Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/7qtOUsuk4qZ8MbNhiFw6S_Vlyhk.roa
File: 7qtOUsuk4qZ8MbNhiFw6S_Vlyhk.roa (raw, json)
Hash identifier: iJL49yu1jJuTChRpxDr/HBoUnLb5PWwoAtHmvqPOB9U=
Subject key identifier: EE:AB:4E:52:CB:A4:E2:A6:7C:31:B3:61:88:5C:3A:4B:F5:65:CA:19
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 018D4FA5742FCEA5CC64AD64A47987A177C6
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/7qtOUsuk4qZ8MbNhiFw6S_Vlyhk.roa
Signing time: Sun 28 Jan 2024 10:37:39 +0000
ROA not before: Sun 28 Jan 2024 10:37:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44217
IP address blocks: 62.201.192.0/18 maxlen: 18
62.201.192.0/23 maxlen: 23
62.201.193.0/24 maxlen: 24
62.201.194.0/24 maxlen: 24
62.201.195.0/24 maxlen: 24
62.201.197.0/24 maxlen: 24
62.201.200.0/24 maxlen: 24
62.201.201.0/24 maxlen: 24
62.201.202.0/24 maxlen: 24
62.201.203.0/24 maxlen: 24
62.201.204.0/23 maxlen: 23
62.201.204.0/24 maxlen: 24
62.201.205.0/24 maxlen: 24
62.201.206.0/24 maxlen: 24
62.201.207.0/24 maxlen: 24
62.201.208.0/22 maxlen: 22
62.201.208.0/24 maxlen: 24
62.201.209.0/24 maxlen: 24
62.201.210.0/24 maxlen: 24
62.201.211.0/24 maxlen: 24
62.201.212.0/22 maxlen: 22
62.201.212.0/24 maxlen: 24
62.201.213.0/24 maxlen: 24
62.201.214.0/24 maxlen: 24
62.201.215.0/24 maxlen: 24
62.201.216.0/24 maxlen: 24
62.201.217.0/24 maxlen: 24
62.201.218.0/24 maxlen: 24
62.201.219.0/24 maxlen: 24
62.201.220.0/22 maxlen: 22
62.201.220.0/24 maxlen: 24
62.201.221.0/24 maxlen: 24
62.201.222.0/24 maxlen: 24
62.201.223.0/24 maxlen: 24
62.201.224.0/22 maxlen: 22
62.201.224.0/24 maxlen: 24
62.201.225.0/24 maxlen: 24
62.201.226.0/24 maxlen: 24
62.201.227.0/24 maxlen: 24
62.201.228.0/22 maxlen: 22
62.201.228.0/24 maxlen: 24
62.201.229.0/24 maxlen: 24
62.201.230.0/24 maxlen: 24
62.201.231.0/24 maxlen: 24
62.201.232.0/22 maxlen: 22
62.201.232.0/24 maxlen: 24
62.201.233.0/24 maxlen: 24
62.201.234.0/24 maxlen: 24
62.201.235.0/24 maxlen: 24
62.201.236.0/24 maxlen: 24
62.201.238.0/24 maxlen: 24
62.201.239.0/24 maxlen: 24
62.201.240.0/21 maxlen: 21
62.201.240.0/24 maxlen: 24
62.201.241.0/24 maxlen: 24
62.201.242.0/23 maxlen: 24
62.201.242.0/24 maxlen: 24
62.201.243.0/24 maxlen: 24
62.201.244.0/23 maxlen: 23
62.201.246.0/24 maxlen: 24
62.201.247.0/24 maxlen: 24
62.201.248.0/24 maxlen: 24
62.201.249.0/24 maxlen: 24
62.201.250.0/24 maxlen: 24
62.201.251.0/24 maxlen: 24
62.201.252.0/22 maxlen: 24
62.201.253.0/24 maxlen: 24
62.201.254.0/23 maxlen: 24
89.33.66.0/23 maxlen: 23
185.1.98.0/24 maxlen: 24
2a02:b60::/32 maxlen: 32
2a02:b60::/64 maxlen: 64
2a02:b60:0:f::/64 maxlen: 64
