Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/0wHPrQpKkKk-4OCV8OUzZhY3yjM.roa
File: 0wHPrQpKkKk-4OCV8OUzZhY3yjM.roa (raw, json)
Hash identifier: DdLzHQfj8BYI0RWQIB60pPsWe/feALUbqVJlKI+XBO8=
Subject key identifier: D3:01:CF:AD:0A:4A:90:A9:3E:E0:E0:95:F0:E5:33:66:16:37:CA:33
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01886ACDAF50B3F6161404F066E0E9364D15
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/0wHPrQpKkKk-4OCV8OUzZhY3yjM.roa
Signing time: Tue 30 May 2023 03:57:24 +0000
ROA not before: Tue 30 May 2023 03:57:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 89.37.195.0/24 maxlen: 24
89.37.194.0/24 maxlen: 24
89.36.140.0/24 maxlen: 24
89.40.36.0/24 maxlen: 24
86.105.4.0/24 maxlen: 24
46.102.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Jun 2023 07:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6a:cd:af:50:b3:f6:16:14:04:f0:66:e0:e9:36:4d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 30 03:57:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d301cfad0a4a90a93ee0e095f0e533661637ca33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e2:92:0e:fd:15:07:e9:76:f6:b1:8b:1b:42:
d9:49:55:66:04:83:16:1a:e1:4d:2c:1a:a4:4d:30:
31:bb:91:91:72:62:8e:5c:ca:af:d4:48:d7:be:d1:
35:3e:98:95:9f:7c:83:a1:05:44:c7:35:5a:fa:e7:
50:ef:c4:e5:62:4b:51:ce:a9:97:f4:36:36:51:4a:
bd:eb:4a:29:75:0c:54:fc:ec:19:f1:f7:7f:7e:20:
4c:ba:27:5c:ee:96:16:21:f9:f9:8e:7a:e4:b8:89:
88:8d:df:f9:5c:11:ea:3b:dc:5c:37:0f:fa:5c:94:
56:4e:e5:b1:52:06:e5:aa:79:40:37:c0:c2:91:9f:
51:b3:4b:6a:15:85:c3:98:15:8a:95:00:0f:af:b6:
96:88:2f:e3:76:59:a1:82:36:c6:2e:26:20:3e:40:
b2:9c:1e:d3:b6:15:d3:a2:6c:a1:a4:e1:56:c2:18:
91:7a:67:57:2a:43:cf:2e:06:76:cb:0b:20:ba:af:
db:90:4b:48:28:44:b7:56:0f:9f:a2:f7:87:b5:05:
ab:10:88:3c:da:54:a9:72:9c:4a:be:15:46:8c:c3:
74:13:f5:b9:4a:ee:cf:ae:a7:f0:6e:85:ff:93:d0:
b1:c8:3c:f9:53:27:aa:27:55:b5:f7:ad:a4:4b:9d:
24:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:01:CF:AD:0A:4A:90:A9:3E:E0:E0:95:F0:E5:33:66:16:37:CA:33
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/0wHPrQpKkKk-4OCV8OUzZhY3yjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.237.0/24
86.105.4.0/24
89.36.140.0/24
89.37.194.0/23
89.40.36.0/24
Signature Algorithm: sha256WithRSAEncryption
85:47:0e:ae:22:3e:6d:f7:9e:d8:cf:ec:41:eb:d7:72:ee:2f:
e8:ee:e1:ef:48:cb:4e:f1:07:b7:22:8f:97:0c:3a:26:bb:78:
dc:79:98:fd:94:75:49:7b:11:b9:84:4c:92:44:ca:43:7f:05:
7a:66:89:33:30:60:9f:9f:94:16:03:f0:a0:4a:b4:f8:2c:7d:
36:b2:ea:56:81:90:44:4e:59:e5:7f:0e:3d:36:2d:e4:d0:e5:
06:e2:e0:0e:9b:a8:96:a1:4f:40:bb:95:bd:38:11:eb:77:79:
31:09:47:16:b0:97:91:52:19:76:19:da:85:db:9b:34:2c:96:
9d:30:dd:4d:f1:40:9b:6d:9d:16:95:8c:7a:7d:0d:38:e1:3e:
b5:39:43:7a:42:d4:a2:22:68:7f:8f:7c:b5:a5:94:7e:d8:12:
c4:0c:96:3c:2d:51:b3:cb:b0:e3:a3:85:e5:6b:95:ab:33:8a:
cd:13:d4:7f:b0:3d:c4:d1:e8:59:9b:a6:ae:19:8c:51:a1:8d:
b3:f6:11:a0:08:b8:1e:3c:52:2c:62:ea:cb:63:4d:f8:b3:44:
7c:5b:e4:dd:9e:bf:e1:35:d7:be:0f:19:12:30:27:93:98:c9:
60:01:77:64:11:f9:77:d6:2f:76:9e:1c:3f:c6:b4:fc:d3:c9:
01:75:b6:bb
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYhqza9Qs/YWFATwZuDpNk0VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMwNTMwMDM1NzI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzAxY2ZhZDBhNGE5MGE5M2VlMGUwOTVmMGU1MzM2NjE2MzdjYTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeKSDv0VB+l29rGLG0LZSVVmBIMW
GuFNLBqkTTAxu5GRcmKOXMqv1EjXvtE1PpiVn3yDoQVExzVa+udQ78TlYktRzqmX
9DY2UUq960opdQxU/OwZ8fd/fiBMuidc7pYWIfn5jnrkuImIjd/5XBHqO9xcNw/6
XJRWTuWxUgblqnlAN8DCkZ9Rs0tqFYXDmBWKlQAPr7aWiC/jdlmhgjbGLiYgPkCy
nB7TthXTomyhpOFWwhiRemdXKkPPLgZ2ywsguq/bkEtIKES3Vg+foveHtQWrEIg8
2lSpcpxKvhVGjMN0E/W5Su7PrqfwboX/k9CxyDz5UyeqJ1W1962kS50klwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFNMBz60KSpCpPuDglfDlM2YWN8ozMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvMHdIUHJRcEtrS2stNE9DVjhPVXpaaFkzeWpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALmbtAwQA
VmkEAwQAWSSMAwQBWSXCAwQAWSgkMA0GCSqGSIb3DQEBCwUAA4IBAQCFRw6uIj5t
957Yz+xB69dy7i/o7uHvSMtO8Qe3Io+XDDomu3jceZj9lHVJexG5hEySRMpDfwV6
ZokzMGCfn5QWA/CgSrT4LH02supWgZBETlnlfw49Ni3k0OUG4uAOm6iWoU9Au5W9
OBHrd3kxCUcWsJeRUhl2GdqF25s0LJadMN1N8UCbbZ0WlYx6fQ044T61OUN6QtSi
Imh/j3y1pZR+2BLEDJY8LVGzy7Djo4Xla5WrM4rNE9R/sD3E0ehZm6auGYxRoY2z
9hGgCLgePFIsYurLY034s0R8W+Tdnr/hNde+DxkSMCeTmMlgAXdkEfl31i92nhw/
xrT808kBdba7
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:05 2024 by rpki-client on console-fra.rpki-client.org