Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/gW5GgyI6wFyZTOTJvaJ2aIDN6kE.roa
File: gW5GgyI6wFyZTOTJvaJ2aIDN6kE.roa (raw, json)
Hash identifier: LUulPMuT0RdnWBM0QWrtWcaJcEwvbienYrJf/U/eSKQ=
Subject key identifier: 81:6E:46:83:22:3A:C0:5C:99:4C:E4:C9:BD:A2:76:68:80:CD:EA:41
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 018CC4253D7BD3DFCB7BD574B067EAA23FDD
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/gW5GgyI6wFyZTOTJvaJ2aIDN6kE.roa
Signing time: Mon 01 Jan 2024 08:30:24 +0000
ROA not before: Mon 01 Jan 2024 08:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41032
IP address blocks: 185.90.104.0/24 maxlen: 24
185.90.105.0/24 maxlen: 24
185.90.107.0/24 maxlen: 24
185.90.106.0/24 maxlen: 24
62.201.237.0/24 maxlen: 24
62.201.248.0/24 maxlen: 24
62.201.250.0/24 maxlen: 24
62.201.249.0/24 maxlen: 24
62.201.192.0/24 maxlen: 24
62.201.196.0/24 maxlen: 24
62.201.199.0/24 maxlen: 24
62.201.203.0/24 maxlen: 24
62.201.202.0/24 maxlen: 24
62.201.205.0/24 maxlen: 24
62.201.204.0/24 maxlen: 24
62.201.200.0/24 maxlen: 24
62.201.201.0/24 maxlen: 24
62.201.206.0/24 maxlen: 24
62.201.210.0/24 maxlen: 24
62.201.209.0/24 maxlen: 24
62.201.211.0/24 maxlen: 24
62.201.207.0/24 maxlen: 24
62.201.208.0/24 maxlen: 24
62.201.216.0/24 maxlen: 24
2a02:b60:2000::/35 maxlen: 35
2a02:b60:2000::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 10 Jan 2024 07:32:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:3d:7b:d3:df:cb:7b:d5:74:b0:67:ea:a2:3f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Jan 1 08:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=816e4683223ac05c994ce4c9bda2766880cdea41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3f:21:8f:9a:4a:2c:6c:40:35:36:03:a3:9b:
9d:e9:77:92:f4:10:07:c5:25:65:4a:af:52:e7:7c:
b6:91:4b:4d:6e:be:3d:ff:46:eb:9c:7c:17:2c:ae:
49:7e:3e:9b:61:d8:e5:7a:45:62:c9:90:96:ab:5f:
65:6f:e6:61:70:e3:a1:09:bc:b3:2b:72:f8:46:91:
2a:96:af:46:b5:b2:f5:c8:15:57:e4:ca:fa:3d:7a:
4e:82:f1:c3:9d:38:19:cd:68:14:f5:49:90:21:c0:
24:40:6a:e5:ec:6c:a5:b8:c0:a8:00:f2:31:4d:43:
a3:c0:31:06:c4:2b:7a:3d:6d:70:9d:de:96:50:c7:
b0:60:59:b8:9a:66:e7:e0:3c:b5:28:52:1d:58:49:
1a:1b:b3:13:54:47:fd:55:92:8e:78:ea:b5:33:92:
81:83:25:65:46:c9:47:07:05:e0:6f:a2:b3:da:76:
61:d2:df:37:b5:75:5d:f0:58:20:22:76:d3:e8:82:
bf:f7:59:69:79:c7:96:15:3c:0c:d6:a9:fe:a9:99:
70:c9:a9:6b:55:84:35:a0:c8:da:5a:3e:aa:75:87:
1f:ed:24:da:a3:e9:bf:42:1d:55:48:08:61:87:1f:
ba:14:18:e2:46:b0:39:1b:01:e8:4d:31:42:58:55:
39:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6E:46:83:22:3A:C0:5C:99:4C:E4:C9:BD:A2:76:68:80:CD:EA:41
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/gW5GgyI6wFyZTOTJvaJ2aIDN6kE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.192.0/24
62.201.196.0/24
