Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/UbV5AUr2ixGimdWas_X9rEbFnf8.roa
File: UbV5AUr2ixGimdWas_X9rEbFnf8.roa (raw, json)
Hash identifier: UXdneVGEjuIIf3qdmzH9EbXTI/oGzeQttlpREBeR/1c=
Subject key identifier: 51:B5:79:01:4A:F6:8B:11:A2:99:D5:9A:B3:F5:FD:AC:46:C5:9D:FF
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 019579E3FEAFF01BA87153AC1550ED899D8D
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/UbV5AUr2ixGimdWas_X9rEbFnf8.roa
Signing time: Sun 09 Mar 2025 07:52:19 +0000
ROA not before: Sun 09 Mar 2025 07:52:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44217
IP address blocks: 62.201.192.0/18 maxlen: 18
62.201.192.0/23 maxlen: 23
62.201.193.0/24 maxlen: 24
62.201.194.0/24 maxlen: 24
62.201.195.0/24 maxlen: 24
62.201.196.0/24 maxlen: 24
62.201.197.0/24 maxlen: 24
62.201.198.0/24 maxlen: 24
62.201.200.0/24 maxlen: 24
62.201.201.0/24 maxlen: 24
62.201.202.0/24 maxlen: 24
62.201.203.0/24 maxlen: 24
62.201.204.0/23 maxlen: 23
62.201.205.0/24 maxlen: 24
62.201.206.0/24 maxlen: 24
62.201.207.0/24 maxlen: 24
62.201.208.0/22 maxlen: 22
62.201.208.0/24 maxlen: 24
62.201.209.0/24 maxlen: 24
62.201.210.0/24 maxlen: 24
62.201.211.0/24 maxlen: 24
62.201.212.0/22 maxlen: 22
62.201.212.0/24 maxlen: 24
62.201.213.0/24 maxlen: 24
62.201.214.0/24 maxlen: 24
62.201.215.0/24 maxlen: 24
62.201.216.0/24 maxlen: 24
62.201.217.0/24 maxlen: 24
62.201.218.0/24 maxlen: 24
62.201.219.0/24 maxlen: 24
62.201.220.0/22 maxlen: 22
62.201.220.0/24 maxlen: 24
62.201.221.0/24 maxlen: 24
62.201.222.0/24 maxlen: 24
62.201.223.0/24 maxlen: 24
62.201.224.0/22 maxlen: 22
62.201.224.0/24 maxlen: 24
62.201.225.0/24 maxlen: 24
62.201.226.0/24 maxlen: 24
62.201.227.0/24 maxlen: 24
62.201.228.0/22 maxlen: 22
62.201.228.0/24 maxlen: 24
62.201.229.0/24 maxlen: 24
62.201.230.0/24 maxlen: 24
62.201.231.0/24 maxlen: 24
62.201.232.0/22 maxlen: 22
62.201.232.0/24 maxlen: 24
62.201.233.0/24 maxlen: 24
62.201.234.0/24 maxlen: 24
62.201.235.0/24 maxlen: 24
62.201.236.0/24 maxlen: 24
62.201.238.0/24 maxlen: 24
62.201.239.0/24 maxlen: 24
62.201.240.0/21 maxlen: 21
62.201.240.0/24 maxlen: 24
62.201.241.0/24 maxlen: 24
62.201.242.0/23 maxlen: 24
62.201.242.0/24 maxlen: 24
62.201.243.0/24 maxlen: 24
62.201.244.0/23 maxlen: 24
62.201.246.0/24 maxlen: 24
62.201.247.0/24 maxlen: 24
62.201.248.0/24 maxlen: 24
62.201.249.0/24 maxlen: 24
