Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Y_Yp_gsZLDTTAaq7ne8zhCQzpPI.roa
File: Y_Yp_gsZLDTTAaq7ne8zhCQzpPI.roa (raw, json)
Hash identifier: wT06VlFVREO46uaoaHzlJpE9vSWZZA4+tASOaEyqUgI=
Subject key identifier: 63:F6:29:FE:0B:19:2C:34:D3:01:AA:BB:9D:EF:33:84:24:33:A4:F2
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019841DA0A7DEA8CA5519D04E23AB4A569FB
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Y_Yp_gsZLDTTAaq7ne8zhCQzpPI.roa
Signing time: Fri 25 Jul 2025 13:51:05 +0000
ROA not before: Fri 25 Jul 2025 13:51:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48147
IP address blocks: 62.60.162.0/24 maxlen: 24
62.60.190.0/23 maxlen: 24
62.60.191.0/24 maxlen: 24
62.60.196.0/23 maxlen: 24
62.60.199.0/24 maxlen: 24
62.60.222.0/23 maxlen: 24
62.60.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Jul 2025 10:10:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:da:0a:7d:ea:8c:a5:51:9d:04:e2:3a:b4:a5:69:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jul 25 13:51:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63f629fe0b192c34d301aabb9def33842433a4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a7:57:0f:0b:10:06:3f:01:bb:2e:ec:b4:e4:
b5:dd:30:ab:c9:c8:70:78:47:7c:d8:56:f5:5e:49:
db:82:92:b8:16:7a:21:ca:71:93:b4:d1:49:d7:b5:
a5:61:74:f7:e2:83:a4:7a:90:78:1e:8f:4d:6f:8e:
8b:8d:9e:4f:b0:76:1a:ab:64:ce:fe:a8:eb:b6:9a:
e7:16:a0:85:47:23:22:cd:a4:9a:48:33:0e:c5:08:
8d:52:26:c5:95:22:74:95:60:7a:42:ac:e9:e9:42:
28:38:06:68:45:52:10:a6:6d:5a:dd:e3:84:ba:3b:
f8:cb:3b:d6:65:3c:23:2f:83:40:a9:e5:99:69:46:
e8:48:b9:d1:04:79:64:7b:14:f7:cf:f4:46:52:2c:
8e:7b:8c:44:2e:40:d9:af:60:54:07:e6:2c:d8:af:
70:ff:e5:a4:f1:2b:89:18:89:85:20:b0:6f:c4:f0:
42:59:da:ab:9b:1a:ee:b0:5b:57:19:93:86:a7:89:
d9:1d:c0:64:ff:8a:0f:38:4b:7e:71:28:67:73:bf:
03:07:de:b1:ce:42:a1:ea:e9:ca:fd:54:75:5f:2a:
49:12:77:fc:d2:2b:2b:ac:e2:69:19:4c:88:b1:82:
10:8b:28:9c:ce:74:8c:3a:a1:c4:cc:45:cd:34:5c:
06:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F6:29:FE:0B:19:2C:34:D3:01:AA:BB:9D:EF:33:84:24:33:A4:F2
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Y_Yp_gsZLDTTAaq7ne8zhCQzpPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.162.0/24
62.60.190.0/23
62.60.196.0/23
62.60.199.0/24
62.60.222.0/23
Signature Algorithm: sha256WithRSAEncryption
02:4d:bc:65:97:76:6f:11:0b:4e:3c:15:cb:83:75:f0:74:06:
5b:6a:e4:92:f5:a1:db:f4:ee:4c:99:2e:de:ca:b3:02:f8:b4:
6c:c2:83:57:70:9d:81:5b:09:0f:10:80:30:32:15:8b:15:3e:
2a:9a:e4:79:b6:5a:5b:01:54:79:79:24:c2:f7:37:69:8c:54:
c8:dd:aa:68:d4:f9:0a:58:08:a2:44:48:d4:f3:65:13:e3:23:
16:bd:df:f5:be:6f:72:73:c5:80:54:f1:99:87:38:1a:e0:0a:
5c:fa:ec:fd:71:55:45:d6:ed:e1:b1:7e:00:02:15:98:69:3f:
bf:95:53:ae:63:ae:0b:74:df:9f:00:8f:40:fd:9a:38:ce:07:
8d:b9:81:48:31:84:21:7d:46:1e:67:2b:0c:d5:ce:48:2f:59:
6e:30:a9:fc:03:f3:a4:e9:0e:6c:f9:4f:4f:1c:47:77:a0:a2:
a5:1e:d7:4f:e1:f0:01:bb:5f:09:e3:e2:f6:b9:86:43:14:e1:
76:14:20:17:31:c7:1a:d6:38:ac:a9:04:14:e6:f6:56:37:e6:
25:7b:e9:7c:6c:b6:60:63:b7:86:fe:d7:d2:88:39:fb:a3:60:
b2:5b:bf:f4:8b:ef:5e:17:bb:31:b7:f2:b4:ba:e0:9f:47:e6:
42:ae:6f:e4
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZhB2gp96oylUZ0E4jq0pWn7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjUwNzI1MTM1MTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2M2Y2MjlmZTBiMTkyYzM0ZDMwMWFhYmI5ZGVmMzM4NDI0MzNhNGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAradXDwsQBj8Buy7stOS13TCrychw
eEd82Fb1XknbgpK4FnohynGTtNFJ17WlYXT34oOkepB4Ho9Nb46LjZ5PsHYaq2TO
/qjrtprnFqCFRyMizaSaSDMOxQiNUibFlSJ0lWB6Qqzp6UIoOAZoRVIQpm1a3eOE
ujv4yzvWZTwjL4NAqeWZaUboSLnRBHlkexT3z/RGUiyOe4xELkDZr2BUB+Ys2K9w
/+Wk8SuJGImFILBvxPBCWdqrmxrusFtXGZOGp4nZHcBk/4oPOEt+cShnc78DB96x
zkKh6unK/VR1XypJEnf80isrrOJpGUyIsYIQiyicznSMOqHEzEXNNFwG7QIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFGP2Kf4LGSw00wGqu53vM4QkM6TyMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvWV9ZcF9nc1pMRFRUQWFxN25lOHpoQ1F6cFBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAPjyiAwQB
Pjy+AwQBPjzEAwQAPjzHAwQBPjzeMA0GCSqGSIb3DQEBCwUAA4IBAQACTbxll3Zv
EQtOPBXLg3XwdAZbauSS9aHb9O5MmS7eyrMC+LRswoNXcJ2BWwkPEIAwMhWLFT4q
muR5tlpbAVR5eSTC9zdpjFTI3apo1PkKWAiiREjU82UT4yMWvd/1vm9yc8WAVPGZ
hzga4Apc+uz9cVVF1u3hsX4AAhWYaT+/lVOuY64LdN+fAI9A/Zo4zgeNuYFIMYQh
fUYeZysM1c5IL1luMKn8A/Ok6Q5s+U9PHEd3oKKlHtdP4fABu18J4+L2uYZDFOF2
FCAXMcca1jisqQQU5vZWN+Yle+l8bLZgY7eG/tfSiDn7o2CyW7/0i+9eF7sxt/K0
uuCfR+ZCrm/k
-----END CERTIFICATE-----
Generated at Sat Jul 26 15:00:25 2025 by rpki-client