Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/VM4uoZorE4HG4KC8IADFbEqX3gk.roa
File: VM4uoZorE4HG4KC8IADFbEqX3gk.roa (raw, json)
Hash identifier: hd/qlJ8kNeJ6yNVo9y1AnUwW1mz/hchjYn0zlhWTQ/w=
Subject key identifier: 54:CE:2E:A1:9A:2B:13:81:C6:E0:A0:BC:20:00:C5:6C:4A:97:DE:09
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 0190BF5E1D557B1A5C1F1E689102F82BBD68
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/VM4uoZorE4HG4KC8IADFbEqX3gk.roa
Signing time: Wed 17 Jul 2024 06:25:34 +0000
ROA not before: Wed 17 Jul 2024 06:25:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44217
IP address blocks: 62.201.192.0/18 maxlen: 18
62.201.192.0/23 maxlen: 23
62.201.193.0/24 maxlen: 24
62.201.194.0/24 maxlen: 24
62.201.195.0/24 maxlen: 24
62.201.197.0/24 maxlen: 24
62.201.200.0/24 maxlen: 24
62.201.201.0/24 maxlen: 24
62.201.202.0/24 maxlen: 24
62.201.203.0/24 maxlen: 24
62.201.204.0/23 maxlen: 23
62.201.205.0/24 maxlen: 24
62.201.206.0/24 maxlen: 24
62.201.207.0/24 maxlen: 24
62.201.208.0/22 maxlen: 22
62.201.208.0/24 maxlen: 24
62.201.209.0/24 maxlen: 24
62.201.210.0/24 maxlen: 24
62.201.211.0/24 maxlen: 24
62.201.212.0/22 maxlen: 22
62.201.212.0/24 maxlen: 24
62.201.213.0/24 maxlen: 24
62.201.214.0/24 maxlen: 24
62.201.215.0/24 maxlen: 24
62.201.216.0/24 maxlen: 24
62.201.217.0/24 maxlen: 24
62.201.218.0/24 maxlen: 24
62.201.219.0/24 maxlen: 24
62.201.220.0/22 maxlen: 22
62.201.220.0/24 maxlen: 24
62.201.221.0/24 maxlen: 24
62.201.222.0/24 maxlen: 24
62.201.223.0/24 maxlen: 24
62.201.224.0/22 maxlen: 22
62.201.224.0/24 maxlen: 24
62.201.225.0/24 maxlen: 24
62.201.226.0/24 maxlen: 24
62.201.227.0/24 maxlen: 24
62.201.228.0/22 maxlen: 22
62.201.228.0/24 maxlen: 24
62.201.229.0/24 maxlen: 24
62.201.230.0/24 maxlen: 24
62.201.231.0/24 maxlen: 24
62.201.232.0/22 maxlen: 22
62.201.232.0/24 maxlen: 24
62.201.233.0/24 maxlen: 24
62.201.234.0/24 maxlen: 24
62.201.235.0/24 maxlen: 24
62.201.236.0/24 maxlen: 24
62.201.238.0/24 maxlen: 24
62.201.239.0/24 maxlen: 24
62.201.240.0/21 maxlen: 21
62.201.240.0/24 maxlen: 24
62.201.241.0/24 maxlen: 24
62.201.242.0/23 maxlen: 24
62.201.242.0/24 maxlen: 24
62.201.243.0/24 maxlen: 24
62.201.244.0/23 maxlen: 23
62.201.246.0/24 maxlen: 24
62.201.247.0/24 maxlen: 24
62.201.248.0/24 maxlen: 24
62.201.249.0/24 maxlen: 24
62.201.250.0/24 maxlen: 24
62.201.251.0/24 maxlen: 24
62.201.252.0/22 maxlen: 24
62.201.253.0/24 maxlen: 24
62.201.254.0/23 maxlen: 24
89.33.66.0/23 maxlen: 23
185.1.98.0/24 maxlen: 24
2a02:b60::/32 maxlen: 32
2a02:b60:0:f::/64 maxlen: 64
2a02:b60:20::/48 maxlen: 48
