Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/YQ6d4UOAgiPb-nMZ8enb3v4eK2s.roa
File: YQ6d4UOAgiPb-nMZ8enb3v4eK2s.roa (raw, json)
Hash identifier: oFBCe8b8uSAyANOghZWfF9V4Z0ZVbK+0YMKVN9FU80s=
Subject key identifier: 61:0E:9D:E1:43:80:82:23:DB:FA:73:19:F1:E9:DB:DE:FE:1E:2B:6B
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 0192944DFD274EB84C5095668CB325F61E15
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/YQ6d4UOAgiPb-nMZ8enb3v4eK2s.roa
Signing time: Wed 16 Oct 2024 07:49:51 +0000
ROA not before: Wed 16 Oct 2024 07:49:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44217
IP address blocks: 62.201.192.0/18 maxlen: 18
62.201.192.0/23 maxlen: 23
62.201.193.0/24 maxlen: 24
62.201.194.0/24 maxlen: 24
62.201.195.0/24 maxlen: 24
62.201.196.0/24 maxlen: 24
62.201.197.0/24 maxlen: 24
62.201.200.0/24 maxlen: 24
62.201.201.0/24 maxlen: 24
62.201.202.0/24 maxlen: 24
62.201.203.0/24 maxlen: 24
62.201.204.0/23 maxlen: 23
62.201.205.0/24 maxlen: 24
62.201.206.0/24 maxlen: 24
62.201.207.0/24 maxlen: 24
62.201.208.0/22 maxlen: 22
62.201.208.0/24 maxlen: 24
62.201.209.0/24 maxlen: 24
62.201.210.0/24 maxlen: 24
62.201.211.0/24 maxlen: 24
62.201.212.0/22 maxlen: 22
62.201.212.0/24 maxlen: 24
62.201.213.0/24 maxlen: 24
62.201.214.0/24 maxlen: 24
62.201.215.0/24 maxlen: 24
62.201.216.0/24 maxlen: 24
62.201.217.0/24 maxlen: 24
62.201.218.0/24 maxlen: 24
62.201.219.0/24 maxlen: 24
62.201.220.0/22 maxlen: 22
62.201.220.0/24 maxlen: 24
62.201.221.0/24 maxlen: 24
62.201.222.0/24 maxlen: 24
62.201.223.0/24 maxlen: 24
62.201.224.0/22 maxlen: 22
62.201.224.0/24 maxlen: 24
62.201.225.0/24 maxlen: 24
62.201.226.0/24 maxlen: 24
62.201.227.0/24 maxlen: 24
62.201.228.0/22 maxlen: 22
62.201.228.0/24 maxlen: 24
62.201.229.0/24 maxlen: 24
62.201.230.0/24 maxlen: 24
62.201.231.0/24 maxlen: 24
62.201.232.0/22 maxlen: 22
62.201.232.0/24 maxlen: 24
62.201.233.0/24 maxlen: 24
62.201.234.0/24 maxlen: 24
62.201.235.0/24 maxlen: 24
62.201.236.0/24 maxlen: 24
62.201.238.0/24 maxlen: 24
62.201.239.0/24 maxlen: 24
62.201.240.0/21 maxlen: 21
62.201.240.0/24 maxlen: 24
62.201.241.0/24 maxlen: 24
62.201.242.0/23 maxlen: 24
62.201.242.0/24 maxlen: 24
62.201.243.0/24 maxlen: 24
62.201.244.0/23 maxlen: 24
62.201.246.0/24 maxlen: 24
62.201.247.0/24 maxlen: 24
62.201.248.0/24 maxlen: 24
62.201.249.0/24 maxlen: 24
62.201.250.0/24 maxlen: 24
62.201.251.0/24 maxlen: 24
62.201.252.0/22 maxlen: 24
62.201.253.0/24 maxlen: 24
62.201.254.0/23 maxlen: 24
89.33.66.0/23 maxlen: 23
185.1.98.0/24 maxlen: 24
2a02:b60::/32 maxlen: 32
2a02:b60:0:f::/64 maxlen: 64
2a02:b60:20::/48 maxlen: 48
