Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/NRkzVCaB0KDdytpQaVH_6szH2Yw.roa
File: NRkzVCaB0KDdytpQaVH_6szH2Yw.roa (raw, json)
Hash identifier: TUfXmmpfatForGnLFGh5kl6Mb2C7TOBA0kDgab/Ex+Q=
Subject key identifier: 35:19:33:54:26:81:D0:A0:DD:CA:DA:50:69:51:FF:EA:CC:C7:D9:8C
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01963D8E2F91D15E6C09FCB058839B8E0EDE
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/NRkzVCaB0KDdytpQaVH_6szH2Yw.roa
Signing time: Wed 16 Apr 2025 07:44:10 +0000
ROA not before: Wed 16 Apr 2025 07:44:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 185.126.82.0/24 maxlen: 24
185.209.38.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.210.233.0/24 maxlen: 24
185.214.108.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.220.248.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.222.28.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
185.223.78.0/24 maxlen: 24
185.223.155.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.225.3.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.232.206.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.8.112.0/24 maxlen: 24
193.8.114.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
194.76.172.0/24 maxlen: 24
194.124.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Apr 2025 08:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:8e:2f:91:d1:5e:6c:09:fc:b0:58:83:9b:8e:0e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 16 07:44:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=351933542681d0a0ddcada506951ffeaccc7d98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:58:61:d0:ff:cb:a0:87:1f:53:66:77:a2:d8:
c2:e9:dc:16:a2:2b:98:d7:77:6a:8c:02:bb:19:04:
01:b0:17:88:ef:fd:98:38:1a:bf:94:89:a4:2e:b3:
00:a2:a1:7e:f0:8f:ae:49:1b:a3:3f:06:b8:03:26:
a0:66:35:ef:f3:99:eb:57:83:72:36:5c:ab:7c:9f:
79:d5:44:e2:79:50:db:a3:7b:a4:26:09:f8:b7:0a:
a0:39:d5:11:2e:08:6c:4e:82:7d:d9:7c:8e:70:33:
f4:a6:92:f6:09:d0:10:16:0b:60:de:ee:ef:65:54:
c0:03:8b:4f:62:7c:e5:3b:28:1f:e5:7e:8b:5e:39:
dd:b6:28:df:6a:cc:d1:cd:44:4c:b6:52:5a:3c:36:
7f:37:bc:24:7d:b3:7a:cc:20:2c:53:89:dd:a2:cc:
91:26:99:b2:e4:60:e7:d0:93:f4:93:9e:d7:7b:04:
ce:67:86:eb:eb:94:e7:78:53:60:e6:74:7d:e4:df:
87:48:66:5e:3c:22:95:45:5d:fa:ef:ab:b6:ba:54:
bb:38:41:e8:1f:8d:b7:23:60:23:97:40:22:62:11:
68:29:95:22:54:7a:14:1b:72:c7:41:3a:b9:ee:61:
91:69:3d:c2:b6:57:93:00:a2:03:c9:7f:97:04:8e:
74:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:19:33:54:26:81:D0:A0:DD:CA:DA:50:69:51:FF:EA:CC:C7:D9:8C
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/NRkzVCaB0KDdytpQaVH_6szH2Yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.82.0/24
185.209.38.0/24
185.209.73.0/24
185.209.75.0/24
185.210.233.0/24
185.214.108.0/24
185.218.20.0/24
185.218.101.0/24
185.220.248.0/24
185.220.250.0/23
185.222.28.0/23
185.223.78.0/24
185.223.155.0/24
185.225.0.0/23
185.225.3.0/24
185.227.146.0/23
185.228.75.0/24
185.232.206.0/24
193.8.112.0-193.8.114.255
193.58.146.0/23
194.76.172.0/24
194.124.69.0/24
Signature Algorithm: sha256WithRSAEncryption
23:c5:a9:ef:46:19:e2:f2:50:f9:fc:e7:ca:55:97:e9:d4:22:
1c:4c:26:4f:00:69:f9:2b:ad:85:5d:9b:1a:d4:d1:46:8e:2c:
f1:41:d8:28:a6:f1:10:77:5c:c6:2e:f8:d6:6e:89:cc:d0:d8:
22:de:d0:90:26:9e:f6:c7:87:31:96:76:41:f7:28:52:00:81:
b3:31:ad:32:66:88:68:c5:33:21:23:2f:7d:da:7d:ac:ae:4c:
90:1a:3b:95:24:2c:8f:d7:43:b0:c5:3e:32:e9:f3:dc:a6:0a:
1c:fb:74:1e:95:97:2a:92:9e:66:dd:0d:3e:03:f1:51:ee:a6:
56:ed:8e:d6:00:e4:26:c2:79:81:7c:2b:35:f6:87:4c:22:9e:
72:70:04:16:6e:ef:10:97:77:28:e6:cb:a6:b5:b9:d6:83:c6:
de:83:a2:b8:55:29:43:77:c6:67:76:fe:8b:f9:fe:b8:06:86:
ce:e2:50:39:aa:8a:e0:7d:8a:7c:72:41:40:77:a9:83:c8:d4:
57:05:06:85:ad:00:4d:aa:c4:b9:a4:69:2b:40:73:96:c6:a4:
b7:47:b5:11:3b:00:ed:82:75:64:af:3e:98:3c:41:ff:22:b1:
0d:38:b3:8c:32:33:1f:8b:b8:e2:a8:3c:24:c9:c0:43:f6:18:
dc:d7:b5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:44:15 2025 by rpki-client