2a02:b60:2000::/35 maxlen: 35
2a02:b60:2000::/48 maxlen: 48
2a02:b60:2000:3::/64 maxlen: 64
2a02:b60:2010::/48 maxlen: 48
2a02:b60:4000::/34 maxlen: 34
2a02:b60:4000::/48 maxlen: 48
2a02:b60:4005::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 06 Oct 2024 08:05:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bf:5e:1d:55:7b:1a:5c:1f:1e:68:91:02:f8:2b:bd:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Jul 17 06:25:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54ce2ea19a2b1381c6e0a0bc2000c56c4a97de09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:99:18:d0:16:17:0a:a4:6b:25:57:b8:8f:a5:
0c:07:15:43:29:a2:53:2e:a5:41:7f:6c:9b:a9:d8:
0d:ac:0d:35:e9:da:e6:c7:0e:85:e8:c1:b2:3e:94:
39:ce:53:42:9a:e2:c7:7a:50:a0:1a:61:e7:90:58:
97:04:5f:82:be:b8:84:35:33:90:eb:59:70:54:a6:
44:88:75:13:04:49:3f:49:18:43:91:4d:47:17:e0:
b2:c7:e7:8c:25:4b:66:69:af:8f:47:ce:a5:0c:ee:
64:db:65:ab:34:de:e3:26:bb:e6:b3:19:71:5f:45:
ca:da:93:d1:94:31:a3:44:51:f2:3f:cf:08:89:9c:
d5:f3:3e:d7:27:cb:14:98:fc:d0:a7:ae:39:e5:e9:
ef:b2:14:dd:1c:2a:29:33:29:04:aa:59:bd:9c:53:
20:39:e3:70:22:16:4c:f7:e9:07:41:f3:22:23:53:
65:2b:f6:6e:77:d3:ed:61:83:fe:4a:ff:62:bd:72:
13:6a:ca:d7:18:42:f4:d5:8d:ad:d6:59:2d:d0:cd:
d0:fb:f4:80:ce:24:c4:81:13:86:a6:cc:58:ea:c5:
c1:60:06:0b:86:89:3b:b5:a3:58:b6:ec:66:f7:e5:
24:52:8e:f3:10:fc:e4:55:d6:b1:81:af:26:bb:49:
2c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CE:2E:A1:9A:2B:13:81:C6:E0:A0:BC:20:00:C5:6C:4A:97:DE:09
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/VM4uoZorE4HG4KC8IADFbEqX3gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.192.0/18
89.33.66.0/23
185.1.98.0/24
IPv6:
2a02:b60::/32
Signature Algorithm: sha256WithRSAEncryption
c9:2b:da:7c:09:1a:aa:7a:dd:ab:3a:5e:56:3e:7a:58:1f:03:
6f:a4:ef:ce:58:5c:41:02:89:d9:66:09:cd:b9:71:22:6c:be:
4b:af:b2:99:3e:bf:21:7d:e3:46:8b:5b:d6:00:87:81:09:34:
be:1a:75:63:30:f1:31:a4:60:1e:d6:8e:19:a0:5d:bf:c8:f0:
b5:ac:c1:72:26:a4:0f:4c:35:e8:18:c8:b3:45:76:c9:c2:0c:
ba:af:9b:65:41:40:fc:cd:a6:02:20:45:7a:04:ba:58:c5:32:
50:66:8e:45:5f:bb:e7:26:da:25:30:b3:8d:2c:c9:b6:5d:f6:
60:38:5a:22:6c:9a:f5:2f:05:eb:84:38:b2:30:86:5c:0d:97:
42:d2:55:fb:6a:57:6b:47:8c:ae:72:34:75:6a:c0:06:d3:5e:
b0:0e:d2:19:61:06:e0:ca:79:1c:7f:f6:49:4b:e3:99:e0:6f:
dd:c1:e0:d2:6b:2d:90:5a:93:f8:56:be:b5:74:84:15:f1:ec:
d3:4e:85:39:40:64:5f:d6:fa:52:21:91:04:e9:25:26:76:f1:
1f:f3:8e:42:fe:86:b3:44:1f:4e:46:b3:64:ca:db:eb:94:ce:
90:83:ae:bf:a0:43:bc:3f:b4:1f:1e:3f:fb:18:4b:b7:16:d2:
9b:14:1d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:03:37 2025 by rpki-client