Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/mUF5mF59TYn-nVz2sLuapdds7V4.roa
File: mUF5mF59TYn-nVz2sLuapdds7V4.roa (raw, json)
Hash identifier: FRNMmBbX/gqcw7qJIpk/WKbirKy832kEQTAfZlyQHx4=
Subject key identifier: 99:41:79:98:5E:7D:4D:89:FE:9D:5C:F6:B0:BB:9A:A5:D7:6C:ED:5E
Certificate issuer: /CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Certificate serial: 0193BA5CC736F7C8EBD8CB6CCF7260AF1D00
Authority key identifier: 8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/mUF5mF59TYn-nVz2sLuapdds7V4.roa
Signing time: Thu 12 Dec 2024 10:14:22 +0000
ROA not before: Thu 12 Dec 2024 10:14:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5482
IP address blocks: 31.22.12.0/22 maxlen: 24
37.48.224.0/24 maxlen: 24
37.48.229.0/24 maxlen: 24
37.48.230.0/24 maxlen: 24
51.179.192.0/18 maxlen: 24
62.64.128.0/21 maxlen: 24
62.64.136.0/22 maxlen: 24
62.64.144.0/20 maxlen: 24
141.195.128.0/19 maxlen: 24
141.195.136.0/21 maxlen: 24
141.195.144.0/21 maxlen: 24
185.102.148.0/22 maxlen: 24
188.74.64.0/19 maxlen: 24
193.17.86.0/23 maxlen: 24
193.17.176.0/23 maxlen: 24
212.132.160.0/19 maxlen: 24
217.142.64.0/18 maxlen: 24
217.168.248.0/21 maxlen: 24
2a04:c880::/32 maxlen: 48
2a05:87c0::/29 maxlen: 48
2a0f:9d80::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 12 Dec 2024 11:13:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:5c:c7:36:f7:c8:eb:d8:cb:6c:cf:72:60:af:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Validity
Not Before: Dec 12 10:14:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=994179985e7d4d89fe9d5cf6b0bb9aa5d76ced5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:01:c4:4a:ed:37:5a:f5:48:72:9f:f4:92:f6:
99:1a:2c:02:7c:7c:06:89:87:5b:50:5f:d9:00:59:
88:97:69:7c:6d:27:9f:ed:fd:31:c6:5f:54:71:5d:
21:87:42:7d:8c:c8:9e:29:c1:be:df:4e:50:04:ea:
00:bd:a2:c8:ad:b2:47:9c:1e:8e:76:29:4c:5a:48:
64:c8:51:0f:ac:0d:1b:20:4f:d7:ac:d1:07:01:79:
d0:38:89:62:74:16:d2:86:9c:75:5a:c7:99:0d:5f:
c0:f8:fb:12:14:09:b7:2b:01:21:69:0d:95:73:7f:
59:d0:42:90:55:10:2b:09:26:bd:c9:b4:97:9d:dd:
82:ef:d6:41:84:d9:d8:59:2f:2a:1c:9d:e2:3b:a0:
d8:82:79:e5:b8:e3:6e:b3:b8:cf:f3:d2:a6:57:d1:
c1:8f:81:f9:3a:b0:38:14:6e:51:a0:e9:47:d9:12:
80:91:e9:9b:fa:70:b1:c2:ca:56:31:e0:86:c0:05:
48:7b:d6:ac:d3:7f:22:92:04:75:08:92:18:17:32:
25:9b:93:3e:e8:e7:be:ff:e5:82:e5:a3:cd:a4:29:
b3:8e:be:e4:1f:e6:d4:b6:78:ae:d2:c3:87:3c:9d:
13:94:7a:37:5f:54:80:f4:67:a7:e0:4d:7f:01:67:
2f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:41:79:98:5E:7D:4D:89:FE:9D:5C:F6:B0:BB:9A:A5:D7:6C:ED:5E
X509v3 Authority Key Identifier:
keyid:8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/mUF5mF59TYn-nVz2sLuapdds7V4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.12.0/22
37.48.224.0/24
37.48.229.0-37.48.230.255
51.179.192.0/18
62.64.128.0-62.64.139.255
62.64.144.0/20
141.195.128.0/19
185.102.148.0/22
188.74.64.0/19
193.17.86.0/23
193.17.176.0/23
212.132.160.0/19
217.142.64.0/18
217.168.248.0/21
IPv6:
2a04:c880::/32
2a05:87c0::/29
2a0f:9d80::/32
Signature Algorithm: sha256WithRSAEncryption
8b:6e:d4:e3:fa:aa:f1:86:14:91:cc:a2:9b:6d:bc:db:ce:d2:
a1:e5:6c:95:4c:da:08:e3:1e:e5:e1:e7:ec:c0:da:cb:16:72:
f9:c2:d5:b7:ff:91:4c:25:5f:51:5a:0b:54:3e:67:85:f4:e0:
1d:3e:7f:09:d8:ce:b4:05:a3:1d:45:64:00:48:03:d1:42:e3:
bd:ca:60:11:01:bc:28:90:f2:98:6e:6f:89:97:8c:d4:84:79:
19:0f:f8:ce:a9:93:11:e3:a8:87:6a:e5:7b:1a:0c:3c:e8:a1:
bb:06:9f:8b:67:fd:8e:60:89:09:5e:16:70:59:ac:bf:63:57:
0d:4b:ea:59:26:8c:2e:66:19:3e:1d:3f:4f:8b:d6:b0:63:a7:
16:c7:42:c4:35:17:99:d3:a0:04:0b:23:e9:29:ca:4d:60:4f:
5e:35:63:3f:4a:e2:6b:81:b9:a3:34:55:b9:19:af:01:a3:b6:
13:e4:61:e5:db:6c:82:46:24:ee:13:2b:03:95:2d:5d:a9:d3:
f7:61:2a:58:20:ef:2f:e2:fb:45:2c:a5:ed:b7:19:57:23:6e:
85:45:24:f7:fe:cc:50:d1:46:43:31:cc:99:c5:a0:e1:2a:a8:
38:a8:a7:4c:f5:df:ee:31:49:ce:be:a9:d0:c7:25:04:a7:da:
60:a6:99:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:17:18 2025 by rpki-client