Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/W2vFv3TrK0OKR9GtYmVZIZSpNR8.roa
File: W2vFv3TrK0OKR9GtYmVZIZSpNR8.roa (raw, json)
Hash identifier: ujYA7ds0SQQPMicrQ7Q0YUb5N0QMl7/MeHD0NEzQnxY=
Subject key identifier: 5B:6B:C5:BF:74:EB:2B:43:8A:47:D1:AD:62:65:59:21:94:A9:35:1F
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0196241BA0B3FEAB95AC8E3B14A7BD2DFE5C
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/W2vFv3TrK0OKR9GtYmVZIZSpNR8.roa
Signing time: Fri 11 Apr 2025 09:08:32 +0000
ROA not before: Fri 11 Apr 2025 09:08:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 185.126.82.0/24 maxlen: 24
185.199.54.0/24 maxlen: 24
185.209.38.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.210.233.0/24 maxlen: 24
185.214.108.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.220.248.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.222.28.0/24 maxlen: 24
185.223.78.0/24 maxlen: 24
185.223.155.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.225.3.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.232.206.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.8.112.0/24 maxlen: 24
193.8.114.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
194.76.172.0/24 maxlen: 24
194.124.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Apr 2025 10:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:24:1b:a0:b3:fe:ab:95:ac:8e:3b:14:a7:bd:2d:fe:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 11 09:08:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b6bc5bf74eb2b438a47d1ad6265592194a9351f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:79:48:06:04:9d:d2:d5:76:5c:43:55:51:
91:3d:08:c2:55:a1:e7:34:80:7b:fe:8f:e4:0b:c3:
34:69:61:7a:a5:51:57:e9:a2:02:95:bf:7e:f7:8c:
f5:58:29:fd:3e:e7:89:d7:ad:d3:e2:c8:d7:39:4e:
61:70:f3:ad:4f:90:24:fa:43:d8:b9:3f:a1:86:b3:
a3:cb:0f:23:b8:95:e1:a3:6e:9d:fe:77:61:41:78:
5a:e3:fe:af:f8:3b:08:ad:de:9c:00:08:9a:d0:f1:
df:88:3e:3c:8c:90:90:3d:cf:07:81:f7:76:df:b5:
b0:ad:8c:36:29:65:91:72:2d:ed:5a:6a:f1:98:c0:
9e:71:82:76:e2:ac:8f:ca:94:ec:2f:ed:c5:30:e7:
35:cb:e1:d8:e0:82:76:8c:b7:14:97:0b:92:5b:54:
54:aa:b4:26:b5:ad:ef:fd:a1:34:67:36:25:9c:84:
aa:6c:cc:da:48:f4:5f:b7:07:ec:be:45:e4:88:88:
03:22:89:e0:81:bf:e0:39:74:13:76:73:b4:d2:ef:
57:49:35:2c:f4:63:4a:13:cb:26:4b:20:be:f5:47:
82:84:ec:a0:bf:34:e3:16:72:e5:73:3d:9c:db:37:
be:b8:10:f9:82:77:2a:6f:7b:4d:75:f7:0e:a5:da:
59:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6B:C5:BF:74:EB:2B:43:8A:47:D1:AD:62:65:59:21:94:A9:35:1F
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/W2vFv3TrK0OKR9GtYmVZIZSpNR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.82.0/24
185.199.54.0/24
185.209.38.0/24
185.209.73.0/24
185.209.75.0/24
185.210.233.0/24
185.214.108.0/24
185.218.20.0/24
185.220.248.0/24
185.220.250.0/23
185.222.28.0/24
185.223.78.0/24
185.223.155.0/24
185.225.0.0/23
185.225.3.0/24
185.227.146.0/23
185.228.75.0/24
185.232.206.0/24
193.8.112.0-193.8.114.255
193.58.146.0/23
194.76.172.0/24
194.124.69.0/24
Signature Algorithm: sha256WithRSAEncryption
11:1a:01:b4:c9:29:23:76:27:e7:48:01:47:b1:40:7a:14:ba:
5c:21:ad:ce:e9:d8:68:05:9c:2d:8e:ea:04:8d:aa:cd:3e:86:
71:59:15:90:d6:28:a1:69:86:60:c6:6d:71:17:56:a9:cb:af:
92:fe:ab:aa:27:d2:1d:cb:2d:74:dd:1e:dc:83:67:34:99:d8:
52:92:2a:d2:0b:73:b2:94:a1:e1:d6:6a:49:0b:77:a6:74:da:
7e:44:4d:87:e0:9d:63:bf:fc:92:c5:c2:a4:e1:0d:be:d2:58:
9c:1b:c7:2b:3d:7f:84:ca:21:23:55:5d:fa:bd:bb:4c:40:70:
5a:38:70:c9:5e:48:0f:4d:2a:8a:68:ac:34:61:90:76:65:3b:
99:2d:62:03:7f:d8:f5:81:21:52:28:1d:0d:66:f9:21:fd:64:
eb:0c:53:4f:4e:78:f6:51:ec:d9:8e:60:4e:d8:8d:d1:a6:37:
1a:c0:0b:03:10:d1:20:82:34:44:52:2d:74:33:99:5a:08:d0:
64:5c:a8:76:24:e2:78:9b:b6:c9:f0:a5:d9:cc:bd:4a:3d:22:
5c:cd:5b:55:e4:f4:64:d3:e4:96:1c:d6:d4:6e:9e:8a:7f:58:
ca:ad:01:d7:f2:53:ee:07:c5:69:5e:3e:94:f4:e4:56:85:64:
86:2b:1b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:58:21 2025 by rpki-client