Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/XkWH4fxcXWFi0Bv_6gXEavNkFNU.roa
File: XkWH4fxcXWFi0Bv_6gXEavNkFNU.roa (raw, json)
Hash identifier: 3xOwmpnhQbx2Unq2letdEOnq9Iy1gyLZumvYdomMY48=
Subject key identifier: 5E:45:87:E1:FC:5C:5D:61:62:D0:1B:FF:EA:05:C4:6A:F3:64:14:D5
Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254
Certificate serial: 0194F4DEB14956935F18C248C12E31281698
Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/XkWH4fxcXWFi0Bv_6gXEavNkFNU.roa
Signing time: Tue 11 Feb 2025 11:57:02 +0000
ROA not before: Tue 11 Feb 2025 11:57:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207144
IP address blocks: 85.11.128.0/24 maxlen: 24
85.11.129.0/24 maxlen: 24
85.11.130.0/24 maxlen: 24
85.11.131.0/24 maxlen: 24
85.11.132.0/24 maxlen: 24
85.11.133.0/24 maxlen: 24
85.11.134.0/24 maxlen: 24
85.11.135.0/24 maxlen: 24
85.11.136.0/24 maxlen: 24
85.11.137.0/24 maxlen: 24
85.11.138.0/24 maxlen: 24
85.11.139.0/24 maxlen: 24
85.11.140.0/24 maxlen: 24
85.11.141.0/24 maxlen: 24
85.11.142.0/24 maxlen: 24
85.11.143.0/24 maxlen: 24
85.11.160.0/24 maxlen: 24
85.11.162.0/24 maxlen: 24
85.11.164.0/24 maxlen: 24
85.11.165.0/24 maxlen: 24
85.11.166.0/24 maxlen: 24
85.11.167.0/24 maxlen: 24
85.11.168.0/24 maxlen: 24
85.11.169.0/24 maxlen: 24
85.11.170.0/24 maxlen: 24
85.11.171.0/24 maxlen: 24
85.11.172.0/24 maxlen: 24
85.11.173.0/24 maxlen: 24
85.11.174.0/24 maxlen: 24
85.11.175.0/24 maxlen: 24
85.11.176.0/24 maxlen: 24
85.11.177.0/24 maxlen: 24
85.11.178.0/24 maxlen: 24
85.11.179.0/24 maxlen: 24
85.11.184.0/24 maxlen: 24
85.11.185.0/24 maxlen: 24
85.11.186.0/24 maxlen: 24
85.11.188.0/24 maxlen: 24
85.11.189.0/24 maxlen: 24
85.11.191.0/24 maxlen: 24
185.164.240.0/24 maxlen: 24
185.164.241.0/24 maxlen: 24
185.164.242.0/24 maxlen: 24
185.164.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Mar 2025 11:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f4:de:b1:49:56:93:5f:18:c2:48:c1:2e:31:28:16:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254
Validity
Not Before: Feb 11 11:57:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e4587e1fc5c5d6162d01bffea05c46af36414d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4e:11:b1:b3:26:6a:7d:02:79:fb:2c:59:03:
de:fe:2d:74:b4:bb:76:38:da:94:5b:b6:1b:9a:00:
de:66:85:81:59:2b:6b:0c:a3:62:15:dd:6f:3a:ab:
40:e6:3e:fa:0c:62:72:2d:1c:15:24:b1:77:9b:e1:
56:10:22:85:cd:ff:ec:e8:aa:84:8b:4a:ec:d0:94:
5a:61:f2:b4:97:50:7b:72:f6:aa:cb:2f:19:6c:e7:
59:6e:c4:11:b0:9b:6b:be:90:c6:11:77:e4:c6:3b:
b6:b1:32:fa:5e:e1:5e:43:ac:0f:4e:34:c6:2d:7d:
92:5c:d9:60:16:82:1e:14:d3:b0:4b:9f:64:bb:53:
f3:71:be:ad:ca:80:05:53:65:67:ce:00:98:a1:66:
04:04:88:f8:d5:ca:43:61:8c:f2:71:68:b1:06:c1:
17:c7:49:09:3a:41:b1:40:98:17:77:94:d3:aa:22:
c4:9f:73:9c:6a:9a:b0:2f:b5:1a:c8:2e:57:fb:97:
1a:2b:e8:6c:70:e4:fd:48:9b:c7:af:2c:32:77:fe:
b0:16:c8:49:f8:bd:5c:8b:46:c7:20:05:ba:4b:0d:
7d:db:e6:33:fa:47:8b:e6:d3:d3:62:1d:55:f9:76:
31:af:09:c7:e6:b1:6e:4e:da:40:7f:78:90:eb:94:
dd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:45:87:E1:FC:5C:5D:61:62:D0:1B:FF:EA:05:C4:6A:F3:64:14:D5
X509v3 Authority Key Identifier:
keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/XkWH4fxcXWFi0Bv_6gXEavNkFNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.11.128.0/20
85.11.160.0/24
85.11.162.0/24
85.11.164.0-85.11.179.255
85.11.184.0-85.11.186.255
85.11.188.0/23
85.11.191.0/24
185.164.240.0/22
Signature Algorithm: sha256WithRSAEncryption
69:af:f8:d6:28:8e:5d:ff:09:e7:44:e3:d4:3c:d3:d1:29:c4:
62:03:e7:10:01:15:70:f0:32:3c:f4:be:41:68:45:b9:88:5b:
0c:35:64:96:72:1f:98:99:bf:1e:4a:cd:b6:a1:96:56:fc:08:
3a:c0:e9:72:df:93:18:41:4a:a7:8f:62:9f:fc:3d:d9:25:61:
95:79:fe:b6:cf:0e:a9:11:d1:5a:17:08:aa:1f:e3:5f:65:74:
ac:4b:79:17:bd:b4:d4:bc:d3:66:c5:dc:e6:3a:2b:89:c6:6a:
36:2e:76:5c:83:d3:76:54:27:bb:dd:40:e8:ef:a4:08:3e:0c:
72:95:dc:09:fd:7a:ea:85:62:63:76:b2:8e:9e:dc:dc:8a:5f:
2a:62:a7:0c:16:38:0a:eb:f7:9d:51:ed:5e:3f:5c:f2:65:61:
03:f0:11:da:5b:c1:cd:6b:ad:f7:bb:68:ca:ad:fa:db:fa:28:
d9:44:4e:0f:3a:a4:90:08:e5:3c:6f:d9:a4:af:cb:53:93:53:
c8:ef:0f:78:b3:4d:53:ff:35:54:3a:dd:58:db:7d:35:54:79:
ce:63:ba:0d:65:1e:a4:b7:d3:50:37:f7:2a:79:be:4f:10:85:
3b:30:13:a1:47:41:5d:61:ef:59:75:8e:19:dc:0c:da:97:1f:
f9:ab:05:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:01:21 2025 by rpki-client