Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/CGC_gbOEvOEezpI1edyu1pYwLyM.roa
File: CGC_gbOEvOEezpI1edyu1pYwLyM.roa (raw, json)
Hash identifier: +tfoYyicz7n1DdphuPcPJPcNpnj2HuQjIC1DiKAnTFw=
Subject key identifier: 08:60:BF:81:B3:84:BC:E1:1E:CE:92:35:79:DC:AE:D6:96:30:2F:23
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01982471F92B90A72198CEC628582F27CEBD
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/CGC_gbOEvOEezpI1edyu1pYwLyM.roa
Signing time: Sat 19 Jul 2025 20:48:25 +0000
ROA not before: Sat 19 Jul 2025 20:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209693
IP address blocks: 64.188.76.0/24 maxlen: 24
64.188.77.0/24 maxlen: 24
64.188.78.0/24 maxlen: 24
64.188.79.0/24 maxlen: 24
77.239.96.0/21 maxlen: 24
77.239.112.0/22 maxlen: 24
77.239.116.0/22 maxlen: 24
77.239.120.0/23 maxlen: 24
77.239.124.0/24 maxlen: 24
87.251.16.0/24 maxlen: 24
87.251.17.0/24 maxlen: 24
87.251.18.0/24 maxlen: 24
87.251.19.0/24 maxlen: 24
150.241.96.0/22 maxlen: 24
150.241.100.0/24 maxlen: 24
150.241.101.0/24 maxlen: 24
150.241.102.0/24 maxlen: 24
150.241.103.0/24 maxlen: 24
193.23.216.0/24 maxlen: 24
193.23.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Jul 2025 16:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:24:71:f9:2b:90:a7:21:98:ce:c6:28:58:2f:27:ce:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 19 20:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0860bf81b384bce11ece923579dcaed696302f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:18:43:7c:82:67:ed:56:25:4b:b9:b3:ce:09:
35:00:13:cd:c5:6c:3d:4d:41:48:c4:67:fd:64:bb:
b9:9b:af:0b:b7:8f:13:c0:24:c9:fd:1b:f4:fe:d3:
ff:2b:2d:71:4b:3d:f1:95:0a:82:4d:a9:80:67:a0:
4e:c7:15:61:6e:1c:a0:54:ed:54:a0:dc:a0:79:e0:
7b:c1:c9:f6:c8:32:89:1a:6d:98:5d:0b:93:94:74:
05:2f:f6:da:42:58:49:6c:16:90:5d:02:98:a1:7c:
04:10:94:6b:d9:60:85:43:58:b4:da:94:b2:ac:35:
b6:bd:33:d4:07:52:16:53:e4:ec:78:10:12:44:ab:
85:19:79:05:6b:d3:7c:32:0c:9e:4b:73:57:f6:4a:
21:ac:86:92:e0:ca:30:67:37:3e:48:5e:89:f3:66:
0d:1c:39:74:b2:8f:ab:40:5e:b4:ab:90:ca:89:29:
d3:32:95:7d:ba:49:11:67:19:41:ef:1e:d5:a9:51:
57:67:e1:b7:7d:1e:00:41:af:5e:f9:18:06:0f:d8:
26:1f:bb:4c:27:0b:25:c8:39:04:71:20:e8:d7:1f:
f9:84:19:d4:ab:36:18:e9:2e:16:68:6d:93:c4:49:
fa:a4:e6:3e:b2:4d:e1:4b:3f:a9:a7:2f:67:24:dd:
f0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:60:BF:81:B3:84:BC:E1:1E:CE:92:35:79:DC:AE:D6:96:30:2F:23
