Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/3FuIwQnN90PcEFUvDvyJLJDBmGg.roa
File: 3FuIwQnN90PcEFUvDvyJLJDBmGg.roa (raw, json)
Hash identifier: lIf/pJwS7b4hq67PI5pDbRU6War4xqgoWhI289hQyDY=
Subject key identifier: DC:5B:88:C1:09:CD:F7:43:DC:10:55:2F:0E:FC:89:2C:90:C1:98:68
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 018D2FA224CCCAD93A8BF75DD0E16C8FB6C8
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/3FuIwQnN90PcEFUvDvyJLJDBmGg.roa
Signing time: Mon 22 Jan 2024 05:26:11 +0000
ROA not before: Mon 22 Jan 2024 05:26:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41032
IP address blocks: 62.201.192.0/24 maxlen: 24
62.201.196.0/24 maxlen: 24
62.201.199.0/24 maxlen: 24
62.201.200.0/24 maxlen: 24
62.201.201.0/24 maxlen: 24
62.201.202.0/24 maxlen: 24
62.201.203.0/24 maxlen: 24
62.201.204.0/24 maxlen: 24
62.201.205.0/24 maxlen: 24
62.201.207.0/24 maxlen: 24
62.201.208.0/24 maxlen: 24
62.201.210.0/24 maxlen: 24
62.201.211.0/24 maxlen: 24
62.201.216.0/24 maxlen: 24
62.201.237.0/24 maxlen: 24
62.201.248.0/24 maxlen: 24
62.201.250.0/24 maxlen: 24
185.90.104.0/24 maxlen: 24
185.90.105.0/24 maxlen: 24
185.90.106.0/24 maxlen: 24
185.90.107.0/24 maxlen: 24
2a02:b60:2000::/35 maxlen: 35
2a02:b60:2000::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 28 Jan 2024 10:36:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:2f:a2:24:cc:ca:d9:3a:8b:f7:5d:d0:e1:6c:8f:b6:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Jan 22 05:26:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc5b88c109cdf743dc10552f0efc892c90c19868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:70:52:5e:01:c5:16:11:1f:11:50:d1:87:c8:
54:19:4a:0c:4b:0f:f0:9c:6a:75:ac:1a:2b:2f:ba:
e4:4c:05:df:5c:a8:b0:70:4f:ef:5c:87:83:3e:94:
f8:16:3c:00:1f:b3:3d:4d:75:4e:43:b4:2d:88:50:
ad:a1:88:a9:30:f0:b6:96:a7:a7:82:c6:37:5b:17:
c9:56:32:1b:42:57:8b:25:db:88:2e:68:62:a9:4a:
13:a4:f0:c8:b0:3d:1a:8f:09:ee:3b:1d:97:9e:66:
5a:f9:67:88:56:c4:a2:5a:d7:dd:fc:29:72:39:60:
6e:9c:81:59:2d:a2:95:2d:45:57:65:02:72:9b:df:
89:40:7e:41:13:6d:8c:93:88:8f:cf:b8:43:aa:d6:
10:20:e0:36:86:92:5d:79:37:5e:64:e5:b5:de:c8:
65:b6:21:a2:55:ec:70:98:0f:cb:0e:88:8d:30:90:
b7:b9:0f:d1:03:d0:d9:03:c8:3c:ce:72:c0:29:ff:
b8:0f:60:69:44:ca:de:31:cb:e9:85:c0:58:39:61:
e8:ba:c8:8f:51:46:06:35:22:b6:21:ea:36:ad:f0:
ae:89:30:8e:7e:73:e9:35:6f:7b:f4:5d:8e:e7:ab:
40:ee:b3:c2:9c:60:db:76:39:4f:0f:cc:de:2d:bc:
e7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5B:88:C1:09:CD:F7:43:DC:10:55:2F:0E:FC:89:2C:90:C1:98:68
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/3FuIwQnN90PcEFUvDvyJLJDBmGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.192.0/24
62.201.196.0/24
62.201.199.0-62.201.205.255
62.201.207.0-62.201.208.255
62.201.210.0/23
62.201.216.0/24
62.201.237.0/24
62.201.248.0/24
62.201.250.0/24
185.90.104.0/22
IPv6:
2a02:b60:2000::/35
Signature Algorithm: sha256WithRSAEncryption
e1:16:2f:df:c8:d1:5e:0f:4c:e5:9e:03:ad:54:58:5d:25:96:
0b:ff:0b:9c:20:e9:a1:17:93:a4:ef:28:b3:89:16:72:88:25:
95:6a:09:cd:76:a1:2f:22:e7:f8:5e:aa:6c:12:43:a9:ce:f3:
c2:bd:5c:54:85:c6:2e:67:1b:5f:fc:20:85:e9:35:3d:ec:26:
5d:f8:9b:75:18:58:1f:d2:9c:d9:40:49:bc:f9:7d:dc:40:b4:
d1:f8:5a:81:f4:fa:27:29:26:1e:8a:9b:99:6e:a1:38:6b:7a:
6d:5b:a5:62:ca:24:1f:fd:5a:5d:f9:e5:35:04:56:58:c2:05:
cc:e7:cc:45:68:39:5c:99:80:5f:16:df:b3:2c:ce:d8:3c:a0:
ac:77:5f:93:98:44:f1:d5:af:d1:de:3e:59:63:ad:2e:8b:1c:
10:44:5d:6f:c8:2c:21:32:b2:25:c8:67:a5:fc:0c:a8:55:53:
69:31:2a:02:a0:77:78:58:49:bf:fb:76:9f:98:a5:60:1d:9a:
3f:f3:52:7d:a5:f4:4f:82:48:27:60:d1:db:83:a5:36:1c:3e:
49:91:65:c1:b3:ed:55:d1:2f:fc:5c:d0:ab:2c:f1:98:1a:f4:
b4:d5:f3:0c:44:cb:4c:ed:3f:d9:13:43:72:8a:75:f9:c8:86:
45:2f:9a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 12:58:57 2025 by rpki-client