Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/GNLaDx6pjxKctbwoT7WyrKbJw6k.roa
File: GNLaDx6pjxKctbwoT7WyrKbJw6k.roa (raw, json)
Hash identifier: mbqs8DXabhLO7j+Dbq4NmH9B6mK0AFcZuXa1TpcxPds=
Subject key identifier: 18:D2:DA:0F:1E:A9:8F:12:9C:B5:BC:28:4F:B5:B2:AC:A6:C9:C3:A9
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 0194CA699D96D2170FED9D50EE2B800CE8EA
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/GNLaDx6pjxKctbwoT7WyrKbJw6k.roa
Signing time: Mon 03 Feb 2025 06:05:06 +0000
ROA not before: Mon 03 Feb 2025 06:05:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44217
IP address blocks: 62.201.192.0/18 maxlen: 18
62.201.192.0/23 maxlen: 23
62.201.193.0/24 maxlen: 24
62.201.194.0/24 maxlen: 24
62.201.195.0/24 maxlen: 24
62.201.196.0/24 maxlen: 24
62.201.197.0/24 maxlen: 24
62.201.198.0/24 maxlen: 24
62.201.200.0/24 maxlen: 24
62.201.201.0/24 maxlen: 24
62.201.202.0/24 maxlen: 24
62.201.203.0/24 maxlen: 24
62.201.204.0/23 maxlen: 23
62.201.205.0/24 maxlen: 24
62.201.206.0/24 maxlen: 24
62.201.207.0/24 maxlen: 24
62.201.208.0/22 maxlen: 22
62.201.208.0/24 maxlen: 24
62.201.209.0/24 maxlen: 24
62.201.210.0/24 maxlen: 24
62.201.211.0/24 maxlen: 24
62.201.212.0/22 maxlen: 22
62.201.212.0/24 maxlen: 24
62.201.213.0/24 maxlen: 24
62.201.214.0/24 maxlen: 24
62.201.215.0/24 maxlen: 24
62.201.216.0/24 maxlen: 24
62.201.217.0/24 maxlen: 24
62.201.218.0/24 maxlen: 24
62.201.219.0/24 maxlen: 24
62.201.220.0/22 maxlen: 22
62.201.220.0/24 maxlen: 24
62.201.221.0/24 maxlen: 24
62.201.222.0/24 maxlen: 24
62.201.223.0/24 maxlen: 24
62.201.224.0/22 maxlen: 22
62.201.224.0/24 maxlen: 24
62.201.225.0/24 maxlen: 24
62.201.226.0/24 maxlen: 24
62.201.227.0/24 maxlen: 24
62.201.228.0/22 maxlen: 22
62.201.228.0/24 maxlen: 24
62.201.229.0/24 maxlen: 24
62.201.230.0/24 maxlen: 24
62.201.231.0/24 maxlen: 24
62.201.232.0/22 maxlen: 22
62.201.232.0/24 maxlen: 24
62.201.233.0/24 maxlen: 24
62.201.234.0/24 maxlen: 24
62.201.235.0/24 maxlen: 24
62.201.236.0/24 maxlen: 24
62.201.238.0/24 maxlen: 24
62.201.239.0/24 maxlen: 24
62.201.240.0/21 maxlen: 21
62.201.240.0/24 maxlen: 24
62.201.241.0/24 maxlen: 24
62.201.242.0/23 maxlen: 24
62.201.242.0/24 maxlen: 24
62.201.243.0/24 maxlen: 24
62.201.244.0/23 maxlen: 24
62.201.246.0/24 maxlen: 24
62.201.247.0/24 maxlen: 24
62.201.248.0/24 maxlen: 24
62.201.249.0/24 maxlen: 24
62.201.250.0/24 maxlen: 24
62.201.251.0/24 maxlen: 24
62.201.252.0/22 maxlen: 24
62.201.253.0/24 maxlen: 24
62.201.254.0/23 maxlen: 24
89.33.66.0/23 maxlen: 23
185.1.98.0/24 maxlen: 24
2a02:b60::/32 maxlen: 32
2a02:b60:0:f::/64 maxlen: 64
2a02:b60:20::/48 maxlen: 48
