Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/QGYHpotXB6_VX2VZN316zpT_AHY.roa
File: QGYHpotXB6_VX2VZN316zpT_AHY.roa (raw, json)
Hash identifier: 2dQs+Otcdgq7vXBTzMQH/uOGZrTHndg1lbISZ4rf+CY=
Subject key identifier: 40:66:07:A6:8B:57:07:AF:D5:5F:65:59:37:7D:7A:CE:94:FF:00:76
Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial: 019254E68ED23F27B41442E6F4DE037A1EEA
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/QGYHpotXB6_VX2VZN316zpT_AHY.roa
Signing time: Fri 04 Oct 2024 00:20:48 +0000
ROA not before: Fri 04 Oct 2024 00:20:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13335
IP address blocks: 141.101.64.0/24 maxlen: 24
141.101.65.0/24 maxlen: 24
141.101.66.0/24 maxlen: 24
141.101.67.0/24 maxlen: 24
141.101.68.0/24 maxlen: 24
141.101.69.0/24 maxlen: 24
141.101.70.0/24 maxlen: 24
141.101.71.0/24 maxlen: 24
141.101.72.0/24 maxlen: 24
141.101.73.0/24 maxlen: 24
141.101.74.0/24 maxlen: 24
141.101.75.0/24 maxlen: 24
141.101.76.0/23 maxlen: 23
141.101.82.0/24 maxlen: 24
141.101.83.0/24 maxlen: 24
141.101.84.0/24 maxlen: 24
141.101.85.0/24 maxlen: 24
141.101.86.0/24 maxlen: 24
141.101.87.0/24 maxlen: 24
141.101.88.0/22 maxlen: 22
141.101.90.0/24 maxlen: 24
141.101.92.0/24 maxlen: 24
141.101.93.0/24 maxlen: 24
141.101.94.0/24 maxlen: 24
141.101.95.0/24 maxlen: 24
141.101.96.0/24 maxlen: 24
141.101.97.0/24 maxlen: 24
141.101.98.0/24 maxlen: 24
141.101.99.0/24 maxlen: 24
141.101.100.0/22 maxlen: 22
141.101.100.0/24 maxlen: 24
141.101.104.0/24 maxlen: 24
141.101.105.0/24 maxlen: 24
141.101.106.0/24 maxlen: 24
141.101.107.0/24 maxlen: 24
141.101.108.0/24 maxlen: 24
141.101.109.0/24 maxlen: 24
141.101.110.0/24 maxlen: 24
141.101.111.0/24 maxlen: 24
141.101.112.0/20 maxlen: 20
141.101.112.0/23 maxlen: 23
141.101.114.0/23 maxlen: 23
141.101.120.0/22 maxlen: 22
188.114.96.0/24 maxlen: 24
188.114.97.0/24 maxlen: 24
188.114.98.0/24 maxlen: 24
188.114.99.0/24 maxlen: 24
188.114.100.0/24 maxlen: 24
188.114.101.0/24 maxlen: 24
188.114.102.0/24 maxlen: 24
188.114.103.0/24 maxlen: 24
188.114.104.0/24 maxlen: 24
188.114.106.0/23 maxlen: 23
188.114.108.0/24 maxlen: 24
188.114.109.0/24 maxlen: 24
188.114.110.0/24 maxlen: 24
188.114.111.0/24 maxlen: 24
2a06:98c0:1c01::/48 maxlen: 48
2a06:98c0:1c02::/48 maxlen: 48
2a06:98c0:1c03::/48 maxlen: 48
2a06:98c0:1c04::/48 maxlen: 48
2a06:98c0:1c05::/48 maxlen: 48
2a06:98c0:1c06::/48 maxlen: 48
2a06:98c0:1c07::/48 maxlen: 48
2a06:98c0:1c08::/48 maxlen: 48
2a06:98c0:1c09::/48 maxlen: 48
2a06:98c0:1c0a::/48 maxlen: 48
2a06:98c0:1c0c::/48 maxlen: 48
2a06:98c0:1c0d::/48 maxlen: 48
2a06:98c0:1c0e::/48 maxlen: 48
2a06:98c0:1c0f::/48 maxlen: 48
2a06:98c0:1c10::/48 maxlen: 48
