Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/gQbVXSDRp3vj6YJ7x4x75bWPT2w.roa
File: gQbVXSDRp3vj6YJ7x4x75bWPT2w.roa (raw, json)
Hash identifier: rvSLFvXkwFexxQfFIHohKi6yNgIhamm8QIIkBIMqEs8=
Subject key identifier: 81:06:D5:5D:20:D1:A7:7B:E3:E9:82:7B:C7:8C:7B:E5:B5:8F:4F:6C
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01951DE5A0846898FA69BC0B675B2B9EB072
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/gQbVXSDRp3vj6YJ7x4x75bWPT2w.roa
Signing time: Wed 19 Feb 2025 11:09:02 +0000
ROA not before: Wed 19 Feb 2025 11:09:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 185.126.82.0/24 maxlen: 24
185.194.177.0/24 maxlen: 24
185.209.74.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.214.108.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.222.28.0/24 maxlen: 24
185.223.78.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.226.104.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.58.146.0/23 maxlen: 24
194.76.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Feb 2025 09:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1d:e5:a0:84:68:98:fa:69:bc:0b:67:5b:2b:9e:b0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 19 11:09:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8106d55d20d1a77be3e9827bc78c7be5b58f4f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:de:c9:3b:51:6e:d6:34:d5:ad:9a:9d:0f:7f:
88:4d:98:07:37:fa:c9:b0:47:7c:43:f2:bc:c1:29:
f0:bd:c4:21:eb:19:90:34:68:ea:2b:1d:36:64:71:
e5:3c:74:0e:38:db:49:5d:ca:60:d4:0c:1b:c4:01:
31:4b:8b:b4:53:83:cd:8e:43:09:2c:bd:f3:5a:b7:
ec:71:9b:c9:a2:66:27:a9:94:af:37:fd:c0:2c:ae:
57:87:32:db:14:fd:1a:dc:3b:a4:41:69:f5:f3:05:
50:05:4d:a6:07:9c:46:e2:41:d0:4d:c1:88:4b:85:
c3:b3:7a:73:05:7e:51:4f:7c:dc:53:05:b6:6b:9e:
24:bb:d3:0d:08:38:b2:f7:28:f7:89:0d:c8:34:56:
85:bf:e4:c0:51:cd:2c:97:b7:89:fe:4b:d2:90:7d:
f2:a0:28:6e:c7:52:d9:04:76:52:80:ee:d8:c8:8d:
a5:29:4a:49:0a:a2:3f:db:8f:5b:a5:28:c3:ce:e0:
49:69:b6:c9:29:54:1f:24:2d:d8:79:b9:8e:ae:19:
71:84:0d:ab:97:04:d8:9e:a5:0e:4d:30:6c:c6:88:
4e:4f:63:37:db:2f:45:a6:94:5e:3d:ad:84:70:49:
1f:f1:1f:50:ed:9e:0f:69:23:eb:86:8a:65:60:90:
7e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:06:D5:5D:20:D1:A7:7B:E3:E9:82:7B:C7:8C:7B:E5:B5:8F:4F:6C
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/gQbVXSDRp3vj6YJ7x4x75bWPT2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.82.0/24
185.194.177.0/24
185.209.74.0/23
185.214.108.0/24
185.218.20.0/24
185.220.250.0/23
