Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/gsXQMXgpP7sY_2z_TGEXU3OO45U.roa
File: gsXQMXgpP7sY_2z_TGEXU3OO45U.roa (raw, json)
Hash identifier: tbPBkWgXosY35QUx58Vf5/yD6wdMdBYlOIoE1orXkVc=
Subject key identifier: 82:C5:D0:31:78:29:3F:BB:18:FF:6C:FF:4C:61:17:53:73:8E:E3:95
Certificate issuer: /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Certificate serial: 019808B04D77CB539F18C0C5C3D2D25250C1
Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/gsXQMXgpP7sY_2z_TGEXU3OO45U.roa
Signing time: Mon 14 Jul 2025 11:27:08 +0000
ROA not before: Mon 14 Jul 2025 11:27:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216321
IP address blocks: 176.10.89.0/24 maxlen: 24
202.181.204.0/24 maxlen: 24
2a13:d8c0::/29 maxlen: 48
2a13:d8c0::/32 maxlen: 32
2a13:d8c0::/40 maxlen: 40
2a13:d8c1::/32 maxlen: 32
2a13:d8c1:ce00::/40 maxlen: 40
2a13:d8c1:fe00::/40 maxlen: 40
2a13:d8c2::/32 maxlen: 32
2a13:d8c3::/32 maxlen: 32
2a13:d8c4::/32 maxlen: 32
2a13:d8c4:2::/48 maxlen: 48
2a13:d8c4:7::/48 maxlen: 48
2a13:d8c5::/32 maxlen: 32
2a13:d8c6::/32 maxlen: 32
2a13:d8c7::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 14 Jul 2025 15:10:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:08:b0:4d:77:cb:53:9f:18:c0:c5:c3:d2:d2:52:50:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Validity
Not Before: Jul 14 11:27:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82c5d03178293fbb18ff6cff4c611753738ee395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:94:ca:ce:cb:7f:13:35:03:53:b9:3e:0d:a7:
c0:68:2b:8a:45:7c:75:2d:6b:b2:3e:ae:02:ca:df:
41:df:07:4e:6e:ea:e7:3f:93:10:1d:07:75:4b:e3:
4c:a1:0d:28:4c:73:25:78:3b:77:ad:a3:0e:40:59:
b5:72:77:69:7a:e5:ae:58:fb:a6:5d:a7:1c:83:e3:
ad:6f:93:e4:a0:af:74:11:a5:b2:74:e8:64:b3:b2:
70:bc:26:a0:9a:64:34:49:2b:9c:96:f2:e0:1c:f4:
5d:57:b7:64:d1:cc:15:f9:52:56:52:d9:01:62:c8:
ed:47:c1:61:28:ec:d8:b7:bd:3c:10:01:04:f0:18:
de:65:ee:99:9b:ec:7d:58:8e:9f:57:3b:6d:67:4b:
99:28:79:64:e1:19:80:94:a6:be:c7:15:bc:d5:e3:
65:47:c8:a8:d3:b5:eb:8f:20:22:2b:af:c0:78:3f:
5a:34:ac:91:f9:70:92:51:e0:95:93:58:23:ce:6f:
c9:92:ce:49:1b:b4:f4:93:57:2e:0c:f5:93:9f:65:
95:cc:9c:0b:55:5b:35:98:72:62:e4:bf:ff:98:b5:
81:1f:09:66:91:e3:2e:d9:14:47:79:e6:fe:7d:a4:
53:9a:2e:7c:26:3e:9b:59:a5:4a:79:ee:39:cc:e5:
f2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C5:D0:31:78:29:3F:BB:18:FF:6C:FF:4C:61:17:53:73:8E:E3:95
X509v3 Authority Key Identifier:
keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/gsXQMXgpP7sY_2z_TGEXU3OO45U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.10.89.0/24
202.181.204.0/24
IPv6:
2a13:d8c0::/29
Signature Algorithm: sha256WithRSAEncryption
29:b4:0c:ee:7a:9a:aa:9d:c7:98:be:cb:5c:6f:d4:93:78:ee:
c9:62:00:3f:1f:0f:67:da:01:d3:39:ec:0f:c5:4c:a0:e9:56:
6c:f9:ff:98:a6:e9:61:8c:67:05:d8:24:8b:bc:32:59:35:c4:
46:3b:bf:73:c0:75:bb:e3:88:51:75:0a:70:c7:7e:80:f2:3d:
5e:ba:8c:8f:c1:22:8f:a6:a4:ad:9e:f8:c2:12:88:ef:42:65:
f0:76:b9:75:99:d3:11:5a:54:2f:d8:85:cf:91:33:98:42:a9:
4f:68:04:fb:a8:24:e8:37:26:b0:65:30:4a:42:f5:dc:2d:01:
67:88:6f:03:a9:17:3e:2e:3f:9a:1c:0a:f0:2a:84:9f:c8:f1:
12:84:44:2c:77:7e:7b:c2:e6:bb:f9:73:17:36:98:d8:28:3e:
db:e0:87:a1:62:d2:53:1b:30:ba:a6:b4:4e:5d:93:26:cf:31:
bb:15:0e:8e:e3:c2:2f:d2:e6:29:86:ed:ff:26:5f:31:5c:51:
75:2f:bf:81:c8:1c:9b:0c:03:0f:8b:5d:f5:b0:25:7e:1a:c9:
f1:f5:d0:21:59:da:e6:e2:d8:d1:b2:ae:d9:f4:ad:53:57:5a:
f2:65:8a:67:6f:b6:f2:58:ff:5f:a7:d8:38:b2:dd:11:6e:8c:
8d:9d:3e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:58:09 2025 by rpki-client