Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/mfJtFOV9MTmjS814Q1nGF6bqzaQ.roa
File: mfJtFOV9MTmjS814Q1nGF6bqzaQ.roa (raw, json)
Hash identifier: tDEibeXFDMkgHWk8Wo0zIVCqVxILXoH+BxGvKbfm/d4=
Subject key identifier: 99:F2:6D:14:E5:7D:31:39:A3:4B:CD:78:43:59:C6:17:A6:EA:CD:A4
Certificate issuer: /CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Certificate serial: 019633BDCFA7259994FFCF1234EDF64A356F
Authority key identifier: CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/mfJtFOV9MTmjS814Q1nGF6bqzaQ.roa
Signing time: Mon 14 Apr 2025 09:59:59 +0000
ROA not before: Mon 14 Apr 2025 09:59:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25145
IP address blocks: 31.40.240.0/24 maxlen: 24
31.40.242.0/24 maxlen: 24
77.92.96.0/19 maxlen: 19
77.92.96.0/24 maxlen: 24
77.92.97.0/24 maxlen: 24
77.92.98.0/24 maxlen: 24
77.92.99.0/24 maxlen: 24
77.92.100.0/24 maxlen: 24
77.92.101.0/24 maxlen: 24
77.92.102.0/24 maxlen: 24
77.92.103.0/24 maxlen: 24
77.92.104.0/24 maxlen: 24
77.92.105.0/24 maxlen: 24
77.92.106.0/24 maxlen: 24
77.92.107.0/24 maxlen: 24
77.92.108.0/24 maxlen: 24
77.92.109.0/24 maxlen: 24
77.92.110.0/24 maxlen: 24
77.92.111.0/24 maxlen: 24
77.92.112.0/22 maxlen: 22
77.92.112.0/24 maxlen: 24
77.92.113.0/24 maxlen: 24
77.92.114.0/24 maxlen: 24
77.92.115.0/24 maxlen: 24
77.92.116.0/24 maxlen: 24
77.92.117.0/24 maxlen: 24
77.92.118.0/24 maxlen: 24
77.92.119.0/24 maxlen: 24
77.92.120.0/24 maxlen: 24
77.92.121.0/24 maxlen: 24
77.92.122.0/24 maxlen: 24
77.92.123.0/24 maxlen: 24
77.92.124.0/24 maxlen: 24
77.92.125.0/24 maxlen: 24
77.92.126.0/24 maxlen: 24
77.92.127.0/24 maxlen: 24
185.115.208.0/24 maxlen: 24
185.115.210.0/24 maxlen: 24
185.115.211.0/24 maxlen: 24
213.144.96.0/19 maxlen: 19
213.144.96.0/24 maxlen: 24
213.144.97.0/24 maxlen: 24
213.144.98.0/24 maxlen: 24
213.144.99.0/24 maxlen: 24
213.144.100.0/24 maxlen: 24
213.144.101.0/24 maxlen: 24
213.144.103.0/24 maxlen: 24
213.144.104.0/24 maxlen: 24
213.144.105.0/24 maxlen: 24
213.144.106.0/24 maxlen: 24
213.144.107.0/24 maxlen: 24
213.144.108.0/24 maxlen: 24
213.144.109.0/24 maxlen: 24
213.144.110.0/24 maxlen: 24
213.144.111.0/24 maxlen: 24
213.144.112.0/24 maxlen: 24
213.144.113.0/24 maxlen: 24
213.144.114.0/24 maxlen: 24
213.144.115.0/24 maxlen: 24
213.144.116.0/24 maxlen: 24
213.144.117.0/24 maxlen: 24
213.144.118.0/24 maxlen: 24
213.144.119.0/24 maxlen: 24
213.144.120.0/24 maxlen: 24
213.144.121.0/24 maxlen: 24
213.144.122.0/24 maxlen: 24
213.144.123.0/24 maxlen: 24
213.144.124.0/24 maxlen: 24
213.144.125.0/24 maxlen: 24
213.144.126.0/24 maxlen: 24
213.144.127.0/24 maxlen: 24
2a02:ac80::/29 maxlen: 29
2a02:ac80::/32 maxlen: 32
2a02:ac80:10::/48 maxlen: 48
2a02:ac80:20::/48 maxlen: 48
2a02:ac80:30::/48 maxlen: 48
2a02:ac80:40::/48 maxlen: 48
2a02:ac80:50::/48 maxlen: 48
2a02:ac80:60::/48 maxlen: 48
2a02:ac80:70::/48 maxlen: 48
2a02:ac80:a0::/48 maxlen: 48
2a02:ac80:b0::/48 maxlen: 48
2a02:ac80:c0::/48 maxlen: 48
2a02:ac80:d0::/48 maxlen: 48
2a02:ac80:e0::/48 maxlen: 48
2a02:ac80:f0::/48 maxlen: 48
2a02:ac80:100::/48 maxlen: 48
2a02:ac80:200::/48 maxlen: 48
2a02:ac80:300::/48 maxlen: 48
2a02:ac80:400::/48 maxlen: 48
2a02:ac80:500::/48 maxlen: 48
2a02:ac80:600::/48 maxlen: 48
2a02:ac80:700::/48 maxlen: 48
2a02:ac80:a00::/48 maxlen: 48
2a02:ac80:b00::/48 maxlen: 48
