Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/qat3A0Z0ub7fa0NhrVGE0GxrYL8.roa
File: qat3A0Z0ub7fa0NhrVGE0GxrYL8.roa (raw, json)
Hash identifier: MxYljf/vYx+HY+ABGA2EmE4tL+xQbjUbyN3daOKrbpY=
Subject key identifier: A9:AB:77:03:46:74:B9:BE:DF:6B:43:61:AD:51:84:D0:6C:6B:60:BF
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 01856F94CB3918AD5E0BAF528C6AEFFD66BE
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/qat3A0Z0ub7fa0NhrVGE0GxrYL8.roa
Signing time: Sun 01 Jan 2023 23:05:00 +0000
ROA not before: Sun 01 Jan 2023 23:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206862
IP address blocks: 5.200.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:cb:39:18:ad:5e:0b:af:52:8c:6a:ef:fd:66:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Jan 1 23:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9ab77034674b9bedf6b4361ad5184d06c6b60bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:62:dc:6b:46:2d:d8:69:d2:36:ad:fb:78:f6:
b4:da:fb:7f:8b:fc:b4:21:8f:14:9e:d8:ad:8e:9f:
af:22:50:92:f4:7d:7c:24:98:f4:ee:5a:24:59:32:
eb:82:57:f2:60:de:d7:c7:80:05:3b:69:dd:8e:59:
ee:13:17:0d:44:51:6d:a1:ad:6b:9f:fa:0d:41:b9:
02:dc:4c:60:d8:f6:75:9c:f7:fd:d7:07:1e:ab:c8:
6f:01:3e:b1:14:6f:69:64:c4:7f:59:9a:0e:0c:be:
66:fe:bd:55:e3:2a:07:a5:93:4a:e1:8e:14:6f:22:
05:97:54:f7:52:b9:8b:97:2d:e6:0d:e3:5a:2b:e1:
27:d2:31:56:13:78:ef:e9:67:da:83:40:85:c8:00:
68:98:7b:b3:5f:20:48:5a:77:a3:98:d5:c8:14:a5:
a4:eb:89:e3:4e:04:a0:4e:3b:a2:0c:e0:40:c7:ba:
af:fe:0e:eb:e6:74:01:0b:e6:89:65:b9:d1:f7:bd:
49:68:6b:f5:e2:ba:e6:b8:a6:12:b7:65:13:a1:1a:
31:c8:22:a2:bf:e9:d0:cb:8b:a0:2e:cc:71:4b:fe:
36:32:6f:0d:a4:c2:37:6e:33:03:3c:13:5d:48:c6:
e8:0e:78:1f:6f:72:84:a0:f4:2c:ad:01:a5:a3:e3:
44:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AB:77:03:46:74:B9:BE:DF:6B:43:61:AD:51:84:D0:6C:6B:60:BF
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/qat3A0Z0ub7fa0NhrVGE0GxrYL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.200.95.0/24
Signature Algorithm: sha256WithRSAEncryption
83:9b:cd:18:74:d2:e5:0e:1e:92:28:33:3c:11:ca:58:1b:95:
15:7d:aa:74:af:36:47:7b:62:ed:c4:3a:f0:3f:a7:08:7f:f5:
72:55:ac:22:de:f1:c9:ee:3b:27:8e:df:0c:5b:7e:bb:f0:2e:
96:0c:aa:9e:d1:e2:da:88:a6:c2:53:fa:0b:1d:67:79:48:3b:
a1:1c:0c:ab:74:28:04:fa:b1:de:a4:5e:62:fc:ee:9e:23:68:
95:c1:25:5f:c8:1a:f3:4c:4f:24:f5:44:fe:a2:ff:5a:9c:7d:
81:99:10:d9:2c:7e:a6:ba:e3:58:12:70:02:f1:25:4c:a6:bc:
3e:0a:6f:45:70:38:9d:a7:1f:f4:a1:ef:06:67:a7:b1:a0:d3:
e9:1d:68:33:c7:71:b3:5a:a3:2d:e0:65:3f:5b:bc:7d:88:15:
76:b8:c3:48:91:57:79:15:9c:58:ab:db:2f:db:6d:78:6f:e7:
91:48:6e:75:32:c4:ff:02:85:35:c5:2e:3e:ff:ac:93:40:d1:
6e:54:87:d4:86:22:e5:09:14:8d:e6:ff:13:f6:50:98:0d:0e:
e8:30:88:ec:c6:8c:32:be:65:e3:ea:98:04:83:9c:c8:45:b3:
18:4c:8d:ee:11:99:ad:ee:6e:af:47:24:0a:0e:26:92:1c:8e:
4b:24:32:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:02 2024 by rpki-client on console-fra.rpki-client.org