Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/PpJKwN7NrRhqxtfbOdE96xhI2LM.roa
File: PpJKwN7NrRhqxtfbOdE96xhI2LM.roa (raw, json)
Hash identifier: LJgI8TDpy4E9wZYDWURUXDyjdicwy6Ekek/CXlAIx0Q=
Subject key identifier: 3E:92:4A:C0:DE:CD:AD:18:6A:C6:D7:DB:39:D1:3D:EB:18:48:D8:B3
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 018FBECF39E5B08115336617C75B0A5B0075
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/PpJKwN7NrRhqxtfbOdE96xhI2LM.roa
Signing time: Tue 28 May 2024 10:46:42 +0000
ROA not before: Tue 28 May 2024 10:46:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 62.201.192.0/24 maxlen: 24
62.201.199.0/24 maxlen: 24
62.201.200.0/24 maxlen: 24
62.201.201.0/24 maxlen: 24
62.201.202.0/24 maxlen: 24
62.201.203.0/24 maxlen: 24
62.201.204.0/24 maxlen: 24
62.201.205.0/24 maxlen: 24
62.201.207.0/24 maxlen: 24
62.201.208.0/24 maxlen: 24
62.201.210.0/24 maxlen: 24
62.201.216.0/24 maxlen: 24
62.201.237.0/24 maxlen: 24
62.201.248.0/24 maxlen: 24
185.90.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Dec 2024 11:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:be:cf:39:e5:b0:81:15:33:66:17:c7:5b:0a:5b:00:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: May 28 10:46:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e924ac0decdad186ac6d7db39d13deb1848d8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6e:4f:5b:1f:0d:2e:c1:b7:ca:d5:c3:ce:d3:
df:01:15:1d:dc:94:6f:54:c6:ab:1a:c4:1f:c5:26:
cd:b0:5f:72:7f:83:b0:95:6a:5e:02:54:b0:79:14:
57:fe:83:be:d8:89:c3:7d:df:16:03:48:96:d0:0e:
41:2d:50:b7:2b:1c:9b:c6:f8:c6:8c:f1:17:8d:3c:
86:ad:db:d1:c1:42:5d:a6:c9:76:6f:37:66:7f:14:
71:21:21:91:e0:25:ff:31:47:bc:4d:7c:93:f6:e2:
41:92:bb:41:0e:12:f3:08:06:fb:f8:c6:0e:03:b0:
06:7e:21:f1:ae:50:9a:13:74:15:d5:45:be:93:d7:
47:6e:f0:21:fd:76:7e:51:0c:f4:ba:57:8e:19:c3:
b9:b7:54:f9:84:58:a7:63:10:be:91:75:5d:56:1d:
1c:6f:f8:9b:8d:57:64:6d:62:35:42:f1:f4:d3:9a:
ad:b5:05:a9:3e:3c:7b:21:ea:5e:63:06:2d:34:6b:
9d:ee:86:db:f5:b4:a1:9c:32:dd:61:fc:fc:4f:5a:
04:1b:7d:4b:69:7b:91:8c:0c:42:9a:73:8c:76:34:
2d:67:c6:a7:25:e7:b1:41:cc:62:25:fb:1e:d3:95:
c6:94:76:ed:99:00:d1:e2:c2:21:05:a5:1c:4e:ea:
dc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:92:4A:C0:DE:CD:AD:18:6A:C6:D7:DB:39:D1:3D:EB:18:48:D8:B3
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/PpJKwN7NrRhqxtfbOdE96xhI2LM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.192.0/24
62.201.199.0-62.201.205.255
62.201.207.0-62.201.208.255
62.201.210.0/24
62.201.216.0/24
62.201.237.0/24
62.201.248.0/24