2a02:b60:20::/48 maxlen: 48
2a02:b60:2000::/35 maxlen: 35
2a02:b60:2000::/48 maxlen: 48
2a02:b60:2000:3::/64 maxlen: 64
2a02:b60:2010::/48 maxlen: 48
2a02:b60:4000::/34 maxlen: 34
2a02:b60:4000::/48 maxlen: 48
2a02:b60:4005::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 30 Jan 2024 05:05:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:4f:a5:74:2f:ce:a5:cc:64:ad:64:a4:79:87:a1:77:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Jan 28 10:37:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eeab4e52cba4e2a67c31b361885c3a4bf565ca19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a8:07:24:a8:5e:91:42:6a:3f:9c:cf:6b:40:
0e:b0:c7:c5:da:c4:c9:2e:04:8d:b3:61:17:11:d6:
d7:02:e2:b7:da:c7:8b:45:45:b5:81:8b:56:79:dd:
e8:04:c3:ee:b7:48:99:32:23:4b:72:f9:e6:0c:ec:
6e:79:5a:0c:39:0f:d0:37:2b:2a:ff:3e:11:73:24:
35:20:7f:44:6d:18:81:dc:04:29:65:62:c6:c9:ec:
57:5f:56:e5:f5:ba:55:bf:40:c6:6f:a8:55:f9:0d:
76:22:2f:d9:80:53:37:7f:9a:e7:14:99:b4:c6:36:
1b:fe:d5:df:92:28:49:9a:24:ad:5f:31:ee:23:3e:
65:35:3b:57:da:e3:07:8c:6e:05:46:86:a8:bd:83:
2a:4d:e6:af:56:3e:f7:70:1a:75:8d:b5:81:cf:97:
da:eb:e9:c5:17:2a:5c:15:64:24:05:a4:95:45:2c:
b4:13:dc:96:90:39:10:99:ed:2f:3e:34:50:b0:24:
2a:06:a5:6a:c9:d3:5f:7b:7b:dc:8f:90:56:58:53:
ed:c0:ff:f2:ad:1c:e1:f6:40:1b:01:8f:fa:2a:17:
51:ae:d0:85:74:5d:a5:8c:7d:9b:62:7d:5a:df:b4:
5b:48:41:b8:25:51:b6:69:42:18:ff:50:f9:cb:36:
4a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AB:4E:52:CB:A4:E2:A6:7C:31:B3:61:88:5C:3A:4B:F5:65:CA:19
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/7qtOUsuk4qZ8MbNhiFw6S_Vlyhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.192.0/18
89.33.66.0/23
185.1.98.0/24
IPv6:
2a02:b60::/32
Signature Algorithm: sha256WithRSAEncryption
53:48:a5:50:14:25:40:1a:67:50:34:52:58:34:29:e4:25:e2:
3c:6c:97:f0:b3:f8:99:3f:f6:70:1b:ac:34:98:73:f1:c0:80:
dd:ec:ea:62:4a:96:b5:45:45:b6:2f:e0:96:94:e5:65:b3:8a:
cf:34:0a:1e:94:05:a4:df:c3:40:a7:96:e1:1d:44:7d:eb:1d:
da:dd:77:03:b8:40:41:f1:74:bf:93:98:86:cc:f8:7f:69:fa:
5c:81:06:94:55:01:e8:24:4b:c5:91:d3:54:a7:15:5a:5d:c6:
bf:ea:39:62:3c:39:5e:18:d5:54:c5:48:c0:32:56:fc:eb:7f:
e6:11:3d:03:1f:00:19:ea:d5:73:c4:0a:96:c9:26:ce:24:d6:
d7:5a:e5:8a:2e:c7:61:37:23:f4:30:18:be:c7:7e:6e:04:bb:
b6:70:99:d8:ef:c6:0f:68:9a:c2:16:c2:4b:13:bd:93:cb:4a:
cd:95:d1:80:5d:41:48:6f:37:3f:c0:d3:04:8d:fe:72:6c:f6:
6c:73:ee:95:15:75:a3:ed:a4:a7:8e:d2:6f:5f:1e:04:ad:1c:
a5:b7:9f:fe:08:eb:85:52:5e:06:0d:12:ab:6c:64:c1:3e:ed:
5f:5c:de:14:73:5f:39:01:d4:a9:cc:2b:53:3e:d4:27:b5:d3:
f6:0c:6b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:11:11 2025 by rpki-client