Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/xZBog5lplSjfskEp6SSTF7tJ7tI.roa
File: xZBog5lplSjfskEp6SSTF7tJ7tI.roa (raw, json)
Hash identifier: KaRE6zaPvAbeHJEM3l95UKtDEPJJQ5ALBTSoMg5Ftk8=
Subject key identifier: C5:90:68:83:99:69:95:28:DF:B2:41:29:E9:24:93:17:BB:49:EE:D2
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 01941FFA9CC0AE11569D035A075B56E97417
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/xZBog5lplSjfskEp6SSTF7tJ7tI.roa
Signing time: Wed 01 Jan 2025 03:48:25 +0000
ROA not before: Wed 01 Jan 2025 03:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44217
IP address blocks: 62.201.192.0/18 maxlen: 18
62.201.192.0/23 maxlen: 23
62.201.193.0/24 maxlen: 24
62.201.194.0/24 maxlen: 24
62.201.195.0/24 maxlen: 24
62.201.196.0/24 maxlen: 24
62.201.197.0/24 maxlen: 24
62.201.198.0/24 maxlen: 24
62.201.200.0/24 maxlen: 24
62.201.201.0/24 maxlen: 24
62.201.202.0/24 maxlen: 24
62.201.203.0/24 maxlen: 24
62.201.204.0/23 maxlen: 23
62.201.205.0/24 maxlen: 24
62.201.206.0/24 maxlen: 24
62.201.207.0/24 maxlen: 24
62.201.208.0/22 maxlen: 22
62.201.208.0/24 maxlen: 24
62.201.209.0/24 maxlen: 24
62.201.210.0/24 maxlen: 24
62.201.211.0/24 maxlen: 24
62.201.212.0/22 maxlen: 22
62.201.212.0/24 maxlen: 24
62.201.213.0/24 maxlen: 24
62.201.214.0/24 maxlen: 24
62.201.215.0/24 maxlen: 24
62.201.216.0/24 maxlen: 24
62.201.217.0/24 maxlen: 24
62.201.218.0/24 maxlen: 24
62.201.219.0/24 maxlen: 24
62.201.220.0/22 maxlen: 22
62.201.220.0/24 maxlen: 24
62.201.221.0/24 maxlen: 24
62.201.222.0/24 maxlen: 24
62.201.223.0/24 maxlen: 24
62.201.224.0/22 maxlen: 22
62.201.224.0/24 maxlen: 24
62.201.225.0/24 maxlen: 24
62.201.226.0/24 maxlen: 24
62.201.227.0/24 maxlen: 24
62.201.228.0/22 maxlen: 22
62.201.228.0/24 maxlen: 24
62.201.229.0/24 maxlen: 24
62.201.230.0/24 maxlen: 24
62.201.231.0/24 maxlen: 24
62.201.232.0/22 maxlen: 22
62.201.232.0/24 maxlen: 24
62.201.233.0/24 maxlen: 24
62.201.234.0/24 maxlen: 24
62.201.235.0/24 maxlen: 24
62.201.236.0/24 maxlen: 24
62.201.238.0/24 maxlen: 24
62.201.239.0/24 maxlen: 24
62.201.240.0/21 maxlen: 21
62.201.240.0/24 maxlen: 24
62.201.241.0/24 maxlen: 24
62.201.242.0/23 maxlen: 24
62.201.242.0/24 maxlen: 24
62.201.243.0/24 maxlen: 24
62.201.244.0/23 maxlen: 24
62.201.246.0/24 maxlen: 24
62.201.247.0/24 maxlen: 24
62.201.248.0/24 maxlen: 24
62.201.249.0/24 maxlen: 24
62.201.250.0/24 maxlen: 24
62.201.251.0/24 maxlen: 24
62.201.252.0/22 maxlen: 24
62.201.253.0/24 maxlen: 24
62.201.254.0/23 maxlen: 24
89.33.66.0/23 maxlen: 23
185.1.98.0/24 maxlen: 24
2a02:b60::/32 maxlen: 32
2a02:b60:0:f::/64 maxlen: 64
2a02:b60:20::/48 maxlen: 48
2a02:b60:2000::/35 maxlen: 35
2a02:b60:2000::/48 maxlen: 48
2a02:b60:2000:3::/64 maxlen: 64
2a02:b60:2010::/48 maxlen: 48
2a02:b60:4000::/34 maxlen: 34
2a02:b60:4000::/48 maxlen: 48
2a02:b60:4005::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 03 Feb 2025 06:04:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9c:c0:ae:11:56:9d:03:5a:07:5b:56:e9:74:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Jan 1 03:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c590688399699528dfb24129e9249317bb49eed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e6:1f:38:53:1b:25:9e:c9:5b:d3:20:d8:62:
ca:c8:d0:20:cc:2b:40:e9:0a:7f:de:ef:73:9f:04:
b8:e6:0f:b9:34:11:e6:0e:d7:d9:9d:a9:68:8a:6e:
31:3b:62:03:d6:88:2c:05:81:14:0a:8d:de:96:8d:
b4:38:c9:0a:1c:d5:e7:40:33:25:55:f5:ed:da:25:
