Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/q58RF8774GjvhRBNKWysgt6-L9U.roa
File: q58RF8774GjvhRBNKWysgt6-L9U.roa (raw, json)
Hash identifier: dCZefINgpvE7flVPERmPP8vUus3G4WlL3ihsNahc0H8=
Subject key identifier: AB:9F:11:17:CE:FB:E0:68:EF:85:10:4D:29:6C:AC:82:DE:BE:2F:D5
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01950014DFF548E9EE20D69A45A74C79C6EE
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/q58RF8774GjvhRBNKWysgt6-L9U.roa
Signing time: Thu 13 Feb 2025 16:12:02 +0000
ROA not before: Thu 13 Feb 2025 16:12:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 185.126.82.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.214.108.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.222.28.0/24 maxlen: 24
185.223.78.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.226.104.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.58.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Feb 2025 10:04:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:00:14:df:f5:48:e9:ee:20:d6:9a:45:a7:4c:79:c6:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 13 16:12:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab9f1117cefbe068ef85104d296cac82debe2fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:66:5b:62:7b:74:3d:38:f8:0f:79:87:bf:b6:
a0:2f:5b:cd:f9:83:b8:ca:db:d9:8b:65:0d:97:e0:
ea:bb:d3:c2:12:41:06:80:e7:3c:ac:37:15:29:29:
ce:47:ed:4d:d9:e2:d1:36:67:64:ff:b8:ff:55:4e:
50:f0:ed:ea:27:4f:8f:b9:91:7d:b4:c9:07:51:4b:
1a:5c:82:d8:91:3d:a6:4d:ae:e6:e8:44:6b:43:7e:
d5:eb:8a:c5:00:19:23:69:09:ae:9d:e2:dd:c9:5f:
e6:e1:74:49:ab:53:ed:b3:80:38:f3:e8:d6:6f:06:
6b:44:2f:c8:55:4a:68:ec:30:4f:8c:d3:f2:15:57:
5b:05:f5:1c:06:42:49:54:b2:b1:63:06:c2:f2:bf:
a0:77:a4:0b:fd:0d:31:ad:cc:23:c2:9c:57:2e:6f:
56:48:e3:3e:32:90:3e:0b:e8:a3:48:c4:d7:2f:6d:
07:37:f3:6a:70:7d:ae:66:31:85:a0:c0:70:84:95:
8d:31:a9:23:b4:25:76:de:57:45:f5:71:76:74:9b:
25:8a:c3:55:68:fb:95:53:66:74:aa:09:67:bb:78:
4f:07:3e:a8:9f:ff:93:20:3c:09:be:b4:83:4c:76:
27:ff:5b:ad:df:12:a8:40:94:42:6b:95:86:78:77:
0a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9F:11:17:CE:FB:E0:68:EF:85:10:4D:29:6C:AC:82:DE:BE:2F:D5
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/q58RF8774GjvhRBNKWysgt6-L9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.82.0/24
185.209.75.0/24
185.214.108.0/24
185.218.20.0/24
185.220.250.0/23
185.222.28.0/24
185.223.78.0/24
185.223.80.0/24
185.225.0.0/23
185.226.104.0/24
185.226.107.0/24
185.227.146.0/23
185.228.75.0/24
193.8.112.0/23
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:a2:c9:83:2e:e0:04:18:c0:c7:a7:61:ff:fc:23:d5:e5:a3:
7b:a6:18:4b:5a:27:fa:09:9e:da:56:a2:a5:80:e6:52:b4:d6:
9f:9c:8c:74:43:2d:a0:07:83:6a:ba:ea:b0:fe:c0:0e:81:dd:
84:a3:9a:bd:c5:5e:a1:6c:d6:a9:c7:66:c4:95:b9:50:c8:f4:
05:78:55:13:93:79:38:5e:c5:59:66:12:1a:42:4e:08:46:46:
75:8b:ff:5a:19:ac:2a:57:4b:6b:85:37:7a:79:61:6a:cf:02:
a5:c5:1f:3f:fd:8b:d1:31:d3:e7:9e:4c:c7:27:b1:dd:6d:0a:
7a:41:fb:43:d9:87:9d:a1:23:ed:7a:5e:bb:2d:31:b9:21:87:
b3:4e:eb:fa:97:8f:62:02:36:2a:28:42:18:f8:a6:be:ca:f8:
e9:b9:8b:18:2b:ce:6e:ba:0d:e4:c5:6e:15:b5:10:be:64:fd:
41:c0:bf:9e:78:df:77:69:75:fb:40:64:ea:08:61:cb:1a:f2:
45:92:df:e8:ff:25:fe:23:f4:1b:c3:a8:2a:fe:69:ad:4d:25:
3a:23:ae:01:88:56:3e:e5:45:aa:06:aa:8c:f3:e0:03:b7:4c:
4f:64:b8:a6:d4:07:d1:dd:22:ef:03:bc:74:1b:ab:93:d8:88:
54:51:78:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:37:37 2025 by rpki-client