Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/5u-sSNAR2J2U3Zye0X1qjIuP_28.roa
File: 5u-sSNAR2J2U3Zye0X1qjIuP_28.roa (raw, json)
Hash identifier: YK9N59TgzqDpllkncmXlO/rBQNmTX18WoCpN++WxsjU=
Subject key identifier: E6:EF:AC:48:D0:11:D8:9D:94:DD:9C:9E:D1:7D:6A:8C:8B:8F:FF:6F
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 018CF33D28C42A162D36C9F8E8BB097F5D72
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/5u-sSNAR2J2U3Zye0X1qjIuP_28.roa
Signing time: Wed 10 Jan 2024 11:58:40 +0000
ROA not before: Wed 10 Jan 2024 11:58:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41032
IP address blocks: 185.90.104.0/24 maxlen: 24
185.90.105.0/24 maxlen: 24
185.90.107.0/24 maxlen: 24
185.90.106.0/24 maxlen: 24
62.201.237.0/24 maxlen: 24
62.201.248.0/24 maxlen: 24
62.201.250.0/24 maxlen: 24
62.201.249.0/24 maxlen: 24
62.201.192.0/24 maxlen: 24
62.201.196.0/24 maxlen: 24
62.201.199.0/24 maxlen: 24
62.201.203.0/24 maxlen: 24
62.201.202.0/24 maxlen: 24
62.201.205.0/24 maxlen: 24
62.201.204.0/24 maxlen: 24
62.201.200.0/24 maxlen: 24
62.201.201.0/24 maxlen: 24
62.201.210.0/24 maxlen: 24
62.201.209.0/24 maxlen: 24
62.201.211.0/24 maxlen: 24
62.201.207.0/24 maxlen: 24
62.201.208.0/24 maxlen: 24
62.201.216.0/24 maxlen: 24
2a02:b60:2000::/35 maxlen: 35
2a02:b60:2000::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 22 Jan 2024 05:25:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f3:3d:28:c4:2a:16:2d:36:c9:f8:e8:bb:09:7f:5d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Jan 10 11:58:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6efac48d011d89d94dd9c9ed17d6a8c8b8fff6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d2:c4:58:82:47:a9:b9:1d:c4:77:36:01:73:
7d:70:4b:1c:dc:e4:38:d3:24:e0:61:10:48:9a:bf:
4c:7d:f2:3c:3b:8c:e8:3e:9b:96:94:4b:f2:49:d1:
38:10:19:98:37:b8:37:37:e9:16:d9:68:73:7c:c3:
43:46:7c:0e:2c:8c:ec:6b:db:ad:47:f1:cd:7c:fa:
8a:36:fd:33:8f:f0:d3:3c:78:e9:67:6f:00:e3:c7:
47:34:86:6f:91:37:bf:5b:8f:73:db:d8:20:20:8e:
92:b0:53:d1:ac:36:ee:57:be:98:e8:d9:62:fb:0d:
96:70:b3:d3:c2:a7:8c:06:2b:01:42:9a:85:b2:db:
ee:73:ba:09:4d:e0:8f:47:70:66:92:d6:a1:ba:b7:
96:11:34:a0:80:ba:8f:38:39:fe:dc:ba:2e:b1:f1:
d5:b5:0c:ea:c2:4e:97:fb:9c:1b:6a:10:35:93:7f:
37:72:62:ba:f7:c7:d3:4f:a9:d3:96:b6:aa:0d:26:
69:0f:b4:eb:ec:e8:43:3c:2c:ab:97:72:0f:0e:d7:
8b:11:75:f6:d2:0f:69:db:11:2d:6a:37:ae:5f:55:
06:b7:e9:74:94:35:56:db:e1:0a:22:68:cd:a2:c8:
51:db:f6:fb:4c:ac:96:dc:c5:df:c0:0a:dd:a2:60:
77:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:EF:AC:48:D0:11:D8:9D:94:DD:9C:9E:D1:7D:6A:8C:8B:8F:FF:6F
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/5u-sSNAR2J2U3Zye0X1qjIuP_28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.192.0/24
62.201.196.0/24
62.201.199.0-62.201.205.255
62.201.207.0-62.201.211.255
62.201.216.0/24
62.201.237.0/24
62.201.248.0-62.201.250.255
185.90.104.0/22
IPv6:
2a02:b60:2000::/35
Signature Algorithm: sha256WithRSAEncryption
6f:4b:ee:c6:1b:fa:91:ff:54:17:09:fd:c3:6d:1e:6f:cb:74:
15:02:29:bf:bd:21:05:b2:fb:14:e4:c1:94:3b:b4:1f:69:ba:
a7:79:59:74:4a:01:05:27:55:13:0d:7f:9e:44:50:cf:2f:8c:
ba:5f:39:f5:01:6b:8e:4c:2a:57:05:6d:cd:e0:8c:23:43:58:
7b:81:56:5e:08:ab:30:ae:ea:35:60:cb:a1:95:d3:50:37:2b:
86:c5:9c:b7:f3:63:df:d3:64:76:d2:7e:b2:8a:db:84:5e:5f:
a5:79:4c:37:7a:43:64:c0:90:48:84:e7:5b:c7:19:27:0c:8e:
7a:c6:ed:98:5e:90:9a:49:19:fc:a7:11:4d:c8:b6:e4:e6:99:
50:fc:f6:0f:be:49:f9:84:d1:e1:e5:56:35:ea:c1:40:5d:70:
15:b8:2c:30:a0:27:3d:c6:00:d1:cd:10:43:47:06:f1:83:a5:
f9:b1:1d:b9:8e:39:c6:6e:84:2f:ee:d5:11:9c:17:07:ac:d9:
62:e1:9b:66:20:61:8a:a1:c2:5e:4b:1c:4a:96:25:29:c9:7a:
df:a1:e8:b2:95:ff:1c:19:02:d8:7e:26:92:9c:81:84:e7:ed:
74:b9:92:bf:14:fb:ad:26:84:fb:92:9a:a3:77:88:46:3f:14:
bc:b6:bf:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:22:51 2025 by rpki-client