9f:51:d9:25:b6:c4:9e:1a:b2:55:40:0b:07:3b:f1:
0e:7f:33:14:3e:82:2b:49:ee:e2:e3:dd:8d:69:6f:
f0:11:0f:30:64:69:13:59:4b:ed:e9:a1:65:79:4f:
c5:0a:8f:d5:34:6d:69:43:cf:3b:0e:27:b8:7d:54:
d9:64:6d:8a:12:b3:98:3d:a4:89:11:e1:81:bc:f3:
ee:e0:38:cb:ad:70:b9:db:97:2c:49:63:6f:c9:a3:
a9:9f:15:b9:67:f3:a3:98:fc:54:44:ca:f8:e1:7c:
ee:50:8b:fc:7f:68:d0:09:92:51:4c:c3:0e:2b:fe:
31:ee:c1:c9:32:41:93:45:c2:a6:90:57:f5:e7:2f:
76:4b:67:60:53:bd:e4:e1:0d:cb:30:53:56:ea:e1:
51:8f:02:b1:5f:8b:ef:44:e4:d4:ee:e0:cf:70:17:
e2:f8:be:7b:ee:5f:bb:26:78:ad:d5:fb:db:bd:15:
cf:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:90:68:83:99:69:95:28:DF:B2:41:29:E9:24:93:17:BB:49:EE:D2
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/xZBog5lplSjfskEp6SSTF7tJ7tI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.192.0/18
89.33.66.0/23
185.1.98.0/24
IPv6:
2a02:b60::/32
Signature Algorithm: sha256WithRSAEncryption
c6:55:31:80:57:33:96:3b:69:ba:bb:60:19:d1:c5:93:56:72:
51:b5:50:5b:f4:d7:fe:67:f8:ee:14:3e:21:1c:b3:52:64:1d:
77:fa:47:81:82:51:b6:d4:54:5a:d4:60:df:18:8e:1d:27:04:
7c:16:3e:23:a5:2f:cc:98:24:b7:8b:7f:87:9c:9b:c8:5f:b7:
39:8f:16:13:b7:c1:bc:ce:e4:20:00:dc:06:06:e5:c4:4f:44:
79:36:e1:07:44:7b:85:6d:bf:a7:9a:6a:6f:46:93:23:8d:c3:
f6:e8:f5:43:67:8e:fd:aa:84:69:45:c1:a3:c9:53:3f:dc:44:
40:77:cc:c9:84:12:3a:dc:0b:d2:b5:e2:50:6f:b8:0b:d5:a1:
9f:15:03:c8:6e:51:85:87:40:9c:1d:19:11:5d:f9:da:09:d7:
89:cf:6a:dc:55:b4:9e:de:0b:c9:05:07:e1:b8:b6:e9:78:65:
0b:93:e6:e9:cb:01:c1:9a:07:28:35:75:66:4b:90:c9:95:d2:
0a:bc:99:d6:09:4f:47:d3:45:18:c0:e5:28:08:f2:28:76:ba:
d4:1c:c5:e0:02:01:1e:b3:05:71:e2:54:19:13:1b:8f:39:7e:
09:04:59:b4:c2:b1:e1:74:25:8d:87:47:0e:ae:b7:c4:ac:9c:
90:f7:74:58
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQf+pzArhFWnQNaB1tW6XQXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OTJmZWRmNTljNjBkMzI1NGUzN2E5YzhlY2RlMTFjOWJh
MTI4MmEwHhcNMjUwMTAxMDM0ODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTkwNjg4Mzk5Njk5NTI4ZGZiMjQxMjllOTI0OTMxN2JiNDllZWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+YfOFMbJZ7JW9Mg2GLKyNAgzCtA
6Qp/3u9znwS45g+5NBHmDtfZnaloim4xO2ID1ogsBYEUCo3elo20OMkKHNXnQDMl
VfXt2iWfUdkltsSeGrJVQAsHO/EOfzMUPoIrSe7i492NaW/wEQ8wZGkTWUvt6aFl
eU/FCo/VNG1pQ887Die4fVTZZG2KErOYPaSJEeGBvPPu4DjLrXC525csSWNvyaOp
nxW5Z/OjmPxURMr44XzuUIv8f2jQCZJRTMMOK/4x7sHJMkGTRcKmkFf15y92S2dg
U73k4Q3LMFNW6uFRjwKxX4vvROTU7uDPcBfi+L577l+7Jnit1fvbvRXPJQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFMWQaIOZaZUo37JBKekkkxe7Se7SMB8GA1UdIwQY
MBaAFDaS/t9Zxg0yVON6nI7N4RyboSgqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnBMLTMxbkdEVEpVNDNxY2pzM2hISnVoS0NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81YzVhZDAtZDJkYS00MGRiLTk1ZDEt
ZTdiZTVlMzBhZDJkLzEveFpCb2c1bHBsU2pmc2tFcDZTU1RGN3RKN3RJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi81YzVhZDAtZDJkYS00MGRiLTk1ZDEtZTdiZTVlMzBhZDJk
LzEvTnBMLTMxbkdEVEpVNDNxY2pzM2hISnVoS0NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQGPsnAAwQB
WSFCAwQAuQFiMA0EAgACMAcDBQAqAgtgMA0GCSqGSIb3DQEBCwUAA4IBAQDGVTGA
VzOWO2m6u2AZ0cWTVnJRtVBb9Nf+Z/juFD4hHLNSZB13+keBglG21FRa1GDfGI4d
JwR8Fj4jpS/MmCS3i3+HnJvIX7c5jxYTt8G8zuQgANwGBuXET0R5NuEHRHuFbb+n
mmpvRpMjjcP26PVDZ479qoRpRcGjyVM/3ERAd8zJhBI63AvSteJQb7gL1aGfFQPI
blGFh0CcHRkRXfnaCdeJz2rcVbSe3gvJBQfhuLbpeGULk+bpywHBmgcoNXVmS5DJ
ldIKvJnWCU9H00UYwOUoCPIodrrUHMXgAgEeswVx4lQZExuPOX4JBFm0wrHhdCWN
h0cOrrfErJyQ93RY
-----END CERTIFICATE-----
Generated at Mon Apr 14 13:29:49 2025 by rpki-client