Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/G5vuQUNeiWJkM8pJ-Yk9G47rrjs.roa
File: G5vuQUNeiWJkM8pJ-Yk9G47rrjs.roa (raw, json)
Hash identifier: 2QobdsXUFxM5IBwS5LD8PfiTrdrJJPHOo7RgLmFkVbA=
Subject key identifier: 1B:9B:EE:41:43:5E:89:62:64:33:CA:49:F9:89:3D:1B:8E:EB:AE:3B
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0196AB928D609CA9CD10B9D81F25027389C0
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/G5vuQUNeiWJkM8pJ-Yk9G47rrjs.roa
Signing time: Wed 07 May 2025 16:27:10 +0000
ROA not before: Wed 07 May 2025 16:27:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401152
IP address blocks: 64.188.124.0/24 maxlen: 24
64.188.125.0/24 maxlen: 24
64.188.126.0/24 maxlen: 24
64.188.127.0/24 maxlen: 24
185.176.94.0/24 maxlen: 24
185.216.104.0/22 maxlen: 24
193.23.196.0/24 maxlen: 24
193.23.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 May 2025 19:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:92:8d:60:9c:a9:cd:10:b9:d8:1f:25:02:73:89:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 7 16:27:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b9bee41435e89626433ca49f9893d1b8eebae3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:35:ec:bd:ba:46:05:c9:9e:61:1e:19:15:8c:
54:f7:d4:36:1a:38:b9:60:3e:38:eb:0a:a8:70:5f:
fc:f5:c2:95:38:84:b5:d9:61:dc:fa:67:4a:5f:54:
c7:c7:be:a1:63:1c:d2:bd:a3:27:83:c3:78:e2:a1:
00:91:fd:ce:b1:f3:75:1b:e8:c1:8c:12:bf:63:58:
e2:76:65:ac:23:c8:95:ad:3f:c5:e4:fc:fa:b8:9e:
2a:34:41:43:4f:2b:52:69:69:65:cd:e0:e7:59:31:
48:99:69:6f:2b:f9:f8:bd:70:37:65:45:b3:1e:43:
a7:ae:bf:68:ae:83:c7:2f:63:09:b8:3d:42:d0:d5:
da:56:be:e6:0d:b3:20:76:64:b8:48:fc:ae:67:f0:
27:65:79:58:89:68:14:47:6f:91:79:68:0d:b9:7a:
fb:a9:b9:a4:cd:fe:77:99:7b:fb:41:2f:77:e6:b1:
9e:21:c3:b6:a4:e9:99:a7:2d:d6:55:4b:20:93:b6:
58:26:70:54:85:6a:0b:3c:59:94:97:b0:b4:c7:54:
00:3c:92:e0:86:26:87:7f:3d:6a:88:fc:e3:ac:42:
65:b1:ac:85:6d:af:50:d0:4f:ca:01:0b:05:3f:1d:
f3:00:9f:b2:bb:b3:ef:7d:27:ff:a0:6c:9f:59:20:
dd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9B:EE:41:43:5E:89:62:64:33:CA:49:F9:89:3D:1B:8E:EB:AE:3B
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/G5vuQUNeiWJkM8pJ-Yk9G47rrjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.188.124.0/22
185.176.94.0/24
185.216.104.0/22
193.23.196.0/24
193.23.199.0/24
Signature Algorithm: sha256WithRSAEncryption
47:1b:5b:4b:81:e2:5d:4e:7c:2c:1e:48:d9:b2:5e:36:96:cf:
07:33:c4:a5:d7:d1:fc:b5:ee:7d:8a:dd:fc:57:b8:5c:3a:7c:
e2:7d:11:ae:ec:6d:56:5c:f7:ac:3e:e6:88:d8:3d:02:8c:2c:
3c:68:b7:29:a7:49:11:41:c5:21:a1:cc:5a:07:af:a4:5d:2b:
6c:5e:69:9e:3f:23:b3:7e:c0:91:a1:c2:b1:7e:f8:1c:d2:04:
5d:ec:34:96:89:21:5a:89:b4:02:37:ef:2b:fc:67:a6:c6:80:
22:a0:39:08:7d:00:8f:69:f7:4b:47:47:cb:73:97:4f:2f:f9:
e8:4b:a1:34:fa:32:0e:3b:b7:e1:01:8d:d1:04:e0:2c:ac:3d:
69:10:4f:cc:74:9d:c4:e9:f6:99:1d:1c:0f:25:77:c2:ce:6f:
2c:a3:fa:31:11:5d:cd:c6:b1:d4:ff:3f:60:47:ea:69:75:7d:
ac:54:3a:46:52:eb:1d:62:26:3e:81:1b:52:6b:79:38:c7:60:
79:2d:0b:65:32:63:9a:63:b2:24:f3:07:80:f6:30:a6:c8:e5:
61:93:95:70:c8:e9:06:a5:87:06:7c:f0:c5:3d:01:bb:d5:a5:
c3:41:e6:a4:9a:54:aa:86:75:30:9c:47:c3:1c:10:2d:6a:c1:
4d:65:71:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:59:33 2025 by rpki-client