185.222.28.0/24
185.223.78.0/24
185.223.80.0/24
185.225.0.0/23
185.226.104.0/24
185.226.107.0/24
185.227.146.0/23
185.228.75.0/24
193.8.112.0/23
193.58.146.0/23
194.76.172.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:a9:46:1e:3a:ac:fd:72:70:de:7e:79:86:30:a4:ae:3c:c0:
38:cc:0d:b3:2c:8b:b8:c1:66:23:b1:a2:fa:9c:c9:4b:3d:2b:
11:8c:f5:4d:27:66:7d:02:4f:2f:00:57:4f:a7:9a:fc:cf:74:
a7:b5:5d:d4:69:3c:db:9d:a5:a3:a3:06:f7:20:0f:07:03:60:
78:25:8a:7a:07:d5:dc:3e:91:62:47:e0:be:0a:8d:df:92:f3:
a4:8b:24:aa:9e:99:57:a3:4b:b1:11:02:1b:42:81:9e:36:df:
1c:c4:25:d6:91:4d:a3:a1:64:ac:70:b2:d0:a0:e3:cd:c5:6b:
5b:83:46:cf:1b:7f:48:30:ac:18:21:4a:18:0c:cc:79:74:02:
de:6d:2b:45:3f:7b:79:85:5b:6e:98:6e:68:ae:50:fb:a7:ee:
6f:5e:0c:d6:07:8f:98:b0:96:55:99:10:fb:53:4e:b5:f6:8d:
8f:f2:b8:6b:1b:9b:a6:be:dd:e1:2d:73:56:7d:86:db:b0:f6:
d5:89:c7:d2:b6:71:77:70:bc:76:6e:18:60:50:97:0b:6d:67:
d5:2e:31:32:be:fb:14:10:81:8c:47:09:18:3d:26:62:44:23:
9e:6d:6a:dd:90:ce:63:f6:9c:a9:fd:c6:fa:b1:84:3e:cd:18:
0a:c7:a7:9f
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgISAZUd5aCEaJj6abwLZ1srnrByMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjUwMjE5MTEwOTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTA2ZDU1ZDIwZDFhNzdiZTNlOTgyN2JjNzhjN2JlNWI1OGY0ZjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAit7JO1Fu1jTVrZqdD3+ITZgHN/rJ
sEd8Q/K8wSnwvcQh6xmQNGjqKx02ZHHlPHQOONtJXcpg1AwbxAExS4u0U4PNjkMJ
LL3zWrfscZvJomYnqZSvN/3ALK5XhzLbFP0a3DukQWn18wVQBU2mB5xG4kHQTcGI
S4XDs3pzBX5RT3zcUwW2a54ku9MNCDiy9yj3iQ3INFaFv+TAUc0sl7eJ/kvSkH3y
oChux1LZBHZSgO7YyI2lKUpJCqI/249bpSjDzuBJabbJKVQfJC3YebmOrhlxhA2r
lwTYnqUOTTBsxohOT2M32y9FppRePa2EcEkf8R9Q7Z4PaSPrhoplYJB+EQIDAQAB
o4ICaTCCAmUwHQYDVR0OBBYEFIEG1V0g0ad74+mCe8eMe+W1j09sMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvZ1FiVlhTRFJwM3ZqNllKN3g0eDc1YldQVDJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQAuX5SAwQA
ucKxAwQBudFKAwQAudZsAwQAudoUAwQBudz6AwQAud4cAwQAud9OAwQAud9QAwQB
ueEAAwQAueJoAwQAueJrAwQBueOSAwQAueRLAwQBwQhwAwQBwTqSAwQAwkysMA0G
CSqGSIb3DQEBCwUAA4IBAQCoqUYeOqz9cnDefnmGMKSuPMA4zA2zLIu4wWYjsaL6
nMlLPSsRjPVNJ2Z9Ak8vAFdPp5r8z3SntV3UaTzbnaWjowb3IA8HA2B4JYp6B9Xc
PpFiR+C+Co3fkvOkiySqnplXo0uxEQIbQoGeNt8cxCXWkU2joWSscLLQoOPNxWtb
g0bPG39IMKwYIUoYDMx5dALebStFP3t5hVtumG5orlD7p+5vXgzWB4+YsJZVmRD7
U0619o2P8rhrG5umvt3hLXNWfYbbsPbVicfStnF3cLx2bhhgUJcLbWfVLjEyvvsU
EIGMRwkYPSZiRCOebWrdkM5j9pyp/cb6sYQ+zRgKx6ef
-----END CERTIFICATE-----
Generated at Wed May 7 17:37:40 2025 by rpki-client