62.201.250.0/24 maxlen: 24
62.201.251.0/24 maxlen: 24
62.201.252.0/22 maxlen: 24
62.201.253.0/24 maxlen: 24
62.201.254.0/23 maxlen: 24
89.33.66.0/23 maxlen: 23
185.1.98.0/24 maxlen: 24
2a02:b60::/32 maxlen: 32
2a02:b60:0:f::/64 maxlen: 64
2a02:b60:20::/48 maxlen: 48
2a02:b60:30::/48 maxlen: 48
2a02:b60:31::/48 maxlen: 48
2a02:b60:32::/48 maxlen: 48
2a02:b60:33::/48 maxlen: 48
2a02:b60:34::/48 maxlen: 48
2a02:b60:35::/48 maxlen: 48
2a02:b60:42::/48 maxlen: 48
2a02:b60:45::/48 maxlen: 48
2a02:b60:2000::/35 maxlen: 35
2a02:b60:2000::/48 maxlen: 48
2a02:b60:2000:3::/64 maxlen: 64
2a02:b60:2010::/48 maxlen: 48
2a02:b60:4000::/34 maxlen: 34
2a02:b60:4000::/48 maxlen: 48
2a02:b60:4005::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 09 Mar 2025 07:54:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:e3:fe:af:f0:1b:a8:71:53:ac:15:50:ed:89:9d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Mar 9 07:52:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51b579014af68b11a299d59ab3f5fdac46c59dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:42:07:bc:44:23:62:c1:95:97:33:3d:b7:6a:
6d:26:ef:7f:a9:4a:aa:9c:c4:8c:d1:6c:be:e5:8f:
ef:11:da:0a:df:9b:5e:1f:9e:ea:be:ba:1d:44:01:
02:e5:14:c9:db:63:34:d6:a9:95:bd:74:15:1b:ee:
ca:ec:ca:5b:ea:56:ce:9e:ab:3e:0c:1b:40:38:e5:
64:78:ac:40:c8:00:74:64:a6:95:a0:a4:bd:a5:d5:
96:17:3e:81:ad:4b:a7:2d:42:7d:ef:06:97:5e:51:
25:7c:e2:b1:d2:02:47:52:ec:34:0a:6f:69:6c:8a:
c8:3b:53:1f:31:ed:92:0e:29:22:41:13:b5:7f:79:
bc:12:f5:34:68:19:6b:95:cf:0e:9f:75:96:c4:45:
15:76:8e:43:f8:1f:0e:06:df:57:68:ee:87:6a:06:
23:1a:19:bc:73:de:7b:ab:2e:64:2a:49:73:e3:f7:
4d:43:ac:4a:96:8e:ce:a5:48:4e:c9:ba:ec:e5:e4:
64:f6:b5:ab:1a:d1:62:c0:3b:c1:0e:c8:f2:a0:dc:
41:e9:67:28:9a:7d:05:a0:da:ab:89:22:4b:b9:82:
55:54:72:92:45:d7:a4:7c:20:db:1c:86:92:b2:72:
07:a4:bd:7d:2b:eb:03:49:a8:89:6f:50:02:ab:48:
ae:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B5:79:01:4A:F6:8B:11:A2:99:D5:9A:B3:F5:FD:AC:46:C5:9D:FF
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/UbV5AUr2ixGimdWas_X9rEbFnf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.192.0/18
89.33.66.0/23
185.1.98.0/24
IPv6:
2a02:b60::/32
Signature Algorithm: sha256WithRSAEncryption
61:c9:c8:29:7f:0c:ce:af:f9:ee:c5:1c:c0:b0:86:2a:5d:2a:
ea:b8:9f:f0:af:68:61:d2:65:8c:7f:1f:8c:ca:c4:6c:68:cc:
0d:2e:2d:c5:0e:97:74:3b:39:c9:6c:17:c3:42:a7:64:63:74:
