Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/h40qRM7ybUoLKs3xHPMxTPdKHHs.roa
File: h40qRM7ybUoLKs3xHPMxTPdKHHs.roa (raw, json)
Hash identifier: x1iITdVuwLGBPdww5SBX/ZgvONgvk7hD9d88lTvw8v0=
Subject key identifier: 87:8D:2A:44:CE:F2:6D:4A:0B:2A:CD:F1:1C:F3:31:4C:F7:4A:1C:7B
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 01941FFA9B8B4F8060E1864D59E336174C36
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/h40qRM7ybUoLKs3xHPMxTPdKHHs.roa
Signing time: Wed 01 Jan 2025 03:48:24 +0000
ROA not before: Wed 01 Jan 2025 03:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41032
IP address blocks: 62.201.192.0/24 maxlen: 24
62.201.199.0/24 maxlen: 24
62.201.200.0/22 maxlen: 22
62.201.200.0/24 maxlen: 24
62.201.201.0/24 maxlen: 24
62.201.203.0/24 maxlen: 24
62.201.204.0/24 maxlen: 24
62.201.205.0/24 maxlen: 24
62.201.207.0/24 maxlen: 24
62.201.208.0/24 maxlen: 24
62.201.210.0/24 maxlen: 24
62.201.237.0/24 maxlen: 24
62.201.248.0/24 maxlen: 24
62.201.250.0/24 maxlen: 24
185.90.104.0/24 maxlen: 24
185.90.105.0/24 maxlen: 24
185.90.106.0/24 maxlen: 24
185.90.107.0/24 maxlen: 24
2a02:b60:2000::/35 maxlen: 35
2a02:b60:2000::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 15 Jan 2025 07:06:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9b:8b:4f:80:60:e1:86:4d:59:e3:36:17:4c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Jan 1 03:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=878d2a44cef26d4a0b2acdf11cf3314cf74a1c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9b:9c:4c:40:4a:54:8d:75:38:14:9b:58:a4:
36:7a:a9:5b:85:bb:f4:ba:68:50:e5:f4:26:e3:1c:
e3:ce:b6:c4:68:01:72:f8:32:2a:e8:95:5c:96:9b:
fb:e9:97:2b:08:b0:8a:88:dd:3b:a5:e2:a3:4a:81:
e4:1a:27:9f:fe:1a:c6:56:2e:5d:39:6b:91:64:a4:
62:91:f7:49:13:21:07:af:6a:d6:c4:3b:aa:e8:4d:
98:c3:46:c7:f9:9f:1a:e0:4e:c9:22:40:6b:ce:4e:
1c:3d:0a:3e:ec:d9:82:f0:6d:81:b4:a6:73:c8:d7:
35:ce:d0:77:f6:0e:5d:c6:03:1a:c3:ba:3b:30:cd:
a4:35:2e:ee:02:ba:c2:f9:f8:35:66:02:0b:7d:ed:
a1:6c:ec:6b:70:b6:cf:e4:32:aa:38:e5:80:c9:91:
f0:e8:fb:64:1b:db:5a:ee:b1:7d:11:41:02:e8:d3:
02:31:1b:db:55:4c:76:ec:d5:e6:3d:80:19:31:2c:
bd:01:ce:13:7e:9c:60:41:8e:64:a8:63:2b:e3:8d:
18:b0:6f:70:1d:18:8e:b7:e2:ce:c0:89:4f:6a:d1:
1f:10:3c:05:04:19:79:2c:8b:2d:10:55:c1:14:81:
4c:29:5f:47:03:7a:cf:86:4a:47:30:c6:46:58:83:
ef:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8D:2A:44:CE:F2:6D:4A:0B:2A:CD:F1:1C:F3:31:4C:F7:4A:1C:7B
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/h40qRM7ybUoLKs3xHPMxTPdKHHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.192.0/24
62.201.199.0-62.201.205.255
62.201.207.0-62.201.208.255
62.201.210.0/24
62.201.237.0/24
62.201.248.0/24
62.201.250.0/24
185.90.104.0/22
IPv6:
2a02:b60:2000::/35
Signature Algorithm: sha256WithRSAEncryption
17:4d:fd:8b:b6:1b:ad:77:b9:1d:22:1a:65:16:b1:e2:64:d9:
0f:b2:d4:42:85:d8:2c:fe:18:ff:ab:42:32:68:54:18:bb:4a:
1e:03:90:61:64:31:79:80:5f:d4:2a:1e:11:ad:7f:8c:dd:8f:
32:2d:10:40:01:c2:7e:65:cb:04:68:19:7f:da:cb:3a:9d:d3:
68:84:2b:4d:5e:81:f7:72:c4:01:ff:52:83:f1:ea:33:c9:b7:
fe:25:44:0e:57:09:72:dc:c8:9f:0a:9e:a1:92:72:55:03:da:
49:e7:bf:bb:c3:1c:da:34:a4:4d:fe:ee:86:37:e3:8e:6d:86:
d1:3a:e8:6c:95:79:0b:ce:8f:10:ab:4a:a1:4c:55:82:84:f3:
e3:03:1d:db:5d:8f:d0:f9:5f:aa:e6:4c:4b:37:34:21:46:81:
97:75:27:9b:17:b7:b7:40:6a:93:48:18:35:50:c5:12:36:5a:
ce:16:bd:26:77:e3:ef:fe:84:16:76:53:f0:c5:12:65:d3:2f:
be:ec:be:cb:c8:cb:ad:d0:c6:07:0b:2c:ca:ac:77:dd:08:61:
33:93:24:3f:27:0a:fa:40:a9:80:97:4a:ca:a0:54:b1:07:d5:
3b:01:f5:e3:6f:be:d6:30:87:86:c8:2a:14:a0:7d:82:0f:06:
5c:19:78:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:41:32 2025 by rpki-client