Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/PJylJwejoJ-_4zrQLjWbXpgpzR8.roa
File: PJylJwejoJ-_4zrQLjWbXpgpzR8.roa (raw, json)
Hash identifier: c86zAxVOa0fepfxmN5Ad39Opq2eKtP0oTQ+e0X8hpB0=
Subject key identifier: 3C:9C:A5:27:07:A3:A0:9F:BF:E3:3A:D0:2E:35:9B:5E:98:29:CD:1F
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018B064D807D7D157297361908AF34DD92CE
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/PJylJwejoJ-_4zrQLjWbXpgpzR8.roa
Signing time: Fri 06 Oct 2023 18:43:44 +0000
ROA not before: Fri 06 Oct 2023 18:43:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39600
IP address blocks: 82.163.68.0/22 maxlen: 24
46.20.212.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Nov 2023 07:58:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:06:4d:80:7d:7d:15:72:97:36:19:08:af:34:dd:92:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Oct 6 18:43:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c9ca52707a3a09fbfe33ad02e359b5e9829cd1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f2:87:d7:2f:90:78:ed:67:70:92:a1:5a:34:
68:e2:3c:da:1e:39:f4:f6:f2:5d:82:d6:b4:15:45:
64:96:d5:f3:0b:59:28:e8:c0:1c:67:49:e9:36:aa:
48:fd:d0:83:33:4f:a7:b0:19:e1:38:0e:d5:30:cf:
27:3f:c1:76:e9:f2:61:66:12:d0:25:61:90:b4:56:
16:c9:9c:1e:1d:bc:6d:2a:c9:af:d5:8a:14:cc:46:
eb:3b:44:fd:10:88:db:d7:b6:3d:b1:78:19:d0:c6:
87:d8:c5:77:e5:fe:2f:29:d5:69:9e:64:b1:8b:09:
86:a8:b0:01:27:74:57:08:de:4f:72:4b:0f:29:33:
36:18:48:aa:d6:04:98:35:75:e3:43:be:2c:b6:50:
1c:b0:da:16:34:10:60:8e:39:cc:99:e8:a0:ec:46:
80:a7:5c:c3:ed:e1:0d:e4:47:f6:29:91:e7:69:e7:
1b:a9:93:54:42:0e:3e:3a:92:65:18:03:ad:3e:28:
12:dc:e0:65:b3:d8:d6:74:5c:b1:77:83:59:55:1c:
74:1b:71:4b:69:c2:7c:f7:c2:5b:b8:90:6e:6b:34:
96:c5:6e:9b:9e:48:70:90:3a:d7:1f:ab:47:7d:6a:
70:ef:9f:e3:82:dd:92:39:85:07:02:71:21:6c:00:
dc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9C:A5:27:07:A3:A0:9F:BF:E3:3A:D0:2E:35:9B:5E:98:29:CD:1F
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/PJylJwejoJ-_4zrQLjWbXpgpzR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.212.0/22
82.163.68.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:08:59:a8:b6:95:6e:46:bc:49:54:6d:4e:6d:25:d9:55:4b:
64:48:29:a1:a2:81:05:ef:cb:79:99:60:f4:6a:74:73:16:06:
80:94:9a:e1:23:db:18:e8:bc:9e:c8:e0:1a:ab:de:89:2f:9a:
07:b6:e7:18:52:ef:9c:ae:bf:e2:7f:a2:16:98:79:93:f2:31:
96:2a:e8:1d:2b:24:15:08:ed:44:0a:50:68:c7:cb:1f:81:9e:
35:3f:32:26:79:a3:a6:d2:7b:17:30:00:76:86:2b:f6:3e:23:
0c:96:a1:1f:65:d0:7b:4f:14:d9:c5:dd:28:07:c4:1d:cf:a1:
71:99:1c:d4:1f:24:c1:9c:af:db:29:3f:c3:e8:3c:cd:12:8f:
d1:75:45:18:0e:eb:d1:b1:a5:81:29:29:6a:df:ea:ec:85:28:
66:24:f1:b3:72:04:18:6c:06:81:dd:c0:4a:17:38:c1:e5:29:
74:be:01:f7:e2:6a:ec:01:99:3a:ea:bf:ef:22:e3:81:1e:c5:
b2:93:cf:89:2f:1b:59:94:d4:1d:c3:fe:18:9f:38:2d:aa:c3:
04:35:b5:6a:d6:c1:51:4e:c3:05:72:3e:ba:ca:14:b8:e9:5c:
0c:a5:d4:8b:51:fb:40:be:e1:ca:6b:e9:ff:11:5d:c6:87:43:
48:64:c8:95
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYsGTYB9fRVylzYZCK803ZLOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2
N2IxZTQwHhcNMjMxMDA2MTg0MzQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzljYTUyNzA3YTNhMDlmYmZlMzNhZDAyZTM1OWI1ZTk4MjljZDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfKH1y+QeO1ncJKhWjRo4jzaHjn0
9vJdgta0FUVkltXzC1ko6MAcZ0npNqpI/dCDM0+nsBnhOA7VMM8nP8F26fJhZhLQ
JWGQtFYWyZweHbxtKsmv1YoUzEbrO0T9EIjb17Y9sXgZ0MaH2MV35f4vKdVpnmSx
iwmGqLABJ3RXCN5PcksPKTM2GEiq1gSYNXXjQ74stlAcsNoWNBBgjjnMmeig7EaA
p1zD7eEN5Ef2KZHnaecbqZNUQg4+OpJlGAOtPigS3OBls9jWdFyxd4NZVRx0G3FL
acJ898JbuJBuazSWxW6bnkhwkDrXH6tHfWpw75/jgt2SOYUHAnEhbADcLwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDycpScHo6Cfv+M60C41m16YKc0fMB8GA1UdIwQY
MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut
ODk3MTRhN2U4ZDU4LzEvUEp5bEp3ZWpvSi1fNHpyUUxqV2JYcGdwelI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4
LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLhTUAwQC
UqNEMA0GCSqGSIb3DQEBCwUAA4IBAQCeCFmotpVuRrxJVG1ObSXZVUtkSCmhooEF
78t5mWD0anRzFgaAlJrhI9sY6LyeyOAaq96JL5oHtucYUu+crr/if6IWmHmT8jGW
KugdKyQVCO1EClBox8sfgZ41PzImeaOm0nsXMAB2hiv2PiMMlqEfZdB7TxTZxd0o
B8Qdz6FxmRzUHyTBnK/bKT/D6DzNEo/RdUUYDuvRsaWBKSlq3+rshShmJPGzcgQY
bAaB3cBKFzjB5Sl0vgH34mrsAZk66r/vIuOBHsWyk8+JLxtZlNQdw/4YnzgtqsME
NbVq1sFRTsMFcj66yhS46VwMpdSLUftAvuHKa+n/EV3Gh0NIZMiV
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:35 2024 by rpki-client on console-fra.rpki-client.org