1c:f3:c2:8c:ce:0c:a4:64:11:de:55:84:49:8f:9e:34:9b:86:
0d:ac:d3:1a:a0:c9:a3:9f:9a:b7:16:2f:44:b7:6e:80:ea:0b:
8b:e6:9c:85:d4:b2:20:21:1b:cc:9a:9f:b8:4a:06:9a:a3:57:
f5:92:23:e1:86:47:01:86:2d:43:12:ae:69:63:48:d3:03:e2:
12:11:9b:67:a0:1c:79:e5:23:7f:5d:db:53:86:c8:15:e8:e3:
cb:76:a4:91:65:1e:18:50:27:f9:65:ed:c9:56:62:fc:10:1d:
7e:f3:45:8c:5b:6a:29:17:29:e0:cc:7b:a0:8a:09:3a:ff:28:
67:2b:f3:96:d6:fa:2f:09:19:51:27:95:b4:6c:38:a4:3e:d2:
b4:5f:fb:ce:7e:29:f1:fc:42:72:4d:31:8d:bf:ab:fe:c4:42:
db:b2:00:de:ad:92:d5:82:8d:a0:25:7c:52:60:c1:17:6a:1f:
2c:bd:11:e2:0d:cc:33:d0:5d:47:18:9d:7d:31:17:d7:93:02:
33:47:09:97
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZV54/6v8BuocVOsFVDtiZ2NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OTJmZWRmNTljNjBkMzI1NGUzN2E5YzhlY2RlMTFjOWJh
MTI4MmEwHhcNMjUwMzA5MDc1MjE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWI1NzkwMTRhZjY4YjExYTI5OWQ1OWFiM2Y1ZmRhYzQ2YzU5ZGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkIHvEQjYsGVlzM9t2ptJu9/qUqq
nMSM0Wy+5Y/vEdoK35teH57qvrodRAEC5RTJ22M01qmVvXQVG+7K7Mpb6lbOnqs+
DBtAOOVkeKxAyAB0ZKaVoKS9pdWWFz6BrUunLUJ97waXXlElfOKx0gJHUuw0Cm9p
bIrIO1MfMe2SDikiQRO1f3m8EvU0aBlrlc8On3WWxEUVdo5D+B8OBt9XaO6HagYj
Ghm8c957qy5kKklz4/dNQ6xKlo7OpUhOybrs5eRk9rWrGtFiwDvBDsjyoNxB6Wco
mn0FoNqriSJLuYJVVHKSRdekfCDbHIaSsnIHpL19K+sDSaiJb1ACq0iu7QIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFFG1eQFK9osRopnVmrP1/axGxZ3/MB8GA1UdIwQY
MBaAFDaS/t9Zxg0yVON6nI7N4RyboSgqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnBMLTMxbkdEVEpVNDNxY2pzM2hISnVoS0NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81YzVhZDAtZDJkYS00MGRiLTk1ZDEt
ZTdiZTVlMzBhZDJkLzEvVWJWNUFVcjJpeEdpbWRXYXNfWDlyRWJGbmY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi81YzVhZDAtZDJkYS00MGRiLTk1ZDEtZTdiZTVlMzBhZDJk
LzEvTnBMLTMxbkdEVEpVNDNxY2pzM2hISnVoS0NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQGPsnAAwQB
WSFCAwQAuQFiMA0EAgACMAcDBQAqAgtgMA0GCSqGSIb3DQEBCwUAA4IBAQBhycgp
fwzOr/nuxRzAsIYqXSrquJ/wr2hh0mWMfx+MysRsaMwNLi3FDpd0OznJbBfDQqdk
Y3Qc88KMzgykZBHeVYRJj540m4YNrNMaoMmjn5q3Fi9Et26A6guL5pyF1LIgIRvM
mp+4Sgaao1f1kiPhhkcBhi1DEq5pY0jTA+ISEZtnoBx55SN/XdtThsgV6OPLdqSR
ZR4YUCf5Ze3JVmL8EB1+80WMW2opFyngzHugigk6/yhnK/OW1vovCRlRJ5W0bDik
PtK0X/vOfinx/EJyTTGNv6v+xELbsgDerZLVgo2gJXxSYMEXah8svRHiDcwz0F1H
GJ19MRfXkwIzRwmX
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:39:21 2025 by rpki-client