62.201.199.0-62.201.211.255
62.201.216.0/24
62.201.237.0/24
62.201.248.0-62.201.250.255
185.90.104.0/22
IPv6:
2a02:b60:2000::/35
Signature Algorithm: sha256WithRSAEncryption
e4:d1:7d:86:f1:12:14:a6:93:a4:02:33:9f:9d:2b:52:80:72:
46:5d:a5:cb:25:e5:7a:a7:f8:55:04:ae:92:94:c8:ee:fd:c6:
10:a3:cb:20:60:59:6a:63:ae:05:07:93:14:0d:84:0c:ca:6b:
a4:f7:93:03:60:e3:21:cc:9a:36:7e:0e:7e:16:87:1e:ef:ec:
0a:2b:af:fc:d7:b6:78:92:6d:c7:5b:fa:57:d2:f8:ae:ab:bf:
3c:40:50:96:a5:66:11:f9:e7:75:c8:2f:47:61:cf:88:33:6e:
51:36:68:dc:a8:09:db:df:40:41:64:e9:7e:e7:ef:d3:6b:e1:
2f:96:2c:ea:e5:48:62:af:b5:e7:be:f7:c1:67:85:ba:a4:fe:
e7:ff:69:69:3a:f0:d5:b5:95:18:23:2d:ef:ed:91:9c:1f:7d:
d2:36:fb:a6:00:dd:9b:46:3e:b5:65:3a:7d:f9:a9:8b:29:fd:
f3:e2:bf:8c:0d:c8:8a:1b:92:5a:77:7c:00:48:25:da:98:7e:
ff:75:a2:20:61:5b:19:c2:1f:1d:f8:ab:6c:61:d8:f1:2d:f7:
82:64:ad:bf:e9:a4:fd:35:ed:5f:00:c7:28:2f:09:4e:f1:15:
3e:b6:cc:9b:0c:45:6b:ab:f6:3b:64:ef:57:c7:74:b1:fa:e2:
56:b7:d6:72
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgISAYzEJT1709/Le9V0sGfqoj/dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OTJmZWRmNTljNjBkMzI1NGUzN2E5YzhlY2RlMTFjOWJh
MTI4MmEwHhcNMjQwMTAxMDgzMDI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTZlNDY4MzIyM2FjMDVjOTk0Y2U0YzliZGEyNzY2ODgwY2RlYTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj8hj5pKLGxANTYDo5ud6XeS9BAH
xSVlSq9S53y2kUtNbr49/0brnHwXLK5Jfj6bYdjlekViyZCWq19lb+ZhcOOhCbyz
K3L4RpEqlq9GtbL1yBVX5Mr6PXpOgvHDnTgZzWgU9UmQIcAkQGrl7GyluMCoAPIx
TUOjwDEGxCt6PW1wnd6WUMewYFm4mmbn4Dy1KFIdWEkaG7MTVEf9VZKOeOq1M5KB
gyVlRslHBwXgb6Kz2nZh0t83tXVd8FggInbT6IK/91lpeceWFTwM1qn+qZlwyalr
VYQ1oMjaWj6qdYcf7STao+m/Qh1VSAhhhx+6FBjiRrA5GwHoTTFCWFU5FwIDAQAB
o4ICTTCCAkkwHQYDVR0OBBYEFIFuRoMiOsBcmUzkyb2idmiAzepBMB8GA1UdIwQY
MBaAFDaS/t9Zxg0yVON6nI7N4RyboSgqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnBMLTMxbkdEVEpVNDNxY2pzM2hISnVoS0NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81YzVhZDAtZDJkYS00MGRiLTk1ZDEt
ZTdiZTVlMzBhZDJkLzEvZ1c1R2d5STZ3RnlaVE9USnZhSjJhSURONmtFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi81YzVhZDAtZDJkYS00MGRiLTk1ZDEtZTdiZTVlMzBhZDJk
LzEvTnBMLTMxbkdEVEpVNDNxY2pzM2hISnVoS0NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBABAIAATA6AwQAPsnAAwQA
PsnEMAwDBAA+yccDBAI+ydADBAA+ydgDBAA+ye0wDAMEAz7J+AMEAD7J+gMEArla
aDAOBAIAAjAIAwYFKgILYCAwDQYJKoZIhvcNAQELBQADggEBAOTRfYbxEhSmk6QC
M5+dK1KAckZdpcsl5Xqn+FUErpKUyO79xhCjyyBgWWpjrgUHkxQNhAzKa6T3kwNg
4yHMmjZ+Dn4Whx7v7Aorr/zXtniSbcdb+lfS+K6rvzxAUJalZhH553XIL0dhz4gz
blE2aNyoCdvfQEFk6X7n79Nr4S+WLOrlSGKvtee+98Fnhbqk/uf/aWk68NW1lRgj
Le/tkZwffdI2+6YA3ZtGPrVlOn35qYsp/fPiv4wNyIobklp3fABIJdqYfv91oiBh
WxnCHx34q2xh2PEt94Jkrb/ppP017V8AxygvCU7xFT62zJsMRWur9jtk71fHdLH6
4la31nI=
-----END CERTIFICATE-----
Generated at Mon Apr 14 13:13:29 2025 by rpki-client