Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/mLfv02zlDIRaNxcUJuX8_vYel6w.roa
File: mLfv02zlDIRaNxcUJuX8_vYel6w.roa (raw, json)
Hash identifier: nNWAlp0frDy9ctzVeiXj4xeSGoOO0KW9cBe/29AgaJk=
Subject key identifier: 98:B7:EF:D3:6C:E5:0C:84:5A:37:17:14:26:E5:FC:FE:F6:1E:97:AC
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01976760AB9C13EED266C460F82E0F58816E
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/mLfv02zlDIRaNxcUJuX8_vYel6w.roa
Signing time: Fri 13 Jun 2025 03:41:17 +0000
ROA not before: Fri 13 Jun 2025 03:41:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215727
IP address blocks: 45.136.0.0/24 maxlen: 32
45.136.2.0/24 maxlen: 32
45.136.3.0/24 maxlen: 32
128.0.119.0/24 maxlen: 32
185.117.20.0/24 maxlen: 32
185.117.21.0/24 maxlen: 32
185.117.22.0/24 maxlen: 32
185.117.23.0/24 maxlen: 32
185.144.100.0/24 maxlen: 32
185.144.101.0/24 maxlen: 32
185.144.102.0/24 maxlen: 32
185.144.103.0/24 maxlen: 32
185.211.48.0/24 maxlen: 32
185.211.49.0/24 maxlen: 32
185.211.50.0/24 maxlen: 32
185.227.240.0/24 maxlen: 32
185.227.241.0/24 maxlen: 32
185.227.242.0/24 maxlen: 32
185.227.243.0/24 maxlen: 32
193.201.208.0/24 maxlen: 32
193.201.209.0/24 maxlen: 32
193.201.210.0/24 maxlen: 32
193.201.211.0/24 maxlen: 32
194.36.100.0/24 maxlen: 32
194.36.101.0/24 maxlen: 32
194.36.102.0/24 maxlen: 32
194.36.103.0/24 maxlen: 32
194.124.64.0/24 maxlen: 32
194.124.65.0/24 maxlen: 32
194.124.66.0/24 maxlen: 32
194.124.67.0/24 maxlen: 32
195.85.68.0/24 maxlen: 32
195.85.69.0/24 maxlen: 32
195.85.70.0/24 maxlen: 32
195.85.71.0/24 maxlen: 32
Validation: Failed, certificate revoked on Sun 15 Jun 2025 01:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:60:ab:9c:13:ee:d2:66:c4:60:f8:2e:0f:58:81:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jun 13 03:41:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98b7efd36ce50c845a37171426e5fcfef61e97ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:00:33:b8:d2:78:d3:07:94:f3:cc:cb:f1:e6:
ae:72:f0:a5:8c:98:aa:79:23:e0:33:7c:d8:6b:0a:
b2:0d:05:0d:e7:f3:c4:c8:57:23:23:5e:e2:1e:cc:
89:a5:cf:ea:ae:ca:43:f6:14:96:dd:84:d8:50:d5:
30:fb:1f:23:95:9a:1f:e1:75:cf:6b:71:29:58:14:
9c:2a:44:f0:6b:a9:a3:bc:4d:42:b4:7d:06:6a:04:
18:c9:20:e5:6b:9a:7e:81:ab:b2:37:04:df:30:12:
fb:ae:7a:8d:6a:48:15:54:64:98:4e:57:37:9d:c6:
96:7a:83:2e:0f:96:aa:ec:b7:07:53:9a:3e:44:e1:
9f:bd:f8:39:05:97:41:07:5c:6d:30:30:f5:db:72:
e2:4c:66:21:75:af:09:5e:1d:2e:3b:1d:53:dc:f1:
8b:0b:4f:d1:37:ce:1f:5b:42:18:3f:ff:0c:60:be:
f8:c7:18:59:e6:d6:12:6e:fd:07:cb:46:32:2e:ea:
43:df:34:8a:7e:97:cf:20:a7:2e:71:07:ae:f2:e5:
28:36:3a:1a:57:2b:ab:c5:02:ea:e7:02:15:98:cb:
50:e9:e0:e5:54:2d:e2:f6:17:fe:3b:b3:e8:a5:f2:
f5:ed:bc:e1:19:41:e0:ed:2c:ae:63:a8:cf:f6:66:
