Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/8WOAUWu4MDx-8eOx_3RBoHsTrG8.roa
File: 8WOAUWu4MDx-8eOx_3RBoHsTrG8.roa (raw, json)
Hash identifier: jXK1qf8po9yTzMkuAum6hfIt17gCR3QRJCqLrbwDPgY=
Subject key identifier: F1:63:80:51:6B:B8:30:3C:7E:F1:E3:B1:FF:74:41:A0:7B:13:AC:6F
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 018CC4253DE898C3200744BA6DE5D5698CCB
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/8WOAUWu4MDx-8eOx_3RBoHsTrG8.roa
Signing time: Mon 01 Jan 2024 08:30:24 +0000
ROA not before: Mon 01 Jan 2024 08:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44217
IP address blocks: 62.201.228.0/22 maxlen: 22
62.201.229.0/24 maxlen: 24
62.201.227.0/24 maxlen: 24
62.201.228.0/24 maxlen: 24
62.201.232.0/24 maxlen: 24
62.201.233.0/24 maxlen: 24
62.201.230.0/24 maxlen: 24
62.201.231.0/24 maxlen: 24
62.201.232.0/22 maxlen: 22
62.201.236.0/24 maxlen: 24
62.201.234.0/24 maxlen: 24
62.201.235.0/24 maxlen: 24
62.201.239.0/24 maxlen: 24
62.201.240.0/24 maxlen: 24
62.201.238.0/24 maxlen: 24
62.201.240.0/21 maxlen: 21
62.201.243.0/24 maxlen: 24
62.201.241.0/24 maxlen: 24
62.201.242.0/24 maxlen: 24
62.201.242.0/23 maxlen: 24
62.201.246.0/24 maxlen: 24
62.201.244.0/23 maxlen: 23
62.201.253.0/24 maxlen: 24
62.201.251.0/24 maxlen: 24
62.201.252.0/22 maxlen: 24
62.201.247.0/24 maxlen: 24
62.201.248.0/23 maxlen: 23
62.201.250.0/24 maxlen: 24
62.201.248.0/24 maxlen: 24
62.201.249.0/24 maxlen: 24
62.201.254.0/23 maxlen: 24
89.33.66.0/23 maxlen: 23
62.201.192.0/23 maxlen: 23
62.201.197.0/24 maxlen: 24
62.201.194.0/24 maxlen: 24
62.201.195.0/24 maxlen: 24
62.201.192.0/18 maxlen: 18
62.201.193.0/24 maxlen: 24
62.201.200.0/22 maxlen: 22
62.201.201.0/24 maxlen: 24
62.201.202.0/24 maxlen: 24
62.201.200.0/24 maxlen: 24
62.201.204.0/24 maxlen: 24
62.201.205.0/24 maxlen: 24
62.201.203.0/24 maxlen: 24
62.201.204.0/23 maxlen: 23
62.201.206.0/23 maxlen: 23
62.201.212.0/24 maxlen: 24
62.201.208.0/24 maxlen: 24
62.201.209.0/24 maxlen: 24
62.201.208.0/22 maxlen: 22
62.201.207.0/24 maxlen: 24
62.201.211.0/24 maxlen: 24
62.201.212.0/22 maxlen: 22
62.201.210.0/24 maxlen: 24
62.201.213.0/24 maxlen: 24
62.201.215.0/24 maxlen: 24
62.201.216.0/24 maxlen: 24
62.201.214.0/24 maxlen: 24
62.201.218.0/24 maxlen: 24
62.201.219.0/24 maxlen: 24
62.201.217.0/24 maxlen: 24
62.201.221.0/24 maxlen: 24
62.201.222.0/24 maxlen: 24
62.201.220.0/22 maxlen: 22
62.201.220.0/24 maxlen: 24
62.201.225.0/24 maxlen: 24
62.201.224.0/22 maxlen: 22
62.201.226.0/24 maxlen: 24
62.201.223.0/24 maxlen: 24
62.201.224.0/24 maxlen: 24
185.1.98.0/24 maxlen: 24
2a02:b60:2010::/48 maxlen: 48
2a02:b60::/64 maxlen: 64
