Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/JPpWjD92O9InPZC8_V4j1nO03KE.roa
File: JPpWjD92O9InPZC8_V4j1nO03KE.roa (raw, json)
Hash identifier: jb8+H6uhXnqQYiA0IuQDxtDIDQCj+EKDNsG/vcukn9U=
Subject key identifier: 24:FA:56:8C:3F:76:3B:D2:27:3D:90:BC:FD:5E:23:D6:73:B4:DC:A1
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 018CF32F6D40A34ADF5C121BBC85D7364B49
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/JPpWjD92O9InPZC8_V4j1nO03KE.roa
Signing time: Wed 10 Jan 2024 11:43:40 +0000
ROA not before: Wed 10 Jan 2024 11:43:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 185.90.106.0/24 maxlen: 24
62.201.237.0/24 maxlen: 24
62.201.248.0/24 maxlen: 24
62.201.192.0/24 maxlen: 24
62.201.196.0/24 maxlen: 24
62.201.199.0/24 maxlen: 24
62.201.200.0/24 maxlen: 24
62.201.201.0/24 maxlen: 24
62.201.202.0/24 maxlen: 24
62.201.203.0/24 maxlen: 24
62.201.204.0/24 maxlen: 24
62.201.205.0/24 maxlen: 24
62.201.207.0/24 maxlen: 24
62.201.208.0/24 maxlen: 24
62.201.209.0/24 maxlen: 24
62.201.210.0/24 maxlen: 24
62.201.211.0/24 maxlen: 24
62.201.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 05:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f3:2f:6d:40:a3:4a:df:5c:12:1b:bc:85:d7:36:4b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Jan 10 11:43:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24fa568c3f763bd2273d90bcfd5e23d673b4dca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3c:37:ff:35:d2:71:cd:d0:06:a9:6a:58:6d:
11:76:72:fe:be:a5:64:01:80:82:6c:c1:af:22:f8:
ac:48:0c:2c:a2:fa:7e:1e:41:cb:7d:33:b4:c0:b0:
77:81:f9:d6:0e:4e:fd:7b:33:7f:84:40:fb:0d:14:
74:66:ec:bb:65:db:81:40:4e:59:fb:2a:32:39:f5:
2c:5c:09:40:4a:e9:81:06:f6:bb:13:83:2f:b8:fb:
16:4a:c3:b9:b6:b0:3b:34:60:80:9b:1f:a2:ca:f3:
37:b3:9a:68:d2:7c:0e:00:70:15:6c:64:c3:72:57:
dc:82:d0:4f:80:92:2d:32:bc:71:d9:b1:6f:b2:63:
48:01:89:27:a4:e1:11:72:d0:40:d7:71:fc:6f:83:
03:61:76:be:5e:2c:43:e1:a8:75:ad:df:51:a1:77:
63:22:ee:b3:a2:80:a9:df:48:e7:0e:13:02:24:5f:
28:80:d3:66:f7:a4:1c:85:e1:02:22:20:94:ab:1b:
0e:ea:69:b7:e0:f6:11:ab:bc:88:d2:da:8a:ec:5e:
1a:98:3a:d6:27:a0:8f:e4:99:e3:3f:50:56:52:de:
0d:8e:61:e3:b8:b2:fb:18:c3:8a:7c:44:f8:99:06:
b8:0f:54:fc:39:96:e0:62:f1:c5:c3:13:71:83:b3:
c2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FA:56:8C:3F:76:3B:D2:27:3D:90:BC:FD:5E:23:D6:73:B4:DC:A1
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/JPpWjD92O9InPZC8_V4j1nO03KE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.192.0/24
62.201.196.0/24
62.201.199.0-62.201.205.255
62.201.207.0-62.201.211.255
62.201.216.0/24
62.201.237.0/24
62.201.248.0/24
185.90.106.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:e0:c1:c3:a8:a2:4a:c2:4f:0a:30:cc:b3:ff:3c:c2:e0:0a:
df:5a:ff:8d:10:9f:37:5f:7a:5c:f1:b1:08:36:c7:ee:8b:4a:
ab:94:4b:cd:d0:b2:63:6d:eb:c0:f6:c3:c4:8a:83:04:0a:c3:
6e:1f:48:b2:da:f1:ca:a8:3e:9e:ec:22:8e:35:7e:3d:a5:30:
05:12:69:35:dd:8e:de:12:24:fb:d8:b3:42:54:f7:fd:5a:cf:
00:ac:61:7e:83:55:4c:00:bc:84:e9:d5:56:97:c2:bc:e6:9f:
58:87:e2:06:30:3e:4c:41:a3:88:43:51:79:f0:ac:c4:ad:e4:
f4:dc:57:d9:7c:e0:59:d7:ce:88:78:71:c9:57:35:1f:86:c3:
c7:7d:04:40:da:9f:69:aa:6b:35:37:40:ea:62:f7:51:19:e1:
33:2b:fb:5b:8b:30:09:8d:d9:5e:a1:3a:de:b6:e0:0d:d6:f0:
c1:1b:cc:96:96:80:e6:f7:93:87:5a:d1:d0:6c:a2:70:b4:37:
57:4c:74:fa:06:6a:11:c0:3b:2c:4a:66:d6:81:8a:98:88:2b:
31:29:c6:77:6f:73:4b:45:23:44:37:d0:0e:35:06:0c:a0:3e:
0f:65:c1:eb:b4:fe:97:e2:cc:56:1c:fc:19:8e:d6:7d:f7:2c:
a2:38:50:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:06:27 2025 by rpki-client