Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/MBWzhuBE4Nh_e64_iO80XtcTMkM.roa
File: MBWzhuBE4Nh_e64_iO80XtcTMkM.roa (raw, json)
Hash identifier: sIeeIMgLQ5BYpyt4rAxxe/X4KclgsowbB7E1xtmP8IY=
Subject key identifier: 30:15:B3:86:E0:44:E0:D8:7F:7B:AE:3F:88:EF:34:5E:D7:13:32:43
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019425222A2B92E9B3BF71F96A7C6D3EE2C9
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/MBWzhuBE4Nh_e64_iO80XtcTMkM.roa
Signing time: Thu 02 Jan 2025 03:49:43 +0000
ROA not before: Thu 02 Jan 2025 03:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24852
IP address blocks: 79.132.160.0/20 maxlen: 20
84.55.32.0/24 maxlen: 24
84.55.33.0/24 maxlen: 24
84.55.34.0/23 maxlen: 23
84.55.36.0/23 maxlen: 23
84.55.48.0/21 maxlen: 21
84.55.56.0/23 maxlen: 23
84.55.58.0/23 maxlen: 23
84.55.60.0/23 maxlen: 23
84.55.62.0/23 maxlen: 23
88.223.0.0/18 maxlen: 18
88.223.96.0/22 maxlen: 22
88.223.104.0/21 maxlen: 21
88.223.112.0/20 maxlen: 20
88.223.128.0/22 maxlen: 22
88.223.144.0/21 maxlen: 21
88.223.152.0/24 maxlen: 24
88.223.153.0/24 maxlen: 24
88.223.160.0/22 maxlen: 22
88.223.192.0/20 maxlen: 20
95.173.32.0/23 maxlen: 23
185.104.176.0/22 maxlen: 22
213.164.112.0/22 maxlen: 22
213.164.116.0/23 maxlen: 23
213.164.118.0/24 maxlen: 24
217.147.34.0/24 maxlen: 24
217.147.35.0/24 maxlen: 24
217.147.36.0/23 maxlen: 23
217.147.38.0/24 maxlen: 24
217.147.40.0/24 maxlen: 24
217.147.41.0/24 maxlen: 24
217.147.44.0/23 maxlen: 23
217.147.46.0/24 maxlen: 24
217.147.47.0/24 maxlen: 24
2a01:7c80::/33 maxlen: 33
Validation: Failed, certificate revoked on Mon 10 Feb 2025 08:41:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:2a:2b:92:e9:b3:bf:71:f9:6a:7c:6d:3e:e2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jan 2 03:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3015b386e044e0d87f7bae3f88ef345ed7133243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7a:d5:34:df:14:d1:21:ac:b1:f0:70:41:dd:
1a:a1:b1:90:d0:88:bf:bb:dc:37:cf:9b:72:59:eb:
24:46:f2:65:24:6e:56:20:b0:b9:e8:ca:93:ef:d0:
72:69:56:be:98:09:ee:1e:c8:70:71:74:c1:a6:1d:
95:cd:1e:d7:66:44:90:6f:f9:b1:28:a5:6a:17:ee:
61:1c:3b:cc:28:c3:3c:b9:03:9d:c0:23:94:6b:8b:
b6:0b:fd:74:17:c0:db:ef:e5:ba:c4:ba:45:83:3e:
c4:0c:04:bc:f4:77:1a:36:5f:2d:21:04:fb:71:89:
ec:a9:64:c3:91:e3:39:c4:58:64:36:8b:85:6b:df:
42:de:bc:68:f3:98:ea:24:24:ac:7e:cc:56:34:0a:
13:89:82:91:d7:a7:c2:0c:44:46:c3:00:ac:60:e3:
43:e2:52:74:2a:9c:46:d5:f7:7e:60:3b:c9:49:97:
ab:bf:a8:e3:42:13:d7:88:c0:fc:65:c8:e7:ba:d3:
37:89:a5:ad:0a:2e:52:5c:d2:51:38:3f:db:32:c5:
9c:6d:a4:35:3b:06:32:76:0f:96:45:31:85:cc:49:
53:1c:08:02:17:b9:fd:91:48:64:5c:79:63:91:83:
6b:ab:fe:9b:15:9f:d5:6b:5a:5b:35:34:d9:7f:ef:
ea:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:15:B3:86:E0:44:E0:D8:7F:7B:AE:3F:88:EF:34:5E:D7:13:32:43
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/MBWzhuBE4Nh_e64_iO80XtcTMkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.160.0/20
84.55.32.0-84.55.37.255
84.55.48.0/20
88.223.0.0/18
88.223.96.0/22
88.223.104.0-88.223.131.255
88.223.144.0-88.223.153.255
88.223.160.0/22
88.223.192.0/20
95.173.32.0/23
185.104.176.0/22
213.164.112.0-213.164.118.255
217.147.34.0-217.147.38.255
217.147.40.0/23
217.147.44.0/22
IPv6:
2a01:7c80::/33
Signature Algorithm: sha256WithRSAEncryption
92:56:a2:57:13:b0:2b:61:47:fc:5f:e8:2b:15:e2:81:e8:c2:
39:a4:b0:58:e7:89:2f:6f:0b:e2:7c:c4:6c:b0:a1:61:cb:47:
0c:9d:3e:8b:02:8c:e7:d0:44:5c:47:12:32:ad:33:94:70:b9:
20:d3:35:33:6f:c5:5e:f9:58:c8:01:1f:9b:7d:c9:6b:f6:a5:
e2:cb:4c:40:55:55:8e:1d:7a:09:4c:7f:4a:f2:52:df:1a:61:
21:2b:74:3a:cf:6c:0a:96:1b:4f:87:98:79:2b:1f:18:e3:8f:
53:1f:e7:f2:e2:90:86:04:ce:f0:93:7f:48:cd:3a:57:c4:6e:
d2:4c:10:08:46:f3:b4:ee:71:23:cc:b3:3d:0c:ca:fa:a8:31:
58:3e:73:a3:c6:e7:73:d6:78:4a:de:57:f5:3c:db:f7:d7:6c:
28:65:7d:a5:f7:2f:68:e0:f4:7e:6a:ce:a5:cf:15:d7:5c:fa:
69:39:cd:0f:aa:5a:fb:7e:4d:c9:59:a9:f8:c1:ee:24:87:54:
ea:20:54:91:bc:dc:da:76:aa:1c:d6:26:78:5b:0b:25:22:61:
b0:60:a0:23:60:06:cd:d5:40:db:cf:1e:e8:99:c5:5a:8b:4d:
bd:e7:90:0e:29:c3:68:80:8f:80:ee:28:cf:2e:2f:ae:3b:4c:
fc:b8:40:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:55:35 2025 by rpki-client