Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/LOoT5gT-zv1DQf35iE0umxnotbo.roa
File: LOoT5gT-zv1DQf35iE0umxnotbo.roa (raw, json)
Hash identifier: uaCyQw2NfipNqSI2sJvpVmv9CFyO3M3rLtqUSEb9Kbg=
Subject key identifier: 2C:EA:13:E6:04:FE:CE:FD:43:41:FD:F9:88:4D:2E:9B:19:E8:B5:BA
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018A025C19926D7AC55AD872FAF032F38DE1
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/LOoT5gT-zv1DQf35iE0umxnotbo.roa
Signing time: Thu 17 Aug 2023 07:18:24 +0000
ROA not before: Thu 17 Aug 2023 07:18:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 46.20.216.0/21 maxlen: 24
92.114.44.0/22 maxlen: 24
130.255.64.0/22 maxlen: 24
31.186.176.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Aug 2023 09:37:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:02:5c:19:92:6d:7a:c5:5a:d8:72:fa:f0:32:f3:8d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Aug 17 07:18:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cea13e604fecefd4341fdf9884d2e9b19e8b5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5a:a3:a5:d6:e7:9b:d1:c3:39:0a:97:84:90:
ad:e4:91:7c:af:b6:20:11:19:b3:1f:87:c2:b4:93:
9e:04:d2:c6:0f:b2:3a:66:2f:a3:b3:23:77:5b:da:
5a:7f:8b:23:1d:24:0d:16:61:e1:be:a2:cc:d8:d5:
cc:1d:5d:35:4a:f3:c0:8a:ee:4a:08:b1:04:75:f6:
db:e8:ce:31:6b:0d:20:ff:84:79:af:b3:39:78:c2:
c5:55:ec:d6:ef:f4:32:bf:4d:d6:da:bc:a6:01:07:
4b:31:c4:f4:67:d5:c4:be:cf:0f:ce:4d:0c:04:c0:
5e:c5:f2:b3:ea:e1:53:94:a0:35:11:45:f5:58:cd:
0e:b0:3f:12:38:3b:10:ab:bc:bd:7a:5c:e9:8c:69:
00:52:e2:22:46:b2:c5:a5:51:f3:7f:37:95:50:2e:
6f:9e:1c:e0:15:c3:5d:52:21:95:16:e3:97:a1:f7:
4f:9c:9c:fc:2c:f3:e2:0b:b6:a0:ec:25:c6:82:d6:
b2:f9:26:5d:b6:59:6c:c5:9c:f2:f2:89:1d:d7:70:
91:b2:3f:87:0e:82:a0:8f:b7:5d:0e:2c:20:87:8a:
79:0e:df:a7:a7:91:81:dc:52:17:50:2e:a5:7b:c5:
f4:33:1b:85:84:f4:4c:75:b7:2e:39:28:1b:cf:50:
32:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EA:13:E6:04:FE:CE:FD:43:41:FD:F9:88:4D:2E:9B:19:E8:B5:BA
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/LOoT5gT-zv1DQf35iE0umxnotbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.176.0/22
46.20.216.0/21
92.114.44.0/22
130.255.64.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:e9:36:1b:26:32:0b:32:fa:11:01:74:98:01:1b:61:fb:c3:
64:68:98:12:9f:5c:8e:30:33:4a:09:27:1c:5a:60:1c:bb:81:
d8:d6:59:92:3b:07:bb:8a:34:12:97:ab:31:6b:34:18:a9:fe:
8c:fd:97:18:e9:e7:f5:87:92:b6:b8:3c:cf:ea:06:f4:aa:44:
d0:97:ee:92:2b:05:15:95:8a:e9:a9:04:e1:4c:2a:41:6c:22:
ed:2a:c1:bc:58:6a:aa:84:cd:d0:c9:2d:09:9c:f6:08:4a:6d:
03:bd:fe:35:58:02:f3:96:f1:99:32:bc:fa:e0:99:16:b2:c6:
0a:b6:39:3f:45:cd:00:f2:5b:32:29:19:a6:ad:c3:f6:91:4f:
ee:fd:01:6e:e6:80:16:ce:44:9d:42:3f:19:11:3d:25:65:76:
3e:ce:0c:04:07:27:8f:34:b6:3f:12:c7:89:b9:fe:2d:3b:c6:
fe:01:66:78:99:44:91:79:18:d9:82:09:48:29:1d:1f:95:1c:
1e:6c:ac:49:33:0f:75:ed:83:af:1b:43:7d:3d:60:47:a4:15:
72:cf:f7:af:49:dd:78:76:00:5b:70:3f:43:ec:1e:d7:ad:43:
32:2f:e0:ca:99:a6:63:00:33:0b:38:64:1a:1b:e4:68:ad:3b:
31:8c:1e:88
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYoCXBmSbXrFWthy+vAy843hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2
N2IxZTQwHhcNMjMwODE3MDcxODI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2VhMTNlNjA0ZmVjZWZkNDM0MWZkZjk4ODRkMmU5YjE5ZThiNWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVqjpdbnm9HDOQqXhJCt5JF8r7Yg
ERmzH4fCtJOeBNLGD7I6Zi+jsyN3W9paf4sjHSQNFmHhvqLM2NXMHV01SvPAiu5K
CLEEdfbb6M4xaw0g/4R5r7M5eMLFVezW7/Qyv03W2rymAQdLMcT0Z9XEvs8Pzk0M
BMBexfKz6uFTlKA1EUX1WM0OsD8SODsQq7y9elzpjGkAUuIiRrLFpVHzfzeVUC5v
nhzgFcNdUiGVFuOXofdPnJz8LPPiC7ag7CXGgtay+SZdtllsxZzy8okd13CRsj+H
DoKgj7ddDiwgh4p5Dt+np5GB3FIXUC6le8X0MxuFhPRMdbcuOSgbz1AyiwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFCzqE+YE/s79Q0H9+YhNLpsZ6LW6MB8GA1UdIwQY
MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut
ODk3MTRhN2U4ZDU4LzEvTE9vVDVnVC16djFEUWYzNWlFMHVteG5vdGJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4
LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCH7qwAwQD
LhTYAwQCXHIsAwQCgv9AMA0GCSqGSIb3DQEBCwUAA4IBAQB76TYbJjILMvoRAXSY
ARth+8NkaJgSn1yOMDNKCSccWmAcu4HY1lmSOwe7ijQSl6sxazQYqf6M/ZcY6ef1
h5K2uDzP6gb0qkTQl+6SKwUVlYrpqQThTCpBbCLtKsG8WGqqhM3QyS0JnPYISm0D
vf41WALzlvGZMrz64JkWssYKtjk/Rc0A8lsyKRmmrcP2kU/u/QFu5oAWzkSdQj8Z
ET0lZXY+zgwEByePNLY/EseJuf4tO8b+AWZ4mUSReRjZgglIKR0flRwebKxJMw91
7YOvG0N9PWBHpBVyz/evSd14dgBbcD9D7B7XrUMyL+DKmaZjADMLOGQaG+RorTsx
jB6I
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:35 2024 by rpki-client on console-fra.rpki-client.org