Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/V6coXos963twT6iPvhRmx5cMt1g.roa
File: V6coXos963twT6iPvhRmx5cMt1g.roa (raw, json)
Hash identifier: xxYkQiUBssLWdC3hQai5kvdQUd/UEwm0jt10x60ir9E=
Subject key identifier: 57:A7:28:5E:8B:3D:EB:7B:70:4F:A8:8F:BE:14:66:C7:97:0C:B7:58
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018ED812C024C317D9B7E469BD9F99DBD0D5
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/V6coXos963twT6iPvhRmx5cMt1g.roa
Signing time: Sat 13 Apr 2024 15:28:11 +0000
ROA not before: Sat 13 Apr 2024 15:28:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3343
IP address blocks: 86.110.116.0/24 maxlen: 24
86.110.117.0/24 maxlen: 24
86.110.118.0/24 maxlen: 24
86.110.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Apr 2024 09:20:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d8:12:c0:24:c3:17:d9:b7:e4:69:bd:9f:99:db:d0:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Apr 13 15:28:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57a7285e8b3deb7b704fa88fbe1466c7970cb758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:69:a7:b4:5d:f1:8a:49:20:4b:df:6d:38:27:
bb:aa:a5:90:84:56:11:c7:ee:a5:4a:8c:85:3f:14:
e5:0f:9a:50:85:38:a2:2c:a9:31:e6:97:a9:4a:25:
16:a1:9e:8a:67:aa:34:f6:c8:8b:a0:fb:f9:25:5a:
f3:84:d9:1c:74:b5:6c:54:fe:8b:a0:15:d7:60:c4:
a6:7d:78:33:aa:9e:30:db:b6:d5:73:2c:c8:1b:8d:
5a:05:69:ee:96:59:97:61:f2:c1:84:30:9f:ea:2c:
4d:69:d1:4c:04:45:bc:53:f1:c8:90:89:71:c4:a6:
39:bc:12:66:0c:7c:1d:c4:02:13:38:b2:57:ef:57:
12:2d:cd:76:42:74:26:20:a1:55:c2:2f:81:32:c5:
6e:e0:48:f3:3e:c5:3c:35:02:01:0b:f9:41:cb:a4:
2f:8f:12:68:12:f8:57:e9:83:74:83:1f:e9:19:24:
05:e3:88:16:03:7e:ce:aa:08:13:59:d8:1f:9c:b3:
5b:10:76:ad:b5:25:4b:c3:eb:49:8c:c3:1b:c8:e0:
ad:57:33:8e:a9:a5:03:30:91:65:89:eb:3a:50:22:
71:15:bf:cd:80:5d:95:a9:d2:e1:94:4f:2b:7d:22:
b8:5b:3e:59:30:f4:46:c8:b4:6a:8f:01:00:0d:f8:
46:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A7:28:5E:8B:3D:EB:7B:70:4F:A8:8F:BE:14:66:C7:97:0C:B7:58
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/V6coXos963twT6iPvhRmx5cMt1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.116.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:cf:bc:7e:ef:1f:36:91:0b:17:af:5a:d2:05:8a:67:a1:97:
97:ef:cd:78:82:05:e8:e6:c5:75:38:6b:4a:71:32:16:43:96:
7e:4b:f2:f4:87:b8:b9:44:59:79:f0:a4:6e:fc:f4:76:04:6e:
bf:6a:6e:a7:b2:40:e8:33:cc:77:10:be:98:ab:22:0a:fb:db:
f9:3b:c3:16:1d:ee:f7:af:27:83:df:1a:fe:7e:7c:8f:a7:73:
e9:77:ce:47:b1:ca:a4:69:15:18:9c:de:d0:13:ee:3f:11:17:
ae:a6:43:f4:43:c0:a0:27:fd:ef:b6:6d:2b:3d:ab:ff:e3:4c:
5c:43:6d:b9:55:1d:0b:d4:09:d7:0b:a1:5e:ea:9a:5e:b0:40:
e7:b4:17:54:9e:08:7e:55:d2:59:bd:07:39:d5:15:86:99:86:
21:10:85:31:0c:b7:44:04:88:5c:bf:06:2a:0c:00:6a:7f:2a:
eb:b6:5c:19:a9:81:ef:f4:98:03:3c:63:50:f2:62:72:37:f3:
30:c2:a6:d9:a3:dc:9d:3f:57:7c:25:04:22:a0:30:d7:66:31:
d4:c3:ae:42:26:c3:79:d2:6e:09:96:e2:e7:d0:ba:b1:1d:32:
5c:15:f0:b7:89:be:53:09:ce:aa:e9:f7:e3:25:f4:5e:19:dc:
7a:dc:2e:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY7YEsAkwxfZt+RpvZ+Z29DVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl
MmM2ODUwHhcNMjQwNDEzMTUyODExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2E3Mjg1ZThiM2RlYjdiNzA0ZmE4OGZiZTE0NjZjNzk3MGNiNzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmmntF3xikkgS99tOCe7qqWQhFYR
x+6lSoyFPxTlD5pQhTiiLKkx5pepSiUWoZ6KZ6o09siLoPv5JVrzhNkcdLVsVP6L
oBXXYMSmfXgzqp4w27bVcyzIG41aBWnullmXYfLBhDCf6ixNadFMBEW8U/HIkIlx
xKY5vBJmDHwdxAITOLJX71cSLc12QnQmIKFVwi+BMsVu4EjzPsU8NQIBC/lBy6Qv
jxJoEvhX6YN0gx/pGSQF44gWA37OqggTWdgfnLNbEHattSVLw+tJjMMbyOCtVzOO
qaUDMJFlies6UCJxFb/NgF2VqdLhlE8rfSK4Wz5ZMPRGyLRqjwEADfhGFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFenKF6LPet7cE+oj74UZseXDLdYMB8GA1UdIwQY
MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt
NDBkOTViZDMzZmNiLzEvVjZjb1hvczk2M3R3VDZpUHZoUm14NWNNdDFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi
LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVm50MA0G
CSqGSIb3DQEBCwUAA4IBAQALz7x+7x82kQsXr1rSBYpnoZeX7814ggXo5sV1OGtK
cTIWQ5Z+S/L0h7i5RFl58KRu/PR2BG6/am6nskDoM8x3EL6YqyIK+9v5O8MWHe73
ryeD3xr+fnyPp3Ppd85HscqkaRUYnN7QE+4/EReupkP0Q8CgJ/3vtm0rPav/40xc
Q225VR0L1AnXC6Fe6ppesEDntBdUngh+VdJZvQc51RWGmYYhEIUxDLdEBIhcvwYq
DABqfyrrtlwZqYHv9JgDPGNQ8mJyN/MwwqbZo9ydP1d8JQQioDDXZjHUw65CJsN5
0m4JluLn0LqxHTJcFfC3ib5TCc6q6ffjJfReGdx63C5l
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org