Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/Tpwox2GQ-yJ9HLWTRaWxH8d5qV0.roa
File: Tpwox2GQ-yJ9HLWTRaWxH8d5qV0.roa (raw, json)
Hash identifier: ELzt8M4VFQ/L4bb+D2lW/LhS/rAc5G57DwvGblT3dfY=
Subject key identifier: 4E:9C:28:C7:61:90:FB:22:7D:1C:B5:93:45:A5:B1:1F:C7:79:A9:5D
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 01941FFA9B15EDA1978595B21C9E4DB11910
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/Tpwox2GQ-yJ9HLWTRaWxH8d5qV0.roa
Signing time: Wed 01 Jan 2025 03:48:24 +0000
ROA not before: Wed 01 Jan 2025 03:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 62.201.192.0/24 maxlen: 24
62.201.199.0/24 maxlen: 24
62.201.200.0/24 maxlen: 24
62.201.201.0/24 maxlen: 24
62.201.203.0/24 maxlen: 24
62.201.204.0/24 maxlen: 24
62.201.205.0/24 maxlen: 24
62.201.207.0/24 maxlen: 24
62.201.208.0/24 maxlen: 24
62.201.237.0/24 maxlen: 24
62.201.248.0/24 maxlen: 24
185.90.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Apr 2025 06:11:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9b:15:ed:a1:97:85:95:b2:1c:9e:4d:b1:19:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Jan 1 03:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e9c28c76190fb227d1cb59345a5b11fc779a95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:10:35:b3:17:07:20:41:15:4f:5a:9c:ff:f6:
5b:76:97:e7:89:ae:e1:cc:15:95:fd:6c:60:b8:b5:
32:ca:24:27:24:2b:f2:1c:79:54:23:51:bc:6f:7e:
a9:d1:9a:04:bf:d2:34:8d:f6:41:75:c8:bd:11:8f:
e8:53:9f:68:64:c6:6e:7e:95:77:05:ea:94:53:ff:
bb:42:f2:ef:72:52:6e:57:ed:54:76:2e:33:78:ff:
1e:64:6e:58:d6:f4:34:48:19:e3:5f:f9:f0:02:9e:
f1:28:fc:8b:c4:34:41:63:da:e3:23:cf:57:e8:6a:
c3:ed:56:7a:23:ae:19:bc:4d:fc:ef:9e:e8:52:b2:
eb:34:39:7d:95:69:f6:e5:cd:bc:3e:bf:b2:07:18:
45:b3:c9:30:c0:9a:9b:18:dc:89:56:22:61:7d:0b:
db:4b:19:83:77:41:dc:f7:aa:5a:97:ac:f1:d1:7b:
6b:25:4a:30:f9:97:5e:21:a3:f3:d4:61:ef:17:1f:
7e:2d:5f:4d:e3:df:c9:e0:2d:2f:8c:69:23:de:24:
bc:5c:8c:6a:93:fa:79:46:c8:e8:14:16:e6:32:af:
2a:d3:1c:ee:88:15:6a:24:cc:b0:1e:39:2d:43:2f:
84:43:51:a1:3b:42:66:2d:70:c8:86:57:05:95:6c:
0e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9C:28:C7:61:90:FB:22:7D:1C:B5:93:45:A5:B1:1F:C7:79:A9:5D
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/Tpwox2GQ-yJ9HLWTRaWxH8d5qV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.192.0/24
62.201.199.0-62.201.201.255
62.201.203.0-62.201.205.255
62.201.207.0-62.201.208.255
62.201.237.0/24
62.201.248.0/24
185.90.106.0/24
Signature Algorithm: sha256WithRSAEncryption
62:60:56:62:84:28:65:e5:09:a8:3a:ab:22:b5:1d:f2:cd:ff:
56:27:1a:86:bf:51:1a:0c:e9:31:ec:4f:a9:d7:8f:e3:55:88:
d1:47:a5:53:28:99:e2:5c:9d:49:ed:ae:44:b9:a8:09:39:3b:
53:0e:b8:b5:9e:68:06:a9:00:a7:4a:c2:76:6f:c2:83:d4:4d:
4c:03:38:d8:e4:a5:7e:12:4c:bb:0c:2c:23:e9:f3:fc:d9:d8:
a9:a8:b2:ee:53:92:bc:39:00:e7:54:2b:bf:7c:fb:df:8c:63:
a8:bc:6c:f4:09:e9:90:a6:f7:ee:0f:d0:da:08:42:57:c1:81:
9e:a7:37:a9:e0:42:cf:eb:ea:a6:7d:70:aa:2d:39:3d:8f:8a:
87:da:7a:3e:25:b0:67:08:98:65:e3:2b:a4:9f:87:52:6d:83:
24:4f:c6:ff:d9:de:0c:c6:58:25:e9:61:e9:66:55:79:2b:90:
76:bc:c6:fa:40:11:72:2a:dd:96:5b:14:07:ce:c1:62:b4:e9:
07:2b:64:21:35:40:b0:0e:f7:44:0b:98:0a:0f:19:97:d3:9a:
74:0c:54:7f:85:9f:10:9f:52:b6:66:d9:d8:d1:84:ed:d7:17:
2d:c2:18:a4:a2:a5:cf:72:57:67:06:bd:5c:09:a2:52:bb:c8:
77:ee:e7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:48:12 2025 by rpki-client