Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/gyk322KtEQaTu_ueG64tpVKOPvI.roa
File: gyk322KtEQaTu_ueG64tpVKOPvI.roa (raw, json)
Hash identifier: MfbBVKnx2Vov7ZLjAq7gI3JLx/+iVRBOuJGXNgaTyGs=
Subject key identifier: 83:29:37:DB:62:AD:11:06:93:BB:FB:9E:1B:AE:2D:A5:52:8E:3E:F2
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 0197EA42585715B34B859A8007536D12FE43
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/gyk322KtEQaTu_ueG64tpVKOPvI.roa
Signing time: Tue 08 Jul 2025 13:38:25 +0000
ROA not before: Tue 08 Jul 2025 13:38:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3360
IP address blocks: 195.203.156.0/22 maxlen: 22
217.27.4.0/24 maxlen: 24
217.27.6.0/24 maxlen: 24
217.27.7.0/24 maxlen: 24
2a03:5000:1::/48 maxlen: 48
2a03:5000:2::/48 maxlen: 48
2a03:5000:11::/48 maxlen: 48
2a03:5000:12::/48 maxlen: 48
2a03:5000:20::/48 maxlen: 48
2a03:5000:21::/48 maxlen: 48
2a03:5000:22::/48 maxlen: 48
2a03:5000:30::/48 maxlen: 48
2a03:5000:31::/48 maxlen: 48
2a03:5000:32::/48 maxlen: 48
2a03:5000:41::/48 maxlen: 48
2a03:5000:42::/48 maxlen: 48
2a03:5000:51::/48 maxlen: 48
2a03:5000:52::/48 maxlen: 48
2a03:5000:61::/48 maxlen: 48
2a03:5000:62::/48 maxlen: 48
2a03:5000:71::/48 maxlen: 48
2a03:5000:72::/48 maxlen: 48
2a03:5000:81::/48 maxlen: 48
2a03:5000:82::/48 maxlen: 48
2a03:5000:91::/48 maxlen: 48
2a03:5000:92::/48 maxlen: 48
2a03:5000:101::/48 maxlen: 48
2a03:5000:102::/48 maxlen: 48
2a03:5000:111::/48 maxlen: 48
2a03:5000:112::/48 maxlen: 48
2a03:5000:121::/48 maxlen: 48
2a03:5000:122::/48 maxlen: 48
2a03:5000:131::/48 maxlen: 48
2a03:5000:132::/48 maxlen: 48
2a03:5000:141::/48 maxlen: 48
2a03:5000:142::/48 maxlen: 48
2a03:5000:151::/48 maxlen: 48
2a03:5000:152::/48 maxlen: 48
2a03:5000:161::/48 maxlen: 48
2a03:5000:162::/48 maxlen: 48
2a03:5000:171::/48 maxlen: 48
2a03:5000:172::/48 maxlen: 48
2a03:5000:181::/48 maxlen: 48
2a03:5000:182::/48 maxlen: 48
2a03:5000:191::/48 maxlen: 48
2a03:5000:192::/48 maxlen: 48
2a03:5000:201::/48 maxlen: 48
2a03:5000:202::/48 maxlen: 48
2a03:5000:211::/48 maxlen: 48
2a03:5000:212::/48 maxlen: 48
2a03:5000:221::/48 maxlen: 48
2a03:5000:222::/48 maxlen: 48
2a03:5000:231::/48 maxlen: 48
2a03:5000:232::/48 maxlen: 48
2a03:5000:241::/48 maxlen: 48
2a03:5000:242::/48 maxlen: 48
2a03:5000:251::/48 maxlen: 48
2a03:5000:252::/48 maxlen: 48
2a03:5000:271::/48 maxlen: 48
2a03:5000:272::/48 maxlen: 48
2a03:5000:291::/48 maxlen: 48
2a03:5000:292::/48 maxlen: 48
2a03:5000:311::/48 maxlen: 48
2a03:5000:312::/48 maxlen: 48
2a03:5000:421::/48 maxlen: 48
2a03:5000:441::/48 maxlen: 48
2a03:5000:442::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 08 Jul 2025 20:17:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ea:42:58:57:15:b3:4b:85:9a:80:07:53:6d:12:fe:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Jul 8 13:38:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=832937db62ad110693bbfb9e1bae2da5528e3ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9e:36:0a:54:38:41:c0:a7:ef:43:53:76:73:
02:70:6c:41:8e:7c:6a:cf:5f:3d:94:ad:bd:62:83:
34:c3:2d:70:93:fb:2d:3f:0d:e2:36:1e:e9:13:1c:
96:44:6c:99:ec:37:50:81:0e:94:b8:f4:35:e7:f5:
20:bc:fa:19:d3:d0:78:2f:d1:a5:9d:db:8b:81:e8:
f9:0c:7b:f9:b7:b0:9f:62:d8:f7:6e:cd:c5:07:6f:
aa:37:8d:e5:9b:93:20:9b:ce:75:f0:fb:bc:6d:8a:
