Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/5gn9gj6LgWs4JeIoDITIEYC0zd8.roa
File: 5gn9gj6LgWs4JeIoDITIEYC0zd8.roa (raw, json)
Hash identifier: Xn1E6H7T+iHaXCVwTbbPjDcilMjAJVfPAkhCDNobZko=
Subject key identifier: E6:09:FD:82:3E:8B:81:6B:38:25:E2:28:0C:84:C8:11:80:B4:CD:DF
Certificate issuer: /CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Certificate serial: 019294EB75779DA067CDF6C7446A3308EC06
Authority key identifier: 49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/5gn9gj6LgWs4JeIoDITIEYC0zd8.roa
Signing time: Wed 16 Oct 2024 10:41:51 +0000
ROA not before: Wed 16 Oct 2024 10:41:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31693
IP address blocks: 62.244.76.0/24 maxlen: 24
62.244.77.0/24 maxlen: 24
62.244.82.0/23 maxlen: 23
62.244.104.0/22 maxlen: 22
62.244.120.0/22 maxlen: 22
164.138.56.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Nov 2024 10:40:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:94:eb:75:77:9d:a0:67:cd:f6:c7:44:6a:33:08:ec:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Validity
Not Before: Oct 16 10:41:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e609fd823e8b816b3825e2280c84c81180b4cddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fd:a1:8a:b6:a1:61:ca:8a:3b:16:77:08:f4:
63:71:78:a2:64:df:e3:ac:46:90:2e:91:50:af:0b:
4f:97:7d:0a:4b:55:02:de:32:49:e6:54:ae:5c:02:
fc:e9:0a:41:45:1a:b7:a0:7b:26:26:94:ec:2d:57:
b0:e9:f4:c9:10:8c:42:e7:8d:44:37:50:94:48:44:
d4:03:4a:1f:b8:4c:9b:19:90:be:1d:8d:3a:45:a8:
a7:d3:82:a7:7d:38:12:cc:7b:0f:42:da:c6:1b:12:
4e:f4:53:24:72:5b:c8:e0:2b:8c:96:14:23:59:89:
5e:c2:79:eb:df:97:f8:52:21:37:eb:94:05:a6:4b:
31:0f:c4:30:db:42:9d:16:20:3f:94:9a:af:b0:47:
3e:b9:ee:82:41:2d:d3:76:16:11:34:43:5d:d9:cd:
b9:3c:ae:ef:d6:05:5e:8a:f7:2b:73:85:3d:50:bd:
d9:d0:20:b8:7e:8c:45:a6:09:c7:01:2c:7d:eb:70:
c6:b9:89:09:89:41:e4:f3:db:a6:0c:ea:12:e7:4b:
5a:dc:0c:43:80:b3:8e:95:c4:8e:c4:11:c8:10:2e:
af:c5:75:0f:d2:96:ca:51:42:a4:41:a6:a7:53:1d:
9c:69:4e:e2:a7:60:c4:7a:7d:4d:fd:cd:17:11:f9:
35:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:09:FD:82:3E:8B:81:6B:38:25:E2:28:0C:84:C8:11:80:B4:CD:DF
X509v3 Authority Key Identifier:
keyid:49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/5gn9gj6LgWs4JeIoDITIEYC0zd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.244.76.0/23
62.244.82.0/23
62.244.104.0/22
62.244.120.0/22
164.138.56.0/21
Signature Algorithm: sha256WithRSAEncryption
4e:59:82:8d:b2:32:66:7d:eb:90:a7:f0:0b:35:c3:83:1b:56:
