Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/fSLZxjj03L5VDO1og-pteEfAeJU.roa
File: fSLZxjj03L5VDO1og-pteEfAeJU.roa (raw, json)
Hash identifier: Frv1y8FXmqHw6lbk8CKh17YOjojz8smDphmAwAR2Dl0=
Subject key identifier: 7D:22:D9:C6:38:F4:DC:BE:55:0C:ED:68:83:EA:6D:78:47:C0:78:95
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 019541E468048D011BF4F1E89329DF0FE981
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/fSLZxjj03L5VDO1og-pteEfAeJU.roa
Signing time: Wed 26 Feb 2025 10:54:02 +0000
ROA not before: Wed 26 Feb 2025 10:54:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62419
IP address blocks: 62.201.192.0/24 maxlen: 24
62.201.202.0/24 maxlen: 24
62.201.237.0/24 maxlen: 24
62.201.248.0/24 maxlen: 24
185.90.104.0/22 maxlen: 24
185.90.104.0/24 maxlen: 24
185.90.105.0/24 maxlen: 24
185.90.106.0/24 maxlen: 24
185.90.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Apr 2025 06:11:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:41:e4:68:04:8d:01:1b:f4:f1:e8:93:29:df:0f:e9:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Feb 26 10:54:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d22d9c638f4dcbe550ced6883ea6d7847c07895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d9:9a:9e:91:7e:8b:ce:ed:c1:94:6e:2b:8d:
e0:0f:ae:52:9d:58:2c:e8:19:e1:2d:fa:d3:0b:aa:
fd:11:12:c7:2e:6e:b1:5f:eb:7c:71:a7:b3:38:e7:
3f:d1:e0:64:4b:72:7c:0a:b4:2e:27:c3:0e:25:81:
53:fa:2b:15:48:0f:a8:9e:53:d8:31:a2:37:3c:9d:
b6:8b:ab:5e:1c:42:39:1f:87:cb:e8:d3:a0:03:2b:
af:3a:c6:50:9e:95:ab:55:07:2c:b4:a2:e0:a0:00:
ce:26:29:34:e1:26:f4:2e:11:aa:3c:72:d1:2b:ad:
c8:75:85:43:e4:88:c4:b1:33:f9:84:46:a4:51:8f:
e0:4d:f5:30:05:f5:b8:af:21:ad:16:e1:f0:2c:57:
f8:7f:b4:f6:66:e3:68:ed:03:06:49:6f:9b:8d:4e:
c5:be:8c:e1:2a:22:b0:11:90:e5:d4:27:30:f1:b0:
10:1e:37:7d:d4:e2:a2:17:6f:2b:ea:57:db:8f:f5:
33:30:35:d4:24:7c:ff:23:8e:1f:25:5d:07:ca:d3:
ea:e3:42:04:fd:1d:0d:fe:ab:73:aa:77:75:b8:69:
68:d1:e5:e3:8d:60:13:ba:59:50:ba:f2:16:a7:89:
78:a6:c8:61:82:a7:cc:ac:9f:e0:bc:78:c5:62:2b:
60:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:22:D9:C6:38:F4:DC:BE:55:0C:ED:68:83:EA:6D:78:47:C0:78:95
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/fSLZxjj03L5VDO1og-pteEfAeJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.192.0/24
62.201.202.0/24
62.201.237.0/24
62.201.248.0/24
185.90.104.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:3f:32:7c:1a:30:6b:ef:c3:36:87:ee:0f:10:35:f4:71:3e:
dd:76:c0:ed:40:df:6f:17:97:cf:3d:f4:44:95:5d:0b:92:44:
69:22:a7:53:8a:61:38:03:cb:bb:c5:61:63:ba:72:f3:b0:31:
8b:a9:d0:65:16:73:ad:c3:e8:5c:6a:2f:f3:f7:b5:36:58:f3:
e8:76:69:03:bb:50:66:a6:e8:8a:c9:58:0c:62:54:10:96:33:
ef:28:e1:19:58:af:80:b8:ed:99:43:f6:1c:fc:0b:30:9b:4b:
c8:49:c2:d3:31:ff:52:75:94:f7:86:3c:85:0e:70:0f:96:54:
72:5d:29:51:fc:f1:32:a4:c9:f8:77:ed:18:8f:9c:a1:76:e2:
c8:9d:e9:65:9a:78:0e:9c:69:55:c2:ee:4a:c0:49:42:62:ca:
24:bc:34:9c:8e:16:71:b7:0d:d4:d4:1f:08:4a:80:94:db:0e:
fa:c2:eb:92:1d:07:34:f0:56:e8:33:a2:7a:68:25:03:c1:4a:
25:34:08:7e:8c:fa:0e:65:fc:bc:d1:09:d8:f5:97:63:76:95:
6d:41:97:68:42:8d:2c:2f:e8:29:93:4a:e9:81:5e:2e:53:b5:
b8:c6:b5:ad:18:97:bb:4d:80:f6:66:1f:ec:d2:1c:d0:c4:da:
8d:40:73:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:08:49 2025 by rpki-client