Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/mwzcMMA-2h5zPD9EQhGnKfsPoMw.roa
File: mwzcMMA-2h5zPD9EQhGnKfsPoMw.roa (raw, json)
Hash identifier: LWtmj1f7/Ut879YSdMrpBNMJLy1NcxO+RHdk7JYr+DE=
Subject key identifier: 9B:0C:DC:30:C0:3E:DA:1E:73:3C:3F:44:42:11:A7:29:FB:0F:A0:CC
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 0196AEB74D18CEA18EF8B0855C6E2B5EA7D5
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/mwzcMMA-2h5zPD9EQhGnKfsPoMw.roa
Signing time: Thu 08 May 2025 07:06:10 +0000
ROA not before: Thu 08 May 2025 07:06:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 84.239.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 May 2025 09:15:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:b7:4d:18:ce:a1:8e:f8:b0:85:5c:6e:2b:5e:a7:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: May 8 07:06:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b0cdc30c03eda1e733c3f444211a729fb0fa0cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:78:73:61:49:32:27:ce:f4:af:a8:e1:a9:d9:
e6:9f:46:94:f7:ea:85:eb:63:d2:8b:20:8c:e2:d0:
51:fa:25:8b:62:13:fb:a9:8a:16:bf:62:e7:6c:01:
13:ec:da:17:6f:8d:53:0d:4f:19:08:c3:d1:c6:4d:
89:38:6e:5e:4b:7f:ec:0d:02:e6:f0:ca:7a:cf:35:
e5:5d:16:1d:a9:d3:55:79:68:98:72:c8:c5:61:43:
b4:97:6c:1a:dc:9a:73:07:d3:83:5c:3f:bd:20:0f:
26:05:3c:b7:6a:9b:76:66:37:cb:d4:4b:5b:95:45:
d0:e5:27:47:96:c9:cb:b8:ce:b1:a3:25:99:4f:52:
8f:a3:4f:7b:19:12:95:b8:f0:0e:10:18:d4:71:e1:
6e:72:65:18:58:77:a3:1b:f2:38:fb:e9:3f:78:54:
c7:95:9c:f0:7d:5b:81:ca:02:7c:8b:a3:e7:ce:d5:
8d:a1:00:61:36:42:af:92:ee:3f:d5:93:89:79:ae:
d4:6a:34:f2:5d:ca:81:05:46:cc:c6:54:ef:f4:26:
01:05:61:9c:26:e1:70:44:e0:39:a7:1a:74:32:f9:
f3:0f:35:39:9e:b3:f6:70:0f:2f:a6:a3:23:9e:f6:
17:60:e1:bb:3b:71:2e:ce:b8:0a:ca:72:03:a5:b3:
d7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0C:DC:30:C0:3E:DA:1E:73:3C:3F:44:42:11:A7:29:FB:0F:A0:CC
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/mwzcMMA-2h5zPD9EQhGnKfsPoMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.239.60.0/24
Signature Algorithm: sha256WithRSAEncryption
42:cf:2b:c4:e2:d3:e0:37:46:94:00:a6:46:d7:12:dc:b3:ce:
0a:ec:81:eb:aa:fd:dc:8d:af:22:dc:de:1f:16:46:7d:f2:ae:
05:e8:91:82:15:52:97:11:87:bc:e5:80:c3:b4:42:8d:2b:9c:
de:8a:7f:f0:22:e9:e1:dc:e4:0e:56:1d:a3:fd:79:d2:b8:e5:
0e:ee:b0:69:34:5b:a2:d2:a3:4e:6b:af:7c:91:6d:ff:94:d5:
f2:cc:7f:d7:92:b4:f7:5a:53:8a:d7:db:77:a8:3d:3b:92:d8:
d5:3b:8b:c4:fe:00:2d:cb:5a:7c:3c:81:4f:08:3d:9b:09:cf:
fa:46:96:40:82:a7:98:c0:a9:54:b5:f6:7c:bd:56:aa:3f:0c:
ea:fa:ea:0d:31:38:ce:91:f4:84:f9:86:db:c2:26:0d:47:ff:
01:f8:3d:e0:26:f6:55:a0:77:c3:c5:98:3d:6e:5d:7d:d1:db:
58:d7:2a:0b:25:24:e2:a9:ff:2b:1c:12:e9:16:b0:74:a9:b4:
aa:c5:7b:6f:6e:bf:ae:77:e6:f5:91:f6:de:cf:41:68:45:07:
19:68:22:85:91:dd:f5:2b:36:6b:ee:e0:92:3b:e4:c9:76:5f:
df:3e:1f:9e:35:3f:49:74:0c:04:37:d5:fc:b1:5b:2a:ab:9a:
eb:3c:09:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZaut00YzqGO+LCFXG4rXqfVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMWRlYTUzNDY3YjZjNzE0M2ViMjNkMjg0NTY5YTgxODNi
MmU4MmYwHhcNMjUwNTA4MDcwNjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjBjZGMzMGMwM2VkYTFlNzMzYzNmNDQ0MjExYTcyOWZiMGZhMGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3hzYUkyJ870r6jhqdnmn0aU9+qF
62PSiyCM4tBR+iWLYhP7qYoWv2LnbAET7NoXb41TDU8ZCMPRxk2JOG5eS3/sDQLm
8Mp6zzXlXRYdqdNVeWiYcsjFYUO0l2wa3JpzB9ODXD+9IA8mBTy3apt2ZjfL1Etb
lUXQ5SdHlsnLuM6xoyWZT1KPo097GRKVuPAOEBjUceFucmUYWHejG/I4++k/eFTH
lZzwfVuBygJ8i6PnztWNoQBhNkKvku4/1ZOJea7UajTyXcqBBUbMxlTv9CYBBWGc
JuFwROA5pxp0MvnzDzU5nrP2cA8vpqMjnvYXYOG7O3EuzrgKynIDpbPXNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJsM3DDAPtoeczw/REIRpyn7D6DMMB8GA1UdIwQY
MBaAFEEd6lNGe2xxQ+sj0oRWmoGDsugvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEt
NDcxMjBiOTA2OWI3LzEvbXd6Y01NQS0yaDV6UEQ5RVFoR25LZnNQb013LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEtNDcxMjBiOTA2OWI3
LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVO88MA0G
CSqGSIb3DQEBCwUAA4IBAQBCzyvE4tPgN0aUAKZG1xLcs84K7IHrqv3cja8i3N4f
FkZ98q4F6JGCFVKXEYe85YDDtEKNK5zein/wIunh3OQOVh2j/XnSuOUO7rBpNFui
0qNOa698kW3/lNXyzH/XkrT3WlOK19t3qD07ktjVO4vE/gAty1p8PIFPCD2bCc/6
RpZAgqeYwKlUtfZ8vVaqPwzq+uoNMTjOkfSE+YbbwiYNR/8B+D3gJvZVoHfDxZg9
bl190dtY1yoLJSTiqf8rHBLpFrB0qbSqxXtvbr+ud+b1kfbez0FoRQcZaCKFkd31
KzZr7uCSO+TJdl/fPh+eNT9JdAwEN9X8sVsqq5rrPAn+
-----END CERTIFICATE-----
Generated at Sun Jun 8 10:38:38 2025 by rpki-client