Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/gaGPiCBEun1FIVsNwxzGLf8NLj8.roa
File: gaGPiCBEun1FIVsNwxzGLf8NLj8.roa (raw, json)
Hash identifier: CexXJQsquOa5xlATYrAZE8gOVdAGDZaJYPgs2Zgtut4=
Subject key identifier: 81:A1:8F:88:20:44:BA:7D:45:21:5B:0D:C3:1C:C6:2D:FF:0D:2E:3F
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 018F8168DF609379CD227E59054A13F9222C
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/gaGPiCBEun1FIVsNwxzGLf8NLj8.roa
Signing time: Thu 16 May 2024 12:38:04 +0000
ROA not before: Thu 16 May 2024 12:38:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198589
IP address blocks: 62.201.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 May 2024 11:56:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:81:68:df:60:93:79:cd:22:7e:59:05:4a:13:f9:22:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: May 16 12:38:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81a18f882044ba7d45215b0dc31cc62dff0d2e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a6:9f:65:a7:e9:94:7b:b6:09:c2:ec:14:43:
18:a0:bb:86:16:8a:13:06:02:98:d3:68:95:bf:1d:
78:4f:1c:99:7d:68:2a:d6:fb:22:f9:4e:3a:d8:a3:
a1:74:27:4d:53:38:69:fa:9f:e1:e4:d0:3d:a4:05:
0d:65:af:9d:2c:b4:db:00:43:28:36:21:77:83:e1:
a7:a5:f7:3e:c2:2c:78:2f:b7:95:a6:bb:e5:cc:ff:
9a:1a:75:76:24:b3:fe:35:66:27:09:6c:5c:9e:ad:
79:d2:41:a9:46:b5:f3:f8:f4:12:1e:76:dd:1d:cb:
3e:db:0a:e6:0e:69:7e:27:bb:7b:32:e3:b3:fe:87:
cf:7f:64:9d:d1:e9:4e:7d:fa:4b:f3:34:7e:0b:64:
fd:a9:82:dc:ef:8d:60:db:c1:b7:8b:16:93:8a:8a:
86:ae:3a:fc:d3:75:a7:8d:2f:0d:b7:a3:9d:dc:cb:
48:0e:48:9c:2d:88:7d:4b:0f:9f:e3:de:5e:df:a3:
55:2a:fe:dd:09:a4:fa:06:fd:61:de:c2:04:3b:92:
c9:11:b8:25:9b:6d:d7:98:3e:d3:d0:02:c1:33:2c:
c0:0a:77:8c:44:d6:8f:8f:da:f4:04:bd:ab:52:b2:
61:5c:24:20:6b:28:39:c1:e3:01:15:56:d5:98:ef:
12:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A1:8F:88:20:44:BA:7D:45:21:5B:0D:C3:1C:C6:2D:FF:0D:2E:3F
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/gaGPiCBEun1FIVsNwxzGLf8NLj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.196.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:b5:97:1d:c6:73:f2:df:b8:f5:db:7e:85:07:16:b2:98:4e:
78:41:af:89:a5:d6:c3:29:1e:29:a8:2c:69:04:d2:87:1a:92:
ba:4a:fe:3d:8a:a1:1b:5f:60:70:1d:c4:e8:8f:0e:a0:2e:3e:
f5:46:a6:a5:9d:ec:fd:b1:e7:02:ae:57:45:bc:cf:65:98:96:
60:42:98:2f:f6:88:50:4e:66:af:9a:3b:ad:6e:8c:95:1d:e1:
e6:5d:d8:98:11:6d:1e:6c:6f:20:4b:24:33:de:db:82:53:5d:
15:ee:0f:ce:f8:09:9f:a1:52:16:a6:c0:24:7a:3a:f5:c1:05:
54:c2:59:e3:93:c0:46:b4:fd:ac:35:c9:57:bd:ad:b5:b6:7b:
97:2f:54:6c:ed:93:18:51:4c:8f:09:0e:1f:65:d8:f4:5b:c3:
28:f1:33:3f:fe:87:b8:65:45:b9:e7:fe:0b:b7:4b:2d:03:ad:
a2:68:bb:64:bb:c6:1f:c4:71:20:52:c4:47:43:54:98:a7:9b:
3b:d0:d0:6c:c6:cb:3f:8a:26:cc:59:d5:2e:85:4d:86:24:8b:
73:c4:6b:82:24:86:a3:89:c1:cd:97:25:1e:d8:d2:6d:5a:26:
f0:71:15:72:44:e1:45:a1:a5:d2:c2:c0:76:9c:d1:5a:56:34:
57:53:77:61
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY+BaN9gk3nNIn5ZBUoT+SIsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OTJmZWRmNTljNjBkMzI1NGUzN2E5YzhlY2RlMTFjOWJh
MTI4MmEwHhcNMjQwNTE2MTIzODA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWExOGY4ODIwNDRiYTdkNDUyMTViMGRjMzFjYzYyZGZmMGQyZTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKafZafplHu2CcLsFEMYoLuGFooT
BgKY02iVvx14TxyZfWgq1vsi+U462KOhdCdNUzhp+p/h5NA9pAUNZa+dLLTbAEMo
NiF3g+Gnpfc+wix4L7eVprvlzP+aGnV2JLP+NWYnCWxcnq150kGpRrXz+PQSHnbd
Hcs+2wrmDml+J7t7MuOz/ofPf2Sd0elOffpL8zR+C2T9qYLc741g28G3ixaTioqG
rjr803WnjS8Nt6Od3MtIDkicLYh9Sw+f495e36NVKv7dCaT6Bv1h3sIEO5LJEbgl
m23XmD7T0ALBMyzACneMRNaPj9r0BL2rUrJhXCQgayg5weMBFVbVmO8ShQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIGhj4ggRLp9RSFbDcMcxi3/DS4/MB8GA1UdIwQY
MBaAFDaS/t9Zxg0yVON6nI7N4RyboSgqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnBMLTMxbkdEVEpVNDNxY2pzM2hISnVoS0NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81YzVhZDAtZDJkYS00MGRiLTk1ZDEt
ZTdiZTVlMzBhZDJkLzEvZ2FHUGlDQkV1bjFGSVZzTnd4ekdMZjhOTGo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi81YzVhZDAtZDJkYS00MGRiLTk1ZDEtZTdiZTVlMzBhZDJk
LzEvTnBMLTMxbkdEVEpVNDNxY2pzM2hISnVoS0NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPsnEMA0G
CSqGSIb3DQEBCwUAA4IBAQCctZcdxnPy37j1236FBxaymE54Qa+JpdbDKR4pqCxp
BNKHGpK6Sv49iqEbX2BwHcTojw6gLj71Rqalnez9secCrldFvM9lmJZgQpgv9ohQ
TmavmjutboyVHeHmXdiYEW0ebG8gSyQz3tuCU10V7g/O+AmfoVIWpsAkejr1wQVU
wlnjk8BGtP2sNclXva21tnuXL1Rs7ZMYUUyPCQ4fZdj0W8Mo8TM//oe4ZUW55/4L
t0stA62iaLtku8YfxHEgUsRHQ1SYp5s70NBsxss/iibMWdUuhU2GJItzxGuCJIaj
icHNlyUe2NJtWibwcRVyROFFoaXSwsB2nNFaVjRXU3dh
-----END CERTIFICATE-----
Generated at Mon May 20 16:23:27 2024 by rpki-client on console-ams.rpki-client.org