Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Ce-XKSMnNloSdQlgLPhhVIqzjRk.roa
File: Ce-XKSMnNloSdQlgLPhhVIqzjRk.roa (raw, json)
Hash identifier: Ucdu29eps1eDyycZEE1fKyPPtDMZrbW2K+OktKARmu8=
Subject key identifier: 09:EF:97:29:23:27:36:5A:12:75:09:60:2C:F8:61:54:8A:B3:8D:19
Certificate issuer: /CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Certificate serial: 01942445390628C38FAB08E81D92D6F6986C
Authority key identifier: 66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Ce-XKSMnNloSdQlgLPhhVIqzjRk.roa
Signing time: Wed 01 Jan 2025 23:48:23 +0000
ROA not before: Wed 01 Jan 2025 23:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64289
IP address blocks: 185.225.24.0/24 maxlen: 24
185.225.26.0/24 maxlen: 24
2a14:3f80:8::/45 maxlen: 45
2a14:3f80:10::/45 maxlen: 45
2a14:3f80:18::/45 maxlen: 45
2a14:3f80:20::/45 maxlen: 45
2a14:3f80:28::/45 maxlen: 45
2a14:3f80:60::/45 maxlen: 45
2a14:3f80:80::/45 maxlen: 45
2a14:3f80:88::/45 maxlen: 45
2a14:3f80:100::/45 maxlen: 45
2a14:3f80:108::/45 maxlen: 45
2a14:3f80:3d1::/48 maxlen: 48
2a14:3f80:800::/38 maxlen: 38
2a14:3f80:c00::/38 maxlen: 38
2a14:3f80:1000::/38 maxlen: 38
2a14:3f80:1400::/38 maxlen: 38
2a14:3f80:1800::/38 maxlen: 38
2a14:3f80:2000::/38 maxlen: 38
2a14:3f80:2400::/38 maxlen: 38
2a14:3f80:2800::/38 maxlen: 38
2a14:3f80:3000::/38 maxlen: 38
2a14:3f80:3400::/38 maxlen: 38
2a14:3f80:3800::/38 maxlen: 38
2a14:3f80:3c00::/38 maxlen: 38
2a14:3f80:4000::/38 maxlen: 38
2a14:3f80:4400::/38 maxlen: 38
2a14:3f80:5000::/38 maxlen: 38
2a14:3f80:6000::/38 maxlen: 38
2a14:3f80:7000::/38 maxlen: 38
2a14:3f80:8800::/38 maxlen: 38
2a14:3f80:af38::/45 maxlen: 45
2a14:3f81:5800::/38 maxlen: 38
2a14:3f82:4000::/38 maxlen: 38
2a14:3f82:6000::/38 maxlen: 38
2a14:3f82:7000::/38 maxlen: 38
2a14:3f82:8800::/38 maxlen: 38
2a14:3f87:2800::/38 maxlen: 38
2a14:3f87:4800::/38 maxlen: 38
2a14:3f87:6800::/38 maxlen: 38
2a14:3f87:9800::/38 maxlen: 38
2a14:3f87:f000::/38 maxlen: 38
2a14:3f87:fc00::/38 maxlen: 38
Validation: Failed, certificate revoked on Mon 06 Jan 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:39:06:28:c3:8f:ab:08:e8:1d:92:d6:f6:98:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Validity
Not Before: Jan 1 23:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09ef97292327365a127509602cf861548ab38d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7e:9a:0a:a6:95:11:fb:c8:a6:9a:c0:75:64:
a6:8f:6c:78:60:fb:f4:c5:0a:4e:01:23:be:63:00:
2c:bb:fb:bc:15:49:fd:a6:11:59:78:d7:0f:82:1a:
