Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/mvuwswp_wAMCjK7hvHbKZYRWsZE.roa
File: mvuwswp_wAMCjK7hvHbKZYRWsZE.roa (raw, json)
Hash identifier: r70ctgwK/rquJ+aR6pmBcZYEL2Psf+uGF4ApJJEryfw=
Subject key identifier: 9A:FB:B0:B3:0A:7F:C0:03:02:8C:AE:E1:BC:76:CA:65:84:56:B1:91
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01942369C7A09BC80EB07B52466D6B470459
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/mvuwswp_wAMCjK7hvHbKZYRWsZE.roa
Signing time: Wed 01 Jan 2025 19:48:42 +0000
ROA not before: Wed 01 Jan 2025 19:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 14.102.60.0/24 maxlen: 24
14.102.61.0/24 maxlen: 24
84.51.232.0/24 maxlen: 24
92.51.234.0/24 maxlen: 24
92.51.235.0/24 maxlen: 24
92.51.255.0/24 maxlen: 24
103.210.196.0/24 maxlen: 24
107.150.166.0/24 maxlen: 24
185.161.111.0/24 maxlen: 24
192.140.220.0/24 maxlen: 24
192.140.221.0/24 maxlen: 24
203.188.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Jan 2025 10:27:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:c7:a0:9b:c8:0e:b0:7b:52:46:6d:6b:47:04:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jan 1 19:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9afbb0b30a7fc003028caee1bc76ca658456b191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d1:5e:59:b8:ef:a8:93:78:b3:5c:39:63:36:
db:11:8c:f7:f3:b2:64:9a:e8:a6:90:7a:21:47:be:
37:a4:9e:82:73:e8:82:12:44:04:dd:89:9a:2e:68:
aa:87:66:3d:ba:6e:7c:dc:e2:71:33:2e:3f:79:dc:
9b:fe:b0:c4:98:01:b8:21:19:2e:52:40:34:e4:dd:
72:7e:9c:bd:d8:f7:c7:46:7e:61:89:fb:5f:09:8c:
24:a6:59:c6:18:84:54:85:f5:8e:23:ca:48:69:7d:
03:77:19:07:0d:f7:b2:90:0f:ee:39:53:83:5a:c3:
14:9a:f6:26:88:a1:0d:47:af:b0:89:c1:9e:c4:2a:
86:2d:30:d1:fb:d3:75:ba:63:e2:ae:a6:bd:c2:e3:
64:30:d9:22:0a:c0:e6:14:35:20:7a:47:55:c8:5f:
24:dc:4f:93:cf:63:2d:7b:14:58:52:ad:fc:42:0e:
69:4c:05:47:db:1a:a8:00:8a:db:50:97:ce:8a:c3:
52:0b:40:aa:ac:51:03:b9:d9:8a:c7:6b:ea:47:b8:
2a:6b:c1:aa:6d:2a:b1:87:41:2e:f9:5c:95:e1:c6:
bb:f2:1e:a4:18:c8:49:49:70:20:8c:fe:c5:05:38:
40:99:fa:82:fe:4a:f9:46:78:95:e3:15:fb:05:be:
d6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FB:B0:B3:0A:7F:C0:03:02:8C:AE:E1:BC:76:CA:65:84:56:B1:91
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/mvuwswp_wAMCjK7hvHbKZYRWsZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.60.0/23
84.51.232.0/24
92.51.234.0/23
92.51.255.0/24
103.210.196.0/24
107.150.166.0/24
185.161.111.0/24
192.140.220.0/23
203.188.165.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:20:be:c8:cc:a1:5d:f4:8e:00:1a:5a:0c:9d:50:4d:c5:72:
b3:85:42:5f:7e:07:51:9e:e6:50:64:27:67:67:db:72:87:4c:
e3:dc:56:54:c9:7f:c4:dc:30:77:f0:04:1c:e0:07:c2:8c:67:
db:e0:ef:92:57:8f:10:49:05:45:f5:f9:cb:15:47:23:d1:f1:
6a:59:aa:c0:be:65:4e:94:65:01:40:ef:e1:56:7f:70:3a:67:
7a:89:ec:7f:ca:3d:01:53:05:fb:56:12:a1:4d:e1:00:39:ad:
6c:62:45:dc:e1:76:00:d9:7f:ac:04:6d:cf:d6:88:56:7e:da:
14:73:e1:c5:e1:a9:d3:ac:28:0e:d4:33:8b:75:a1:3f:82:73:
71:41:3b:21:db:75:44:40:8c:94:fe:2c:23:51:b3:c2:24:db:
8d:ff:50:0d:72:d3:32:3b:06:ab:6b:d8:04:3d:3b:62:7d:cf:
86:70:ed:2f:2b:28:98:b1:bd:49:7f:dc:31:f2:b6:4b:00:5a:
4d:df:0a:0d:96:0f:d5:21:8d:ab:77:b2:52:0b:7c:f8:15:83:
0e:cd:67:77:c3:24:83:ae:92:0f:0c:4d:26:56:09:70:db:67:
5f:c7:2e:f0:57:59:bb:14:28:40:0f:1d:74:d6:17:a1:86:6c:
44:47:52:b5
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZQjacegm8gOsHtSRm1rRwRZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjUwMTAxMTk0ODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YWZiYjBiMzBhN2ZjMDAzMDI4Y2FlZTFiYzc2Y2E2NTg0NTZiMTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dFeWbjvqJN4s1w5YzbbEYz387Jk
muimkHohR743pJ6Cc+iCEkQE3YmaLmiqh2Y9um583OJxMy4/edyb/rDEmAG4IRku
UkA05N1yfpy92PfHRn5hiftfCYwkplnGGIRUhfWOI8pIaX0DdxkHDfeykA/uOVOD
WsMUmvYmiKENR6+wicGexCqGLTDR+9N1umPirqa9wuNkMNkiCsDmFDUgekdVyF8k
3E+Tz2MtexRYUq38Qg5pTAVH2xqoAIrbUJfOisNSC0CqrFEDudmKx2vqR7gqa8Gq
bSqxh0Eu+VyV4ca78h6kGMhJSXAgjP7FBThAmfqC/kr5RniV4xX7Bb7WiQIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFJr7sLMKf8ADAoyu4bx2ymWEVrGRMB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEvbXZ1d3N3cF93QU1Daks3aHZIYktaWVJXc1pFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQBDmY8AwQA
VDPoAwQBXDPqAwQAXDP/AwQAZ9LEAwQAa5amAwQAuaFvAwQBwIzcAwQAy7ylMA0G
CSqGSIb3DQEBCwUAA4IBAQDdIL7IzKFd9I4AGloMnVBNxXKzhUJffgdRnuZQZCdn
Z9tyh0zj3FZUyX/E3DB38AQc4AfCjGfb4O+SV48QSQVF9fnLFUcj0fFqWarAvmVO
lGUBQO/hVn9wOmd6iex/yj0BUwX7VhKhTeEAOa1sYkXc4XYA2X+sBG3P1ohWftoU
c+HF4anTrCgO1DOLdaE/gnNxQTsh23VEQIyU/iwjUbPCJNuN/1ANctMyOwara9gE
PTtifc+GcO0vKyiYsb1Jf9wx8rZLAFpN3woNlg/VIY2rd7JSC3z4FYMOzWd3wySD
rpIPDE0mVglw22dfxy7wV1m7FChADx101hehhmxER1K1
-----END CERTIFICATE-----
Generated at Mon Jun 16 07:44:52 2025 by rpki-client