Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GJWDvJ5LNy2alRClOyxLxnWAxzY.roa
File: GJWDvJ5LNy2alRClOyxLxnWAxzY.roa (raw, json)
Hash identifier: JBFyN9Lpx53iw0cqHEtR8AvryvGlRH4+d3BmnI67hMk=
Subject key identifier: 18:95:83:BC:9E:4B:37:2D:9A:95:10:A5:3B:2C:4B:C6:75:80:C7:36
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01953CC908D542365805C6D0299A78CEFC96
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GJWDvJ5LNy2alRClOyxLxnWAxzY.roa
Signing time: Tue 25 Feb 2025 11:06:02 +0000
ROA not before: Tue 25 Feb 2025 11:06:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 185.126.82.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.214.108.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.222.28.0/24 maxlen: 24
185.223.78.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.226.104.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.58.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 16:36:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3c:c9:08:d5:42:36:58:05:c6:d0:29:9a:78:ce:fc:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 25 11:06:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=189583bc9e4b372d9a9510a53b2c4bc67580c736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:12:5c:fc:1c:25:b1:2a:1c:da:be:61:c1:ac:
74:be:f5:45:86:bb:38:4d:db:b1:fb:db:df:97:e0:
b1:74:c5:63:07:63:c5:7c:78:8a:d8:bd:3a:57:90:
19:1f:a5:a8:38:d6:06:f2:f1:cc:b7:05:cd:46:f9:
9b:97:c8:e9:88:a3:0f:4b:ec:59:db:56:55:da:75:
aa:b3:ec:e5:b1:32:20:f7:90:9a:21:64:75:1d:0b:
37:66:a9:72:02:3d:ce:c9:52:a7:af:aa:b5:e6:6f:
ed:fb:06:bd:78:18:0d:3d:5a:c9:f8:06:d2:f4:94:
fc:56:e5:a5:0b:2a:a9:92:9e:21:6d:da:b3:74:04:
f7:5d:e0:d8:7a:0d:77:f3:1a:a3:26:13:b9:bc:0a:
93:4c:ba:c1:15:f2:14:24:c9:18:b7:b2:c2:2c:9d:
90:06:76:d7:5a:0f:4f:7c:2f:b3:ca:bb:10:35:33:
18:5c:60:3c:23:3f:f0:90:3f:cf:d7:60:e2:35:d7:
bd:fb:6c:b2:db:f0:f4:b1:6e:6f:31:ac:e9:50:1a:
d5:91:62:a5:05:e8:2e:3d:8b:b1:c4:ec:9f:40:c2:
21:75:6e:85:c4:18:29:11:8c:3d:7b:8b:d2:d6:ae:
93:29:dc:35:3e:b3:a7:1d:af:f7:01:5a:63:b2:32:
44:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:95:83:BC:9E:4B:37:2D:9A:95:10:A5:3B:2C:4B:C6:75:80:C7:36
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GJWDvJ5LNy2alRClOyxLxnWAxzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.82.0/24
185.209.75.0/24
185.214.108.0/24
185.218.20.0/24
185.220.250.0/23
185.222.28.0/24
185.223.78.0/24
185.223.80.0/24
185.225.0.0/23
185.226.104.0/24
185.227.146.0/23
185.228.75.0/24
193.8.112.0/23
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:e9:73:25:bf:68:12:bd:72:15:c2:8c:bb:9c:de:b7:2c:25:
75:f0:25:c9:2a:c7:9d:61:1f:ab:33:bd:66:5d:ff:0f:bf:39:
fc:93:b3:f9:4b:f0:2a:8d:f7:67:86:a0:95:19:32:5b:be:e6:
56:a6:f1:e4:f5:ac:35:21:19:71:53:24:45:be:32:2d:b5:fb:
dc:d8:51:dd:75:8e:e0:ab:06:60:68:05:95:00:b2:f9:7b:f3:
cb:7b:2e:24:f2:3c:01:dc:3d:45:1b:0c:80:28:62:33:fa:31:
6a:ac:98:aa:30:f1:39:74:d0:c9:04:84:4c:6d:d3:5d:3f:5b:
6b:0f:f4:bd:68:57:24:27:0f:2d:f1:4f:30:43:f4:99:0a:fa:
24:01:73:3b:09:9a:1e:38:65:3a:6b:ce:02:b3:5e:a2:12:df:
bf:1c:c5:f9:af:e4:d6:75:19:6b:13:8d:10:cf:d0:0d:7a:e1:
04:66:4e:f3:bf:07:ba:f3:a3:63:e2:1e:36:aa:7f:26:a0:64:
f9:03:f6:06:d7:f4:61:43:11:81:0c:ea:b9:4c:42:38:40:d2:
ee:a9:1f:9d:3d:b5:f1:36:42:cf:01:b2:fa:8c:6e:29:c8:5c:
42:81:f6:0e:60:5b:b6:eb:1c:e4:fb:1b:1a:81:1f:78:03:10:
1a:c9:b1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:36:48 2025 by rpki-client