Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/W_l1A5rwSGTuKoFvdHBW-GZ32Ns.roa
File: W_l1A5rwSGTuKoFvdHBW-GZ32Ns.roa (raw, json)
Hash identifier: NAYBg2YOgPDSnsHVt1vP9x372UDZBXle0C5ODrN7rzg=
Subject key identifier: 5B:F9:75:03:9A:F0:48:64:EE:2A:81:6F:74:70:56:F8:66:77:D8:DB
Certificate issuer: /CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Certificate serial: 019638784EDBD5576E29D609E239889AC9A1
Authority key identifier: AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/W_l1A5rwSGTuKoFvdHBW-GZ32Ns.roa
Signing time: Tue 15 Apr 2025 08:02:10 +0000
ROA not before: Tue 15 Apr 2025 08:02:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5430
IP address blocks: 62.104.0.0/16 maxlen: 16
62.104.10.0/23 maxlen: 23
62.104.12.0/22 maxlen: 22
62.104.16.0/24 maxlen: 24
62.104.17.0/24 maxlen: 24
62.104.18.0/24 maxlen: 24
62.104.20.0/23 maxlen: 24
62.104.45.0/24 maxlen: 24
62.104.46.0/23 maxlen: 23
62.104.48.0/23 maxlen: 23
62.104.50.0/24 maxlen: 24
62.104.56.0/24 maxlen: 24
62.104.66.0/23 maxlen: 23
62.104.95.0/24 maxlen: 24
62.104.96.0/21 maxlen: 22
62.104.104.0/22 maxlen: 22
62.104.164.0/22 maxlen: 22
62.104.164.0/24 maxlen: 24
62.104.168.0/22 maxlen: 22
62.104.172.0/23 maxlen: 23
62.104.174.0/24 maxlen: 24
62.104.175.0/24 maxlen: 24
62.104.176.0/22 maxlen: 22
89.58.120.0/21 maxlen: 21
194.97.0.0/18 maxlen: 18
194.97.46.0/23 maxlen: 24
194.97.58.0/24 maxlen: 24
194.97.96.0/19 maxlen: 19
194.97.96.0/24 maxlen: 24
194.97.102.0/24 maxlen: 24
194.97.118.0/24 maxlen: 24
194.97.119.0/24 maxlen: 24
194.97.120.0/23 maxlen: 23
194.97.122.0/24 maxlen: 24
194.97.160.0/19 maxlen: 19
194.97.164.0/22 maxlen: 22
195.4.0.0/17 maxlen: 17
195.4.16.0/22 maxlen: 22
195.4.16.0/24 maxlen: 24
195.4.27.0/24 maxlen: 24
195.4.70.0/24 maxlen: 24
195.4.71.0/24 maxlen: 24
195.4.104.0/22 maxlen: 22
195.4.176.0/21 maxlen: 24
195.4.176.0/24 maxlen: 24
195.4.178.0/23 maxlen: 23
195.4.216.0/21 maxlen: 21
195.4.224.0/19 maxlen: 19
2001:748::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 24 Apr 2025 07:49:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:78:4e:db:d5:57:6e:29:d6:09:e2:39:88:9a:c9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Validity
Not Before: Apr 15 08:02:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5bf975039af04864ee2a816f747056f86677d8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3c:0d:c3:81:7a:d6:9e:cf:28:b4:dc:4d:37:
23:00:29:95:f1:e0:81:90:60:b9:77:ff:89:99:8a:
32:45:bf:20:92:a9:90:d6:6f:e5:85:01:f4:1f:3b:
d0:54:63:69:94:ac:a7:b0:ea:38:8c:49:22:6e:f4:
fb:03:34:da:dd:39:c6:63:af:9b:95:06:8a:fb:a0:
01:a2:6a:0c:27:7e:5c:ed:02:43:d2:64:d9:f6:10:
39:0f:a1:45:00:f2:07:3f:f8:71:3e:52:64:74:92:
ab:ae:fa:d5:cd:f8:59:73:b6:3a:43:26:c1:65:b0:
c9:16:b8:da:67:bd:13:4e:7e:d8:d4:e4:1d:c9:f9:
7e:3c:51:02:75:f9:66:90:11:db:01:f1:14:bc:c2:
5f:c6:af:33:55:fe:e7:5e:0e:2b:88:70:44:a5:1c:
a4:29:c8:dc:64:59:59:13:40:86:65:e1:71:c8:90:
1d:75:c4:b9:72:79:ea:4d:d5:5a:80:1e:58:b2:4a:
a8:70:72:ba:f2:56:c1:59:ad:ea:af:bc:1d:2d:d3:
d0:c4:19:f1:7a:a8:2f:11:a9:28:13:13:25:e5:76:
75:1a:fe:0b:6e:cc:c0:40:db:db:d3:0e:46:a8:0f:
f5:76:4d:2a:27:ff:56:cd:cf:3b:51:28:fb:fe:6a:
62:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F9:75:03:9A:F0:48:64:EE:2A:81:6F:74:70:56:F8:66:77:D8:DB
X509v3 Authority Key Identifier:
keyid:AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/W_l1A5rwSGTuKoFvdHBW-GZ32Ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.104.0.0/16
89.58.120.0/21
194.97.0.0/18
194.97.96.0/19
194.97.160.0/19
195.4.0.0/17
195.4.176.0/21
195.4.216.0-195.4.255.255
IPv6:
2001:748::/32
Signature Algorithm: sha256WithRSAEncryption
3f:c1:5f:b5:89:45:ab:0f:be:25:d8:a9:c8:db:94:a4:94:a0:
a7:57:64:7d:98:23:63:f9:10:c4:08:9a:d7:a3:a5:b2:b3:f1:
95:98:44:2b:f4:f8:65:41:70:66:ce:08:8c:9f:0b:29:b0:61:
48:17:20:10:31:5a:1e:79:cc:9f:2c:a4:cf:e4:35:c8:2d:d5:
54:2f:e0:af:1a:c1:44:a0:b8:ec:53:49:d8:4e:42:f3:ac:ef:
fa:7e:93:d8:88:b2:a1:fd:ce:09:cb:ae:e4:e1:f7:74:23:f9:
d0:98:aa:0c:58:0d:60:71:d9:36:17:71:3a:7e:de:d9:35:27:
90:95:4b:97:82:4a:77:fa:39:0b:1d:3d:ad:92:05:c6:c9:ae:
6a:d2:4a:24:04:87:50:2f:3c:e7:5c:21:d7:fa:96:8a:29:62:
70:64:32:71:05:b4:7a:6e:3b:9e:07:68:d5:d3:73:68:53:e0:
1a:c8:7a:3f:3c:17:49:97:ba:b8:a1:12:b0:d6:9e:63:9c:5b:
a2:05:6b:ef:07:1b:bd:3f:89:9d:66:68:b6:2b:c8:56:76:ee:
dd:57:06:99:be:48:1a:cb:93:c9:3b:30:17:7d:6e:28:b9:f2:
75:28:03:31:e3:51:c6:d7:85:fe:73:c8:21:52:ca:23:53:1c:
40:d8:77:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:25:22 2025 by rpki-client