Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/MP-3uVnTAkNZ9I3LuQHIQioLLTc.roa
File: MP-3uVnTAkNZ9I3LuQHIQioLLTc.roa (raw, json)
Hash identifier: PXhoDRL1gcI5/uDLBH4iZS9n4eaZp+o50yNcgIHWuZs=
Subject key identifier: 30:FF:B7:B9:59:D3:02:43:59:F4:8D:CB:B9:01:C8:42:2A:0B:2D:37
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019E151D879B6E0CDE02A5E2FD386466CE8F
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/MP-3uVnTAkNZ9I3LuQHIQioLLTc.roa
Signing time: Mon 11 May 2026 03:38:37 +0000
ROA not before: Mon 11 May 2026 03:38:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 194.231.128.0/22 maxlen: 24
194.231.128.0/24 maxlen: 24
194.231.129.0/24 maxlen: 24
194.231.132.0/22 maxlen: 22
194.231.132.0/24 maxlen: 24
194.231.135.0/24 maxlen: 24
194.231.136.0/22 maxlen: 22
194.231.137.0/24 maxlen: 24
194.231.138.0/24 maxlen: 24
194.231.139.0/24 maxlen: 24
194.231.142.0/24 maxlen: 24
194.231.150.0/24 maxlen: 24
194.231.152.0/22 maxlen: 22
194.231.154.0/24 maxlen: 24
194.231.158.0/24 maxlen: 24
194.231.195.0/24 maxlen: 24
194.231.196.0/22 maxlen: 22
194.231.196.0/24 maxlen: 24
194.231.198.0/24 maxlen: 24
194.231.199.0/24 maxlen: 24
194.231.200.0/22 maxlen: 22
194.231.201.0/24 maxlen: 24
194.231.202.0/23 maxlen: 24
194.231.202.0/24 maxlen: 24
194.231.204.0/22 maxlen: 22
194.231.204.0/23 maxlen: 24
194.231.206.0/23 maxlen: 24
194.231.208.0/23 maxlen: 24
194.231.210.0/23 maxlen: 24
194.231.212.0/22 maxlen: 22
194.231.213.0/24 maxlen: 24
194.231.218.0/23 maxlen: 24
194.231.220.0/22 maxlen: 24
194.231.222.0/24 maxlen: 24
194.231.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 May 2026 19:43:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:15:1d:87:9b:6e:0c:de:02:a5:e2:fd:38:64:66:ce:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: May 11 03:38:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30ffb7b959d3024359f48dcbb901c8422a0b2d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:a5:74:4c:97:8d:37:89:83:3a:9c:23:c6:
0b:21:2c:e0:24:f8:88:09:b3:d6:4f:e3:54:94:ab:
86:17:4b:e4:26:4d:90:e2:07:fb:25:92:23:61:08:
8d:3e:32:77:3e:76:4d:18:ad:b5:d9:67:18:16:18:
d8:32:01:11:41:6f:d3:48:54:c2:f5:ca:d0:0d:ed:
f0:99:5c:15:4d:59:e3:76:3d:a3:a0:0c:d8:e4:e1:
21:7b:33:f9:99:6c:05:3a:cf:f4:9e:cb:60:49:38:
7a:c8:75:0d:ab:d8:f6:89:9c:77:87:03:83:5c:21:
e1:74:f8:4b:5e:31:a6:e6:bc:7e:ae:f7:ab:12:b9:
cc:b9:24:b2:66:b0:e6:a9:fe:44:b2:5a:7e:11:b5:
c4:41:da:e7:65:98:8a:4d:fe:50:24:8a:3d:c3:33:
ef:ed:30:4f:1d:ae:9a:89:69:6b:8d:68:f8:eb:af:
d3:7d:ec:58:a9:ee:4b:4e:2e:65:2c:b5:a8:ab:62:
b8:2f:92:b2:cf:84:4d:e1:69:75:1b:fe:c2:6f:f9:
78:14:a1:ca:39:07:66:82:82:da:d8:d3:5c:7a:51:
a1:81:6e:ac:08:ba:8a:be:70:9e:62:43:a6:23:a7:
f2:bf:02:59:5a:e2:26:78:e5:7a:64:d9:82:c2:8b:
14:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FF:B7:B9:59:D3:02:43:59:F4:8D:CB:B9:01:C8:42:2A:0B:2D:37
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/MP-3uVnTAkNZ9I3LuQHIQioLLTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.128.0-194.231.139.255
194.231.142.0/24
194.231.150.0/24
194.231.152.0/22
194.231.158.0/24
194.231.195.0-194.231.215.255
194.231.218.0-194.231.223.255
Signature Algorithm: sha256WithRSAEncryption
a0:73:a0:cb:c2:a3:b5:19:48:0a:ab:46:e2:82:42:ef:bf:52:
2c:0b:b1:12:97:76:56:32:b7:d4:9c:bc:d9:5b:8c:52:96:2e:
42:b8:d8:5b:76:fe:8f:da:76:e9:fb:bf:da:72:c0:a9:f1:74:
88:77:10:74:da:4e:7e:43:ca:88:35:69:55:3a:1a:00:f3:97:
ff:cc:5d:22:62:d1:e3:bb:ca:a2:4a:2d:78:15:6b:e1:b5:ee:
39:3c:70:e5:8f:0a:05:ef:7a:b0:4a:df:f5:84:a2:d6:45:87:
44:69:5e:09:46:5f:03:7a:32:8d:c2:44:45:c3:78:32:23:c3:
65:0b:01:0f:3a:b0:79:e0:dc:bb:38:37:ea:46:d3:e5:23:32:
1e:e3:32:20:81:a4:6f:42:ff:bd:c7:6e:c9:3c:ad:00:3e:54:
4d:ef:d4:87:ba:8d:b5:e0:77:1a:81:cf:ee:b1:79:42:ca:bd:
ca:8e:58:ec:9f:57:da:20:0d:1b:0a:00:2e:a9:b7:5a:80:db:
09:e4:d3:04:70:e8:a0:9f:e8:79:c3:29:94:0c:eb:7a:25:26:
ea:cf:1f:3a:b1:77:fc:fd:2c:0f:5e:88:42:c5:1c:ca:9b:ec:
56:29:6b:50:a5:a1:90:af:66:7f:81:b3:12:92:9e:c1:d9:e2:
b1:f6:f2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:40:23 2026 by rpki-client