4a:70:1d:00:ad:4c:3c:75:0f:60:27:28:1d:c2:c4:
3b:eb:01:c3:91:88:f0:18:0c:73:49:0d:a8:a3:15:
60:2c:fd:dc:e9:18:4c:0a:df:06:60:7e:26:87:a2:
5b:b7:15:27:2b:73:46:a1:cb:a5:ef:5a:0d:0a:0b:
7a:97:54:97:ee:2d:3d:0a:4f:1e:67:f8:8a:d3:58:
35:9b:b6:79:91:7c:32:34:6e:c7:c1:83:d5:89:50:
d2:6d:18:3c:74:bc:ff:7e:dd:18:34:a3:44:9e:60:
94:0c:a9:7c:53:c7:51:13:88:cb:b4:16:4b:8c:54:
6c:66:d5:bc:da:c2:7b:63:5f:5a:07:67:2b:c8:44:
da:4c:5b:ae:e0:2c:3a:57:03:71:20:82:98:84:04:
c1:cc:e2:e3:b5:31:21:77:40:dd:e5:79:92:0e:4b:
db:48:75:fb:2c:b6:38:ea:1b:5c:d8:8e:5e:19:5c:
c7:fe:ff:77:27:0c:d7:b7:54:8d:00:7d:bb:8e:bd:
b5:f1:5a:40:d1:26:bc:21:44:2f:d7:f1:e0:9c:f8:
85:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EF:97:29:23:27:36:5A:12:75:09:60:2C:F8:61:54:8A:B3:8D:19
X509v3 Authority Key Identifier:
keyid:66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Ce-XKSMnNloSdQlgLPhhVIqzjRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.24.0/24
185.225.26.0/24
IPv6:
2a14:3f80:8::-2a14:3f80:2f:ffff:ffff:ffff:ffff:ffff
2a14:3f80:60::/45
2a14:3f80:80::/44
2a14:3f80:100::/44
2a14:3f80:3d1::/48
2a14:3f80:800::-2a14:3f80:1bff:ffff:ffff:ffff:ffff:ffff
2a14:3f80:2000::-2a14:3f80:2bff:ffff:ffff:ffff:ffff:ffff
2a14:3f80:3000::-2a14:3f80:47ff:ffff:ffff:ffff:ffff:ffff
2a14:3f80:5000::/38
2a14:3f80:6000::/38
2a14:3f80:7000::/38
2a14:3f80:8800::/38
2a14:3f80:af38::/45
2a14:3f81:5800::/38
2a14:3f82:4000::/38
2a14:3f82:6000::/38
2a14:3f82:7000::/38
2a14:3f82:8800::/38
2a14:3f87:2800::/38
2a14:3f87:4800::/38
2a14:3f87:6800::/38
2a14:3f87:9800::/38
2a14:3f87:f000::/38
2a14:3f87:fc00::/38
Signature Algorithm: sha256WithRSAEncryption
2a:6b:ba:16:17:da:27:48:a7:0e:b7:bd:45:cb:f7:4d:be:4f:
e3:23:ce:fa:74:c9:c8:d4:d8:b4:a0:32:32:f4:aa:50:8f:5b:
c1:01:86:c5:6d:56:98:23:c6:52:ab:2e:f6:e4:cb:b5:72:4d:
87:9b:c0:12:79:b1:08:99:43:10:93:6b:f2:0a:b9:35:d2:f5:
25:98:66:7d:15:60:48:3e:ad:da:3a:ad:90:58:e6:be:59:ee:
fc:bd:c5:e2:4f:95:8a:b3:3c:9b:11:b5:ea:f1:22:79:af:0f:
c0:dd:80:89:d2:89:01:bb:09:16:3b:64:66:20:74:d3:10:7e:
ca:77:0e:63:e3:7b:04:40:8b:a5:17:11:87:05:ba:4b:88:8b:
2f:d5:cd:6b:e0:74:ae:af:3c:59:c0:7a:e6:8c:f2:64:43:d7:
c7:c2:1d:a7:5a:25:a7:7f:51:23:20:aa:a4:d8:dd:8a:f6:42:
46:a0:96:31:b8:75:87:ec:da:92:4e:3d:7b:1e:ef:e8:48:cd:
dc:1c:e2:53:ad:05:0d:93:b8:e1:5b:89:e3:f8:a1:0d:91:ae:
27:c3:cf:07:88:eb:cf:28:95:85:27:34:48:24:0d:f9:d2:93:
eb:f2:57:99:38:3f:15:bf:28:d1:95:8d:9a:ff:46:11:c0:33:
15:30:8a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:25:35 2025 by rpki-client