Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/MVgr8W58pPsRun69nX2ISNfTUUY.roa
File: MVgr8W58pPsRun69nX2ISNfTUUY.roa (raw, json)
Hash identifier: ZP6jOFfd7z2rW5Rgme9C3XaAGi+zYb+w6VPdMwvkejI=
Subject key identifier: 31:58:2B:F1:6E:7C:A4:FB:11:BA:7E:BD:9D:7D:88:48:D7:D3:51:46
Certificate issuer: /CN=12a657f3424c8dd55215af853b93307c366c538a
Certificate serial: 019553680106EE1E9CA3ECD3D227F21C927A
Authority key identifier: 12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/MVgr8W58pPsRun69nX2ISNfTUUY.roa
Signing time: Sat 01 Mar 2025 20:31:19 +0000
ROA not before: Sat 01 Mar 2025 20:31:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211995
IP address blocks: 46.22.225.0/24 maxlen: 24
46.22.226.0/24 maxlen: 24
46.22.227.0/24 maxlen: 24
46.22.228.0/24 maxlen: 24
46.22.229.0/24 maxlen: 24
46.22.230.0/24 maxlen: 24
46.22.231.0/24 maxlen: 24
46.22.232.0/24 maxlen: 24
46.22.233.0/24 maxlen: 24
46.22.234.0/24 maxlen: 24
46.22.235.0/24 maxlen: 24
46.22.236.0/24 maxlen: 24
46.22.237.0/24 maxlen: 24
46.22.238.0/24 maxlen: 24
46.22.239.0/24 maxlen: 24
46.28.237.0/24 maxlen: 24
93.114.130.0/24 maxlen: 24
109.237.112.0/20 maxlen: 20
109.237.112.0/24 maxlen: 24
109.237.113.0/24 maxlen: 24
109.237.114.0/24 maxlen: 24
109.237.115.0/24 maxlen: 24
109.237.116.0/24 maxlen: 24
109.237.120.0/24 maxlen: 24
109.237.121.0/24 maxlen: 24
185.55.36.0/22 maxlen: 22
185.55.36.0/24 maxlen: 24
185.55.37.0/24 maxlen: 24
185.55.38.0/24 maxlen: 24
185.55.39.0/24 maxlen: 24
185.77.3.0/24 maxlen: 24
185.136.207.0/24 maxlen: 24
185.233.35.0/24 maxlen: 24
194.164.222.0/24 maxlen: 24
213.142.158.0/24 maxlen: 24
2a10:d880::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 05 Mar 2025 06:27:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:53:68:01:06:ee:1e:9c:a3:ec:d3:d2:27:f2:1c:92:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12a657f3424c8dd55215af853b93307c366c538a
Validity
Not Before: Mar 1 20:31:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31582bf16e7ca4fb11ba7ebd9d7d8848d7d35146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a7:31:18:96:fd:b1:33:b8:c7:66:7c:4a:40:
a3:44:1e:ef:49:26:38:44:e4:a8:c2:12:76:2e:80:
77:a1:47:9b:ab:34:05:c9:52:83:3b:e3:9d:5d:cb:
5d:8b:6d:49:01:6d:78:fe:5f:35:c0:0e:8a:7e:62:
d6:77:65:6b:38:52:02:04:16:b2:2a:f3:18:74:29:
b7:bf:12:c2:1b:bb:16:a6:4c:cd:49:28:cb:a5:ab:
f1:6f:37:e5:19:e5:1c:bd:3f:18:55:40:1d:12:a6:
ba:49:6c:47:f7:de:f1:ee:c8:c4:56:9a:5c:bd:eb:
87:ea:30:ef:11:d6:1b:92:28:6c:a8:f2:2f:da:ef:
f5:26:03:35:09:11:9b:05:27:05:10:12:c9:c7:0a:
23:30:cc:f0:33:af:3c:50:9b:a0:39:c1:5f:26:5c:
c6:a7:87:59:c0:36:3b:bb:d0:a0:ec:b6:7b:d2:c7:
cb:97:f3:4a:6c:71:8f:31:40:0e:1d:c7:b4:2b:43:
7c:ca:c9:1b:99:cd:84:7f:02:02:3c:a1:1b:5a:f5:
97:8c:92:5d:0d:d1:42:37:26:3b:00:af:4a:c2:7f:
2f:2d:69:b3:2a:21:b0:3b:97:42:17:fe:b3:b8:61:
22:9f:09:0d:0a:f8:89:f5:72:51:fc:2a:73:88:7e:
cc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:58:2B:F1:6E:7C:A4:FB:11:BA:7E:BD:9D:7D:88:48:D7:D3:51:46
X509v3 Authority Key Identifier:
keyid:12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/MVgr8W58pPsRun69nX2ISNfTUUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.22.225.0-46.22.239.255
46.28.237.0/24
93.114.130.0/24
109.237.112.0/20
185.55.36.0/22
185.77.3.0/24
185.136.207.0/24
185.233.35.0/24
194.164.222.0/24
213.142.158.0/24
IPv6:
2a10:d880::/29
Signature Algorithm: sha256WithRSAEncryption
37:37:05:63:04:a8:19:1c:04:a2:cf:2e:31:ef:91:02:40:9c:
55:ca:72:f8:98:5d:3c:de:f9:f9:45:ab:a6:85:81:e1:ef:77:
06:3d:31:41:b6:17:75:a8:0e:11:86:dc:18:ed:5e:dc:86:45:
d7:77:d1:27:eb:41:bf:67:16:13:22:9d:f8:d2:6c:60:d0:27:
1e:cf:57:df:62:cd:60:3c:4d:04:a8:c9:48:d5:57:39:c6:d9:
08:1b:6f:b7:de:c4:34:c5:01:57:40:f3:b8:26:f9:22:44:51:
bc:db:9c:84:3e:4e:6c:15:ca:ae:9a:3e:77:b0:99:10:c7:2f:
88:f2:31:c6:2b:18:b7:c8:3e:f6:e4:5b:be:7e:b2:3f:21:84:
65:99:a6:dd:5b:7d:eb:d3:b8:41:04:95:9b:a3:d7:4a:2d:b8:
2e:49:00:c1:3a:d9:1a:0a:20:ef:fe:f9:2d:c9:20:9f:0e:93:
1d:b0:1f:1e:16:50:c3:34:6e:d2:1d:d0:84:bb:e5:a7:9d:7b:
ef:a7:93:a1:21:75:6e:bf:19:cd:97:3e:6c:c7:1a:90:36:b0:
a5:59:55:84:89:92:31:37:5a:3e:83:7d:b1:76:25:38:ea:3c:
63:f1:58:20:3b:f9:41:2c:e5:ba:65:c8:76:67:85:ed:ba:5d:
e5:b6:41:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:37 2025 by rpki-client