Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/ZTtS_KFDYrFajwzmQlp7g4nyIEU.roa
File: ZTtS_KFDYrFajwzmQlp7g4nyIEU.roa (raw, json)
Hash identifier: P76RIhHySXm494WDDNWzKV3HHRS7znBKKEXTc6xoFfo=
Subject key identifier: 65:3B:52:FC:A1:43:62:B1:5A:8F:0C:E6:42:5A:7B:83:89:F2:20:45
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 01941FFA9E9B72C6448574C4329670F06835
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/ZTtS_KFDYrFajwzmQlp7g4nyIEU.roa
Signing time: Wed 01 Jan 2025 03:48:25 +0000
ROA not before: Wed 01 Jan 2025 03:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62419
IP address blocks: 62.201.192.0/24 maxlen: 24
62.201.237.0/24 maxlen: 24
62.201.248.0/24 maxlen: 24
185.90.104.0/22 maxlen: 24
185.90.104.0/24 maxlen: 24
185.90.105.0/24 maxlen: 24
185.90.106.0/24 maxlen: 24
185.90.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Feb 2025 10:54:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9e:9b:72:c6:44:85:74:c4:32:96:70:f0:68:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Jan 1 03:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=653b52fca14362b15a8f0ce6425a7b8389f22045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0c:57:62:34:39:66:24:da:6f:d1:84:8d:28:
8a:83:d1:c8:d2:de:6f:66:eb:30:16:aa:45:ca:ee:
ea:d5:f0:d8:b2:5f:59:f7:34:d1:03:21:ed:f8:f8:
58:da:f8:e3:ae:be:ba:78:20:15:67:df:31:7f:91:
41:b0:5a:42:e6:e7:e4:3d:cd:c4:b7:59:d9:d6:48:
bb:aa:7b:9b:0a:04:8d:c3:84:e9:36:2e:67:35:fa:
ab:af:80:ca:b6:83:b2:bf:d9:d5:1a:13:55:70:ea:
6c:36:da:da:66:b4:59:f5:09:ab:d7:a8:fe:61:fc:
01:3c:64:a8:c1:9a:7c:ba:15:51:43:db:35:27:70:
3e:94:5f:e3:d5:cc:4e:c8:11:74:17:d0:b6:f0:80:
cd:b5:f4:da:c9:d7:59:99:0b:4a:2c:86:3e:2d:46:
99:35:11:fb:b9:dd:6b:00:f0:63:9b:73:12:81:68:
77:63:b2:f9:cd:d7:86:30:05:56:7d:8a:ea:fd:83:
56:9e:76:82:91:dc:12:e5:b3:5f:ee:14:ee:00:45:
50:37:a9:88:0a:4b:62:9e:be:c2:cb:1c:3d:70:52:
b9:79:c8:7e:6d:94:6a:99:e4:f1:10:fd:eb:ee:41:
7f:7b:64:ed:7e:9b:b7:90:83:1b:78:9b:52:78:bb:
f5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3B:52:FC:A1:43:62:B1:5A:8F:0C:E6:42:5A:7B:83:89:F2:20:45
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/ZTtS_KFDYrFajwzmQlp7g4nyIEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.192.0/24
62.201.237.0/24
62.201.248.0/24
185.90.104.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:0f:dc:3c:ed:d5:78:a1:bc:f9:7e:ad:b4:51:9c:68:ce:03:
5c:40:6d:de:3a:f1:3b:67:f5:4e:5c:79:0f:22:b4:81:51:6b:
53:09:6d:31:1a:a3:d1:6a:6f:ca:1a:51:db:90:8f:b8:9f:4a:
c0:ad:7d:20:89:b4:2f:35:07:18:c6:17:d7:7a:8b:b1:5a:10:
1f:6e:2d:38:54:19:39:e6:ec:06:a3:4b:70:a5:46:fc:e2:38:
71:42:0e:a9:9d:2b:f4:4d:34:e2:14:77:de:f3:d7:f6:08:39:
49:65:47:b5:bf:6f:61:70:6a:89:04:b0:5d:69:67:36:6e:11:
23:03:6c:fd:3d:47:e9:5d:17:c8:39:f8:16:7f:39:2c:53:e6:
5f:03:a8:52:ab:c1:7c:64:ec:34:ea:bd:da:c9:a1:5f:3b:32:
58:70:58:39:db:68:e1:c4:f2:63:a5:0d:0e:0c:0d:b0:44:1c:
3f:ec:9e:2a:4c:fb:ec:3e:bb:fd:6c:46:1b:61:37:15:d5:e0:
93:59:06:c2:67:ec:95:3d:09:d0:3a:a0:15:16:aa:c9:19:a6:
f9:54:62:14:cf:24:35:eb:0f:6b:7d:96:9e:91:5d:77:27:cf:
60:c8:de:f1:c5:f3:3b:15:e7:bb:94:81:38:67:ea:02:ec:1f:
2e:96:b0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:22:49 2025 by rpki-client