Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/SmM8QFvJ0vLMvhuvdMCSUdDM4Wc.roa
File: SmM8QFvJ0vLMvhuvdMCSUdDM4Wc.roa (raw, json)
Hash identifier: shpvU7eMUpjyYbWxzdtoWzlMa4hRHvmiXdRM5/9dkwY=
Subject key identifier: 4A:63:3C:40:5B:C9:D2:F2:CC:BE:1B:AF:74:C0:92:51:D0:CC:E1:67
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0196C47038778184A702DCACBE104A3AAB03
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/SmM8QFvJ0vLMvhuvdMCSUdDM4Wc.roa
Signing time: Mon 12 May 2025 12:20:10 +0000
ROA not before: Mon 12 May 2025 12:20:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 185.199.159.0/24 maxlen: 24
185.206.248.0/24 maxlen: 24
185.209.36.0/23 maxlen: 24
185.210.152.0/24 maxlen: 24
185.210.153.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.210.155.0/24 maxlen: 24
185.218.102.0/24 maxlen: 24
185.223.76.0/24 maxlen: 24
185.225.2.0/24 maxlen: 24
185.227.145.0/24 maxlen: 24
185.234.20.0/22 maxlen: 24
185.234.23.0/24 maxlen: 24
185.238.228.0/22 maxlen: 24
185.240.120.0/23 maxlen: 24
185.251.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 May 2025 16:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:70:38:77:81:84:a7:02:dc:ac:be:10:4a:3a:ab:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 12 12:20:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a633c405bc9d2f2ccbe1baf74c09251d0cce167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c7:72:2a:4c:9c:ac:a6:6c:d7:12:b4:ae:38:
d2:1a:91:f1:d1:c9:6f:9e:d8:bc:cc:c8:7b:c7:54:
b5:c3:8d:75:e2:d0:96:f9:2d:61:bf:f1:f7:e0:59:
d6:7c:4b:09:34:81:af:f9:26:55:fb:30:0a:47:32:
46:6c:a7:9e:0c:ba:9f:e3:0a:df:a2:7e:d3:55:80:
b5:75:af:76:19:0f:ba:a4:23:80:09:d9:3a:38:ff:
3f:a6:31:36:ce:0d:11:cb:2e:81:24:18:e0:45:79:
72:15:a0:bb:6a:6f:ce:c9:da:1b:f7:7f:3f:67:47:
a1:3a:f9:d5:e7:e7:ef:7d:a9:4c:20:51:c5:2b:62:
0d:b4:2b:49:1b:bc:78:72:10:b9:ac:36:20:01:8b:
6a:91:80:72:c5:8c:d0:92:9f:64:29:e5:31:a7:99:
e5:1c:de:56:c0:56:a5:73:20:6b:2d:72:ec:fc:66:
9f:b4:3c:c8:b4:61:95:81:2c:c2:0e:03:10:9c:2b:
d1:82:be:31:e6:ea:78:c8:98:42:bb:9c:a1:61:2a:
38:72:88:b2:73:f4:d3:4e:5e:6c:9c:ac:2f:71:09:
05:06:a3:1d:3b:2a:95:17:ee:27:1e:42:85:9f:7a:
3f:fd:6d:33:68:2c:6a:7e:36:61:a6:22:23:82:53:
38:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:63:3C:40:5B:C9:D2:F2:CC:BE:1B:AF:74:C0:92:51:D0:CC:E1:67
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/SmM8QFvJ0vLMvhuvdMCSUdDM4Wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.159.0/24
185.206.248.0/24
185.209.36.0/23
185.210.152.0/22
185.218.102.0/24
185.223.76.0/24
185.225.2.0/24
185.227.145.0/24
185.234.20.0/22
185.238.228.0/22
185.240.120.0/23
185.251.231.0/24
Signature Algorithm: sha256WithRSAEncryption
58:34:68:6c:46:4f:3a:79:4a:b0:85:08:45:28:37:ee:e8:cf:
47:16:66:f2:9d:d2:64:6e:b2:ed:f5:2b:29:60:40:3f:19:ca:
69:73:2f:c3:5c:42:ae:a1:dc:76:1c:1d:55:d0:80:df:01:23:
e5:3c:a6:47:8a:ff:6e:e3:56:2a:76:81:7b:64:b8:1f:93:d6:
a4:a6:c3:e4:e7:b0:e3:06:1b:dd:6a:0d:6c:7d:13:04:f7:79:
86:5c:b1:70:34:91:0e:b2:9b:af:62:19:ae:5e:4f:7f:83:3b:
cb:7d:a3:67:7a:75:ce:db:62:2d:5c:ac:58:e9:19:c9:26:48:
20:6e:88:a9:7c:d6:58:48:db:7b:e4:e5:db:02:06:7c:d4:9d:
15:22:8d:cb:51:83:e0:61:d8:ad:d7:e0:43:dc:96:1f:85:23:
b1:a3:4b:ba:f9:21:2b:aa:26:be:22:e6:23:d8:29:f2:5c:35:
46:c4:ca:f9:3b:ad:04:d0:c6:29:f2:87:a0:b9:af:39:c8:6a:
7d:99:83:f4:09:40:29:b6:95:4d:6d:70:2c:02:f3:45:68:62:
04:4b:55:7e:22:42:91:74:a1:57:06:e8:52:08:74:bc:7e:a0:
02:49:76:6d:ae:40:a2:df:f7:13:fe:db:2f:6b:81:f1:98:2d:
40:b8:fa:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 15:15:44 2025 by rpki-client