2a02:b60:42::/48 maxlen: 48
2a02:b60:45::/48 maxlen: 48
2a02:b60:2000::/35 maxlen: 35
2a02:b60:2000::/48 maxlen: 48
2a02:b60:2000:3::/64 maxlen: 64
2a02:b60:2010::/48 maxlen: 48
2a02:b60:4000::/34 maxlen: 34
2a02:b60:4000::/48 maxlen: 48
2a02:b60:4005::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 09 Feb 2025 11:46:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ca:69:9d:96:d2:17:0f:ed:9d:50:ee:2b:80:0c:e8:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Feb 3 06:05:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18d2da0f1ea98f129cb5bc284fb5b2aca6c9c3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:34:ce:0a:45:ae:c8:03:f0:d4:b5:e8:cb:65:
f4:d8:bb:65:ab:f5:8f:4d:18:f9:eb:73:11:55:ec:
c5:19:2c:2d:a8:40:49:9f:3c:59:e0:ba:f9:5f:81:
3c:e9:31:5c:a4:c9:95:45:26:ab:76:f2:39:bc:23:
d7:16:af:61:f0:af:34:04:a3:62:74:d0:6d:ce:5a:
44:81:5b:3b:61:bf:22:d6:29:7f:32:63:7e:cd:80:
67:ab:60:13:55:bf:1f:93:63:19:4a:4d:1e:6d:aa:
78:4c:99:af:5b:28:67:8a:cc:18:65:21:e7:ab:c6:
9e:41:a4:03:b5:50:c4:51:cb:70:e4:d9:9f:17:b5:
74:ba:33:b3:b6:3e:4a:35:c8:4b:f2:53:cf:29:e2:
90:30:19:87:dc:5b:18:ba:11:3a:65:4e:05:f4:6e:
aa:4a:36:2c:ee:bf:1c:25:3d:93:06:2c:70:68:b1:
fb:02:a7:b0:dd:87:8f:d4:bc:b1:9d:2d:79:88:19:
61:d3:00:f7:98:72:b4:3e:92:65:46:ff:2d:4a:0a:
e5:d8:43:91:2d:80:6d:b9:a1:a3:f5:bb:78:3d:29:
de:4a:fb:b5:e2:cf:fd:50:89:a2:5b:59:ca:d0:52:
9b:23:c7:36:96:f7:22:2c:73:22:1f:71:f4:7c:a8:
0e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D2:DA:0F:1E:A9:8F:12:9C:B5:BC:28:4F:B5:B2:AC:A6:C9:C3:A9
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/GNLaDx6pjxKctbwoT7WyrKbJw6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.192.0/18
89.33.66.0/23
185.1.98.0/24
IPv6:
2a02:b60::/32
Signature Algorithm: sha256WithRSAEncryption
49:8b:92:dd:ce:f9:74:90:6a:0f:b7:fb:db:e9:7a:be:d5:9a:
79:26:fc:86:65:64:cb:c5:20:66:49:42:0e:0d:a5:35:9b:36:
5f:b0:cb:37:6d:75:5c:1b:13:36:48:f2:1f:2f:30:6f:48:d3:
a8:a5:df:98:37:bd:ed:ff:1d:21:e7:c4:93:b1:41:8b:e8:96:
2d:42:b4:d2:f4:78:f4:9e:31:44:57:a8:fe:8d:c7:7b:ef:e0:
ce:1a:cd:4d:93:24:52:b7:be:bb:c6:6d:1c:f3:29:2b:07:09:
6e:94:e8:b1:75:49:62:85:da:a6:4f:7d:4f:93:19:30:44:1d:
d5:40:08:41:87:b2:34:7d:0d:ce:7a:2d:37:50:df:41:f9:05:
78:d4:79:f9:84:d4:a1:db:41:6a:77:1a:7c:91:86:45:12:b3:
a3:a3:38:57:61:45:f4:df:d7:83:2d:d3:0a:e4:bf:79:e9:b2:
62:be:91:c6:07:87:90:d7:3c:1f:74:83:8b:48:0e:f3:be:63:
d1:b7:26:51:ee:44:88:af:58:0b:6d:f0:b5:54:ff:94:5b:e5:
b4:7a:0a:1a:14:35:5d:d6:97:c4:a3:8f:14:52:1c:3a:2b:f1:
c3:fc:91:e4:13:b0:f2:06:9e:a0:94:9c:3d:dc:6d:77:b6:f1:
c8:86:5a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:29:48 2025 by rpki-client