2a06:98c0:1c20::/48 maxlen: 48
2a06:98c0:1c21::/48 maxlen: 48
2a06:98c0:1c22::/48 maxlen: 48
2a06:98c0:1c23::/48 maxlen: 48
2a06:98c0:1c24::/48 maxlen: 48
2a06:98c0:1c25::/48 maxlen: 48
2a06:98c0:1c26::/48 maxlen: 48
2a06:98c0:1c27::/48 maxlen: 48
2a06:98c0:1c28::/48 maxlen: 48
2a06:98c0:1c29::/48 maxlen: 48
2a06:98c0:1c2a::/48 maxlen: 48
2a06:98c0:1c2b::/48 maxlen: 48
2a06:98c0:1c2c::/48 maxlen: 48
2a06:98c0:1c2d::/48 maxlen: 48
2a06:98c0:1c2e::/48 maxlen: 48
2a06:98c0:1c2f::/48 maxlen: 48
2a06:98c0:1c30::/48 maxlen: 48
2a06:98c0:1c31::/48 maxlen: 48
2a06:98c0:1c32::/48 maxlen: 48
2a06:98c0:1c33::/48 maxlen: 48
2a06:98c0:1c34::/48 maxlen: 48
2a06:98c0:1c35::/48 maxlen: 48
2a06:98c0:1c36::/48 maxlen: 48
2a06:98c0:1c37::/48 maxlen: 48
2a06:98c0:1c38::/48 maxlen: 48
2a06:98c0:1c39::/48 maxlen: 48
2a06:98c0:1c3a::/48 maxlen: 48
2a06:98c0:1c3b::/48 maxlen: 48
2a06:98c0:1c3c::/48 maxlen: 48
2a06:98c0:1c3d::/48 maxlen: 48
2a06:98c0:1c3e::/48 maxlen: 48
2a06:98c0:1c3f::/48 maxlen: 48
2a06:98c0:1c40::/48 maxlen: 48
2a06:98c0:1c41::/48 maxlen: 48
2a06:98c0:1c42::/48 maxlen: 48
2a06:98c0:1c43::/48 maxlen: 48
2a06:98c0:1c44::/48 maxlen: 48
2a06:98c0:1c45::/48 maxlen: 48
2a06:98c0:1c46::/48 maxlen: 48
2a06:98c0:1c47::/48 maxlen: 48
2a06:98c0:1c48::/48 maxlen: 48
2a06:98c0:1c49::/48 maxlen: 48
2a06:98c0:1c4b::/48 maxlen: 48
2a06:98c0:1c4c::/48 maxlen: 48
2a06:98c0:3619::/48 maxlen: 48
2a06:98c0:361a::/48 maxlen: 48
2a06:98c1:40::/48 maxlen: 48
2a06:98c1:41::/48 maxlen: 48
2a06:98c1:42::/48 maxlen: 48
2a06:98c1:43::/48 maxlen: 48
2a06:98c1:48::/48 maxlen: 48
2a06:98c1:50::/45 maxlen: 45
2a06:98c1:54::/48 maxlen: 48
2a06:98c1:56::/48 maxlen: 48
2a06:98c1:58::/48 maxlen: 48
2a06:98c1:3100::/48 maxlen: 48
2a06:98c1:3101::/48 maxlen: 48
2a06:98c1:3102::/48 maxlen: 48
2a06:98c1:3103::/48 maxlen: 48
2a06:98c1:3104::/48 maxlen: 48
2a06:98c1:3105::/48 maxlen: 48
2a06:98c1:3106::/48 maxlen: 48
2a06:98c1:3107::/48 maxlen: 48
2a06:98c1:3108::/48 maxlen: 48
2a06:98c1:3109::/48 maxlen: 48
2a06:98c1:310a::/48 maxlen: 48
2a06:98c1:310b::/48 maxlen: 48
2a06:98c1:310c::/48 maxlen: 48
2a06:98c1:310d::/48 maxlen: 48
2a06:98c1:310e::/48 maxlen: 48
2a06:98c1:310f::/48 maxlen: 48
2a06:98c1:3120::/48 maxlen: 48
2a06:98c1:3121::/48 maxlen: 48
2a06:98c1:3122::/48 maxlen: 48
2a06:98c1:3123::/48 maxlen: 48
2a06:98c1:3200::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 06 Nov 2024 23:16:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:54:e6:8e:d2:3f:27:b4:14:42:e6:f4:de:03:7a:1e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Validity