6e:70:b7:e2:09:0c:f7:1d:a1:ac:b2:af:86:66:13:6d:37:57:
8c:fd:95:12:b4:27:01:77:56:87:47:c6:58:c3:b2:df:b1:d6:
dc:8a:ce:f5:8a:20:f8:2f:99:41:67:bf:da:78:ab:44:71:b6:
4a:56:b8:31:5a:64:4e:77:31:d3:ca:88:ca:3d:b6:89:e7:15:
89:aa:ce:b6:80:42:e7:fb:03:c8:fa:bb:15:83:0c:bd:d8:9b:
0d:24:16:11:f4:34:94:64:6b:91:1c:31:ec:f6:0e:67:1c:b2:
03:52:34:f3:1b:bc:81:c8:26:c9:f5:f9:e5:a8:37:95:c3:ab:
f6:86:c9:fd:f4:39:80:9c:5a:9a:e6:14:06:d5:c2:af:a6:de:
19:52:e5:a4:0e:bf:88:ea:87:d8:1b:af:26:54:30:89:d9:dc:
10:05:ad:72:01:cf:5a:7b:96:b8:19:25:7a:d5:78:ed:da:11:
91:f1:8a:72:2c:89:78:ff:fb:04:13:e3:d6:70:a1:44:9a:3b:
cf:f2:a4:d8:71:db:92:e7:b7:07:c5:ca:cc:e8:2c:a6:3c:90:
e8:d1:1c:5a:81:6f:d6:aa:3d:26:a8:c8:ec:6c:6f:f7:aa:cb:
47:85:f8:8e
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZKU63V3naBnzfbHRGozCOwGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5M2EyZDQ4Mzc2MzMwYTU4MmZhZjNlMzAzMmVmN2IwYmNj
YTMzZTgwHhcNMjQxMDE2MTA0MTUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjA5ZmQ4MjNlOGI4MTZiMzgyNWUyMjgwYzg0YzgxMTgwYjRjZGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf2hirahYcqKOxZ3CPRjcXiiZN/j
rEaQLpFQrwtPl30KS1UC3jJJ5lSuXAL86QpBRRq3oHsmJpTsLVew6fTJEIxC541E
N1CUSETUA0ofuEybGZC+HY06Rain04KnfTgSzHsPQtrGGxJO9FMkclvI4CuMlhQj
WYlewnnr35f4UiE365QFpksxD8Qw20KdFiA/lJqvsEc+ue6CQS3TdhYRNENd2c25
PK7v1gVeivcrc4U9UL3Z0CC4foxFpgnHASx963DGuYkJiUHk89umDOoS50ta3AxD
gLOOlcSOxBHIEC6vxXUP0pbKUUKkQaanUx2caU7ip2DEen1N/c0XEfk1awIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFOYJ/YI+i4FrOCXiKAyEyBGAtM3fMB8GA1UdIwQY
MBaAFEk6LUg3YzClgvrz4wMu97C8yjPoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1RvdFNEZGpNS1dDLXZQakF5NzNzTHpLTS1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9kNzY1YTQtNTRlYi00MTBkLThmM2Qt
Njg5YmE0ZDMzYzRiLzEvNWduOWdqNkxnV3M0SmVJb0RJVElFWUMwemQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9kNzY1YTQtNTRlYi00MTBkLThmM2QtNjg5YmE0ZDMzYzRi
LzEvU1RvdFNEZGpNS1dDLXZQakF5NzNzTHpLTS1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBPvRMAwQB
PvRSAwQCPvRoAwQCPvR4AwQDpIo4MA0GCSqGSIb3DQEBCwUAA4IBAQBOWYKNsjJm
feuQp/ALNcODG1ZucLfiCQz3HaGssq+GZhNtN1eM/ZUStCcBd1aHR8ZYw7Lfsdbc
is71iiD4L5lBZ7/aeKtEcbZKVrgxWmROdzHTyojKPbaJ5xWJqs62gELn+wPI+rsV
gwy92JsNJBYR9DSUZGuRHDHs9g5nHLIDUjTzG7yByCbJ9fnlqDeVw6v2hsn99DmA
nFqa5hQG1cKvpt4ZUuWkDr+I6ofYG68mVDCJ2dwQBa1yAc9ae5a4GSV61Xjt2hGR
8YpyLIl4//sEE+PWcKFEmjvP8qTYcduS57cHxcrM6CymPJDo0RxagW/Wqj0mqMjs
bG/3qstHhfiO
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:44:53 2025 by rpki-client