Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ddsdcRVTmOFdHgZxWtA6C-2UmVE.roa
File: ddsdcRVTmOFdHgZxWtA6C-2UmVE.roa (raw, json)
Hash identifier: nTy0AHdhORCjFqjp0NJtgLdVgbQDAAoR3K00FuG9azM=
Subject key identifier: 75:DB:1D:71:15:53:98:E1:5D:1E:06:71:5A:D0:3A:0B:ED:94:99:51
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01974E9CA46D88C7D9EBF8C8F26C883EAE61
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ddsdcRVTmOFdHgZxWtA6C-2UmVE.roa
Signing time: Sun 08 Jun 2025 08:16:17 +0000
ROA not before: Sun 08 Jun 2025 08:16:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.90.17.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.199.54.0/24 maxlen: 24
185.206.251.0/24 maxlen: 24
185.209.38.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.210.233.0/24 maxlen: 24
185.214.108.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.222.28.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
185.223.155.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.225.3.0/24 maxlen: 24
185.226.104.0/24 maxlen: 24
185.227.144.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.232.206.0/24 maxlen: 24
185.246.112.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.8.112.0/24 maxlen: 24
193.8.114.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
194.5.64.0/24 maxlen: 24
194.76.169.0/24 maxlen: 24
194.76.172.0/24 maxlen: 24
194.124.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Jun 2025 11:25:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:9c:a4:6d:88:c7:d9:eb:f8:c8:f2:6c:88:3e:ae:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 8 08:16:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75db1d71155398e15d1e06715ad03a0bed949951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:df:22:e8:cb:5e:54:1d:5b:51:7d:3c:7c:76:
0a:10:4d:ab:63:8f:61:ed:b1:a8:6f:63:63:a9:6f:
7f:4a:34:d1:0b:c3:97:7b:d5:b2:a2:3a:04:8e:d9:
20:dc:88:c7:43:59:a0:cd:6e:b3:2d:6d:fa:6d:eb:
89:c1:33:60:7d:c7:7b:28:30:d5:46:43:17:00:fa:
9b:44:fc:89:16:94:f8:fd:4c:c9:e8:2f:c1:65:df:
99:a3:0a:19:47:3b:ad:13:f6:b0:8b:09:72:7f:19:
2a:2f:e8:c4:e6:3b:a5:4a:4c:44:a9:ac:ec:3f:7a:
22:04:06:eb:4b:7d:a9:8a:58:9c:11:ab:7b:73:d1:
20:c3:e4:69:e1:a0:b2:8e:ef:51:7d:3e:04:ff:77:
a4:d4:9f:ea:72:98:64:50:8d:07:f0:58:a1:45:d6:
ca:de:aa:e9:9b:c7:c4:f4:2b:bb:a5:f0:a4:f2:db:
77:7c:73:2d:10:b0:c8:a9:15:ba:9a:56:60:18:3d:
c9:8c:e8:b7:8f:d9:bc:f0:b2:61:5b:b6:32:78:5d:
be:fd:fd:22:07:36:0c:90:c5:54:52:2a:bc:e1:7b:
d2:3d:c7:19:33:1d:76:93:2f:88:dc:fd:c0:62:2f:
4a:cb:5c:50:e8:52:e1:33:e8:dd:00:74:40:0b:d8:
a1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DB:1D:71:15:53:98:E1:5D:1E:06:71:5A:D0:3A:0B:ED:94:99:51
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ddsdcRVTmOFdHgZxWtA6C-2UmVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.17.0/24
185.126.82.0/24
185.199.54.0/24
185.206.251.0/24
185.209.38.0/24
185.209.73.0/24
185.209.75.0/24
185.210.233.0/24
185.214.108.0/24
185.218.20.0/24
185.218.101.0/24
185.220.250.0/23
185.222.28.0/23
185.223.155.0/24
185.225.0.0/23
185.225.3.0/24
185.226.104.0/24
185.227.144.0/24
185.227.146.0/23
185.228.75.0/24
185.232.206.0/24
185.246.112.0/24
193.8.112.0-193.8.114.255
193.58.146.0/23
194.5.64.0/24
194.76.169.0/24
194.76.172.0/24
194.124.69.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:3f:4b:6c:09:20:43:44:4c:6e:f4:59:af:d1:8a:58:8b:ff:
48:44:50:e0:8f:ad:45:de:d5:77:3c:a9:76:5e:f9:0e:34:1f:
59:f3:38:0f:63:9d:72:30:90:e0:1c:40:bc:a4:d0:74:d3:33:
59:c6:86:d2:78:f3:a2:57:7a:78:9a:e0:91:45:1d:5c:b5:65:
db:26:2d:16:db:78:30:24:f8:71:b5:1f:c7:7f:15:ff:52:7d:
96:72:33:07:dc:c5:bf:14:c8:3b:5b:68:48:de:62:8f:93:ac:
13:76:ad:5e:eb:9b:83:2f:04:e5:6d:f2:da:c9:3c:e9:1f:52:
69:17:8f:23:a3:e5:7a:58:b7:80:d2:39:c8:ab:7a:19:72:5b:
55:f3:45:94:b4:53:4b:84:d8:28:2a:64:02:eb:4c:76:68:8e:
ee:cc:b1:7e:4b:fe:80:7e:06:20:59:7b:f3:3c:2d:30:d8:bf:
45:c2:3b:67:c9:2e:94:a5:1e:c8:52:6a:24:61:a3:1a:a7:68:
af:37:c2:24:5e:f9:ab:9d:58:aa:df:f9:eb:6e:64:76:4e:7b:
5a:21:80:00:86:09:96:20:67:53:44:53:08:cf:10:dc:55:6e:
57:79:07:dd:2a:86:5f:e8:71:d2:bf:9b:44:25:9a:67:b3:75:
70:6a:d6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:04:39 2025 by rpki-client