Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/mSyMqsR5M7-IM0Hr2ei4PvWMs9I.roa
File: mSyMqsR5M7-IM0Hr2ei4PvWMs9I.roa (raw, json)
Hash identifier: Sne1I7gFApvKwmU5QvtWkTvXatj496qcWTD0oyd43tk=
Subject key identifier: 99:2C:8C:AA:C4:79:33:BF:88:33:41:EB:D9:E8:B8:3E:F5:8C:B3:D2
Certificate issuer: /CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e
Certificate serial: 0197D73101C5D9E85DF004B29425D05BDD94
Authority key identifier: 74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/mSyMqsR5M7-IM0Hr2ei4PvWMs9I.roa
Signing time: Fri 04 Jul 2025 20:46:42 +0000
ROA not before: Fri 04 Jul 2025 20:46:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210318
IP address blocks: 94.156.75.0/24 maxlen: 24
185.37.232.0/24 maxlen: 24
185.37.232.252/32 maxlen: 32
185.37.233.0/24 maxlen: 24
185.37.234.0/24 maxlen: 24
185.37.235.0/24 maxlen: 24
185.37.235.2/32 maxlen: 32
194.55.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Jul 2025 21:08:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d7:31:01:c5:d9:e8:5d:f0:04:b2:94:25:d0:5b:dd:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e
Validity
Not Before: Jul 4 20:46:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=992c8caac47933bf883341ebd9e8b83ef58cb3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a2:d6:03:a4:3e:1b:c4:ff:f5:5d:42:5e:d6:
5b:8c:c6:e3:b1:c5:de:88:43:b7:89:b0:de:74:d9:
d8:09:97:b3:d1:34:cf:3e:40:e9:8e:f6:91:dc:59:
1e:2f:df:62:f8:5d:7f:72:4d:e6:e5:db:21:0f:d2:
2f:89:ad:2d:f9:7e:0c:14:90:13:a7:2b:46:9a:70:
3f:07:8d:a1:e8:ba:cd:66:08:2d:f5:79:33:78:3f:
62:94:44:b9:65:f0:fa:ec:b5:24:7c:ab:18:24:f1:
12:8e:4b:e9:70:e1:e8:3f:3e:8d:56:f9:4b:d1:10:
62:f1:d7:83:91:2b:65:49:b5:e8:c4:ab:41:f9:f8:
85:7e:54:90:b2:57:5e:51:4c:78:36:4b:50:b4:67:
37:39:b0:3c:d5:ae:1a:ea:51:9c:9a:98:57:d2:cd:
63:c2:3e:ca:54:31:e5:4a:7b:55:67:f3:81:57:5b:
ae:a1:7e:30:a7:23:4a:a2:9e:ad:8d:15:4b:ab:25:
53:13:7a:fc:27:ec:52:da:24:2f:3e:2b:b9:d0:33:
af:30:40:bd:27:50:16:81:4c:76:9e:6b:61:f6:d2:
fe:a9:82:da:23:ab:28:b8:ae:64:01:7c:ee:28:f8:
35:1e:cf:36:16:32:d3:b3:08:ae:2f:62:0a:72:02:
65:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2C:8C:AA:C4:79:33:BF:88:33:41:EB:D9:E8:B8:3E:F5:8C:B3:D2
X509v3 Authority Key Identifier:
keyid:74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/mSyMqsR5M7-IM0Hr2ei4PvWMs9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.75.0/24
185.37.232.0/22
194.55.187.0/24
Signature Algorithm: sha256WithRSAEncryption
04:8f:2d:fe:af:1b:75:99:a3:ce:ab:ef:39:e3:7c:a8:b0:eb:
63:62:58:91:10:c4:93:e5:dd:f9:38:1f:cf:ab:a2:9d:70:bd:
64:1f:38:f5:ba:22:47:21:59:0f:18:1d:5d:db:49:b0:45:31:
d5:49:43:59:7f:48:66:ec:e0:fc:14:50:25:3d:c8:dd:ce:70:
d0:81:21:2b:d7:ad:31:f4:6b:f8:73:c9:cf:03:0e:00:11:c7:
95:5e:d1:ec:c5:61:b6:82:b9:95:e1:53:96:d4:78:7b:c6:8f:
76:11:60:47:24:33:9d:2a:5c:6d:89:44:7b:5e:35:0d:a1:89:
14:a4:d4:ce:f0:29:73:69:aa:02:1d:d7:dd:14:f2:d1:f2:7e:
95:7c:6c:eb:52:98:64:cb:54:a2:65:e8:48:b6:39:bc:f7:f4:
24:9b:97:e9:f1:27:67:00:0b:6d:6a:b4:79:2e:f7:7c:12:e7:
46:50:5b:0a:00:e1:61:70:2d:53:d5:79:25:3a:a4:75:86:33:
24:56:44:cd:e9:dd:0f:65:49:ca:ce:42:cb:ad:a5:49:c9:58:
c6:73:fb:d7:92:75:b8:b7:4a:86:86:64:d8:16:68:18:d5:2a:
ed:96:a3:08:fe:eb:17:c6:a7:19:ef:52:f2:c2:1f:94:56:47:
50:75:6c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:48:02 2025 by rpki-client