Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/Gcy0xx2kkSJlmmXDx4M88LG81WU.roa
File: Gcy0xx2kkSJlmmXDx4M88LG81WU.roa (raw, json)
Hash identifier: stipOyAzbJINdaPnRAWmXNXk36Velu45SLDxt5PeYZw=
Subject key identifier: 19:CC:B4:C7:1D:A4:91:22:65:9A:65:C3:C7:83:3C:F0:B1:BC:D5:65
Certificate issuer: /CN=22877298dae5d5a3beabca16e92d1a141e948627
Certificate serial: 0195A878476BE6BF178D8BDCBDCE70CDF108
Authority key identifier: 22:87:72:98:DA:E5:D5:A3:BE:AB:CA:16:E9:2D:1A:14:1E:94:86:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/Gcy0xx2kkSJlmmXDx4M88LG81WU.roa
Signing time: Tue 18 Mar 2025 08:56:49 +0000
ROA not before: Tue 18 Mar 2025 08:56:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62597
IP address blocks: 185.103.32.0/22 maxlen: 24
185.103.32.0/24 maxlen: 24
185.103.33.0/24 maxlen: 24
185.103.34.0/24 maxlen: 24
185.103.35.0/24 maxlen: 24
2a00:edc0:100::/44 maxlen: 48
2a00:edc0:107::/48 maxlen: 48
2a00:edc0:10f::/48 maxlen: 48
2a00:edc0:136::/48 maxlen: 48
2a00:edc0:137::/48 maxlen: 48
2a00:edc0:1f0::/44 maxlen: 48
2a00:edc0:469::/48 maxlen: 48
2a00:edc0:1000::/48 maxlen: 48
2a00:edc0:1001::/48 maxlen: 48
2a00:edc0:1002::/48 maxlen: 48
2a00:edc0:1003::/48 maxlen: 48
2a00:edc0:1004::/48 maxlen: 48
2a00:edc0:1005::/48 maxlen: 48
2a00:edc0:1010::/48 maxlen: 48
2a00:edc0:6000::/48 maxlen: 48
2a00:edc0:6259::/48 maxlen: 48
2a00:edc0:7ffe::/48 maxlen: 48
2a00:edc0:7fff::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 18 Mar 2025 09:57:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a8:78:47:6b:e6:bf:17:8d:8b:dc:bd:ce:70:cd:f1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22877298dae5d5a3beabca16e92d1a141e948627
Validity
Not Before: Mar 18 08:56:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19ccb4c71da49122659a65c3c7833cf0b1bcd565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f6:31:50:15:42:45:f7:91:e5:98:e4:a0:c7:
9c:27:91:33:38:8e:f1:66:cc:62:a2:ff:ce:42:6a:
40:c4:ab:5b:d7:72:4a:30:c1:15:9c:c6:27:10:df:
b1:30:47:95:95:ef:4c:e9:da:fe:db:af:52:cd:96:
58:48:d5:09:80:d1:81:c7:17:00:39:6a:a9:a4:25:
42:e9:e6:51:80:d6:77:b5:f9:1b:d0:55:98:6b:52:
cd:b4:f7:1f:66:dd:26:40:16:4c:3b:92:bf:38:e5:
c6:8e:5d:72:17:1c:62:64:da:ec:22:10:f3:f2:c7:
84:1e:27:f2:5d:77:4c:3f:56:38:62:e9:b4:eb:01:
52:c6:c1:48:6a:c2:05:46:97:fb:2c:80:27:50:23:
73:06:cb:ae:39:a7:9f:ae:cc:15:72:7b:54:69:ab:
d9:d4:87:79:31:2f:35:9d:86:ad:f7:8f:bb:a0:85:
6e:83:51:a2:68:a5:51:62:72:c8:f1:bf:41:77:4e:
c6:fe:14:1e:3d:fd:bb:cf:50:c1:e2:1d:3d:bc:83:
e9:d4:3a:82:92:7f:14:f9:d4:40:a1:67:06:73:cb:
db:41:85:30:7a:ba:95:dd:fe:df:c5:66:a7:0f:22:
c8:af:51:77:1a:d3:76:77:a1:0e:d4:ff:6f:80:3a:
5b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CC:B4:C7:1D:A4:91:22:65:9A:65:C3:C7:83:3C:F0:B1:BC:D5:65
X509v3 Authority Key Identifier:
keyid:22:87:72:98:DA:E5:D5:A3:BE:AB:CA:16:E9:2D:1A:14:1E:94:86:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/Gcy0xx2kkSJlmmXDx4M88LG81WU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.32.0/22
IPv6:
2a00:edc0:100::/44
2a00:edc0:136::/47
2a00:edc0:1f0::/44
2a00:edc0:469::/48
2a00:edc0:1000::-2a00:edc0:1005:ffff:ffff:ffff:ffff:ffff
2a00:edc0:1010::/48
2a00:edc0:6000::/48
2a00:edc0:6259::/48
2a00:edc0:7ffe::/47
Signature Algorithm: sha256WithRSAEncryption
0c:87:bb:73:d7:72:b1:58:13:ba:a7:e6:10:86:7a:d2:ba:9c:
96:89:c1:a7:33:d8:db:3d:eb:5c:06:4a:fb:88:8d:48:4d:bb:
99:7f:bc:ef:7b:aa:0c:a1:e1:bf:86:dc:91:5d:f1:44:5d:ae:
2c:1c:fe:6e:16:d8:48:b1:50:bf:88:ac:54:30:75:12:87:33:
54:de:2d:4f:7f:fd:e7:80:13:68:0d:c4:1e:ec:cb:98:2b:08:
1e:b9:85:6c:24:08:34:56:13:bf:91:91:39:f0:d0:10:91:1e:
ca:d5:09:85:9d:7d:90:8c:98:fb:b5:30:fe:1b:fb:68:91:1a:
ab:a8:1d:46:f9:7e:e9:72:b5:d1:e9:64:2a:51:2c:77:83:12:
6b:e5:ca:fa:61:8b:45:27:d3:ee:85:35:26:be:88:25:5f:5b:
a2:6d:8b:de:6e:09:15:54:3f:00:a5:80:f5:90:a3:36:13:a8:
f9:47:0a:8b:40:1b:fc:d2:ec:1f:95:dc:c6:66:8a:8c:30:de:
c2:f2:e3:43:bb:d2:d6:65:aa:c2:a7:83:6f:90:7f:5e:12:94:
3a:35:f9:05:40:55:c4:be:5b:64:c3:2e:cf:f2:26:98:06:72:
c0:a7:bf:80:93:7a:27:e2:46:c9:9d:7f:10:1c:a4:34:e1:35:
14:43:31:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:47:27 2025 by rpki-client