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/CGC_gbOEvOEezpI1edyu1pYwLyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.188.76.0/22
77.239.96.0/21
77.239.112.0-77.239.121.255
77.239.124.0/24
87.251.16.0/22
150.241.96.0/21
193.23.216.0/24
193.23.221.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:2d:7b:60:b4:dc:ed:96:df:55:eb:2b:61:be:57:65:1b:7d:
90:6f:58:39:8f:3e:21:b7:ba:39:6b:c9:bf:d1:42:04:b9:a7:
69:21:1e:18:8c:e4:d1:e5:76:58:c5:b0:53:fe:c7:c8:d1:7b:
2b:71:5e:e4:53:64:d4:cd:6b:fd:a9:d7:99:c0:be:f3:e8:79:
d2:80:90:e8:70:fd:65:15:28:ba:13:4c:c4:77:c4:9f:64:68:
ec:3b:32:2d:57:52:fa:56:f5:7e:3f:e0:c4:3c:c3:c0:ba:e7:
79:6d:6c:32:6e:ce:ee:e5:1b:9a:ca:40:f5:54:51:2e:5a:c5:
ea:6f:25:e5:f8:ea:a2:31:42:75:fa:fd:bb:4b:92:d6:a0:56:
10:49:d6:d1:31:19:77:46:cf:e2:7c:2e:3a:56:4e:94:94:a9:
a1:b1:2b:3e:54:48:3f:c3:27:10:e8:47:8d:0a:2c:33:5b:5f:
68:82:4d:91:d5:dd:c2:a1:a0:c9:52:22:27:3c:9f:3d:59:d9:
8a:e2:53:dd:86:55:e1:07:15:15:01:4a:52:b4:b5:ec:a3:82:
19:81:c8:86:de:16:a8:15:62:74:34:cf:5d:46:e7:ce:05:a9:
c6:a4:08:78:ff:ed:62:2a:5f:85:d2:63:e1:b4:98:22:d9:13:
33:75:fd:b2
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAZgkcfkrkKchmM7GKFgvJ869MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjUwNzE5MjA0ODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODYwYmY4MWIzODRiY2UxMWVjZTkyMzU3OWRjYWVkNjk2MzAyZjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hhDfIJn7VYlS7mzzgk1ABPNxWw9
TUFIxGf9ZLu5m68Lt48TwCTJ/Rv0/tP/Ky1xSz3xlQqCTamAZ6BOxxVhbhygVO1U
oNygeeB7wcn2yDKJGm2YXQuTlHQFL/baQlhJbBaQXQKYoXwEEJRr2WCFQ1i02pSy
rDW2vTPUB1IWU+TseBASRKuFGXkFa9N8MgyeS3NX9kohrIaS4MowZzc+SF6J82YN
HDl0so+rQF60q5DKiSnTMpV9ukkRZxlB7x7VqVFXZ+G3fR4AQa9e+RgGD9gmH7tM
JwslyDkEcSDo1x/5hBnUqzYY6S4WaG2TxEn6pOY+sk3hSz+ppy9nJN3wqQIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFAhgv4GzhLzhHs6SNXncrtaWMC8jMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvQ0dDX2diT0V2T0VlenBJMWVkeXUxcFl3THlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQCQLxMAwQD
Te9gMAwDBARN73ADBAFN73gDBABN73wDBAJX+xADBAOW8WADBADBF9gDBADBF90w
DQYJKoZIhvcNAQELBQADggEBAFste2C03O2W31XrK2G+V2UbfZBvWDmPPiG3ujlr
yb/RQgS5p2khHhiM5NHldljFsFP+x8jReytxXuRTZNTNa/2p15nAvvPoedKAkOhw
/WUVKLoTTMR3xJ9kaOw7Mi1XUvpW9X4/4MQ8w8C653ltbDJuzu7lG5rKQPVUUS5a
xepvJeX46qIxQnX6/btLktagVhBJ1tExGXdGz+J8LjpWTpSUqaGxKz5USD/DJxDo
R40KLDNbX2iCTZHV3cKhoMlSIic8nz1Z2YriU92GVeEHFRUBSlK0teyjghmByIbe
FqgVYnQ0z11G584FqcakCHj/7WIqX4XSY+G0mCLZEzN1/bI=
-----END CERTIFICATE-----
Generated at Thu Jul 24 12:05:39 2025 by rpki-client