Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/zelBh2LkgHcctwwBSJlZ0ob8zTA.roa
File: zelBh2LkgHcctwwBSJlZ0ob8zTA.roa (raw, json)
Hash identifier: 7OCMmOPhaauJTl9OC9bLExB8R3jPawREh6NhS65xVpU=
Subject key identifier: CD:E9:41:87:62:E4:80:77:1C:B7:0C:01:48:99:59:D2:86:FC:CD:30
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 018CF249A09951D06988C24876D71F6B0602
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/zelBh2LkgHcctwwBSJlZ0ob8zTA.roa
Signing time: Wed 10 Jan 2024 07:32:40 +0000
ROA not before: Wed 10 Jan 2024 07:32:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41032
IP address blocks: 185.90.104.0/24 maxlen: 24
185.90.105.0/24 maxlen: 24
185.90.107.0/24 maxlen: 24
185.90.106.0/24 maxlen: 24
62.201.237.0/24 maxlen: 24
62.201.248.0/24 maxlen: 24
62.201.250.0/24 maxlen: 24
62.201.249.0/24 maxlen: 24
62.201.192.0/24 maxlen: 24
62.201.196.0/24 maxlen: 24
62.201.199.0/24 maxlen: 24
62.201.203.0/24 maxlen: 24
62.201.202.0/24 maxlen: 24
62.201.205.0/24 maxlen: 24
62.201.204.0/24 maxlen: 24
62.201.200.0/24 maxlen: 24
62.201.201.0/24 maxlen: 24
62.201.210.0/24 maxlen: 24
62.201.209.0/24 maxlen: 24
62.201.211.0/24 maxlen: 24
62.201.207.0/24 maxlen: 24
62.201.208.0/24 maxlen: 24
62.201.216.0/24 maxlen: 24
2a02:b60:2000::/35 maxlen: 35
2a02:b60:2000::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 10 Jan 2024 11:43:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f2:49:a0:99:51:d0:69:88:c2:48:76:d7:1f:6b:06:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Jan 10 07:32:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cde9418762e480771cb70c01489959d286fccd30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:48:c5:05:24:c6:f4:01:2e:59:74:07:3e:bb:
29:da:60:6f:7d:77:18:a4:fa:91:88:e6:b6:4b:b7:
18:87:7d:9f:2f:bc:a9:c8:70:26:e0:fe:9b:a8:3e:
20:96:23:de:8a:4d:16:a4:8a:99:f2:69:25:6b:4c:
ce:5a:41:5b:6e:d3:47:75:f9:20:f5:eb:c9:65:a8:
6b:34:f2:34:a5:79:d1:93:87:1e:61:1c:63:dc:4b:
db:00:51:0a:ad:89:c8:ae:43:0d:99:23:90:40:17:
72:2d:11:86:15:f0:17:c6:b6:2e:80:43:a6:e2:d5:
77:a8:16:e6:51:ff:c4:0b:59:9b:7a:c1:e4:d8:19:
f1:04:a0:d2:35:cb:f9:aa:46:f3:53:ca:72:d7:aa:
be:2e:90:a0:44:e6:68:e2:e3:89:10:5f:03:3b:03:
af:08:c3:57:7f:01:8a:02:75:09:5b:13:3a:95:dd:
e0:cc:b1:d9:49:f1:98:0f:86:8d:fc:df:64:be:e8:
24:7d:f9:74:ff:ed:12:8a:f0:73:2e:4f:eb:f5:ab:
ae:d4:5d:84:6a:a0:b2:60:2b:37:88:10:10:91:4a:
a0:1d:90:6f:c3:6f:a3:f9:30:00:01:b1:2f:a8:cd:
7a:ea:20:4a:35:c0:2a:29:e7:87:93:90:6d:b0:2c:
9b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E9:41:87:62:E4:80:77:1C:B7:0C:01:48:99:59:D2:86:FC:CD:30
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/zelBh2LkgHcctwwBSJlZ0ob8zTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.192.0/24
62.201.196.0/24
62.201.199.0-62.201.205.255
62.201.207.0-62.201.211.255
