Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EFCi53E2B706WiK7enXccFfFvrk.roa
File: EFCi53E2B706WiK7enXccFfFvrk.roa (raw, json)
Hash identifier: 4i7fLzGmSV/YmzAHY5VHYjPTx8dNbMa+M9Dl0c67uVw=
Subject key identifier: 10:50:A2:E7:71:36:07:BD:3A:5A:22:BB:7A:75:DC:70:57:C5:BE:B9
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0194222013FB28FF1EE12DA9DA5DC6F99E93
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EFCi53E2B706WiK7enXccFfFvrk.roa
Signing time: Wed 01 Jan 2025 13:48:35 +0000
ROA not before: Wed 01 Jan 2025 13:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.8.21.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.199.54.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.225.0.0/23 maxlen: 23
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.230.53.0/24 maxlen: 24
185.234.22.0/24 maxlen: 24
185.240.122.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.58.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 14:50:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:13:fb:28:ff:1e:e1:2d:a9:da:5d:c6:f9:9e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1050a2e7713607bd3a5a22bb7a75dc7057c5beb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d3:f2:8e:28:1d:22:49:93:35:c5:26:2c:2a:
25:ef:45:48:be:9c:58:ae:ca:e6:5d:d6:f3:d7:65:
eb:74:2d:60:2c:dc:c9:83:ac:35:41:dc:de:64:09:
94:6e:2a:92:78:f1:68:c2:e6:9d:5c:71:13:f8:b9:
74:c5:a8:97:12:43:7c:4b:ab:33:70:cb:1e:68:4a:
10:22:81:e0:5d:4f:7b:fd:25:39:fa:33:7f:3c:26:
78:fd:06:8d:c8:97:01:03:eb:a6:f6:1a:ca:04:d8:
69:81:d7:25:07:87:27:d5:12:08:f8:8b:51:29:f7:
ac:a1:fc:0b:ed:13:fd:ae:46:8f:06:b8:33:e3:eb:
f3:1e:e4:5a:e6:69:60:b7:59:b9:2b:7f:76:2e:4c:
19:ae:f5:0c:fe:47:b0:ca:26:b0:8c:ed:d3:b3:12:
e7:e1:08:f5:ff:c9:2c:9a:a1:fe:45:de:31:0c:4b:
45:62:f9:a0:c6:e7:fc:11:b4:db:fa:62:fb:3e:df:
d7:5b:de:52:e3:27:c0:96:b3:d5:82:4e:ce:c8:90:
d3:11:aa:a2:e3:c5:bc:25:cb:37:be:c2:1d:09:a0:
b4:55:e6:30:f3:ad:db:c9:99:42:e5:cd:ab:5f:39:
a1:76:fd:1c:55:48:05:90:9d:70:e9:b0:94:1c:2d:
5c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:50:A2:E7:71:36:07:BD:3A:5A:22:BB:7A:75:DC:70:57:C5:BE:B9
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EFCi53E2B706WiK7enXccFfFvrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
185.126.82.0/24
185.199.54.0/24
185.220.250.0/23
185.225.0.0/23
185.227.146.0/23
185.230.53.0/24
185.234.22.0/24
185.240.122.0/24
193.8.112.0/23
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:fa:81:1e:f6:57:fc:97:34:0b:b9:f6:4d:18:d6:62:96:f5:
b0:eb:8e:1b:a6:52:2e:af:c0:73:2a:cf:58:dd:23:88:39:d4:
bc:01:b5:07:7d:37:50:46:cb:95:a5:be:26:5e:40:1b:a0:99:
11:ea:89:a6:e0:82:4c:dd:a9:79:cc:9a:6d:28:03:bb:72:0a:
96:78:99:75:e7:db:4b:8e:06:60:75:12:50:52:26:d6:ca:a5:
0e:54:db:7d:6d:a5:33:01:be:b9:88:34:5f:76:45:1f:12:f7:
95:b2:9c:9b:64:50:6c:f2:88:27:93:33:82:c1:af:87:b4:5c:
07:81:79:85:d9:71:7b:9f:56:87:bc:80:d6:eb:b6:2a:4d:28:
3c:00:1b:92:61:b0:3f:75:75:fe:fb:2b:0e:0e:4e:ff:71:35:
fd:9f:c8:45:ee:28:4c:b3:d7:9c:a8:ee:d6:13:06:ee:f8:af:
84:36:e1:76:12:c5:ee:ce:fa:24:17:70:55:08:0c:e1:e9:61:
d2:d7:f8:ab:97:10:ea:07:71:ee:e9:84:d8:dc:09:38:3f:3f:
3c:8d:5a:e1:79:53:19:50:27:f5:c8:fd:00:17:2e:1a:3c:e1:
36:b3:e4:d2:f0:63:8b:ed:0b:1e:07:89:fb:be:6e:00:7e:78:
ce:14:9f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:22:20 2025 by rpki-client