Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/cj3j3-bR7VQgB3gXYo2dmRq2UpQ.roa
File: cj3j3-bR7VQgB3gXYo2dmRq2UpQ.roa (raw, json)
Hash identifier: gKGZocs1spw2Gy440nE0GwLirEFHGrtOLlJSK8B32SQ=
Subject key identifier: 72:3D:E3:DF:E6:D1:ED:54:20:07:78:17:62:8D:9D:99:1A:B6:52:94
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 019468CC5DD1CB37F9691E22B7D2781E6465
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/cj3j3-bR7VQgB3gXYo2dmRq2UpQ.roa
Signing time: Wed 15 Jan 2025 07:10:11 +0000
ROA not before: Wed 15 Jan 2025 07:10:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41032
IP address blocks: 62.201.192.0/24 maxlen: 24
62.201.199.0/24 maxlen: 24
62.201.200.0/22 maxlen: 22
62.201.200.0/24 maxlen: 24
62.201.201.0/24 maxlen: 24
62.201.203.0/24 maxlen: 24
62.201.204.0/24 maxlen: 24
62.201.205.0/24 maxlen: 24
62.201.207.0/24 maxlen: 24
62.201.208.0/24 maxlen: 24
62.201.210.0/24 maxlen: 24
62.201.237.0/24 maxlen: 24
62.201.248.0/24 maxlen: 24
62.201.250.0/24 maxlen: 24
185.90.104.0/24 maxlen: 24
185.90.105.0/24 maxlen: 24
185.90.106.0/24 maxlen: 24
185.90.107.0/24 maxlen: 24
2a02:b60:1::/48 maxlen: 48
2a02:b60:2::/48 maxlen: 48
2a02:b60:3::/48 maxlen: 48
2a02:b60:4::/48 maxlen: 48
2a02:b60:5::/48 maxlen: 48
2a02:b60:6::/48 maxlen: 48
2a02:b60:7::/48 maxlen: 48
2a02:b60:8::/48 maxlen: 48
2a02:b60:9::/48 maxlen: 48
2a02:b60:a::/48 maxlen: 48
2a02:b60:b::/48 maxlen: 48
2a02:b60:c::/48 maxlen: 48
2a02:b60:d::/48 maxlen: 48
2a02:b60:e::/48 maxlen: 48
2a02:b60:2000::/35 maxlen: 35
2a02:b60:2000::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 09 Mar 2025 07:41:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:68:cc:5d:d1:cb:37:f9:69:1e:22:b7:d2:78:1e:64:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Jan 15 07:10:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=723de3dfe6d1ed5420077817628d9d991ab65294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3c:df:d5:3c:68:a1:ab:db:35:4c:99:25:1d:
13:c7:88:b7:61:de:db:b2:ac:a5:2a:b3:e6:11:a2:
da:91:5a:a7:34:b1:fc:23:fe:ab:8b:8f:83:02:f0:
66:eb:7b:8f:74:aa:57:24:a9:a9:2f:be:e7:39:99:
4d:85:65:31:dd:79:2f:66:59:5d:53:19:bb:77:28:
c5:3e:be:90:cc:69:38:41:f4:4c:eb:76:19:22:a4:
f0:5f:73:c3:ba:e0:b5:a7:d6:24:07:29:98:d4:3c:
9b:91:da:0e:56:b7:98:55:d3:74:79:bd:22:57:06:
55:4a:b1:c3:f8:8e:1f:22:05:c9:7f:72:ae:94:ce:
2a:3b:5d:af:97:a8:d5:de:f9:75:98:20:f5:c8:74:
8c:77:0d:36:ea:22:22:d2:ed:34:2f:ec:11:12:47:
bd:6b:30:33:91:f3:33:8b:e2:25:54:5b:35:d7:0e:
73:29:aa:46:db:14:86:b9:29:c2:e0:b0:79:c7:87:
10:18:39:75:c2:8c:c5:c1:21:00:6c:d0:18:66:3d:
01:1e:d2:89:cd:d3:95:84:b9:4b:94:c4:6c:aa:c8:
39:29:8a:d1:67:ba:92:61:27:db:6c:5f:dc:e5:e9:
05:8a:c7:1e:aa:b3:19:0a:9c:43:41:54:c8:6a:aa:
19:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3D:E3:DF:E6:D1:ED:54:20:07:78:17:62:8D:9D:99:1A:B6:52:94
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/cj3j3-bR7VQgB3gXYo2dmRq2UpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.192.0/24
62.201.199.0-62.201.205.255
62.201.207.0-62.201.208.255
62.201.210.0/24
62.201.237.0/24
62.201.248.0/24
62.201.250.0/24
185.90.104.0/22
IPv6:
2a02:b60:1::-2a02:b60:e:ffff:ffff:ffff:ffff:ffff
2a02:b60:2000::/35
Signature Algorithm: sha256WithRSAEncryption
da:01:9f:e9:64:ee:ae:cc:cf:14:9c:53:dd:0f:76:03:d4:c8:
ef:5b:72:46:ca:38:00:4c:ce:ab:a1:19:e5:2f:b0:c6:21:16:
5d:40:72:81:72:c0:eb:72:c3:a2:b6:f2:b0:ce:83:3c:ed:d4:
48:d5:41:41:7d:ff:08:e3:35:de:06:9a:70:f5:f8:54:be:cf:
d3:de:54:6b:21:03:6d:bd:d1:09:95:fd:16:a8:a1:8b:bd:7a:
a2:21:f1:68:f9:24:0c:a0:2b:9a:d6:83:2a:10:9f:a8:a4:0d:
33:15:40:4b:a7:82:d0:ba:2a:07:cf:15:99:b1:0b:d5:2c:86:
8b:f1:33:1e:95:fb:32:1c:b8:0b:de:ca:b8:40:02:2e:58:ab:
0d:10:48:5d:bb:6c:2b:70:e2:11:3f:5d:96:22:59:70:89:0e:
da:55:c9:25:c9:d4:eb:87:4e:11:2f:16:ce:27:cb:d2:52:4e:
93:03:24:83:29:66:90:5b:eb:92:d2:47:b8:24:96:13:d5:2d:
8a:a9:74:41:1e:5b:e8:11:35:66:f9:4d:20:4d:24:cc:ed:e0:
e7:ed:a4:25:85:86:49:ca:53:3e:44:21:b5:b6:89:0a:40:e6:
77:aa:39:b6:b1:97:08:d7:8e:0e:ab:af:01:fa:cf:c7:75:b6:
98:d4:39:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:13:28 2025 by rpki-client