185.90.106.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:e4:4f:80:f9:42:f7:28:87:9f:84:f1:47:10:14:43:cf:92:
02:5d:52:e7:0e:82:aa:1e:bd:68:e2:81:d4:48:85:81:bd:d4:
39:20:4c:17:55:d2:d4:e5:66:f4:97:b4:71:d6:73:e9:a2:18:
d8:84:91:2e:ab:dd:1a:29:07:65:4b:9a:63:bb:6c:51:65:dd:
aa:85:51:ce:5e:9c:22:b8:06:1e:e8:a4:05:44:45:25:4f:aa:
7c:f4:3c:f3:6c:b6:e4:e7:4a:0a:a0:b4:e6:48:c6:40:f4:18:
14:17:cb:a7:14:16:ef:f7:7b:27:9b:fb:72:e4:68:94:db:b5:
d7:9e:f5:5c:ad:ef:05:57:97:9f:6d:23:78:f6:c1:42:c5:ca:
68:01:68:4c:a2:d5:aa:dc:72:70:fc:7f:e5:f8:0f:0b:85:2c:
7d:71:4d:7e:63:ee:eb:cb:cf:35:c3:a3:39:79:81:aa:d3:92:
b7:84:71:dc:f0:96:a5:2c:90:f5:25:86:aa:d4:db:d8:12:3f:
7e:be:b8:fe:a6:fd:d4:38:7f:f5:1c:7b:b3:5e:af:e8:37:2f:
88:3f:7d:49:ea:72:fe:62:ea:c7:6e:a1:8f:de:60:0d:c2:17:
11:6a:ac:14:11:86:35:46:ab:44:29:f0:ff:c8:68:23:d2:f1:
1b:fe:16:b4
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgISAY++zznlsIEVM2YXx1sKWwB1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OTJmZWRmNTljNjBkMzI1NGUzN2E5YzhlY2RlMTFjOWJh
MTI4MmEwHhcNMjQwNTI4MTA0NjQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTkyNGFjMGRlY2RhZDE4NmFjNmQ3ZGIzOWQxM2RlYjE4NDhkOGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy25PWx8NLsG3ytXDztPfARUd3JRv
VMarGsQfxSbNsF9yf4OwlWpeAlSweRRX/oO+2InDfd8WA0iW0A5BLVC3KxybxvjG
jPEXjTyGrdvRwUJdpsl2bzdmfxRxISGR4CX/MUe8TXyT9uJBkrtBDhLzCAb7+MYO
A7AGfiHxrlCaE3QV1UW+k9dHbvAh/XZ+UQz0uleOGcO5t1T5hFinYxC+kXVdVh0c
b/ibjVdkbWI1QvH005qttQWpPjx7IepeYwYtNGud7obb9bShnDLdYfz8T1oEG31L
aXuRjAxCmnOMdjQtZ8anJeexQcxiJfse05XGlHbtmQDR4sIhBaUcTurcvwIDAQAB
o4ICQzCCAj8wHQYDVR0OBBYEFD6SSsDeza0YasbX2znRPesYSNizMB8GA1UdIwQY
MBaAFDaS/t9Zxg0yVON6nI7N4RyboSgqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnBMLTMxbkdEVEpVNDNxY2pzM2hISnVoS0NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81YzVhZDAtZDJkYS00MGRiLTk1ZDEt
ZTdiZTVlMzBhZDJkLzEvUHBKS3dON05yUmhxeHRmYk9kRTk2eGhJMkxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi81YzVhZDAtZDJkYS00MGRiLTk1ZDEtZTdiZTVlMzBhZDJk
LzEvTnBMLTMxbkdEVEpVNDNxY2pzM2hISnVoS0NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwQAPsnAMAwD
BAA+yccDBAE+ycwwDAMEAD7JzwMEAD7J0AMEAD7J0gMEAD7J2AMEAD7J7QMEAD7J
+AMEALlaajANBgkqhkiG9w0BAQsFAAOCAQEAzeRPgPlC9yiHn4TxRxAUQ8+SAl1S
5w6Cqh69aOKB1EiFgb3UOSBMF1XS1OVm9Je0cdZz6aIY2ISRLqvdGikHZUuaY7ts
UWXdqoVRzl6cIrgGHuikBURFJU+qfPQ882y25OdKCqC05kjGQPQYFBfLpxQW7/d7
J5v7cuRolNu11571XK3vBVeXn20jePbBQsXKaAFoTKLVqtxycPx/5fgPC4UsfXFN
fmPu68vPNcOjOXmBqtOSt4Rx3PCWpSyQ9SWGqtTb2BI/fr64/qb91Dh/9Rx7s16v
6DcviD99Sepy/mLqx26hj95gDcIXEWqsFBGGNUarRCnw/8hoI9LxG/4WtA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:14 2025 by rpki-client