Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/0Gz8WOOdCbo9j0enbWLW82kOVVg.roa
File: 0Gz8WOOdCbo9j0enbWLW82kOVVg.roa (raw, json)
Hash identifier: VePeWCvgbLhRQtBH1KHuia8exQHYeB/5KwBpfAVNNPE=
Subject key identifier: D0:6C:FC:58:E3:9D:09:BA:3D:8F:47:A7:6D:62:D6:F3:69:0E:55:58
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018BD6EB28925233E92054632DFB9DF04E2C
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/0Gz8WOOdCbo9j0enbWLW82kOVVg.roa
Signing time: Thu 16 Nov 2023 06:56:57 +0000
ROA not before: Thu 16 Nov 2023 06:56:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 46.20.216.0/21 maxlen: 24
82.163.60.0/22 maxlen: 24
92.114.44.0/22 maxlen: 24
31.186.176.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Dec 2023 19:08:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d6:eb:28:92:52:33:e9:20:54:63:2d:fb:9d:f0:4e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Nov 16 06:56:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d06cfc58e39d09ba3d8f47a76d62d6f3690e5558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:be:12:87:28:42:20:6e:e5:86:58:c0:64:63:
c5:66:49:2e:2f:6b:e6:68:3c:f8:07:41:6e:6c:c9:
18:91:4f:6f:e1:3e:1b:70:07:96:76:2c:f5:2e:a8:
34:6d:ed:52:f5:26:69:f4:d3:72:0b:ce:9f:c2:09:
64:5c:69:1d:0c:ab:db:e0:90:dc:50:5e:9c:06:f1:
51:dd:79:15:31:88:26:50:ae:c1:f4:d6:9c:0d:60:
3c:cc:f2:07:8b:6e:1b:84:08:2a:01:40:78:81:d0:
81:9a:b6:70:d5:99:22:5e:7e:e7:6b:23:94:ca:e9:
df:b2:a5:10:4f:b6:ec:92:50:d5:52:41:62:35:3a:
31:d9:c8:c3:d7:3a:8c:21:39:36:16:45:69:41:17:
f3:47:3d:a5:d5:50:b4:e3:17:32:62:c0:9c:a5:00:
d0:18:5c:99:25:a8:e4:05:f2:5c:f3:ad:e8:e1:16:
05:c3:17:15:5d:ee:b5:9a:58:87:42:0d:da:28:ee:
d7:e3:30:6b:98:8d:a1:68:49:df:4e:18:b1:c7:ad:
28:c2:cc:f4:af:f3:76:6c:cd:e4:e9:f6:8a:08:91:
eb:69:58:41:2c:e4:ad:b0:77:1c:0c:a8:d5:9d:b6:
33:db:92:ef:21:0a:ae:5c:4d:00:64:32:6f:8f:0f:
25:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6C:FC:58:E3:9D:09:BA:3D:8F:47:A7:6D:62:D6:F3:69:0E:55:58
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/0Gz8WOOdCbo9j0enbWLW82kOVVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.176.0/22
46.20.216.0/21
82.163.60.0/22
92.114.44.0/22
Signature Algorithm: sha256WithRSAEncryption
31:83:0b:6c:0e:b8:5e:19:a3:4c:54:7b:d5:94:41:47:9c:b5:
8a:cf:f8:e7:2b:53:3c:9d:95:d7:6d:19:ea:cc:1a:91:30:71:
0e:97:69:29:cb:6e:1e:86:c1:87:cb:51:07:33:f2:9d:12:6b:
75:aa:d9:f1:70:07:21:77:e9:be:bf:51:47:4e:34:a1:9f:63:
f3:9e:ca:94:20:bb:08:15:a9:f2:51:52:c7:a0:36:ec:24:28:
5c:eb:70:56:a1:3c:0c:85:22:bd:3d:72:fb:94:b7:76:c9:da:
59:8e:c6:7e:bc:3a:2f:8b:f8:d2:74:10:4e:39:17:1b:68:d2:
91:b2:19:e8:a2:cc:f4:06:27:a6:19:79:af:d6:ca:31:e3:dc:
3b:9b:f3:71:97:5d:fe:eb:07:a0:6a:fa:f2:05:1c:48:46:5f:
51:5b:b1:7d:8d:cf:0a:d5:1a:31:99:28:5d:d5:6e:61:2f:a3:
7a:ff:bb:54:55:56:a2:86:a1:e5:4b:06:18:ab:77:45:43:f7:
4f:9f:7f:b6:42:ef:de:4c:bf:a3:04:e7:65:7b:11:e4:e6:2c:
7e:9a:ef:45:2f:e1:f5:37:d0:f0:2d:ad:d0:97:0f:2f:97:ef:
e8:47:b9:ea:5e:f5:a1:95:d5:fd:80:88:71:c7:f2:9d:eb:b0:
97:1b:01:e2
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYvW6yiSUjPpIFRjLfud8E4sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2
N2IxZTQwHhcNMjMxMTE2MDY1NjU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDZjZmM1OGUzOWQwOWJhM2Q4ZjQ3YTc2ZDYyZDZmMzY5MGU1NTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgL4ShyhCIG7lhljAZGPFZkkuL2vm
aDz4B0FubMkYkU9v4T4bcAeWdiz1Lqg0be1S9SZp9NNyC86fwglkXGkdDKvb4JDc
UF6cBvFR3XkVMYgmUK7B9NacDWA8zPIHi24bhAgqAUB4gdCBmrZw1ZkiXn7nayOU
yunfsqUQT7bsklDVUkFiNTox2cjD1zqMITk2FkVpQRfzRz2l1VC04xcyYsCcpQDQ
GFyZJajkBfJc863o4RYFwxcVXe61mliHQg3aKO7X4zBrmI2haEnfThixx60owsz0
r/N2bM3k6faKCJHraVhBLOStsHccDKjVnbYz25LvIQquXE0AZDJvjw8lJQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFNBs/FjjnQm6PY9Hp21i1vNpDlVYMB8GA1UdIwQY
MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut
ODk3MTRhN2U4ZDU4LzEvMEd6OFdPT2RDYm85ajBlbmJXTFc4MmtPVlZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4
LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCH7qwAwQD
LhTYAwQCUqM8AwQCXHIsMA0GCSqGSIb3DQEBCwUAA4IBAQAxgwtsDrheGaNMVHvV
lEFHnLWKz/jnK1M8nZXXbRnqzBqRMHEOl2kpy24ehsGHy1EHM/KdEmt1qtnxcAch
d+m+v1FHTjShn2PznsqUILsIFanyUVLHoDbsJChc63BWoTwMhSK9PXL7lLd2ydpZ
jsZ+vDovi/jSdBBOORcbaNKRshnoosz0BiemGXmv1sox49w7m/Nxl13+6wegavry
BRxIRl9RW7F9jc8K1RoxmShd1W5hL6N6/7tUVVaihqHlSwYYq3dFQ/dPn3+2Qu/e
TL+jBOdlexHk5ix+mu9FL+H1N9DwLa3Qlw8vl+/oR7nqXvWhldX9gIhxx/Kd67CX
GwHi
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:35 2024 by rpki-client on console-fra.rpki-client.org