Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/MuSqNWJZaRjGPweT4Yb3Emb4O7g.roa
File: MuSqNWJZaRjGPweT4Yb3Emb4O7g.roa (raw, json)
Hash identifier: dnC+SImmEbnkXJLjYNtHbSl87qgRKW8f7QeNikVUG3s=
Subject key identifier: 32:E4:AA:35:62:59:69:18:C6:3F:07:93:E1:86:F7:12:66:F8:3B:B8
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01931D5686C11D280C11D9EE8DB9C69E7A87
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/MuSqNWJZaRjGPweT4Yb3Emb4O7g.roa
Signing time: Mon 11 Nov 2024 22:27:10 +0000
ROA not before: Mon 11 Nov 2024 22:27:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20649
IP address blocks: 103.83.87.0/24 maxlen: 24
2a0b:9800::/32 maxlen: 32
2a0b:9801::/32 maxlen: 32
2a0b:9802::/32 maxlen: 32
2a0b:9803::/32 maxlen: 32
2a0b:9804::/32 maxlen: 32
2a0b:9805::/32 maxlen: 32
2a0b:9806::/32 maxlen: 32
2a0b:9807::/32 maxlen: 32
2a14:4080::/32 maxlen: 32
2a14:4081::/32 maxlen: 32
2a14:4082::/32 maxlen: 32
2a14:4083::/32 maxlen: 32
2a14:4084::/32 maxlen: 32
2a14:4085::/32 maxlen: 32
2a14:4086::/32 maxlen: 32
2a14:4087::/32 maxlen: 32
2a14:4380::/32 maxlen: 32
2a14:4381::/32 maxlen: 32
2a14:4382::/32 maxlen: 32
2a14:4383::/32 maxlen: 32
2a14:4384::/32 maxlen: 32
2a14:4385::/32 maxlen: 32
2a14:4386::/32 maxlen: 32
2a14:4387::/32 maxlen: 32
2a14:4480::/32 maxlen: 32
2a14:4481::/32 maxlen: 32
2a14:4482::/32 maxlen: 32
2a14:4483::/32 maxlen: 32
2a14:4484::/32 maxlen: 32
2a14:4485::/32 maxlen: 32
2a14:4486::/32 maxlen: 32
2a14:4487::/32 maxlen: 32
2a14:4980::/32 maxlen: 32
2a14:4981::/32 maxlen: 32
2a14:4982::/32 maxlen: 32
2a14:4983::/32 maxlen: 32
2a14:4984::/32 maxlen: 32
2a14:4985::/32 maxlen: 32
2a14:4986::/32 maxlen: 32
2a14:4987::/32 maxlen: 32
2a14:4a80::/32 maxlen: 32
2a14:4a81::/32 maxlen: 32
2a14:4a82::/32 maxlen: 32
2a14:4a83::/32 maxlen: 32
2a14:4a84::/32 maxlen: 32
2a14:4a85::/32 maxlen: 32
2a14:4a86::/32 maxlen: 32
2a14:4a87::/32 maxlen: 32
2a14:4b80::/32 maxlen: 32
2a14:4b81::/32 maxlen: 32
2a14:4b82::/32 maxlen: 32
2a14:4b83::/32 maxlen: 32
2a14:4b84::/32 maxlen: 32
2a14:4b85::/32 maxlen: 32
2a14:4b86::/32 maxlen: 32
2a14:4b87::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 19 Nov 2024 07:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1d:56:86:c1:1d:28:0c:11:d9:ee:8d:b9:c6:9e:7a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Nov 11 22:27:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32e4aa3562596918c63f0793e186f71266f83bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cf:b0:b8:12:9a:41:99:e5:d3:19:58:e7:bf:
ad:64:f9:60:66:af:8e:68:7d:0c:ed:2e:21:b8:b4:
ea:19:8c:cc:1b:c9:75:3d:0f:ee:36:93:a7:55:60:
bc:97:4b:2f:f4:cb:49:79:5b:2a:4d:fe:67:a8:cd:
09:7c:5c:47:3c:d0:43:47:82:35:e2:4a:79:7d:8f:
3d:cd:99:02:1b:f1:87:2c:7a:dd:d2:aa:01:e7:e0:
92:a3:68:bc:dd:71:16:61:1e:4b:94:7a:4f:85:6f:
bb:02:6b:c6:2a:0d:fc:c8:57:d0:9a:fe:8f:a0:69:
20:db:4a:5b:2f:28:77:f8:af:70:28:8c:0d:b8:52:
14:26:4d:9c:8b:6c:96:a9:cb:2d:74:08:7e:28:fe:
7c:ef:b1:33:5c:3c:79:a2:bf:c3:65:f7:e8:75:d4:
e9:3b:9e:b6:c2:bf:f0:e7:db:71:ca:d8:0d:4a:a8:
25:42:90:d3:48:d5:d3:18:16:9c:34:66:42:eb:9b:
f3:10:51:66:4c:af:c3:9e:3f:db:7b:c2:e4:66:64:
3f:ed:f3:d8:bd:9d:ad:a4:d6:7e:4e:8d:7b:2b:95:
c8:ce:83:e6:9b:3f:c6:d0:bd:af:bb:67:aa:74:0b:
99:f2:17:96:66:c6:aa:ea:e7:49:9f:d5:aa:5c:c5:
48:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E4:AA:35:62:59:69:18:C6:3F:07:93:E1:86:F7:12:66:F8:3B:B8
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/MuSqNWJZaRjGPweT4Yb3Emb4O7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.83.87.0/24
IPv6:
2a0b:9800::/29
2a14:4080::/29
2a14:4380::/29
2a14:4480::/29
2a14:4980::/29
2a14:4a80::/29
2a14:4b80::/29
Signature Algorithm: sha256WithRSAEncryption
2d:6d:2b:91:04:01:1c:b5:36:0f:cc:1f:98:3e:f1:68:e0:fa:
e8:bc:95:20:da:ea:d1:23:dc:1e:ec:ba:86:8e:66:80:36:85:
7f:39:74:b8:08:ed:86:99:a3:7a:48:02:e3:28:1e:b1:d5:e0:
4f:b2:cc:24:75:05:4d:a2:5a:24:f4:ad:df:a7:38:03:f6:5a:
c4:d1:87:b4:c8:69:5f:28:fd:ad:ea:5b:04:d0:b5:2c:86:19:
c4:b0:5b:51:19:b0:fc:6f:93:12:d9:86:19:b8:97:a5:59:f1:
27:81:e4:b4:b6:66:13:0b:10:aa:8e:d9:a6:94:af:63:12:14:
e9:fb:51:15:1c:ee:b0:48:40:ba:55:ce:04:d1:57:9e:d2:db:
99:63:ea:39:33:36:ba:39:b8:19:1b:dc:d3:1c:8f:17:57:7a:
48:5b:fb:66:05:f8:47:9d:61:fb:02:5c:bb:aa:77:bc:e6:e5:
75:18:24:b6:ed:5e:a0:bb:cc:3b:fe:ff:f5:ee:eb:03:33:d4:
62:88:47:7d:d5:5f:48:f5:88:34:43:46:a7:08:ec:c3:4e:bd:
31:17:ae:5b:db:6b:7b:98:0f:ba:ad:1a:65:33:2f:ef:70:4d:
61:81:02:62:28:5b:26:98:0c:30:ee:2b:b5:13:82:1e:21:34:
01:e4:49:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 09:35:27 2024 by rpki-client on console-ams.rpki-client.org