Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/PJF93Di_Ybxk8bUmYuxBuSKsGK8.roa
File: PJF93Di_Ybxk8bUmYuxBuSKsGK8.roa (raw, json)
Hash identifier: fcG7GDbXH1aVJbNAWIZ6WaxjBrhsqjybhz15TiwTdXQ=
Subject key identifier: 3C:91:7D:DC:38:BF:61:BC:64:F1:B5:26:62:EC:41:B9:22:AC:18:AF
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0194EFA6E8455FD12B2186FB87AC9CAFD379
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/PJF93Di_Ybxk8bUmYuxBuSKsGK8.roa
Signing time: Mon 10 Feb 2025 11:38:00 +0000
ROA not before: Mon 10 Feb 2025 11:38:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 185.126.82.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.222.28.0/24 maxlen: 24
185.223.78.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.226.104.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.58.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Feb 2025 16:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ef:a6:e8:45:5f:d1:2b:21:86:fb:87:ac:9c:af:d3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 10 11:38:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c917ddc38bf61bc64f1b52662ec41b922ac18af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d5:e9:70:a7:a7:eb:a1:d0:ce:d5:67:15:34:
54:d3:4c:f4:47:a6:2f:f0:85:68:41:34:a1:34:bd:
ea:e2:02:d6:3d:a7:47:53:89:8d:91:45:29:b7:ab:
52:d3:10:4c:d1:f0:04:cd:17:94:8f:1e:47:e5:6c:
f3:26:4d:27:8a:12:c7:1f:2e:94:2b:73:26:3a:ea:
29:67:77:e5:0f:45:f3:9d:20:c7:1c:bd:bb:c7:ef:
35:3e:3d:2e:e3:6b:d1:52:c6:20:b5:fb:b5:c2:94:
fe:d4:9b:ae:6f:c3:4f:ec:0d:62:3d:a5:7c:82:5b:
b2:17:9b:9f:6a:ed:ee:84:e0:de:41:79:c0:45:48:
fc:db:d7:44:99:c9:78:2c:09:c5:0d:48:07:46:56:
75:60:e0:d2:e5:d6:40:3c:f2:78:9a:f2:e2:b3:a8:
d1:b5:1a:6e:0b:07:d6:bd:f7:ed:1d:49:01:d8:00:
cd:1f:a1:c0:39:aa:d8:1c:b5:43:62:f4:3a:19:2b:
15:9e:a9:64:0e:bb:85:1d:c7:ab:a8:a2:bd:d6:06:
c1:b2:1e:31:07:17:19:e4:d9:2c:7a:55:05:2f:4c:
30:76:27:0a:1c:9e:35:44:b4:25:bb:6e:8a:c0:aa:
d7:af:ca:08:32:86:fa:d2:53:1e:6b:08:38:18:64:
ea:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:91:7D:DC:38:BF:61:BC:64:F1:B5:26:62:EC:41:B9:22:AC:18:AF
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/PJF93Di_Ybxk8bUmYuxBuSKsGK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.82.0/24
185.209.75.0/24
185.218.20.0/24
185.220.250.0/23
185.222.28.0/24
185.223.78.0/24
185.223.80.0/24
185.225.0.0/23
185.226.104.0/24
185.226.107.0/24
185.227.146.0/23
185.228.75.0/24
193.8.112.0/23
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:46:88:57:2c:96:c4:ea:3f:1b:f0:d4:80:17:83:4b:92:e7:
b8:12:87:5a:26:59:5b:6b:93:f0:35:6a:ef:dc:32:a1:5b:d7:
3f:03:28:81:c0:4f:a9:50:fa:7a:0b:3e:78:c1:83:8f:c4:d3:
aa:8e:3f:9f:fa:f9:59:d2:e1:79:eb:9d:73:2e:19:55:6b:d8:
05:2e:65:18:bb:00:e6:7d:ef:81:2e:dd:50:61:37:ef:5c:a6:
56:8e:2b:3c:9b:98:fe:41:64:c9:82:8d:2d:74:11:61:37:b0:
6a:dc:b1:e5:7f:74:fa:cf:68:01:17:30:30:c4:fd:d0:59:82:
6b:22:5d:52:51:1b:00:9f:23:07:f3:fc:69:3f:bd:3e:7b:ab:
cb:72:02:d8:a2:6c:6d:c7:22:c9:a3:ef:c7:3b:27:cb:55:b7:
45:cd:75:77:a9:f6:7d:2b:c8:99:ab:2d:fb:de:33:0d:59:a9:
3e:88:e5:0c:a8:f8:f2:f5:13:d6:b3:f4:61:6f:9a:1c:6e:d7:
aa:1f:fa:ba:53:9c:fd:0d:9f:e6:c3:4b:98:e6:aa:5a:82:35:
cb:31:c1:3d:ba:62:c1:7e:46:c9:31:7a:a3:82:9a:16:6d:f2:
ba:30:d1:41:7e:d3:22:00:69:76:7b:79:e9:bd:02:c5:c0:54:
cb:c6:20:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:59:55 2025 by rpki-client