2a02:b60:2000::/48 maxlen: 48
2a02:b60:4000::/48 maxlen: 48
2a02:b60:2000:3::/64 maxlen: 64
2a02:b60:4005::/48 maxlen: 48
2a02:b60:0:f::/64 maxlen: 64
2a02:b60:4000::/34 maxlen: 34
2a02:b60:2000::/35 maxlen: 35
2a02:b60::/32 maxlen: 32
2a02:b60:20::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 10 Jan 2024 07:32:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:3d:e8:98:c3:20:07:44:ba:6d:e5:d5:69:8c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Jan 1 08:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f16380516bb8303c7ef1e3b1ff7441a07b13ac6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:76:20:86:a9:a6:18:12:a4:74:8a:e4:cc:7c:
5c:f4:e6:5a:a8:b6:70:66:de:1e:97:2e:ba:4d:9c:
d4:9c:21:1c:15:d8:82:c1:e2:6f:d2:bb:da:ef:ae:
7c:44:ef:24:59:23:f1:a9:5c:5a:07:9d:f2:b5:66:
72:43:0c:5a:fd:9f:9f:ac:11:7a:df:8a:43:8a:67:
28:54:33:e2:0e:fc:ab:79:76:ba:6a:c2:17:8a:c7:
43:76:12:45:23:4b:5f:67:24:cf:73:a4:3d:ae:ce:
42:3b:3f:6b:ea:a7:2b:2e:c7:b2:36:2e:a1:5a:12:
cf:e5:9e:f6:2e:85:e8:a1:93:57:25:24:4c:bc:03:
1b:1b:b4:65:34:a4:0b:58:3e:98:dc:f8:3d:bd:e0:
5c:f9:70:e2:0c:c6:f9:8c:08:b2:e3:1d:7f:fa:d0:
b9:32:a4:48:19:9d:08:84:64:7c:16:19:ec:83:34:
f4:09:27:99:f3:b6:e6:1e:12:30:09:25:5f:8e:b2:
79:b2:09:dc:58:8d:8e:79:a0:c2:77:ae:76:a1:32:
b2:8c:26:b6:67:c9:9d:a6:a3:e1:d3:50:6b:de:26:
52:3a:7f:29:a5:1f:ee:fd:0b:e6:d4:f1:7c:d6:58:
4a:93:48:0a:3a:fc:da:5e:91:fc:20:31:c2:f1:ae:
dc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:63:80:51:6B:B8:30:3C:7E:F1:E3:B1:FF:74:41:A0:7B:13:AC:6F
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/8WOAUWu4MDx-8eOx_3RBoHsTrG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.192.0/18
89.33.66.0/23
185.1.98.0/24
IPv6:
2a02:b60::/32
Signature Algorithm: sha256WithRSAEncryption
2f:ab:83:f5:5d:3e:f5:6e:b7:e2:ef:37:6f:97:58:c1:11:8d:
62:b4:33:b1:38:4b:4c:6f:f4:34:98:5a:fc:b4:94:cc:e3:21:
dc:06:ca:14:7c:cc:d5:6d:83:57:f8:42:e6:45:a3:08:36:b0:
5b:7d:dd:76:50:8f:85:ed:d9:52:fa:04:68:f6:2c:0c:b5:69:
27:74:96:7f:ef:87:fd:52:8d:f3:1a:4c:50:8d:62:7d:14:02:
2e:cc:4d:8b:e6:44:4e:29:0c:a2:f3:e1:6f:15:9d:7c:c4:52:
c8:61:a1:88:ac:73:00:4c:66:f0:4c:7c:92:ec:eb:a1:19:58:
9b:a3:68:92:07:30:d0:d2:2d:51:0c:e1:29:de:fe:1e:60:e9:
62:85:ba:85:43:69:6b:3a:a4:db:7b:e8:22:0a:43:dd:07:53:
72:0f:f5:c9:44:7b:70:8d:a7:95:eb:e1:a4:68:83:e0:d3:0f:
26:ec:ad:f4:a7:b7:7a:27:5b:b7:e8:4a:02:a8:a9:1f:f6:cc:
71:22:d9:e5:e4:64:b2:50:67:e5:59:21:1f:44:7e:c8:2f:48:
74:3f:49:64:da:3a:5f:88:59:f6:f6:72:b7:2e:34:7b:34:18:
8e:0c:59:ec:4f:7f:7c:86:8b:45:cb:34:ae:51:ff:0d:4a:8d:
9e:1b:60:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:08:50 2025 by rpki-client