2a02:b60:2000::/35 maxlen: 35
2a02:b60:2000::/48 maxlen: 48
2a02:b60:2000:3::/64 maxlen: 64
2a02:b60:2010::/48 maxlen: 48
2a02:b60:4000::/34 maxlen: 34
2a02:b60:4000::/48 maxlen: 48
2a02:b60:4005::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 22 Oct 2024 09:39:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:94:4d:fd:27:4e:b8:4c:50:95:66:8c:b3:25:f6:1e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Oct 16 07:49:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=610e9de143808223dbfa7319f1e9dbdefe1e2b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fe:d0:78:07:f2:95:94:67:88:71:e8:e1:19:
eb:1a:8c:96:8d:50:08:0f:5c:ab:46:14:c4:08:8c:
52:16:16:f8:b3:6f:14:90:13:a2:55:70:17:a7:6e:
fb:eb:98:11:34:ed:03:5c:14:d9:49:4d:77:ef:81:
b8:56:e4:4e:a4:e3:d3:bd:9c:4f:23:0c:f0:08:e8:
cf:8f:85:b6:db:cf:22:d2:3b:2c:81:ca:8a:07:e1:
5a:3a:9e:90:ac:44:8d:b5:c0:07:2e:c0:4f:8e:ad:
6a:38:46:23:df:86:72:6e:28:3c:e1:c7:f0:ee:7c:
c1:7b:49:eb:c7:9b:37:c1:d6:96:6e:09:10:f4:64:
00:e5:2b:bc:55:1d:85:42:71:1a:36:aa:de:d1:09:
6c:cb:70:86:22:5b:0d:05:3e:5a:39:5a:ab:2f:87:
42:57:5c:79:36:ee:bd:f8:d4:96:32:87:58:7c:bb:
d0:f6:be:55:ff:29:cb:06:ed:0b:46:1d:f7:98:0f:
b7:11:2c:8c:7f:ca:af:24:69:2f:d3:c0:23:63:5a:
d8:cf:70:c8:c7:cb:d0:4d:fa:e9:a1:86:8e:0b:1c:
1b:fe:73:c0:b3:45:45:df:13:f0:6a:4f:60:5b:84:
19:80:32:5e:b9:6c:95:ea:d0:de:5d:50:62:3c:3f:
5a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0E:9D:E1:43:80:82:23:DB:FA:73:19:F1:E9:DB:DE:FE:1E:2B:6B
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/YQ6d4UOAgiPb-nMZ8enb3v4eK2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.192.0/18
89.33.66.0/23
185.1.98.0/24
IPv6:
2a02:b60::/32
Signature Algorithm: sha256WithRSAEncryption
44:55:2a:38:36:70:5b:92:3a:e6:80:4e:2f:79:39:64:d4:58:
89:5b:c6:78:6d:a2:a4:a6:ac:5c:dc:56:c1:1d:bb:63:63:ba:
6f:14:80:37:46:91:55:3f:7c:d3:69:d4:1f:74:13:e5:0f:31:
1b:bb:ff:40:dc:41:74:e0:5c:56:3c:f4:94:9b:a9:fc:c0:91:
c9:61:24:7f:fc:b6:f4:63:c9:b9:33:70:c0:7e:aa:c7:8d:79:
c2:91:3e:fd:db:e4:e6:6b:94:d2:0b:b1:53:94:dd:6a:59:c4:
dd:21:cc:d9:70:78:c8:97:91:50:e0:64:9d:2b:6d:c5:e1:99:
59:a2:af:c1:81:8a:cc:9e:3f:86:a3:4c:9c:e8:32:35:8c:c7:
c5:a4:cf:fa:ac:52:8b:05:cf:e8:3f:94:07:99:d5:19:29:98:
3a:d7:76:2e:49:9b:2b:fe:82:ae:0f:e8:8d:ee:9a:55:b1:b1:
1d:4e:74:77:9e:5e:93:fb:7c:03:fd:75:36:97:20:94:e6:1a:
6c:e5:a8:78:67:3a:5c:99:42:e0:1b:d1:f8:5b:50:56:5e:53:
41:f9:40:9d:0e:69:0b:cf:a6:bf:68:9f:72:c3:0d:76:67:15:
55:ad:57:f1:62:e5:eb:44:6b:1b:e2:b9:e8:52:14:90:43:06:
59:db:6f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 12:58:59 2025 by rpki-client