Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/dS4S2-3OdonUzjhRPPUUWsuPeLI.roa
File: dS4S2-3OdonUzjhRPPUUWsuPeLI.roa (raw, json)
Hash identifier: Ew/URFjEgoK+Kx3wHqK3bH6UvYlRxO97ULpfBGE+spo=
Subject key identifier: 75:2E:12:DB:ED:CE:76:89:D4:CE:38:51:3C:F5:14:5A:CB:8F:78:B2
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 018D4FA48A1CF88DB7FF1988807502249152
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/dS4S2-3OdonUzjhRPPUUWsuPeLI.roa
Signing time: Sun 28 Jan 2024 10:36:39 +0000
ROA not before: Sun 28 Jan 2024 10:36:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41032
IP address blocks: 62.201.192.0/24 maxlen: 24
62.201.196.0/24 maxlen: 24
62.201.199.0/24 maxlen: 24
62.201.200.0/22 maxlen: 22
62.201.200.0/24 maxlen: 24
62.201.201.0/24 maxlen: 24
62.201.202.0/24 maxlen: 24
62.201.203.0/24 maxlen: 24
62.201.204.0/24 maxlen: 24
62.201.205.0/24 maxlen: 24
62.201.207.0/24 maxlen: 24
62.201.208.0/24 maxlen: 24
62.201.210.0/24 maxlen: 24
62.201.211.0/24 maxlen: 24
62.201.216.0/24 maxlen: 24
62.201.237.0/24 maxlen: 24
62.201.248.0/24 maxlen: 24
62.201.250.0/24 maxlen: 24
185.90.104.0/24 maxlen: 24
185.90.105.0/24 maxlen: 24
185.90.106.0/24 maxlen: 24
185.90.107.0/24 maxlen: 24
2a02:b60:2000::/35 maxlen: 35
2a02:b60:2000::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 16 May 2024 12:38:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:4f:a4:8a:1c:f8:8d:b7:ff:19:88:80:75:02:24:91:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Jan 28 10:36:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=752e12dbedce7689d4ce38513cf5145acb8f78b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:be:1d:c5:5e:3a:84:37:69:85:f9:7d:b4:c3:
f6:f2:4c:5a:f8:66:f2:27:e1:58:7c:53:c1:9f:2b:
4d:01:a3:99:18:17:c2:ac:55:1f:a1:b6:19:90:49:
9f:1f:df:53:7e:16:e4:1e:6b:0f:7a:57:cb:6b:a3:
ca:12:31:84:0d:69:50:98:fe:a0:a1:d2:e2:ad:8b:
96:fc:66:f9:52:ac:a0:27:86:dc:15:63:1a:22:5d:
37:94:16:16:1a:6c:23:86:38:c8:11:ae:db:38:f0:
ef:6c:b2:5b:f4:78:c2:30:c2:ea:b0:16:2b:10:8a:
03:76:75:5a:7a:b1:51:c1:5c:ba:f3:e9:2f:b5:b6:
d4:2b:20:ba:4c:84:e3:55:d1:dc:fa:41:c5:e4:6e:
0b:64:d1:35:5e:95:be:0c:37:7b:4a:1c:63:96:3e:
9e:7c:a6:4c:86:67:c1:4a:ec:30:9d:d2:16:6e:31:
26:22:a2:c2:76:cb:c7:3c:f6:1d:8d:5c:45:0b:1e:
06:12:09:09:b4:2c:fa:8c:c1:4d:0e:25:d8:49:7c:
04:35:eb:e1:ea:6d:ee:4f:3d:6c:05:bf:53:30:55:
1c:55:50:f2:70:5e:ed:24:73:14:b8:2f:03:73:a3:
3c:1f:a1:11:cc:da:f5:00:57:05:48:3d:b7:2c:85:
a2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2E:12:DB:ED:CE:76:89:D4:CE:38:51:3C:F5:14:5A:CB:8F:78:B2
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/dS4S2-3OdonUzjhRPPUUWsuPeLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.192.0/24
62.201.196.0/24
62.201.199.0-62.201.205.255
62.201.207.0-62.201.208.255
62.201.210.0/23
62.201.216.0/24
62.201.237.0/24
62.201.248.0/24
62.201.250.0/24
185.90.104.0/22
IPv6:
2a02:b60:2000::/35
Signature Algorithm: sha256WithRSAEncryption
9e:e5:13:c8:e8:21:16:b1:30:68:81:91:ed:48:05:30:cd:9f:
e1:7f:f9:76:5a:f5:5a:ae:cb:ce:d3:60:3d:fc:a8:14:0c:d1:
c2:f7:30:2e:8f:e1:9d:40:3f:e9:5c:c6:2a:96:bb:2f:b2:4a:
8f:6d:19:3f:83:4a:ac:ec:ac:2c:d8:33:ce:63:1e:e2:f4:9d:
56:f7:b4:7d:23:36:a1:8b:fb:44:ad:8a:34:ac:01:4b:09:2f:
85:e2:9e:72:29:d5:db:90:e1:8d:6a:00:2b:86:d3:b9:9f:84:
1d:ca:a9:11:1e:af:6b:f9:b0:41:04:85:56:62:c6:bc:5d:2e:
b3:4e:2e:fa:f1:bb:c7:16:4d:2f:67:d1:71:0a:d5:b1:dc:64:
71:07:c6:a7:a4:a2:21:f4:55:dd:a9:69:54:a2:85:dd:92:92:
8f:a3:b2:13:4b:f8:2c:91:16:85:09:53:4d:c9:cd:af:68:bb:
a0:39:b2:09:b8:2e:9f:11:12:87:a6:bd:80:5a:95:11:12:0a:
1d:d0:46:89:fc:9d:09:cc:98:54:4c:3d:7b:36:28:26:a1:e9:
f7:49:c6:e4:8b:e9:a7:55:64:74:60:ce:53:8a:c9:49:d9:a4:
35:cd:7f:f1:0f:ff:ba:05:ed:1e:36:d3:87:53:2b:d8:96:34:
39:f3:cb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:18:07 2025 by rpki-client