Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YEKkShO_W3SmL-5DGkMcDRe1Lnc.roa
File: YEKkShO_W3SmL-5DGkMcDRe1Lnc.roa (raw, json)
Hash identifier: sksytEamE4jMa+YSHFeTM3F1iYZd6cJvz9FyKum8tS0=
Subject key identifier: 60:42:A4:4A:13:BF:5B:74:A6:2F:EE:43:1A:43:1C:0D:17:B5:2E:77
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0196F240C99881828364079F12AD76041F83
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YEKkShO_W3SmL-5DGkMcDRe1Lnc.roa
Signing time: Wed 21 May 2025 09:50:54 +0000
ROA not before: Wed 21 May 2025 09:50:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210876
IP address blocks: 45.134.84.0/22 maxlen: 24
45.134.84.0/23 maxlen: 23
45.142.228.0/22 maxlen: 24
45.147.116.0/22 maxlen: 24
93.189.123.0/24 maxlen: 24
109.107.149.0/24 maxlen: 24
185.216.30.0/24 maxlen: 24
185.216.31.0/24 maxlen: 24
185.226.8.0/24 maxlen: 24
185.247.6.0/24 maxlen: 24
194.35.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 May 2025 17:14:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f2:40:c9:98:81:82:83:64:07:9f:12:ad:76:04:1f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 21 09:50:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6042a44a13bf5b74a62fee431a431c0d17b52e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5a:0b:71:2d:fc:e4:90:69:83:b3:aa:61:f3:
31:d8:9f:c1:f2:cb:8d:c7:90:32:80:29:8c:28:69:
5a:f9:58:3d:7b:6e:8f:87:0c:42:2f:83:7e:42:77:
37:1b:f0:1e:46:7d:89:19:98:4b:a3:7c:ed:68:5f:
85:f7:a9:76:72:55:f2:8d:46:56:58:38:41:c4:69:
a6:2f:e6:b9:f7:83:5b:78:f8:55:23:5a:95:44:35:
5c:d8:45:ee:a0:28:3a:fd:61:60:40:02:36:c8:7f:
42:71:6a:25:c4:f3:61:a8:55:01:24:de:24:a6:c9:
2b:35:cd:9f:e5:e6:49:b7:98:60:d8:ef:ba:02:f2:
ad:2f:65:57:eb:cc:90:c6:80:8a:5c:56:a7:1b:ad:
5c:2c:82:3b:bf:e8:a0:67:dd:75:1e:45:17:ff:d1:
16:21:24:ba:6c:68:03:84:52:c2:5b:fb:4f:2f:50:
a7:60:ac:14:11:3f:b3:15:e1:10:e4:67:e3:da:37:
90:3d:b7:44:3d:d7:f3:8a:fb:18:db:93:4d:da:7c:
0c:57:1a:2a:da:75:80:7a:3f:90:66:6f:23:76:d6:
5c:fe:9f:02:69:f7:36:60:de:0d:8d:04:df:8b:e3:
63:6a:5c:12:53:3f:cb:58:4b:44:88:5e:a5:23:2c:
84:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:42:A4:4A:13:BF:5B:74:A6:2F:EE:43:1A:43:1C:0D:17:B5:2E:77
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YEKkShO_W3SmL-5DGkMcDRe1Lnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.84.0/22
45.142.228.0/22
45.147.116.0/22
93.189.123.0/24
109.107.149.0/24
185.216.30.0/23
185.226.8.0/24
185.247.6.0/24
194.35.40.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:86:b5:91:60:ae:be:71:95:4a:b2:db:7a:56:1f:3d:f9:49:
71:a3:e5:65:fe:df:99:e6:47:86:2d:0d:5d:aa:ad:76:a0:f9:
37:99:ba:8f:cf:52:cc:6e:38:cf:0f:4c:15:37:5a:48:c5:a8:
e6:33:63:e4:2a:c6:5c:06:c6:a0:1d:72:17:18:a9:75:d3:c7:
c2:13:8e:6f:67:3f:19:3f:72:d6:09:45:15:62:e7:06:ba:a5:
25:18:71:b6:a9:28:e9:17:4f:03:b5:fb:05:0f:f6:30:d5:92:
48:3a:39:bd:2f:ba:9d:b8:e8:74:61:2a:59:31:b1:6a:c0:89:
cb:6f:09:4a:df:37:c2:0f:2b:31:a5:10:c4:6b:56:68:ac:5b:
41:f6:44:1e:62:c0:3e:dd:12:9e:77:75:02:d7:ef:81:5e:e5:
87:db:11:9f:ee:1e:2a:6e:d3:e8:32:de:98:22:f9:6d:ce:30:
16:6d:e4:18:8f:a8:a0:9e:8c:2d:4c:d8:9a:aa:7a:98:5a:eb:
b2:bb:66:e1:2c:16:38:6f:7b:4b:2e:7c:16:4c:4a:14:4d:2c:
c0:78:18:c3:3b:0a:c1:03:b7:5c:e8:79:22:ab:28:90:e0:b3:
7e:f1:20:f0:cd:c8:8d:c0:47:5a:00:9c:a5:6b:af:50:a9:34:
a9:d1:7f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 15:14:12 2025 by rpki-client