Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/5WiokSVZ4Y_EczKVgF5Dea8WaaM.roa
File: 5WiokSVZ4Y_EczKVgF5Dea8WaaM.roa (raw, json)
Hash identifier: THh4DPhLZyUwNdaQgvT5fuHj090GhbGbdJuAPdCHpko=
Subject key identifier: E5:68:A8:91:25:59:E1:8F:C4:73:32:95:80:5E:43:79:AF:16:69:A3
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0194EF231301EA9D3D10170352F241EA0E9F
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/5WiokSVZ4Y_EczKVgF5Dea8WaaM.roa
Signing time: Mon 10 Feb 2025 09:14:00 +0000
ROA not before: Mon 10 Feb 2025 09:14:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 185.199.159.0/24 maxlen: 24
185.206.248.0/24 maxlen: 24
185.206.251.0/24 maxlen: 24
185.209.36.0/23 maxlen: 24
185.209.74.0/24 maxlen: 24
185.210.152.0/24 maxlen: 24
185.210.153.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.210.155.0/24 maxlen: 24
185.218.102.0/24 maxlen: 24
185.223.76.0/24 maxlen: 24
185.225.2.0/24 maxlen: 24
185.227.145.0/24 maxlen: 24
185.232.206.0/24 maxlen: 24
185.234.20.0/22 maxlen: 24
185.234.23.0/24 maxlen: 24
185.238.228.0/22 maxlen: 24
185.240.120.0/23 maxlen: 24
185.251.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Feb 2025 10:18:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ef:23:13:01:ea:9d:3d:10:17:03:52:f2:41:ea:0e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 10 09:14:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e568a8912559e18fc4733295805e4379af1669a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c7:44:6d:48:c4:14:05:1e:6a:34:b9:72:05:
a3:3e:a2:58:87:db:41:19:23:4b:6b:80:63:83:7f:
1b:da:f3:c5:87:74:23:3d:df:24:03:5f:7f:8c:a2:
6f:c4:1f:a0:30:de:17:1e:a7:ee:4d:9f:39:de:3f:
fc:06:f2:40:5d:db:ea:80:70:60:ad:65:a9:f4:1b:
a8:aa:b4:29:52:39:b2:7f:e2:10:d3:b2:ac:56:0f:
14:50:7e:14:06:ba:18:51:ef:f9:08:95:a6:f9:90:
c6:70:53:41:90:88:b1:cc:f9:1e:e6:e1:41:54:8e:
90:63:9f:69:b6:54:d6:bc:be:c8:66:68:f8:9e:55:
84:88:f4:f4:b3:9d:f2:29:47:be:c4:10:8a:85:b4:
5e:d7:04:8b:9d:16:a0:99:45:01:a4:3b:ff:28:c8:
de:9e:38:16:1e:20:28:ba:ba:9e:43:0d:c9:1d:62:
4d:1b:03:81:e5:93:af:6a:d4:ff:03:e3:73:94:e0:
12:99:17:e6:af:c8:41:be:e9:68:ac:9f:9f:ad:32:
db:d6:6d:cc:0d:9f:40:67:67:44:b5:f3:74:a3:af:
0d:b9:d1:0c:90:ac:4b:6f:e1:d7:a4:d3:df:4b:80:
de:b7:3e:b2:54:96:b1:c1:d2:1a:c9:d1:36:a7:69:
ab:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:68:A8:91:25:59:E1:8F:C4:73:32:95:80:5E:43:79:AF:16:69:A3
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/5WiokSVZ4Y_EczKVgF5Dea8WaaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.159.0/24
185.206.248.0/24
185.206.251.0/24
185.209.36.0/23
185.209.74.0/24
185.210.152.0/22
185.218.102.0/24
185.223.76.0/24
185.225.2.0/24
185.227.145.0/24
185.232.206.0/24
185.234.20.0/22
185.238.228.0/22
185.240.120.0/23
185.251.231.0/24
Signature Algorithm: sha256WithRSAEncryption
77:fc:a5:3e:37:c3:19:48:51:2c:e2:49:b1:ca:e4:83:cd:e3:
6b:c8:e1:8d:e2:de:36:42:c0:45:fe:ec:18:45:aa:10:7c:05:
7d:a4:56:07:d7:a3:f0:95:30:b7:96:f6:1a:6d:f0:0c:3f:fb:
68:e9:59:01:bb:e8:e9:2b:5f:2e:a1:a2:df:ed:e1:0f:44:1a:
dd:c8:6f:f6:93:a6:8a:e3:59:db:9f:d4:b7:da:56:3b:c4:d5:
a6:66:fa:4c:5f:21:90:ec:63:e6:08:e6:77:71:4e:55:07:67:
02:22:f9:91:15:4f:60:6f:6e:94:c2:4a:1a:d6:66:fb:f8:74:
61:79:99:8c:15:11:d3:37:d5:4a:31:10:27:9c:da:e2:78:83:
33:b5:ce:d2:d2:2b:9a:2d:c0:51:c6:d2:dd:bd:9e:bf:bc:27:
78:88:bf:16:64:f7:c6:77:35:bc:fd:f0:4a:fc:4b:cf:1a:ad:
c1:00:79:b5:02:54:65:b9:a0:fe:2a:87:82:29:c9:a5:8b:95:
d3:b6:53:ce:73:40:e0:b3:4a:93:e2:49:94:a5:96:f2:db:ba:
8a:88:90:49:a6:d2:52:52:35:c7:4c:1d:d2:0d:ef:59:d7:c9:
ce:9d:86:83:4f:91:e3:3f:7d:0d:7f:ef:92:30:04:4e:2b:f7:
c7:c4:b9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:30:33 2025 by rpki-client