Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/20QWD1WWiFDhnpHpK0tsh5BG00k.roa
File: 20QWD1WWiFDhnpHpK0tsh5BG00k.roa (raw, json)
Hash identifier: O29yf67rlsfTfsDDnjFpuR8InDA4BE68M3hqKrIVp7I=
Subject key identifier: DB:44:16:0F:55:96:88:50:E1:9E:91:E9:2B:4B:6C:87:90:46:D3:49
Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial: 018AD229C3E1D4A32B4FF7C1DA401BBF6A7A
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/20QWD1WWiFDhnpHpK0tsh5BG00k.roa
Signing time: Tue 26 Sep 2023 15:44:27 +0000
ROA not before: Tue 26 Sep 2023 15:44:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 132399
IP address blocks: 57.191.95.0/24 maxlen: 24
57.191.96.0/19 maxlen: 24
57.191.64.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Sep 2023 16:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d2:29:c3:e1:d4:a3:2b:4f:f7:c1:da:40:1b:bf:6a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Validity
Not Before: Sep 26 15:44:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db44160f55968850e19e91e92b4b6c879046d349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:33:f9:0d:b0:55:c6:1e:9a:10:90:b0:23:ca:
28:b0:21:98:be:3a:cc:28:ae:92:bf:58:80:88:58:
8e:b6:3f:87:ac:b4:41:19:99:38:58:0b:c1:2a:c2:
b9:fd:38:54:67:68:6b:e4:04:8e:8a:46:7e:85:cf:
82:5f:55:b0:c2:68:f7:24:03:88:7e:15:56:25:17:
52:3e:df:65:bd:07:a4:f4:ea:08:32:e2:98:41:ec:
77:7c:5c:98:95:51:7a:f9:1d:45:e4:9f:5a:1a:9c:
fb:b0:3f:48:71:cf:81:0b:a5:9e:a3:79:ff:e9:29:
ff:54:67:16:77:c9:21:d7:7b:c4:c2:49:87:03:9f:
02:31:ec:b2:02:18:5d:84:f5:88:8a:6a:fe:dc:1f:
aa:7c:91:c2:43:c7:1c:90:b3:ff:32:b1:91:98:bd:
bf:13:c0:98:36:86:7d:08:16:de:95:f2:ca:36:57:
4e:82:f5:a9:79:58:07:3e:cb:56:38:f5:77:99:36:
a1:c1:b8:2d:24:11:17:22:3e:17:79:a8:48:ca:08:
d3:60:e0:98:8a:80:84:ae:1d:77:78:5d:6d:ac:25:
56:73:7e:8e:28:eb:f9:0e:d4:d9:fb:2a:4a:25:0d:
57:e8:be:c0:bf:c6:7e:fa:01:61:63:b2:06:2f:67:
4b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:44:16:0F:55:96:88:50:E1:9E:91:E9:2B:4B:6C:87:90:46:D3:49
X509v3 Authority Key Identifier:
keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/20QWD1WWiFDhnpHpK0tsh5BG00k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.191.64.0/22
57.191.95.0-57.191.127.255
Signature Algorithm: sha256WithRSAEncryption
05:65:2c:e3:7f:88:2a:42:4a:dd:1e:90:1c:c3:a4:ea:2d:eb:
0a:c4:70:e5:33:3f:a0:19:41:2c:7e:c6:1c:c6:02:54:6b:72:
0b:71:73:21:66:03:29:9e:01:2e:5a:e4:7b:40:fa:b9:87:bd:
f7:06:b0:26:76:26:96:df:56:3c:18:bd:a0:7c:52:53:93:be:
43:de:8e:da:f5:2b:fa:e4:1f:d7:9a:8f:f2:35:7f:77:32:40:
50:4e:bb:3f:49:66:c9:36:0c:21:9e:5a:6e:e9:16:3f:7d:2f:
83:3f:a3:1c:57:7d:eb:c4:a5:9b:a0:9a:1d:bc:6b:df:d8:d0:
2e:b9:cb:b6:da:32:e1:82:08:28:61:ee:48:c9:f5:34:c3:dc:
30:c7:4b:75:45:76:bc:e6:78:25:45:d1:96:a1:55:ea:d8:59:
b4:ef:99:c7:63:ec:60:df:cb:0b:d4:2a:bb:92:f7:bc:f4:31:
5e:3f:b5:fe:e8:81:2a:73:e0:48:b7:d4:07:7a:4b:60:a7:67:
0e:10:45:27:03:c5:e0:31:8c:17:6c:75:a6:19:11:fb:93:fc:
50:e5:97:67:c3:bb:85:78:35:a2:da:34:53:89:bf:65:e7:57:
15:04:d0:7f:eb:28:9e:db:9a:08:0c:0a:cb:a0:b0:17:cc:c4:
95:c2:98:82
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:17 2024 by rpki-client on console-fra.rpki-client.org