Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/MvSjD4V8CUMSRzMlmk8g9m-llCQ.roa
File: MvSjD4V8CUMSRzMlmk8g9m-llCQ.roa (raw, json)
Hash identifier: nORPCNPX3kJVr3pCGwgdr3WZ1DY52+3vwq499wLnfEc=
Subject key identifier: 32:F4:A3:0F:85:7C:09:43:12:47:33:25:9A:4F:20:F6:6F:A5:94:24
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01974EDB658BF5ECDF6662EAD630565C2102
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/MvSjD4V8CUMSRzMlmk8g9m-llCQ.roa
Signing time: Sun 08 Jun 2025 09:24:50 +0000
ROA not before: Sun 08 Jun 2025 09:24:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207530
IP address blocks: 2a12:bec4:1a90::/48 maxlen: 48
2a12:bec4:1a91::/48 maxlen: 48
2a12:bec4:1a92::/48 maxlen: 48
2a12:bec4:1a93::/48 maxlen: 48
2a12:bec4:1a94::/48 maxlen: 48
2a12:bec4:1a95::/48 maxlen: 48
2a12:bec4:1a96::/48 maxlen: 48
2a12:bec4:1a97::/48 maxlen: 48
2a12:bec4:1a98::/48 maxlen: 48
2a12:bec4:1a99::/48 maxlen: 48
2a12:bec4:1a9a::/48 maxlen: 48
2a12:bec4:1a9b::/48 maxlen: 48
2a12:bec4:1a9c::/48 maxlen: 48
2a12:bec4:1a9d::/48 maxlen: 48
2a12:bec4:1a9e::/48 maxlen: 48
2a12:bec4:1a9f::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 09 Jun 2025 09:14:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:db:65:8b:f5:ec:df:66:62:ea:d6:30:56:5c:21:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jun 8 09:24:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32f4a30f857c0943124733259a4f20f66fa59424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3e:41:75:03:1b:79:75:1b:0e:6b:bf:fa:42:
db:64:12:a5:70:7f:dc:f4:19:77:2c:63:7a:92:1b:
3b:dc:b5:cc:3d:04:bd:2d:82:ca:ed:3e:c3:6c:7c:
96:e1:53:43:4d:63:98:f9:f9:18:8f:94:52:3b:59:
31:c2:6e:d6:0d:01:f7:8d:f7:23:a2:c5:3d:65:ed:
64:3f:39:50:73:d9:9f:93:87:00:2c:0f:0e:16:d8:
79:b8:ee:e3:a1:5f:61:1d:ed:26:c9:6c:e7:dd:a7:
6f:92:53:3f:21:06:bd:a0:6b:18:75:43:08:a8:41:
5a:27:f3:f3:e4:f2:32:6a:7d:21:e3:34:aa:00:b6:
38:0e:6c:e0:c4:ad:ac:b9:90:3c:42:95:93:d3:46:
dd:c6:fd:84:f9:29:cc:35:c8:4d:a8:91:81:22:97:
85:2c:09:df:f7:c9:6a:b8:76:c6:7d:42:28:14:8b:
c2:bc:12:39:d2:25:bf:d9:bf:96:41:2b:82:7c:53:
d4:83:bb:38:68:8a:a7:4b:eb:8e:51:10:f7:1b:11:
6f:4c:9b:fb:65:af:44:7c:19:5a:e6:9a:75:d0:0b:
4f:f9:8f:ac:84:cb:4b:38:42:c3:42:08:97:bc:47:
ff:47:93:a0:be:64:0a:c1:d0:f8:4f:96:49:ee:87:
83:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F4:A3:0F:85:7C:09:43:12:47:33:25:9A:4F:20:F6:6F:A5:94:24
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/MvSjD4V8CUMSRzMlmk8g9m-llCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1a90::/44
Signature Algorithm: sha256WithRSAEncryption
4a:d0:52:5f:77:fa:df:2f:17:ca:c5:d9:53:04:b8:66:45:32:
53:b1:04:55:d5:51:d8:96:44:7c:5c:9d:4c:85:b8:e4:b5:3d:
b3:67:1f:c7:1b:b8:55:e7:6c:55:a6:d4:6b:20:77:03:71:29:
cb:94:be:01:26:b1:a0:a3:28:f7:37:d3:66:40:e6:ef:3d:65:
42:a1:48:d5:39:e1:84:c5:94:c5:ea:78:8c:42:b3:66:c3:2f:
2b:79:68:70:02:58:74:4e:9f:e2:90:c7:f0:f6:92:ae:e8:48:
1b:71:a4:ee:44:dd:4e:ea:c4:c4:79:4c:ca:c1:3d:62:dc:99:
ff:ca:14:38:94:a5:6a:9b:89:bd:c4:e0:2b:3e:3f:68:9c:c3:
9a:07:ca:5b:ef:ef:7e:8c:d3:b8:7e:a1:05:5b:4a:ac:18:3a:
c3:f4:15:0d:f0:6f:67:b9:57:d4:31:7e:7f:ff:4e:90:72:28:
0f:1b:4d:00:48:15:72:18:9e:b4:62:eb:db:a6:0a:a1:c8:42:
a5:91:1c:3b:fb:fa:76:92:f3:a7:fa:8f:3e:6e:78:62:52:9a:
a7:ae:68:1f:c6:32:5e:fd:82:cf:8b:54:f9:00:e2:d2:8a:6d:
f2:e2:30:2c:1a:70:fc:56:55:7c:1a:45:22:dd:6c:4f:c6:27:
de:dc:39:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 00:59:13 2025 by rpki-client