.254.67.0/24 maxlen: 24
85.254.133.0/24 maxlen: 24
85.254.135.0/24 maxlen: 24
85.254.136.0/24 maxlen: 24
85.254.165.0/24 maxlen: 24
85.254.166.0/24 maxlen: 24
85.254.167.0/24 maxlen: 24
85.254.171.0/24 maxlen: 24
85.254.190.0/24 maxlen: 24
91.190.37.0/24 maxlen: 24
91.190.38.0/24 maxlen: 24
91.190.39.0/24 maxlen: 24
91.190.47.0/24 maxlen: 24
91.190.61.0/24 maxlen: 24
94.101.226.0/24 maxlen: 24
94.101.237.0/24 maxlen: 24
159.148.143.0/24 maxlen: 24
159.148.148.0/24 maxlen: 24
159.148.149.0/24 maxlen: 24
159.148.181.0/24 maxlen: 24
159.148.240.0/24 maxlen: 24
185.7.237.0/24 maxlen: 24
185.7.238.0/24 maxlen: 24
185.7.239.0/24 maxlen: 24
185.176.116.0/24 maxlen: 24
185.176.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 May 2025 07:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fd:99:c3:e4:75:9a:3e:f0:a1:71:7b:62:80:2e:86:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: May 23 14:43:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=316739b4c0f382c635faf00f42ab0d83b72ad362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bc:d6:79:e3:9f:61:e5:2a:59:e8:9c:03:02:
3b:6f:bb:f3:8c:67:e3:9d:f9:e5:04:77:71:93:ed:
11:99:b5:e4:e6:98:ce:ff:af:cc:66:5d:6e:38:3c:
88:34:03:a5:f7:f1:7e:88:b8:32:63:80:82:5f:35:
3b:bd:69:0a:1b:ef:54:04:72:0e:78:26:39:6c:23:
dc:de:9a:9e:b6:a8:74:9f:2f:ed:fe:eb:f0:14:31:
67:a6:03:2e:88:e7:02:5c:e6:14:bc:f4:5e:61:5d:
b4:2d:81:55:66:80:7c:d3:74:05:a0:bd:18:d4:ae:
33:7f:9e:ee:aa:c8:be:bc:cc:f2:be:60:d2:01:b2:
e8:83:53:b4:25:0a:bc:a0:5f:dd:73:90:20:b7:41:
2d:2b:06:d1:07:87:09:be:2e:94:ff:2f:a5:36:07:
bb:b1:e3:66:a6:66:ba:47:1e:7b:9a:cb:84:96:ac:
9c:a0:b2:43:1d:9b:d2:ab:e2:64:4b:e8:22:30:76:
e7:00:f5:66:e6:72:16:c0:9c:25:88:cb:95:69:ea:
52:c3:94:3f:65:d8:ce:5c:bb:ea:de:ed:80:f0:d0:
f2:15:a2:ba:ce:1e:46:b3:bb:09:e1:a5:b1:7e:70:
be:02:55:b6:94:9c:ea:83:bb:d5:4a:80:0e:43:dd:
73:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:67:39:B4:C0:F3:82:C6:35:FA:F0:0F:42:AB:0D:83:B7:2A:D3:62
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/MWc5tMDzgsY1-vAPQqsNg7cq02I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.81.39.0/24
80.81.47.0-80.81.48.255
80.81.53.0/24
80.81.58.0/24
80.255.224.0/20
83.223.128.0/22
83.223.134.0/23
83.223.137.0-83.223.138.255
83.223.140.0/24
83.223.142.0/24
83.223.144.0/24
83.223.148.0/24
83.223.152.0-83.223.154.255
83.223.156.0-83.223.158.255
85.254.41.0/24
85.254.46.0/24
85.254.52.0/22
85.254.66.0/23
85.254.133.0/24
85.254.135.0-85.254.136.255
85.254.165.0-85.254.167.255
85.254.171.0/24
85.254.190.0/24
91.190.37.0-91.190.39.255
91.190.47.0/24
91.190.61.0/24
94.101.226.0/24
94.101.237.0/24
159.148.143.0/24
159.148.148.0/23
159.148.181.0/24
159.148.240.0/24
185.7.237.0-185.7.239.255
185.176.116.0/24
185.176.119.0/24
Signature Algorithm: sha256WithRSAEncryption
12:3f:52:ee:7d:ec:eb:ba:4a:c7:ce:82:c4:7e:c0:70:fb:41:
dc:fb:0c:8a:9c:be:a7:e1:1b:49:96:2f:f3:95:d5:6d:c5:4c:
b1:24:36:9c:16:6c:24:64:61:0a:08:cd:9b:8e:e1:f8:2c:e4:
48:9e:da:cf:87:34:89:33:23:76:83:c6:aa:5e:22:be:fd:b8:
bf:28:f1:6c:c2:0b:d8:e5:de:2f:99:a8:5e:04:fd:11:99:cb:
f6:50:6f:b5:bf:1f:af:6d:96:46:b0:4e:c5:78:9c:74:46:34:
12:9c:19:02:4b:42:36:ab:19:43:c6:60:66:2e:c2:ba:58:30:
26:f6:89:10:30:6a:31:7c:33:ce:f5:31:7b:1f:9b:16:b0:2a:
d0:76:80:dc:de:a8:a9:18:05:35:45:74:e3:78:88:f3:f6:fb:
c8:35:35:d0:d5:38:24:03:5d:1a:d7:cb:b7:44:45:25:aa:01:
99:73:e1:20:af:81:3e:56:2c:2d:78:f6:fa:92:d7:c5:fc:b1:
ec:b7:0b:a6:19:58:ff:0e:be:60:69:f7:68:fd:ff:ea:da:53:
bb:a9:0f:94:95:d6:2e:9d:2a:18:b7:59:61:0f:0b:50:b0:d5:
e7:52:e3:77:6b:d8:1a:2a:34:16:40:07:16:61:08:b4:a8:bb:
d1:8d:82:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:38:52 2025 by rpki-client