62.201.216.0/24
62.201.237.0/24
62.201.248.0-62.201.250.255
185.90.104.0/22
IPv6:
2a02:b60:2000::/35
Signature Algorithm: sha256WithRSAEncryption
01:ce:87:f2:d5:04:5c:d7:7a:3a:d2:08:f1:b3:9d:fa:61:21:
be:99:18:c3:6f:83:35:09:bf:e3:ce:b4:33:71:a2:97:93:6b:
25:64:a8:d5:c8:17:cb:0e:bc:b4:76:a5:ec:8e:3c:7f:6b:c2:
a0:77:bb:66:79:15:18:d8:57:90:38:dd:df:ee:6c:3d:5e:e4:
1c:15:dc:5e:ed:8d:67:25:0b:2a:67:23:94:b8:d5:75:74:69:
63:5e:a1:e8:28:c8:f6:97:d6:bf:90:b0:a2:02:c8:cf:a6:24:
8d:82:26:61:23:4e:df:7d:d6:4b:6a:ac:2b:d1:5f:bd:06:2a:
8d:0f:0b:19:9f:e7:3c:8a:c3:0d:89:53:e4:b6:54:09:36:39:
d8:b8:3f:15:69:46:15:33:ed:4d:6a:42:6e:aa:80:21:bb:6a:
fb:2b:99:41:84:6e:cb:40:11:0f:e1:8a:cc:0b:e8:8d:37:28:
ab:55:ba:76:ac:99:56:d2:b4:4b:e3:53:34:fd:18:3d:19:af:
26:3e:d2:0b:89:67:04:af:9c:16:dd:09:d3:08:9d:66:0b:ca:
01:a5:3d:7f:cc:73:80:34:2f:bf:23:8c:2a:24:f2:fc:46:be:
d8:c2:7f:7c:fd:62:18:5a:57:55:d7:86:b1:b2:93:8f:23:c2:
c3:4b:95:58
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgISAYzySaCZUdBpiMJIdtcfawYCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OTJmZWRmNTljNjBkMzI1NGUzN2E5YzhlY2RlMTFjOWJh
MTI4MmEwHhcNMjQwMTEwMDczMjQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZGU5NDE4NzYyZTQ4MDc3MWNiNzBjMDE0ODk5NTlkMjg2ZmNjZDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0jFBSTG9AEuWXQHPrsp2mBvfXcY
pPqRiOa2S7cYh32fL7ypyHAm4P6bqD4gliPeik0WpIqZ8mkla0zOWkFbbtNHdfkg
9evJZahrNPI0pXnRk4ceYRxj3EvbAFEKrYnIrkMNmSOQQBdyLRGGFfAXxrYugEOm
4tV3qBbmUf/EC1mbesHk2BnxBKDSNcv5qkbzU8py16q+LpCgROZo4uOJEF8DOwOv
CMNXfwGKAnUJWxM6ld3gzLHZSfGYD4aN/N9kvugkffl0/+0SivBzLk/r9auu1F2E
aqCyYCs3iBAQkUqgHZBvw2+j+TAAAbEvqM166iBKNcAqKeeHk5BtsCyb1wIDAQAB
o4ICWzCCAlcwHQYDVR0OBBYEFM3pQYdi5IB3HLcMAUiZWdKG/M0wMB8GA1UdIwQY
MBaAFDaS/t9Zxg0yVON6nI7N4RyboSgqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnBMLTMxbkdEVEpVNDNxY2pzM2hISnVoS0NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81YzVhZDAtZDJkYS00MGRiLTk1ZDEt
ZTdiZTVlMzBhZDJkLzEvemVsQmgyTGtnSGNjdHd3QlNKbFowb2I4elRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi81YzVhZDAtZDJkYS00MGRiLTk1ZDEtZTdiZTVlMzBhZDJk
LzEvTnBMLTMxbkdEVEpVNDNxY2pzM2hISnVoS0NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHEGCCsGAQUFBwEHAQH/BGIwYDBOBAIAATBIAwQAPsnAAwQA
PsnEMAwDBAA+yccDBAE+ycwwDAMEAD7JzwMEAj7J0AMEAD7J2AMEAD7J7TAMAwQD
Psn4AwQAPsn6AwQCuVpoMA4EAgACMAgDBgUqAgtgIDANBgkqhkiG9w0BAQsFAAOC
AQEAAc6H8tUEXNd6OtII8bOd+mEhvpkYw2+DNQm/4860M3Gil5NrJWSo1cgXyw68
tHal7I48f2vCoHe7ZnkVGNhXkDjd3+5sPV7kHBXcXu2NZyULKmcjlLjVdXRpY16h
6CjI9pfWv5CwogLIz6YkjYImYSNO333WS2qsK9FfvQYqjQ8LGZ/nPIrDDYlT5LZU
CTY52Lg/FWlGFTPtTWpCbqqAIbtq+yuZQYRuy0ARD+GKzAvojTcoq1W6dqyZVtK0
S+NTNP0YPRmvJj7SC4lnBK+cFt0J0widZgvKAaU9f8xzgDQvvyOMKiTy/Ea+2MJ/
fP1iGFpXVdeGsbKTjyPCw0uVWA==
-----END CERTIFICATE-----
Generated at Mon Apr 14 13:20:28 2025 by rpki-client