7d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B7:EF:D3:6C:E5:0C:84:5A:37:17:14:26:E5:FC:FE:F6:1E:97:AC
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/mLfv02zlDIRaNxcUJuX8_vYel6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.0.0/24
45.136.2.0/23
128.0.119.0/24
185.117.20.0/22
185.144.100.0/22
185.211.48.0-185.211.50.255
185.227.240.0/22
193.201.208.0/22
194.36.100.0/22
194.124.64.0/22
195.85.68.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:6d:4b:66:9b:ff:39:9d:7c:17:fa:a1:f6:64:a3:0e:c7:87:
6f:59:01:71:06:9b:12:b6:e9:77:99:87:38:ea:95:23:dc:1b:
ea:37:ff:f1:28:09:ae:33:3b:88:62:88:be:33:93:e6:e7:4d:
ee:d3:b7:fc:fb:39:27:31:14:b4:6a:7d:06:f8:0a:f7:32:2a:
06:4f:0b:ae:e7:1a:28:e0:bf:2e:a0:84:bb:d2:01:75:f4:2d:
75:75:3e:f6:58:98:4f:8f:96:de:5d:af:1d:81:e2:21:48:23:
88:b4:43:b1:1b:4f:79:ba:31:6e:69:ae:a0:9c:58:2b:18:5a:
df:bd:cd:4f:7c:8f:95:84:fe:1a:77:48:b4:35:3e:e2:35:44:
a2:9b:81:fb:fd:63:c4:2a:da:98:3c:bd:7d:37:b3:59:bf:91:
16:97:e5:7a:2b:77:77:b4:c9:e6:76:4e:23:67:9e:0f:35:10:
89:cf:da:db:e4:ef:d2:a0:6d:00:6d:79:49:dc:84:98:57:fc:
74:cc:ba:25:16:1a:ca:ac:18:cc:5c:01:cd:82:05:72:91:f6:
d5:6b:3c:79:4d:be:af:2a:17:46:79:75:3b:32:9e:a4:2c:27:
f5:a9:5a:5b:ea:af:61:93:bf:5f:c3:c5:69:72:f2:ef:86:ef:
38:f2:b3:fa
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgISAZdnYKucE+7SZsRg+C4PWIFuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi
YTU3NDUwHhcNMjUwNjEzMDM0MTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGI3ZWZkMzZjZTUwYzg0NWEzNzE3MTQyNmU1ZmNmZWY2MWU5N2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwAzuNJ40weU88zL8eaucvCljJiq
eSPgM3zYawqyDQUN5/PEyFcjI17iHsyJpc/qrspD9hSW3YTYUNUw+x8jlZof4XXP
a3EpWBScKkTwa6mjvE1CtH0GagQYySDla5p+gauyNwTfMBL7rnqNakgVVGSYTlc3
ncaWeoMuD5aq7LcHU5o+ROGfvfg5BZdBB1xtMDD123LiTGYhda8JXh0uOx1T3PGL
C0/RN84fW0IYP/8MYL74xxhZ5tYSbv0Hy0YyLupD3zSKfpfPIKcucQeu8uUoNjoa
VyurxQLq5wIVmMtQ6eDlVC3i9hf+O7PopfL17bzhGUHg7SyuY6jP9mZ9/QIDAQAB
o4ICTTCCAkkwHQYDVR0OBBYEFJi379Ns5QyEWjcXFCbl/P72HpesMB8GA1UdIwQY
MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt
ZmVhYzI2ZWFlY2MyLzEvbUxmdjAyemxESVJhTnhjVUp1WDhfdlllbDZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My
LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQALYgAAwQB
LYgCAwQAgAB3AwQCuXUUAwQCuZBkMAwDBAS50zADBAC50zIDBAK54/ADBALBydAD
BALCJGQDBALCfEADBALDVUQwDQYJKoZIhvcNAQELBQADggEBALhtS2ab/zmdfBf6
ofZkow7Hh29ZAXEGmxK26XeZhzjqlSPcG+o3//EoCa4zO4hiiL4zk+bnTe7Tt/z7
OScxFLRqfQb4CvcyKgZPC67nGijgvy6ghLvSAXX0LXV1PvZYmE+Plt5drx2B4iFI
I4i0Q7EbT3m6MW5prqCcWCsYWt+9zU98j5WE/hp3SLQ1PuI1RKKbgfv9Y8Qq2pg8
vX03s1m/kRaX5Xord3e0yeZ2TiNnng81EInP2tvk79KgbQBteUnchJhX/HTMuiUW
GsqsGMxcAc2CBXKR9tVrPHlNvq8qF0Z5dTsynqQsJ/WpWlvqr2GTv1/DxWly8u+G
7zjys/o=
-----END CERTIFICATE-----
Generated at Mon Jun 16 04:37:19 2025 by rpki-client