Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/IxGDC-Lyy-HFwUGLy-hPLfg6orE.roa
File: IxGDC-Lyy-HFwUGLy-hPLfg6orE.roa (raw, json)
Hash identifier: vDOuk0yRB17bGF28YiKI9hKJ74YG8Xe6S9p18ibCURI=
Subject key identifier: 23:11:83:0B:E2:F2:CB:E1:C5:C1:41:8B:CB:E8:4F:2D:F8:3A:A2:B1
Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Certificate serial: 018E0D5BC40768A0A5D222EACF7D7BD5BCEA
Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/IxGDC-Lyy-HFwUGLy-hPLfg6orE.roa
Signing time: Tue 05 Mar 2024 06:45:01 +0000
ROA not before: Tue 05 Mar 2024 06:45:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57497
IP address blocks: 5.63.8.0/24 maxlen: 24
5.63.9.0/24 maxlen: 24
5.63.10.0/23 maxlen: 23
5.63.10.0/24 maxlen: 24
5.63.11.0/24 maxlen: 24
5.63.12.0/24 maxlen: 24
5.63.13.0/24 maxlen: 24
5.63.14.0/23 maxlen: 23
5.63.14.0/24 maxlen: 24
45.135.240.0/24 maxlen: 24
45.135.241.0/24 maxlen: 24
45.135.242.0/24 maxlen: 24
45.135.243.0/24 maxlen: 24
158.58.184.0/22 maxlen: 22
158.58.184.0/24 maxlen: 24
158.58.185.0/24 maxlen: 24
158.58.186.0/24 maxlen: 24
158.58.187.0/24 maxlen: 24
158.58.188.0/23 maxlen: 23
158.58.188.0/24 maxlen: 24
158.58.189.0/24 maxlen: 24
158.58.190.0/23 maxlen: 23
158.58.190.0/24 maxlen: 24
158.58.191.0/24 maxlen: 24
185.2.12.0/22 maxlen: 22
185.2.12.0/23 maxlen: 24
185.2.14.0/23 maxlen: 24
185.179.90.0/24 maxlen: 24
185.229.204.0/24 maxlen: 24
194.62.17.0/24 maxlen: 24
195.226.223.0/24 maxlen: 24
2a01:4ac0::/48 maxlen: 48
2a01:4ac0:1::/48 maxlen: 48
2a01:4ac0:2::/48 maxlen: 48
2a01:4ac0:3::/48 maxlen: 48
2a01:4ac0:4::/48 maxlen: 48
2a01:4ac0:5::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 04 May 2024 08:52:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0d:5b:c4:07:68:a0:a5:d2:22:ea:cf:7d:7b:d5:bc:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Validity
Not Before: Mar 5 06:45:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2311830be2f2cbe1c5c1418bcbe84f2df83aa2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bb:31:46:e2:b5:eb:4f:17:2d:9a:11:1c:47:
9e:46:48:dc:f7:2b:4a:07:cf:2d:fd:d7:a3:d5:2d:
95:00:8e:29:6c:b2:80:af:dd:29:ae:3d:52:f9:4e:
7c:f5:b9:29:66:41:af:7e:09:f8:1b:3e:53:27:70:
a2:a2:64:32:9a:af:7f:d3:af:05:cb:99:16:25:4c:
f4:3a:95:ff:b2:40:5c:1c:a4:c0:50:d9:4c:15:29:
f2:72:85:d0:a2:6c:95:00:5a:dd:a8:23:d6:d4:c7:
e4:2e:04:4c:dd:a1:c0:6d:35:62:c6:da:98:b0:0e:
e4:f7:d8:4d:32:9c:36:be:32:2b:23:ce:91:3c:cd:
85:11:48:45:7a:56:c4:87:a2:3c:35:16:ae:e5:95:
29:60:45:5b:c4:50:ec:fd:4f:4a:7f:5b:cf:cd:d4:
ed:36:ba:a5:11:29:d1:95:b9:81:ce:99:8b:b4:9c:
d6:66:4c:26:ff:65:76:c0:aa:7a:d7:82:bb:7a:5c:
4d:f4:58:90:8a:77:36:81:d2:ce:e8:ec:4f:e3:34:
ca:25:ee:9b:26:f6:e5:98:e4:2a:99:6e:9e:7b:a5:
49:87:eb:7b:8f:a2:5f:74:f1:65:08:d6:1f:00:aa:
48:45:29:e5:10:1a:b8:1c:de:fe:3d:17:62:6a:2d:
57:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:11:83:0B:E2:F2:CB:E1:C5:C1:41:8B:CB:E8:4F:2D:F8:3A:A2:B1
X509v3 Authority Key Identifier:
keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/IxGDC-Lyy-HFwUGLy-hPLfg6orE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.8.0/21
45.135.240.0/22
158.58.184.0/21
185.2.12.0/22
185.179.90.0/24
185.229.204.0/24
194.62.17.0/24
195.226.223.0/24
IPv6:
2a01:4ac0::-2a01:4ac0:5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
44:48:14:96:8d:33:70:ec:fd:ba:8b:80:67:86:cb:6c:be:e4:
37:c3:60:d3:95:f5:bc:95:d6:2a:d6:26:27:f3:e7:94:03:e2:
82:b9:1c:ab:5c:a1:fe:a6:f5:c3:4f:35:54:b4:7c:ba:fd:d0:
b8:c5:25:91:c7:a0:79:46:cf:8a:c9:a1:20:2f:e6:3c:41:bf:
d0:5f:66:d6:16:eb:38:97:1a:21:f9:f6:07:60:54:e5:33:eb:
13:61:e6:ca:a0:ee:c7:f2:b9:78:96:0e:4e:4e:1a:c9:8d:26:
9f:9c:73:d1:3c:c1:f9:5d:05:d9:6c:52:b5:3a:11:c4:43:c3:
53:c3:b9:07:8b:38:51:3b:5e:cd:6d:ff:02:7c:a7:f6:06:e7:
b9:a5:97:1b:69:41:3f:c4:60:08:7a:0e:0c:52:46:75:ba:e5:
5a:32:92:3f:ae:3b:96:fc:6e:07:7e:3f:44:bd:d4:54:5c:a7:
1a:fe:fb:2b:cf:f0:a4:ca:a1:d2:74:19:d2:1d:cd:00:0b:6c:
09:b4:c0:29:8b:9d:7b:5a:69:10:30:c9:94:5c:8e:ad:4a:6c:
49:1d:44:51:0e:f8:9c:d4:dd:04:de:95:53:fc:c2:f3:43:52:
18:ec:85:25:64:8a:06:fb:fd:9b:8d:10:e0:de:f2:7b:e4:1b:
2b:69:c7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:28:57 2025 by rpki-client