Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EKPu5Hu38X_5j-KqvOCR1VaFq8I.roa
File: EKPu5Hu38X_5j-KqvOCR1VaFq8I.roa (raw, json)
Hash identifier: B4S4bOvuV3UUCupVFVgXv/GbLiMz0KPHyKAWoIQ9A0U=
Subject key identifier: 10:A3:EE:E4:7B:B7:F1:7F:F9:8F:E2:AA:BC:E0:91:D5:56:85:AB:C2
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0194EBFE537C587C4863CA45DF3593E005B0
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EKPu5Hu38X_5j-KqvOCR1VaFq8I.roa
Signing time: Sun 09 Feb 2025 18:35:00 +0000
ROA not before: Sun 09 Feb 2025 18:35:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 185.126.82.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.222.28.0/24 maxlen: 24
185.223.78.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.226.104.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.58.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 09:14:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:eb:fe:53:7c:58:7c:48:63:ca:45:df:35:93:e0:05:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 9 18:35:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10a3eee47bb7f17ff98fe2aabce091d55685abc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bf:86:28:ad:a8:6a:8d:b1:ef:fa:7f:2b:55:
70:66:2a:be:da:1e:54:f8:01:19:b0:86:de:7d:e6:
39:3a:54:6f:0e:22:b1:27:c3:b0:7e:3b:7a:3d:b5:
2f:e7:83:3f:a7:f8:63:cf:21:02:85:62:7d:62:fa:
db:b1:ee:2f:81:31:40:78:d2:43:e0:2a:f6:9a:8e:
8e:d0:ab:d1:ac:24:43:fc:25:f1:a5:b9:d5:fe:a2:
da:03:fc:93:d5:6d:ba:65:ef:2f:4b:f9:34:4e:38:
90:af:eb:19:0e:c3:a8:9c:da:e7:35:93:08:cb:1b:
49:9e:d4:79:61:04:3b:05:d5:a2:2f:78:09:5f:fe:
f3:02:c0:ae:1e:c7:5e:7e:0d:f7:59:26:76:58:b1:
7e:93:43:a5:33:d0:30:56:a8:d0:1a:03:2b:8a:9c:
4d:f8:e3:ef:09:65:b6:53:79:28:5f:d4:6c:14:3b:
e0:98:23:e8:45:76:8f:f9:44:83:b1:cb:b0:d1:16:
e5:0d:83:e7:35:02:41:2a:dd:a7:0e:da:52:04:fd:
a8:81:ff:a5:c9:d4:de:6b:bd:78:77:78:ef:37:30:
87:7b:39:42:01:52:26:d8:db:60:7b:2d:89:dd:4c:
6d:ba:67:cc:f0:e7:fc:06:86:2e:c2:6a:3f:f5:e9:
cc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A3:EE:E4:7B:B7:F1:7F:F9:8F:E2:AA:BC:E0:91:D5:56:85:AB:C2
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EKPu5Hu38X_5j-KqvOCR1VaFq8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.82.0/24
185.209.75.0/24
185.218.20.0/24
185.220.250.0/23
185.222.28.0/24
185.223.78.0/24
185.223.80.0/24
185.225.0.0/23
185.226.104.0/24
185.227.146.0/23
193.8.112.0/23
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:ff:1c:e7:f3:76:a8:a3:19:a9:a0:2e:a9:d0:7e:63:21:44:
0f:d3:fd:93:71:b5:b4:50:ea:7f:8e:fe:3d:e6:8a:11:5c:15:
70:16:4d:8d:50:68:3b:17:f6:9a:8c:1d:26:5f:77:d0:90:4c:
21:1e:c2:1e:10:a1:39:ef:89:d6:01:02:d3:21:d9:20:df:6e:
5f:ee:8b:53:90:5c:71:82:09:40:5f:15:31:38:6b:f0:03:58:
2c:d5:c9:39:84:01:28:a4:dc:ac:e8:2f:5d:c9:1a:69:1e:76:
ee:7c:a8:e9:17:06:3e:61:f7:aa:47:b3:90:51:78:6b:f0:76:
0b:0b:a1:df:75:44:2e:c7:16:34:42:4d:e5:5e:56:e8:c7:36:
25:16:8d:bf:74:74:7b:9e:65:95:f8:4e:46:10:9b:d0:48:6a:
4e:7e:15:72:3e:e9:7f:df:e8:b5:8e:14:1f:f8:29:9c:1f:2f:
6a:f9:df:66:79:57:c0:7d:ba:5a:19:0e:46:f8:8b:6e:f4:91:
96:c6:1a:02:d6:0b:00:0e:fe:a6:d7:96:f2:2e:37:04:8e:67:
c0:62:0b:ca:c2:e1:3c:28:c2:48:23:fb:83:84:ad:72:d7:b7:
4d:63:68:e2:6d:c4:42:f7:d3:9e:bd:83:8e:99:f8:93:58:72:
d5:64:a1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 15:54:56 2025 by rpki-client