Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3vtsylZTE9AJReVsV_ugdr-EY5Q.roa
File: 3vtsylZTE9AJReVsV_ugdr-EY5Q.roa (raw, json)
Hash identifier: dKJvNE/UsZIEtCSULhPk17NIXkndur7PC2Pz+1NG6Do=
Subject key identifier: DE:FB:6C:CA:56:53:13:D0:09:45:E5:6C:57:FB:A0:76:BF:84:63:94
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019589DB5F995CA4959B225AB60E759BCBA9
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3vtsylZTE9AJReVsV_ugdr-EY5Q.roa
Signing time: Wed 12 Mar 2025 10:16:50 +0000
ROA not before: Wed 12 Mar 2025 10:16:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 185.126.82.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.214.108.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.220.248.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.222.28.0/24 maxlen: 24
185.223.78.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.58.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Mar 2025 15:51:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:89:db:5f:99:5c:a4:95:9b:22:5a:b6:0e:75:9b:cb:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 12 10:16:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=defb6cca565313d00945e56c57fba076bf846394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:59:2c:7b:70:b0:9c:fd:2d:4b:02:e7:c6:bb:
ee:40:6b:a8:f8:ae:1c:12:8e:ea:4d:5c:95:6a:9c:
83:09:71:5c:ae:da:72:75:e8:a9:9d:ae:e8:68:20:
10:b9:8a:1f:b4:a9:fd:ee:aa:5b:0c:6d:a1:92:65:
f0:56:d9:49:50:5b:bd:3c:b7:c4:73:af:8e:bf:54:
7b:59:24:fc:43:18:19:51:71:49:4a:48:20:f9:a0:
9a:2a:65:b6:79:e2:97:c7:c4:1a:0e:4a:94:a4:36:
38:e4:96:5f:ee:11:68:93:83:6e:fb:21:eb:4f:fc:
6a:25:f6:e9:79:2f:07:7e:99:b9:43:c5:b7:2e:23:
13:28:5c:07:14:4e:ea:f3:4b:6f:1e:98:fa:0a:f6:
df:26:27:75:cf:24:fa:0c:98:4e:78:c7:c7:a2:f5:
01:a8:75:46:70:e5:5a:6a:52:54:28:71:08:e6:3d:
f5:a1:73:53:96:77:3f:be:f9:6d:e4:ef:6d:20:40:
d7:29:a3:31:e7:55:37:92:d6:56:dd:dc:e3:47:c7:
ea:45:b0:0d:57:0a:a6:7d:e2:f2:44:b4:ed:a0:a6:
39:11:22:25:e8:69:77:1e:37:95:d2:2d:5d:a2:29:
2f:d2:01:fc:56:17:fe:f9:dc:e6:ea:8b:06:73:ce:
e3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FB:6C:CA:56:53:13:D0:09:45:E5:6C:57:FB:A0:76:BF:84:63:94
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3vtsylZTE9AJReVsV_ugdr-EY5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.82.0/24
185.209.75.0/24
185.214.108.0/24
185.218.20.0/24
185.220.248.0/24
185.220.250.0/23
185.222.28.0/24
185.223.78.0/24
185.223.80.0/24
185.225.0.0/23
185.227.146.0/23
185.228.75.0/24
193.8.112.0/23
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
88:00:f6:c3:44:fb:ac:59:e2:f8:06:32:5a:7c:0c:9c:e9:28:
c9:eb:fd:2c:a8:70:0b:1d:a0:9b:53:3d:a1:ab:5d:3a:d5:9d:
c4:0b:88:36:e8:a3:77:d3:f1:4b:13:54:49:80:79:11:38:a3:
44:a3:b3:5e:c6:e5:ab:37:70:65:4a:ce:a6:44:70:74:17:32:
4c:e7:7a:f0:3f:4c:c6:6e:cd:5d:c9:52:c4:b6:0b:2f:bc:d2:
77:47:74:75:71:ee:a0:a4:c4:d1:48:2b:27:19:2a:a9:59:1c:
69:3b:3f:18:c9:f2:cb:74:87:56:ae:5f:0f:80:12:ab:a9:d7:
7f:2a:b9:ee:1d:de:7e:3d:4d:cf:3f:16:11:58:66:be:56:14:
72:16:19:18:f8:d4:b0:cf:ee:7e:d4:56:a5:b4:55:06:2b:92:
9d:fb:f4:5a:9b:9e:38:37:59:5e:01:a0:25:31:f4:d5:90:b2:
a9:5b:fd:9f:7e:01:5e:99:16:dd:e9:35:51:c0:1f:bd:a3:77:
35:fc:d0:5a:52:8f:6c:8c:d1:ff:53:3a:b4:41:75:14:03:b4:
36:ec:49:a7:c8:50:cf:54:a3:7a:51:85:9f:8e:fa:d6:75:ad:
af:34:ee:c1:c9:e5:1f:b2:85:7c:88:90:b8:ee:74:7b:4a:b2:
e5:91:fc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:03:16 2025 by rpki-client