Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Q0JA4Qv5rNX07S6wOxGCdTYZupU.roa
File: Q0JA4Qv5rNX07S6wOxGCdTYZupU.roa (raw, json)
Hash identifier: bP7U1+yryUMuDEzZW99r2/VKntu1scx7X/PnNOhrKe8=
Subject key identifier: 43:42:40:E1:0B:F9:AC:D5:F4:ED:2E:B0:3B:11:82:75:36:19:BA:95
Certificate issuer: /CN=330e640f9d63ba943a97b3dc10d4c6844a5d3dc1
Certificate serial: 018B6B9FCA1DFF2547C8102EAF225331FFDF
Authority key identifier: 33:0E:64:0F:9D:63:BA:94:3A:97:B3:DC:10:D4:C6:84:4A:5D:3D:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mw5kD51jupQ6l7PcENTGhEpdPcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Q0JA4Qv5rNX07S6wOxGCdTYZupU.roa
Signing time: Thu 26 Oct 2023 10:55:15 +0000
ROA not before: Thu 26 Oct 2023 10:55:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210278
IP address blocks: 101.56.192.0/18 maxlen: 18
101.56.128.0/18 maxlen: 18
101.59.0.0/16 maxlen: 16
195.162.92.0/22 maxlen: 22
101.56.64.0/18 maxlen: 18
101.58.0.0/16 maxlen: 16
101.58.0.0/15 maxlen: 15
101.56.0.0/18 maxlen: 18
101.62.194.0/23 maxlen: 23
101.62.196.0/23 maxlen: 23
101.56.0.0/15 maxlen: 15
101.62.0.0/15 maxlen: 15
101.57.0.0/16 maxlen: 16
2a0e:400::/25 maxlen: 25
Validation: Failed, certificate revoked on Mon 11 Dec 2023 11:15:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6b:9f:ca:1d:ff:25:47:c8:10:2e:af:22:53:31:ff:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=330e640f9d63ba943a97b3dc10d4c6844a5d3dc1
Validity
Not Before: Oct 26 10:55:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=434240e10bf9acd5f4ed2eb03b1182753619ba95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4c:2c:44:c5:4e:4c:f2:60:e2:96:96:7e:04:
a2:a4:8a:38:83:7f:66:33:54:93:0d:17:68:d1:01:
44:da:02:cf:95:f9:60:5f:db:2a:13:3a:90:fd:5d:
fa:d2:70:46:e1:d3:ae:0f:fb:9d:84:a8:cc:70:5f:
5c:05:de:5e:29:23:1f:82:db:8b:f7:66:52:a5:04:
c3:4b:d3:64:f2:98:04:03:6e:6f:00:06:6d:a1:ed:
45:80:c7:d7:7b:60:2c:70:b5:70:1c:7b:18:71:73:
b9:50:1e:a8:f3:01:9d:d1:20:f7:f3:ea:9a:76:5c:
97:bb:87:c6:f4:91:18:d0:75:65:1f:f2:f0:fb:24:
c9:2d:92:9f:5c:49:a8:30:0b:19:7d:43:00:a5:c3:
76:c8:1c:eb:c1:80:a3:fc:7c:bd:52:59:a1:e6:f3:
eb:bf:93:ea:12:2b:1b:f9:31:74:07:4a:c6:4b:97:
a5:59:06:48:77:74:59:6b:20:d3:76:99:2b:20:1e:
a6:d4:17:b8:5d:30:0e:08:e8:a9:15:1e:2b:5c:ec:
fe:96:77:8a:3b:6f:5e:ac:95:20:a8:a6:d5:f8:81:
d9:09:0e:7c:6f:f5:45:9b:db:cd:b0:7c:5e:5f:bf:
dc:8a:b6:9c:32:8b:30:80:a5:1a:0c:8d:14:8a:e8:
30:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:42:40:E1:0B:F9:AC:D5:F4:ED:2E:B0:3B:11:82:75:36:19:BA:95
X509v3 Authority Key Identifier:
keyid:33:0E:64:0F:9D:63:BA:94:3A:97:B3:DC:10:D4:C6:84:4A:5D:3D:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw5kD51jupQ6l7PcENTGhEpdPcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Q0JA4Qv5rNX07S6wOxGCdTYZupU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.56.0.0/14
101.62.0.0/15
195.162.92.0/22
IPv6:
2a0e:400::/25
Signature Algorithm: sha256WithRSAEncryption
ae:e5:a4:e1:a5:46:e5:29:3c:94:7a:d5:31:fb:54:fc:cd:2a:
5f:6a:c8:33:6e:63:48:2c:e0:ea:03:3b:a2:bb:5a:64:89:14:
6e:c0:fa:3c:5a:25:b1:95:ef:5a:40:37:df:92:3f:c4:5b:a6:
0c:d7:1d:f3:8e:aa:af:b4:ff:01:9f:ee:91:63:be:62:6f:1f:
03:f9:68:ea:bf:bf:3a:ea:4c:b9:8b:6a:a5:62:b8:9c:bd:05:
a6:93:48:50:9c:d8:07:14:b7:c1:b6:ca:4e:cd:9f:c1:1a:01:
78:a4:ee:fa:03:91:0f:17:5b:e9:0f:0d:ff:7d:f4:62:6a:36:
dc:42:05:55:78:00:60:7e:64:52:d8:92:16:ab:d4:36:d7:b7:
22:d2:c5:a1:e4:0b:1b:7b:83:56:a0:74:e6:2e:f2:d3:85:33:
44:82:23:52:d7:e8:9a:b1:3c:dc:31:5d:b7:9e:06:fa:e0:00:
d9:69:1b:40:27:5d:b1:b3:da:87:6a:fc:d7:2b:29:31:9c:a0:
9c:8b:56:5d:37:ef:85:fb:c2:99:0b:d2:4c:c2:22:f8:6e:72:
c2:ed:11:32:91:82:80:0e:7c:01:ca:65:89:06:08:27:19:36:
33:f6:96:37:ea:a0:81:f1:2d:bc:4e:0e:56:b2:c2:ba:0d:da:
87:8b:62:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:26 2024 by rpki-client on console-ams.rpki-client.org