Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/nrghxDosy7jyAXeWDSg_fq8Zswg.roa
File: nrghxDosy7jyAXeWDSg_fq8Zswg.roa (raw, json)
Hash identifier: f1VWyO1rbzur+XkJiRaKCeF4trv7Oo2cIGWg/+3gz+g=
Subject key identifier: 9E:B8:21:C4:3A:2C:CB:B8:F2:01:77:96:0D:28:3F:7E:AF:19:B3:08
Certificate issuer: /CN=ba81b24a6d6030bf088dea30c9a5932febdc6a7c
Certificate serial: 0196E280226F415F22257733DD95C45F41F8
Authority key identifier: BA:81:B2:4A:6D:60:30:BF:08:8D:EA:30:C9:A5:93:2F:EB:DC:6A:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uoGySm1gML8IjeowyaWTL-vcanw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/nrghxDosy7jyAXeWDSg_fq8Zswg.roa
Signing time: Sun 18 May 2025 08:26:10 +0000
ROA not before: Sun 18 May 2025 08:26:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57241
IP address blocks: 185.82.180.0/22 maxlen: 22
185.82.180.0/23 maxlen: 23
185.82.180.0/24 maxlen: 24
185.82.182.0/23 maxlen: 23
212.1.192.0/21 maxlen: 21
212.1.192.0/22 maxlen: 22
212.1.192.0/23 maxlen: 23
212.1.192.0/24 maxlen: 24
212.1.193.0/24 maxlen: 24
212.1.194.0/23 maxlen: 23
212.1.194.0/24 maxlen: 24
212.1.195.0/24 maxlen: 24
212.1.196.0/22 maxlen: 22
212.1.196.0/23 maxlen: 23
212.1.196.0/24 maxlen: 24
212.1.197.0/24 maxlen: 24
212.1.198.0/23 maxlen: 23
212.1.198.0/24 maxlen: 24
212.1.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 18 May 2025 08:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e2:80:22:6f:41:5f:22:25:77:33:dd:95:c4:5f:41:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba81b24a6d6030bf088dea30c9a5932febdc6a7c
Validity
Not Before: May 18 08:26:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9eb821c43a2ccbb8f20177960d283f7eaf19b308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2e:14:21:c3:76:69:78:7b:bf:80:57:0e:f2:
09:5d:06:04:e0:bb:76:d0:22:bd:10:b3:ef:d7:29:
c0:e3:36:14:f5:07:aa:dc:25:92:44:f0:91:cd:15:
ad:98:bc:fb:af:88:d3:c2:83:94:90:de:d3:80:b1:
71:1d:2e:ee:47:87:7b:22:42:62:a1:12:02:70:97:
e4:9c:f0:a0:85:83:92:03:7b:2a:73:a9:da:26:54:
62:96:d1:d9:60:78:55:dc:3b:7f:05:d3:ce:2f:af:
8b:98:21:dc:9a:0f:96:d4:bf:5d:53:53:38:5d:7a:
72:30:28:57:25:f1:8e:e4:1d:27:51:1d:53:18:3e:
81:f4:62:55:a0:97:bc:52:05:c4:13:3a:e3:ea:34:
ae:f8:c5:d3:79:b3:62:25:75:a3:13:0d:5c:72:e0:
94:69:ca:37:6c:bf:ba:86:76:78:be:8b:e7:89:de:
fe:51:2e:8b:59:10:26:b5:c8:44:23:f7:b2:c1:33:
5b:fa:dd:9c:93:d3:97:cc:cf:1b:ca:fa:26:74:a8:
79:0b:06:00:13:a0:62:df:4e:d1:fd:94:b5:27:e3:
7b:dc:0f:b7:c9:c3:e6:8d:80:62:41:e1:5e:6d:b9:
2b:f9:ec:68:9d:38:6b:45:2b:99:27:78:29:0b:23:
d5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B8:21:C4:3A:2C:CB:B8:F2:01:77:96:0D:28:3F:7E:AF:19:B3:08
X509v3 Authority Key Identifier:
keyid:BA:81:B2:4A:6D:60:30:BF:08:8D:EA:30:C9:A5:93:2F:EB:DC:6A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoGySm1gML8IjeowyaWTL-vcanw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/nrghxDosy7jyAXeWDSg_fq8Zswg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.180.0/22
212.1.192.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:ca:82:08:a2:7d:73:03:1b:c3:40:3a:2d:4d:84:31:d6:92:
dd:5c:bb:8e:d6:3d:81:3a:3d:f7:2d:82:4b:73:33:95:ca:75:
cd:4b:1b:1c:47:b9:de:b4:81:26:31:ea:62:12:7b:b4:e5:aa:
57:73:ae:c2:60:b1:00:53:3a:8a:0e:54:6c:db:e8:73:95:b8:
50:52:51:ec:16:31:81:4e:44:cf:1a:6f:44:f5:01:d4:4d:eb:
60:6a:b9:c8:ed:61:cf:d4:c5:92:38:0e:c4:cd:3f:68:9a:10:
31:24:bc:e9:2f:a5:39:81:8d:50:ee:90:c0:59:73:c8:ec:6b:
29:c0:94:51:e6:ae:2e:2a:73:5f:3a:f4:c3:f9:51:c1:b3:50:
5c:d4:38:fd:d7:f6:82:75:32:45:51:43:07:0a:f9:17:a8:aa:
81:26:90:93:97:df:72:ad:14:33:f2:62:01:16:73:6d:bd:0f:
c1:b2:47:e8:72:39:30:8f:24:cc:66:6d:61:1e:a6:62:d1:11:
da:c5:be:6d:e4:a3:d4:b5:02:b7:0d:9a:35:4d:2b:19:37:2b:
c3:61:33:7f:d2:9c:2e:70:a8:a6:1a:86:68:f3:e4:5e:40:64:
5a:1c:0b:5d:11:80:f4:fb:2d:8c:61:ad:bb:5d:88:02:7e:f5:
d7:cb:41:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 09:32:47 2025 by rpki-client