Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Mbm-zBCVCuVuugp8QDu2kFaaeZk.roa
File: Mbm-zBCVCuVuugp8QDu2kFaaeZk.roa (raw, json)
Hash identifier: iNw1BfacI/V9AwtkTdqa9gVu8UqtjVmubJZkUN4REIQ=
Subject key identifier: 31:B9:BE:CC:10:95:0A:E5:6E:BA:0A:7C:40:3B:B6:90:56:9A:79:99
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019503B9CBAFA7AF95889AF0063FFF68120F
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Mbm-zBCVCuVuugp8QDu2kFaaeZk.roa
Signing time: Fri 14 Feb 2025 09:11:02 +0000
ROA not before: Fri 14 Feb 2025 09:11:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Feb 2025 11:25:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:03:b9:cb:af:a7:af:95:88:9a:f0:06:3f:ff:68:12:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 14 09:11:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31b9becc10950ae56eba0a7c403bb690569a7999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:45:93:93:b5:44:16:16:ef:bb:72:22:7b:b4:
61:21:c1:7f:d8:b0:42:18:62:51:27:2c:44:38:72:
e9:9d:01:37:da:c7:79:16:62:b5:0d:ec:46:82:12:
b5:ed:96:9a:99:66:b5:9b:c4:d8:a2:87:f1:5b:32:
f7:da:2c:10:0e:c9:76:e5:1a:9d:4a:b9:5f:21:55:
ef:78:0e:d1:76:a0:94:13:0f:b3:ab:98:b3:3b:62:
3e:e6:5c:d9:af:1a:c8:36:a3:09:86:ef:9a:86:aa:
25:07:e9:18:b6:e8:d4:72:f9:37:af:ba:5f:f7:dd:
e2:2a:dd:0a:06:22:0e:aa:5b:0e:f1:88:d7:fb:20:
54:ec:c1:39:82:08:78:4e:fb:c2:a6:27:34:5e:3c:
f3:95:6f:fe:b1:c0:f0:67:e7:5c:42:a9:0f:d4:28:
a6:5a:0c:3a:9d:95:6a:e4:e5:ec:3d:04:b7:49:ce:
dc:91:b3:89:f1:de:fb:f9:a4:f4:ed:bc:ee:1e:c3:
34:1d:39:f8:b9:64:94:6a:6f:f0:1a:21:d8:1b:37:
20:04:0d:b4:5a:6b:c1:1f:28:83:bf:ab:2c:4b:33:
0b:cd:ba:da:9f:36:21:03:9a:74:5f:87:6f:a9:56:
55:df:46:97:b6:ef:33:c6:68:74:d5:af:8e:a5:e0:
37:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B9:BE:CC:10:95:0A:E5:6E:BA:0A:7C:40:3B:B6:90:56:9A:79:99
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Mbm-zBCVCuVuugp8QDu2kFaaeZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
93.114.183.0/24
Signature Algorithm: sha256WithRSAEncryption
51:27:14:36:dc:fd:ad:82:f1:53:a7:73:8a:91:ac:c9:0b:c3:
6f:eb:ab:b0:1f:10:56:cf:40:a6:c0:9a:f7:6e:16:ee:c8:a2:
ec:35:1e:07:84:8d:85:50:82:2a:b0:a6:37:74:a4:78:cd:d1:
dd:cd:e6:05:eb:36:a0:cb:ac:1a:6f:eb:01:e5:01:d2:13:0b:
f2:b3:61:ae:80:0a:7f:64:9e:0b:41:63:c6:e1:f7:33:7d:30:
6d:a3:ef:75:75:46:8b:67:63:ee:02:74:96:6c:3a:d9:45:b8:
61:5f:33:fa:5c:00:d3:1c:30:10:a2:79:40:4c:cc:52:6f:8e:
31:df:f0:d0:3f:cb:a5:fd:a2:eb:64:99:3a:78:33:3e:69:ba:
de:9e:d6:e7:a7:5a:9d:56:a0:0d:7f:d6:42:a8:48:b5:39:3e:
a1:9e:ba:f0:87:34:bd:0d:2a:6d:42:04:02:d3:18:c1:a3:be:
f0:d9:33:6c:2b:61:d3:b1:99:be:45:38:cb:50:d1:60:c2:d3:
4c:e3:13:92:7f:60:82:04:17:59:b4:4f:e8:20:53:ef:ee:ff:
6b:69:24:b1:e6:c7:ad:bf:69:da:68:2c:ba:4f:d6:96:9f:77:
98:07:72:23:de:50:62:a4:74:49:7f:0e:6a:57:20:2b:79:fe:
a1:48:7f:a6
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZUDucuvp6+ViJrwBj//aBIPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjUwMjE0MDkxMTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMWI5YmVjYzEwOTUwYWU1NmViYTBhN2M0MDNiYjY5MDU2OWE3OTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUWTk7VEFhbvu3Iie7RhIcF/2LBC
GGJRJyxEOHLpnQE32sd5FmK1DexGghK17ZaamWa1m8TYoofxWzL32iwQDsl25Rqd
SrlfIVXveA7RdqCUEw+zq5izO2I+5lzZrxrINqMJhu+ahqolB+kYtujUcvk3r7pf
993iKt0KBiIOqlsO8YjX+yBU7ME5ggh4TvvCpic0XjzzlW/+scDwZ+dcQqkP1Cim
Wgw6nZVq5OXsPQS3Sc7ckbOJ8d77+aT07bzuHsM0HTn4uWSUam/wGiHYGzcgBA20
WmvBHyiDv6ssSzMLzbranzYhA5p0X4dvqVZV30aXtu8zxmh01a+OpeA3mQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDG5vswQlQrlbroKfEA7tpBWmnmZMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvTWJtLXpCQ1ZDdVZ1dWdwOFFEdTJrRmFhZVprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLYe2AwQA
WSJqAwQAXXK3MA0GCSqGSIb3DQEBCwUAA4IBAQBRJxQ23P2tgvFTp3OKkazJC8Nv
66uwHxBWz0CmwJr3bhbuyKLsNR4HhI2FUIIqsKY3dKR4zdHdzeYF6zagy6wab+sB
5QHSEwvys2GugAp/ZJ4LQWPG4fczfTBto+91dUaLZ2PuAnSWbDrZRbhhXzP6XADT
HDAQonlATMxSb44x3/DQP8ul/aLrZJk6eDM+abrentbnp1qdVqANf9ZCqEi1OT6h
nrrwhzS9DSptQgQC0xjBo77w2TNsK2HTsZm+RTjLUNFgwtNM4xOSf2CCBBdZtE/o
IFPv7v9raSSx5setv2naaCy6T9aWn3eYB3Ij3lBipHRJfw5qVyAref6hSH+m
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:23:03 2025 by rpki-client