Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/cBz0OAeYHmdrc4eAGLdSdP_-i5A.roa
File: cBz0OAeYHmdrc4eAGLdSdP_-i5A.roa (raw, json)
Hash identifier: aT9OHwfnDNAfwVmrS6X9/gLlgyBJpBlHIvfIeNWwYzA=
Subject key identifier: 70:1C:F4:38:07:98:1E:67:6B:73:87:80:18:B7:52:74:FF:FE:8B:90
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 018CC4253E7C0E56F18466130AEDE4C0E029
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/cBz0OAeYHmdrc4eAGLdSdP_-i5A.roa
Signing time: Mon 01 Jan 2024 08:30:24 +0000
ROA not before: Mon 01 Jan 2024 08:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62419
IP address blocks: 62.201.237.0/24 maxlen: 24
185.90.104.0/22 maxlen: 24
185.90.104.0/24 maxlen: 24
185.90.105.0/24 maxlen: 24
62.201.248.0/24 maxlen: 24
185.90.106.0/24 maxlen: 24
185.90.107.0/24 maxlen: 24
62.201.192.0/24 maxlen: 24
62.201.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 07:32:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:3e:7c:0e:56:f1:84:66:13:0a:ed:e4:c0:e0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Jan 1 08:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=701cf43807981e676b73878018b75274fffe8b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1e:e2:c6:37:fb:1c:70:61:06:2c:3a:51:ee:
f5:5f:3e:5e:89:66:e3:93:bc:cf:d2:97:de:91:c9:
91:fd:34:de:76:25:b1:ce:ba:fd:65:a6:9e:30:db:
fc:a2:74:68:5c:8e:cc:de:9b:28:c2:2d:8d:6f:bd:
27:c7:c7:fe:18:65:c5:5f:77:c9:4f:43:83:a1:4c:
2f:e3:15:9e:61:68:37:3c:23:9a:99:29:f8:06:9e:
9b:05:fb:57:33:20:1d:b4:c2:bb:d0:dd:09:64:bf:
8c:b7:67:4a:30:79:dd:5c:6e:5c:f5:75:eb:b4:a5:
55:5a:46:4f:8a:5d:a2:32:91:06:03:ff:2d:4f:9e:
17:2a:fe:0c:0d:ad:91:67:41:38:cb:a3:0e:f3:2f:
e4:80:be:c8:9e:0e:7d:ee:14:c8:8f:44:f2:25:fb:
e8:19:16:63:f8:47:33:88:a0:d4:cd:38:14:85:12:
1b:3c:b8:45:e8:f6:81:93:6d:c4:1c:55:52:bd:23:
87:91:88:1c:fb:b6:89:29:ad:ef:3e:b4:ee:6c:70:
b3:cf:90:9f:04:d4:ac:37:02:32:1e:25:f0:79:7a:
5a:94:bb:58:64:22:95:8e:82:b8:52:dd:28:e7:07:
c0:a9:6a:eb:0b:65:4b:b5:aa:b8:9b:a8:79:28:0d:
18:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1C:F4:38:07:98:1E:67:6B:73:87:80:18:B7:52:74:FF:FE:8B:90
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/cBz0OAeYHmdrc4eAGLdSdP_-i5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.192.0/24
62.201.206.0/24
62.201.237.0/24
62.201.248.0/24
185.90.104.0/22
Signature Algorithm: sha256WithRSAEncryption
df:b6:95:50:4d:8e:5a:db:d0:df:26:65:d9:ea:6f:f9:6c:06:
fa:f7:f1:86:86:ff:72:c9:7b:b0:31:b3:23:3a:e2:87:dc:90:
27:d9:e8:b5:10:98:49:68:25:69:57:fd:71:8a:1e:f1:9e:45:
2b:b6:5b:8a:7a:f4:45:62:69:ed:cd:4c:d7:91:44:fb:93:6e:
1b:ad:1e:81:06:07:6b:ad:af:9f:13:7e:f2:84:9a:21:d7:16:
ae:60:39:89:71:6b:3d:ed:a0:36:32:e9:73:19:35:86:85:64:
db:a8:80:d0:88:64:56:a5:dc:22:01:5f:38:3c:ed:85:ac:0c:
71:11:7f:7f:9e:9e:b3:ce:66:b1:d6:b2:ea:7f:f8:52:d1:cf:
32:79:d4:8d:52:e7:74:b8:6f:78:c6:43:6b:f9:19:22:de:af:
df:15:f6:58:30:55:40:e2:28:35:50:ed:2e:ce:27:1f:60:38:
56:f3:0c:30:7c:1f:24:15:1b:7f:7e:0f:b2:8f:0d:eb:4c:58:
13:16:89:b3:af:67:35:c1:f3:cf:03:6e:57:51:06:2b:c1:83:
7f:93:de:f8:ae:ef:19:26:98:c8:73:48:f4:40:85:55:6b:19:
c3:8d:14:5b:a8:e3:43:3f:32:8a:bc:3c:c8:2a:f6:df:9a:68:
89:81:96:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 12:58:57 2025 by rpki-client