ba:77:18:7a:f0:ca:7a:a6:70:47:89:09:e9:5e:23:
fe:75:bc:4a:09:6b:04:e1:71:af:f9:00:1d:cd:33:
42:8e:0c:aa:f2:f7:d4:3a:b2:2f:2a:7a:90:28:cf:
aa:08:e5:e8:75:18:cd:c3:d7:5f:83:a4:ce:65:63:
aa:0c:a5:89:83:7a:f0:9b:89:8e:04:58:78:59:d2:
ef:d9:c9:69:5c:75:2f:71:c8:68:5e:61:80:2f:de:
1d:7d:d7:c7:2b:b3:0e:f3:8d:76:5f:10:b7:e8:74:
4b:b8:18:8c:49:ba:52:be:64:83:88:ae:6d:bc:3f:
99:01:0a:ef:bc:5e:f6:14:5e:92:62:cc:46:2d:49:
3d:5c:8e:70:c9:d6:0c:c6:7e:fa:19:b0:9c:11:7e:
41:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:29:37:DB:62:AD:11:06:93:BB:FB:9E:1B:AE:2D:A5:52:8E:3E:F2
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/gyk322KtEQaTu_ueG64tpVKOPvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.203.156.0/22
217.27.4.0/24
217.27.6.0/23
IPv6:
2a03:5000:1::-2a03:5000:2:ffff:ffff:ffff:ffff:ffff
2a03:5000:11::-2a03:5000:12:ffff:ffff:ffff:ffff:ffff
2a03:5000:20::-2a03:5000:22:ffff:ffff:ffff:ffff:ffff
2a03:5000:30::-2a03:5000:32:ffff:ffff:ffff:ffff:ffff
2a03:5000:41::-2a03:5000:42:ffff:ffff:ffff:ffff:ffff
2a03:5000:51::-2a03:5000:52:ffff:ffff:ffff:ffff:ffff
2a03:5000:61::-2a03:5000:62:ffff:ffff:ffff:ffff:ffff
2a03:5000:71::-2a03:5000:72:ffff:ffff:ffff:ffff:ffff
2a03:5000:81::-2a03:5000:82:ffff:ffff:ffff:ffff:ffff
2a03:5000:91::-2a03:5000:92:ffff:ffff:ffff:ffff:ffff
2a03:5000:101::-2a03:5000:102:ffff:ffff:ffff:ffff:ffff
2a03:5000:111::-2a03:5000:112:ffff:ffff:ffff:ffff:ffff
2a03:5000:121::-2a03:5000:122:ffff:ffff:ffff:ffff:ffff
2a03:5000:131::-2a03:5000:132:ffff:ffff:ffff:ffff:ffff
2a03:5000:141::-2a03:5000:142:ffff:ffff:ffff:ffff:ffff
2a03:5000:151::-2a03:5000:152:ffff:ffff:ffff:ffff:ffff
2a03:5000:161::-2a03:5000:162:ffff:ffff:ffff:ffff:ffff
2a03:5000:171::-2a03:5000:172:ffff:ffff:ffff:ffff:ffff
2a03:5000:181::-2a03:5000:182:ffff:ffff:ffff:ffff:ffff
2a03:5000:191::-2a03:5000:192:ffff:ffff:ffff:ffff:ffff
2a03:5000:201::-2a03:5000:202:ffff:ffff:ffff:ffff:ffff
2a03:5000:211::-2a03:5000:212:ffff:ffff:ffff:ffff:ffff
2a03:5000:221::-2a03:5000:222:ffff:ffff:ffff:ffff:ffff
2a03:5000:231::-2a03:5000:232:ffff:ffff:ffff:ffff:ffff
2a03:5000:241::-2a03:5000:242:ffff:ffff:ffff:ffff:ffff
2a03:5000:251::-2a03:5000:252:ffff:ffff:ffff:ffff:ffff
2a03:5000:271::-2a03:5000:272:ffff:ffff:ffff:ffff:ffff
2a03:5000:291::-2a03:5000:292:ffff:ffff:ffff:ffff:ffff
2a03:5000:311::-2a03:5000:312:ffff:ffff:ffff:ffff:ffff
2a03:5000:421::/48
2a03:5000:441::-2a03:5000:442:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3d:c6:78:99:88:c1:64:fe:ef:0d:8a:85:8c:ea:e9:a4:00:da:
bb:e5:b0:14:98:b4:14:21:7c:9b:c6:f5:a7:b9:de:ea:69:2f:
e8:6c:ca:f5:fe:68:b6:ff:f8:cd:d9:7c:ff:a0:de:80:9a:59:
9b:f6:bc:3b:a3:2e:a8:64:ed:fd:33:e5:90:d0:5c:9c:7a:47:
a8:f3:4d:7f:2a:86:8e:dc:fc:4e:a7:9d:5d:7e:9e:57:76:9d:
09:0d:1c:68:51:2e:b4:09:05:10:3f:40:7f:fa:db:25:7f:bd:
1a:1a:0c:94:84:12:1a:74:57:1c:e8:56:98:95:53:97:dc:99:
80:08:a7:77:96:61:81:a2:a0:89:a4:73:92:d1:dc:7e:e5:b1:
aa:9b:2a:a3:93:77:b2:70:f8:36:02:35:55:45:51:be:c0:c1:
67:f9:65:4c:98:c2:3b:27:f9:1c:6c:50:29:4b:7c:9f:30:c7:
e7:d8:c5:69:91:6d:90:e4:1d:e6:db:40:6f:56:1c:62:8e:6c:
42:25:af:c9:cf:93:7d:bc:8c:cf:5a:3e:70:01:50:ae:1f:53:
bd:79:2d:fe:f0:67:13:ee:0e:bd:2a:cf:89:0a:7b:c9:0c:e3:
02:2c:b6:20:07:e1:f7:d8:a0:f1:f5:49:36:a3:bf:b3:bd:4f:
12:c3:3e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:00:15 2025 by rpki-client