Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/UYttashP9Q69x5qEymDANa382gc.roa
File: UYttashP9Q69x5qEymDANa382gc.roa (raw, json)
Hash identifier: KGJYr1iJJewSC4oQCDH4mgjSy75fb8PLZHXHfzLJ0wk=
Subject key identifier: 51:8B:6D:6A:C8:4F:F5:0E:BD:C7:9A:84:CA:60:C0:35:AD:FC:DA:07
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019522AAF06559586F812BBE8B49E71500D3
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/UYttashP9Q69x5qEymDANa382gc.roa
Signing time: Thu 20 Feb 2025 09:23:02 +0000
ROA not before: Thu 20 Feb 2025 09:23:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 185.126.82.0/24 maxlen: 24
185.209.74.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.214.108.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.222.28.0/24 maxlen: 24
185.223.78.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.226.104.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.58.146.0/23 maxlen: 24
194.76.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Feb 2025 11:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:22:aa:f0:65:59:58:6f:81:2b:be:8b:49:e7:15:00:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 20 09:23:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=518b6d6ac84ff50ebdc79a84ca60c035adfcda07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:49:60:15:bd:89:43:f3:8e:12:d6:b9:be:04:
ff:22:b9:fe:d4:64:74:a3:93:9b:12:b1:c7:14:80:
85:ae:aa:b0:d4:50:53:8e:1f:f5:ed:49:e7:5b:32:
a8:20:58:8f:ee:2d:89:fc:13:c8:50:8f:53:9e:df:
c3:5a:9a:8b:0b:95:00:0a:42:6d:cf:f7:3c:76:62:
ad:c2:07:aa:b6:b5:3e:27:5d:9a:b4:7e:8b:02:06:
da:c2:41:08:1d:13:e8:29:c3:47:97:7e:82:58:a7:
8d:f3:14:e1:1c:ef:56:67:05:01:97:3e:c7:43:4a:
df:a8:30:ba:68:63:47:1c:65:53:df:9b:e3:ae:c2:
e7:49:d6:04:79:ac:e8:49:15:59:e2:c1:58:bf:8e:
32:ba:ee:8d:0e:34:15:cb:97:dc:c7:7b:e5:78:3f:
f3:ce:c1:27:55:55:62:4f:66:b5:78:75:70:37:26:
71:d9:00:b9:e3:b8:17:42:9b:7e:46:9a:02:d6:39:
17:2b:4f:d9:05:08:db:88:cd:2b:72:6b:50:87:29:
0d:6a:a4:26:2d:f1:d7:c0:86:00:c4:76:29:5e:e5:
62:12:b6:90:6e:0c:e8:ca:57:28:80:33:74:f2:8c:
37:f1:46:0b:e4:9c:7b:c8:1e:5f:3e:21:14:97:30:
e4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8B:6D:6A:C8:4F:F5:0E:BD:C7:9A:84:CA:60:C0:35:AD:FC:DA:07
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/UYttashP9Q69x5qEymDANa382gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.82.0/24
185.209.74.0/23
185.214.108.0/24
185.218.20.0/24
185.220.250.0/23
185.222.28.0/24
185.223.78.0/24
185.223.80.0/24
185.225.0.0/23
185.226.104.0/24
185.226.107.0/24
185.227.146.0/23
185.228.75.0/24
193.8.112.0/23
193.58.146.0/23
194.76.172.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:f5:1e:10:d7:1f:82:50:31:d5:34:2c:5e:cb:f0:b4:ae:5c:
c8:31:2f:bc:b0:05:33:64:f7:58:9e:21:57:77:c5:c0:d4:65:
76:85:d9:4d:06:f7:37:36:91:84:db:9c:b6:a7:f0:4e:57:5a:
8b:da:6b:80:ad:1a:6a:97:89:7c:86:12:76:1e:fe:48:77:57:
7c:5f:c9:38:60:fe:d3:59:3b:03:f7:ce:ce:11:ad:bf:ee:00:
f2:a5:0a:25:71:a7:e5:39:4b:5a:c9:9e:12:8f:15:21:cc:45:
b6:e1:1c:12:45:80:34:90:8c:e4:27:6f:b3:30:1b:d5:6b:e2:
49:64:2b:1b:db:66:59:95:a4:58:79:d2:ec:b4:b8:07:37:40:
86:fa:6f:5f:57:f3:25:61:67:0b:4f:c8:90:d1:5e:8b:a9:32:
fe:6d:bf:fb:85:9f:a5:85:ba:bb:d3:a5:a9:18:ad:ef:43:11:
44:84:54:c7:20:bb:cb:bc:47:6c:13:5f:82:2f:22:af:4f:4b:
5d:0d:8b:73:40:57:07:5b:88:04:15:f9:42:2c:dc:9f:0c:96:
e1:1d:25:b0:ea:2d:83:e0:53:89:3f:3f:9d:01:03:eb:cb:79:
7e:8d:05:d0:8a:a0:13:01:b4:a3:04:2c:3e:b5:36:2d:57:80:
7c:d8:7f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:36:50 2025 by rpki-client