Not Before: Oct 4 00:20:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=406607a68b5707afd55f6559377d7ace94ff0076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:62:67:1c:e3:94:da:b9:27:e9:95:10:84:52:
c8:af:43:20:51:06:6a:88:ab:aa:f1:1a:be:de:3f:
30:e2:09:08:dd:d6:7e:68:29:c8:48:d4:b7:1e:2f:
2c:1f:3a:b7:7c:07:df:0b:f3:6d:70:39:08:38:6c:
f6:44:ef:d4:0e:95:61:d8:7b:63:aa:85:e5:2b:51:
75:03:f2:fb:85:ac:b3:b0:e8:46:2d:c9:ea:1d:dc:
2a:3d:c6:35:69:2b:78:c7:86:cf:72:36:69:78:15:
e1:f5:cd:c0:63:47:d3:df:2c:f5:7a:ee:b2:4c:15:
47:03:b4:c1:4b:c8:d1:87:88:9f:d1:74:9e:71:fa:
89:ff:73:bb:e2:dd:a2:39:b8:27:58:54:2b:5a:a4:
ec:6f:c5:8b:ba:e5:de:84:96:d6:c2:1b:f2:c2:9a:
ca:e3:b4:d9:27:7d:96:1f:6c:a6:df:2c:7b:18:b2:
05:be:2b:ea:4f:c4:be:46:37:e6:8f:2f:e8:64:77:
af:70:f0:59:45:62:87:d9:25:9e:9e:cc:1c:f8:50:
75:06:5a:a9:ab:82:b7:10:f3:3c:85:ac:3a:a0:6d:
2f:86:ac:ef:59:a3:6d:a2:0b:10:64:61:5a:fc:60:
5a:f3:55:d6:c7:95:86:9e:f4:b7:8b:51:fa:ec:d4:
b9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:66:07:A6:8B:57:07:AF:D5:5F:65:59:37:7D:7A:CE:94:FF:00:76
X509v3 Authority Key Identifier:
keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/QGYHpotXB6_VX2VZN316zpT_AHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.64.0-141.101.77.255
141.101.82.0-141.101.127.255
188.114.96.0-188.114.104.255
188.114.106.0-188.114.111.255
IPv6:
2a06:98c0:1c01::-2a06:98c0:1c0a:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c0c::-2a06:98c0:1c10:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c20::-2a06:98c0:1c49:ffff:ffff:ffff:ffff:ffff
2a06:98c0:1c4b::-2a06:98c0:1c4c:ffff:ffff:ffff:ffff:ffff
2a06:98c0:3619::-2a06:98c0:361a:ffff:ffff:ffff:ffff:ffff
2a06:98c1:40::/46
2a06:98c1:48::/48
2a06:98c1:50::-2a06:98c1:58:ffff:ffff:ffff:ffff:ffff
2a06:98c1:3100::/44
2a06:98c1:3120::/46
2a06:98c1:3200::/48
Signature Algorithm: sha256WithRSAEncryption
80:24:61:2e:b8:59:63:17:9b:c6:d6:ed:4d:10:3e:ec:aa:c4:
94:f4:fa:80:78:3e:73:9f:fc:db:9d:07:c5:17:6e:41:b1:31:
ca:c5:5c:8c:bc:06:68:11:73:2e:62:09:e5:04:49:97:ca:82:
d7:3f:dd:73:45:07:12:c7:11:7c:03:47:e4:d7:93:94:15:b3:
14:43:09:bc:a5:c5:bb:1c:d8:62:34:9f:e8:12:ad:4c:fc:b7:
7b:87:e2:0a:07:51:c4:00:2a:2e:db:29:2b:7e:6c:67:ae:e0:
9a:cf:fe:61:5e:ef:0e:c0:cf:f5:33:02:e9:7a:35:f0:ce:f7:
b7:7e:ec:d6:ba:13:4d:5f:60:91:4e:20:47:e0:11:99:99:37:
51:74:c6:21:ef:9f:1d:4a:07:f4:37:cb:c9:93:ce:7b:11:32:
3e:c3:ef:5d:3a:65:d5:52:96:34:50:d6:89:84:d5:1c:7f:fa:
75:e9:83:31:3f:07:9c:c6:6c:ae:5b:dd:1b:97:a0:74:3b:e2:
cb:67:fd:29:3a:22:6b:b7:a3:ab:8a:1e:50:ba:ff:22:b1:46:
18:2e:e8:f1:c3:49:d4:17:09:40:e9:3a:de:b9:6e:41:8b:93:
57:e6:d5:fa:04:6f:69:20:cc:13:d8:c6:7f:a9:33:bb:fc:fc:
1c:87:8e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 00:38:35 2024 by rpki-client on console-ams.rpki-client.org