Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/BYO9drJ1bcf_YfGpJTWwm0x3CwE.roa
File: BYO9drJ1bcf_YfGpJTWwm0x3CwE.roa (raw, json)
Hash identifier: noyVSySauv88kMbR8EEjfgrkBU+qmr5+exag357DlvQ=
Subject key identifier: 05:83:BD:76:B2:75:6D:C7:FF:61:F1:A9:25:35:B0:9B:4C:77:0B:01
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01960C1820C0C7251FCB1781464FBBF51FE6
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/BYO9drJ1bcf_YfGpJTWwm0x3CwE.roa
Signing time: Sun 06 Apr 2025 17:13:49 +0000
ROA not before: Sun 06 Apr 2025 17:13:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 185.126.82.0/24 maxlen: 24
185.199.54.0/24 maxlen: 24
185.209.38.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.209.74.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.210.233.0/24 maxlen: 24
185.214.108.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.220.248.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.222.28.0/24 maxlen: 24
185.223.78.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.223.155.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.225.3.0/24 maxlen: 24
185.227.144.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.232.206.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.8.112.0/24 maxlen: 24
193.8.114.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
194.76.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Apr 2025 11:27:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0c:18:20:c0:c7:25:1f:cb:17:81:46:4f:bb:f5:1f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 6 17:13:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0583bd76b2756dc7ff61f1a92535b09b4c770b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3f:d6:12:55:1d:2c:f4:48:1a:94:a2:b4:1b:
2e:84:43:16:87:3f:bd:69:d2:70:5c:4a:eb:21:6c:
0f:3e:e1:95:1c:c5:81:af:a3:72:a4:97:38:70:f4:
3d:ef:59:09:c2:91:24:24:9a:16:b2:e1:20:88:1d:
89:37:b4:82:a5:3b:df:fd:d8:f7:63:b4:6d:98:2d:
7d:45:3a:40:e2:fd:6f:e9:66:7c:7e:32:fc:e7:b8:
76:f4:2f:bc:cd:26:b6:22:45:5a:33:af:e0:a6:07:
21:3f:10:e1:93:a0:36:2b:e2:36:f8:f4:70:e5:81:
99:d3:a7:f6:a1:00:5f:fa:fa:ae:ac:6a:30:5c:c6:
b4:70:ef:fe:1e:5e:e4:eb:60:0c:f2:44:cc:08:ba:
14:6f:54:89:20:cc:1c:1f:04:31:38:bf:a3:d2:f8:
61:cc:fd:5e:4f:f5:0e:03:41:fa:27:81:8a:b2:af:
1d:05:b2:d2:fb:ee:e6:8e:94:fa:f4:1a:4d:34:b2:
d9:56:fb:7a:db:6b:16:e6:33:97:89:db:de:13:1f:
27:53:7c:4e:c8:e5:f2:25:2a:a0:3f:78:84:49:cb:
4c:03:d4:f8:35:40:0b:15:c3:25:13:7e:5a:fb:69:
10:6f:2d:84:40:90:dd:0a:f4:3d:b2:2f:1a:07:a7:
fd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:83:BD:76:B2:75:6D:C7:FF:61:F1:A9:25:35:B0:9B:4C:77:0B:01
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/BYO9drJ1bcf_YfGpJTWwm0x3CwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.82.0/24
185.199.54.0/24
185.209.38.0/24
185.209.73.0-185.209.75.255
185.210.233.0/24
185.214.108.0/24
185.218.20.0/24
185.220.248.0/24
185.220.250.0/23
185.222.28.0/24
185.223.78.0/24
185.223.80.0/24
185.223.155.0/24
185.225.0.0/23
185.225.3.0/24
185.227.144.0/24
185.227.146.0/23
185.228.75.0/24
185.232.206.0/24
193.8.112.0-193.8.114.255
193.58.146.0/23
194.76.172.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ac:fc:3b:f0:d9:0c:1a:70:00:c2:8d:30:6d:7a:64:f1:cf:
3a:46:91:83:fb:f4:40:7a:6e:67:5a:28:b4:d7:c5:3c:08:44:
24:c0:d1:3d:70:94:29:1b:87:ef:41:f3:15:55:46:72:b3:80:
7a:7e:ff:17:b1:e0:4c:0b:9f:41:58:23:f3:b5:d3:3a:07:a3:
71:cb:ae:26:98:e5:83:1e:bc:b7:93:80:52:0c:a5:f5:d3:d5:
85:f5:48:0d:f0:fd:51:1b:2c:91:2b:8b:15:28:0e:e1:c3:3f:
51:d8:ab:8d:1e:fd:9a:f0:37:00:01:e9:e4:9b:b8:68:41:b6:
80:8a:20:c6:90:3d:bc:75:52:65:10:ec:9b:bd:98:b7:1a:bb:
73:32:c0:75:71:7c:df:c9:1e:d5:46:96:ce:72:81:5e:a3:7b:
03:b6:7c:41:79:67:84:43:13:19:6b:d6:97:e3:d8:1b:11:9d:
2f:01:29:24:6c:7a:36:e6:e8:ec:6d:0b:2c:60:27:74:31:41:
0b:a4:8e:f6:63:ed:64:09:64:29:2e:b2:0c:b8:cf:35:a2:88:
42:74:f5:98:88:23:ec:66:1d:09:14:de:f7:b8:4c:96:91:0c:
bd:1a:d3:9b:b1:84:25:c4:17:8c:bd:e6:c8:dc:1d:3b:82:3f:
77:a5:09:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:56:05 2025 by rpki-client