2a02:ac80:c00::/48 maxlen: 48
2a02:ac80:d00::/48 maxlen: 48
2a02:ac80:e00::/48 maxlen: 48
2a02:ac80:f00::/48 maxlen: 48
2a02:ac80:1000::/48 maxlen: 48
2a02:ac80:2000::/48 maxlen: 48
2a02:ac80:3000::/48 maxlen: 48
2a02:ac80:4000::/48 maxlen: 48
2a02:ac80:5000::/48 maxlen: 48
2a02:ac80:6000::/48 maxlen: 48
2a02:ac80:7000::/48 maxlen: 48
2a02:ac80:7370::/48 maxlen: 48
2a02:ac80:a000::/48 maxlen: 48
2a02:ac80:b000::/48 maxlen: 48
2a02:ac80:c000::/48 maxlen: 48
2a02:ac80:d000::/48 maxlen: 48
2a02:ac80:e000::/48 maxlen: 48
2a02:ac80:f000::/48 maxlen: 48
2a02:ac81::/32 maxlen: 32
2a02:ac82::/32 maxlen: 32
2a02:ac83::/32 maxlen: 32
2a02:ac84::/32 maxlen: 32
2a02:ac85::/32 maxlen: 32
2a02:ac86::/32 maxlen: 32
2a02:ac87::/32 maxlen: 32
2a02:ac87:5900::/48 maxlen: 48
2a02:ac87:59cb::/48 maxlen: 48
2a02:ac87:ac87::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 14 Apr 2025 10:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:33:bd:cf:a7:25:99:94:ff:cf:12:34:ed:f6:4a:35:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Validity
Not Before: Apr 14 09:59:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99f26d14e57d3139a34bcd784359c617a6eacda4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:72:27:df:87:9a:43:63:8d:28:2e:bc:eb:55:
67:6b:4e:b3:a0:ad:83:9b:bd:20:40:68:af:af:cb:
66:c5:87:b2:27:60:d9:cd:28:73:ac:df:7f:1d:bc:
68:29:83:b4:27:5f:e2:a1:1d:48:34:02:be:38:99:
27:8b:94:a4:86:af:fa:5a:7f:23:4c:d8:dd:c2:71:
11:b3:25:f5:21:91:97:ec:79:91:c7:2a:ca:44:f2:
0e:3f:13:45:c9:fa:88:e2:a4:c7:27:c4:31:29:26:
1c:8a:07:29:44:a5:e1:83:c4:80:f6:b2:78:25:8b:
71:b9:12:bf:93:e6:d8:73:51:0c:d8:9a:b3:e8:41:
da:6f:aa:1f:65:05:a4:bc:dc:91:42:7f:02:61:e2:
d0:25:42:5a:4a:71:29:3d:0b:ab:67:e4:f2:c7:27:
e1:b3:67:99:77:74:0f:37:f9:9d:5b:44:7e:90:6d:
f8:66:2c:14:09:6f:1f:d1:dd:c3:27:5a:b5:7f:0c:
31:a0:70:e5:97:1c:bd:5a:2d:ee:31:c2:31:76:4c:
a1:54:4e:d4:b5:ee:e2:e4:95:98:db:a7:7b:de:bd:
6f:d8:d2:db:27:75:ae:0c:96:18:fe:ce:9c:8b:03:
51:74:64:be:8f:b6:2f:1a:4c:fb:d0:26:6f:a5:50:
73:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F2:6D:14:E5:7D:31:39:A3:4B:CD:78:43:59:C6:17:A6:EA:CD:A4
X509v3 Authority Key Identifier:
keyid:CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/mfJtFOV9MTmjS814Q1nGF6bqzaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.240.0/24
31.40.242.0/24
77.92.96.0/19
185.115.208.0/24
185.115.210.0/23
213.144.96.0/19
IPv6:
2a02:ac80::/29
Signature Algorithm: sha256WithRSAEncryption
c5:e2:61:77:8e:68:97:7f:f8:70:47:68:e4:2d:19:63:e2:cf:
4a:53:e7:83:6f:a5:5f:96:60:7d:a0:23:3f:42:39:ae:53:6e:
d2:3d:6c:50:1f:77:0c:c2:95:d7:3d:60:63:ab:1e:92:8f:4e:
de:17:d0:9d:d5:0b:b7:c9:f0:dd:de:06:45:59:4a:4f:47:a2:
2b:36:77:a8:e1:73:a7:a0:b6:43:fc:6c:b8:d6:1f:81:d9:fc:
98:b5:ac:8a:44:4a:5e:41:f0:1c:9c:3f:2f:b8:bb:d6:e3:43:
57:19:d1:38:79:48:96:d3:53:6e:e2:4d:74:74:4b:d8:85:0a:
3b:21:54:fc:49:d1:92:98:de:4c:b0:28:1f:e3:a0:ef:9e:4b:
83:8d:05:0f:38:44:e7:bf:cf:42:e0:fb:19:3b:a3:a9:c0:86:
17:50:0f:c5:64:78:7c:62:86:0a:2b:4c:2f:7e:bb:97:0e:74:
d4:60:ea:35:46:70:f6:b7:68:44:2e:ab:03:4b:b1:72:60:15:
bf:85:f3:64:b0:71:25:b3:ac:de:6f:66:c4:75:78:10:e1:ac:
e3:ac:2e:f8:ab:fd:c6:5b:6a:1d:11:c8:1d:68:5e:6d:f2:8b:
2a:73:f5:6f:d1:45:33:81:ec:22:80:67:9d:b5:5f:b0:73:0d:
4c:eb:03:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 16:30:12 2025 by rpki-client