Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gXiy_TrE6V7dN6_872xqXcuV6-8.roa
File: gXiy_TrE6V7dN6_872xqXcuV6-8.roa (raw, json)
Hash identifier: wRaMEDP7H/SMREsPc/97vlvOgyV0SUvQeGs5aQMgFzE=
Subject key identifier: 81:78:B2:FD:3A:C4:E9:5E:DD:37:AF:FC:EF:6C:6A:5D:CB:95:EB:EF
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0195B8C0AD9AF83D37FBBB24E3D043874250
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gXiy_TrE6V7dN6_872xqXcuV6-8.roa
Signing time: Fri 21 Mar 2025 12:49:49 +0000
ROA not before: Fri 21 Mar 2025 12:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 62.76.238.0/24 maxlen: 24
193.124.7.0/24 maxlen: 24
193.124.44.0/24 maxlen: 24
194.58.36.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.58.223.0/24 maxlen: 24
194.87.53.0/24 maxlen: 24
194.87.128.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
195.133.9.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.40.0/23 maxlen: 23
195.133.50.0/23 maxlen: 23
195.133.92.0/23 maxlen: 23
212.193.26.0/23 maxlen: 23
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 21 Mar 2025 14:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b8:c0:ad:9a:f8:3d:37:fb:bb:24:e3:d0:43:87:42:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 21 12:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8178b2fd3ac4e95edd37affcef6c6a5dcb95ebef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:40:64:a1:92:8e:1f:03:2c:8e:a8:d3:e4:ff:
6a:a6:75:31:e0:98:2f:95:91:af:25:6c:78:2e:f0:
0c:09:3b:47:8b:12:85:aa:c3:25:d1:a0:61:3f:e3:
42:18:d1:4d:0a:6d:6f:95:d9:04:23:46:d5:c2:36:
ae:7d:57:21:ba:e5:fa:4f:72:a8:19:52:48:ac:d5:
b0:01:86:cd:2d:5f:a4:4b:50:7f:73:db:df:1d:62:
54:41:49:99:28:45:23:ed:71:6f:5c:55:7c:1c:d0:
af:57:bb:5e:81:7b:85:e9:a3:54:86:c2:48:5a:54:
6d:b2:2b:cc:74:a6:f3:82:8e:dc:08:72:75:cf:74:
60:00:7c:23:3a:c1:41:78:5f:97:5e:59:f2:03:8a:
85:aa:71:95:d9:ed:bc:86:bd:60:7c:c7:19:9f:e1:
4f:76:86:a0:cc:49:d0:2a:81:66:f4:cc:41:3b:76:
92:50:c0:7f:2c:64:cc:ea:ad:26:20:23:d8:b0:0f:
cb:15:5b:2b:11:fc:16:92:b0:5a:1b:20:36:3c:cc:
f3:65:a9:b5:b1:04:2d:40:a4:04:5e:f4:fb:8c:1b:
bf:c8:10:2d:02:0f:af:be:02:8f:b4:d5:bf:ed:30:
de:04:99:10:f9:5c:f0:78:19:62:8b:cf:64:21:8e:
c9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:78:B2:FD:3A:C4:E9:5E:DD:37:AF:FC:EF:6C:6A:5D:CB:95:EB:EF
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gXiy_TrE6V7dN6_872xqXcuV6-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.238.0/24
193.124.7.0/24
193.124.44.0/24
194.58.36.0/24
194.58.155.0/24
194.58.223.0/24
194.87.53.0/24
194.87.128.0/24
194.87.169.0/24
194.87.179.0/24
195.133.9.0/24
195.133.24.0/23
195.133.40.0/23
195.133.50.0/23
195.133.92.0/23
212.193.26.0/23
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
64:72:60:43:a4:21:e8:21:67:32:51:f4:d3:db:5f:5b:48:43:
32:89:e7:b7:0e:85:5e:46:e0:7f:b1:ed:49:d1:7f:09:b2:fb:
a7:60:7d:fd:02:9d:68:b1:5b:64:eb:1b:ea:e6:86:23:3f:55:
57:a7:fa:a7:e2:de:6d:17:9b:ae:71:ee:95:43:54:89:4b:25:
dc:ba:21:44:bf:a9:02:de:ab:3e:4a:c4:6e:66:81:e6:72:ce:
3e:cf:b5:8f:05:ab:3c:22:d8:9a:ae:2c:67:03:fb:a5:04:57:
c1:14:0a:f4:63:b1:a9:15:39:87:50:59:02:63:43:b2:9e:51:
46:c3:8c:a0:c1:19:9e:cc:52:b9:5f:26:ca:81:7a:f3:62:32:
f4:c0:8d:b2:2c:9f:d8:45:66:6d:f8:09:88:9f:9e:f8:0f:60:
d4:58:9a:fd:e7:4a:d8:73:3d:7f:24:aa:61:14:c2:88:fe:14:
ae:63:50:4e:19:5e:9d:4c:c1:0b:f4:2f:c0:23:92:96:c9:27:
b4:e3:f4:ee:b5:47:8b:2a:0c:03:11:b9:65:23:71:61:d9:54:
6c:b3:ae:51:e2:25:3b:e7:e1:72:69:97:a2:89:09:c7:9d:34:
24:90:a7:66:b8:1c:fb:1f:26:b0:a6:06:52:5b:78:32:32:6f:
97:0b:05:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:20:35 2025 by rpki-client