Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/Ow5JQxsDQ39VSt-RWL78k46o9YY.roa
File: Ow5JQxsDQ39VSt-RWL78k46o9YY.roa (raw, json)
Hash identifier: /HKWjyrNBaSIz2S4v3CgeNoi5PzULlu9Sw1yvTS7ZyY=
Subject key identifier: 3B:0E:49:43:1B:03:43:7F:55:4A:DF:91:58:BE:FC:93:8E:A8:F5:86
Certificate issuer: /CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7
Certificate serial: 0186A0EBC9DF14F8725B6A72DFAA572A633A
Authority key identifier: 1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/Ow5JQxsDQ39VSt-RWL78k46o9YY.roa
Signing time: Thu 02 Mar 2023 06:04:12 +0000
ROA not before: Thu 02 Mar 2023 06:04:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41176
IP address blocks: 188.117.64.0/18 maxlen: 18
188.117.76.0/24 maxlen: 24
188.117.76.0/22 maxlen: 22
188.117.77.0/24 maxlen: 24
188.117.78.0/24 maxlen: 24
188.117.72.0/22 maxlen: 22
188.117.84.0/22 maxlen: 22
188.117.84.0/24 maxlen: 24
188.117.85.0/24 maxlen: 24
188.117.81.0/24 maxlen: 24
188.117.86.0/24 maxlen: 24
188.117.87.0/24 maxlen: 24
188.117.93.0/24 maxlen: 24
188.117.96.0/21 maxlen: 21
188.117.104.0/24 maxlen: 24
188.117.100.0/23 maxlen: 23
188.117.107.0/24 maxlen: 24
188.117.109.0/24 maxlen: 24
188.117.124.0/24 maxlen: 24
212.76.64.0/24 maxlen: 24
212.76.64.0/19 maxlen: 19
212.76.70.0/24 maxlen: 24
212.76.69.0/24 maxlen: 24
212.76.68.0/24 maxlen: 24
212.76.73.0/24 maxlen: 24
212.76.85.0/24 maxlen: 24
212.76.83.0/24 maxlen: 24
212.76.88.0/24 maxlen: 24
212.76.95.0/24 maxlen: 24
89.108.0.0/18 maxlen: 18
89.108.29.0/24 maxlen: 24
89.108.28.0/24 maxlen: 24
89.108.30.0/24 maxlen: 24
89.108.26.0/24 maxlen: 24
89.108.26.0/23 maxlen: 23
89.108.27.0/24 maxlen: 24
213.236.32.0/19 maxlen: 19
213.236.35.0/24 maxlen: 24
213.236.38.0/24 maxlen: 24
213.236.37.0/24 maxlen: 24
185.20.152.0/24 maxlen: 24
185.20.152.0/22 maxlen: 22
213.236.41.0/24 maxlen: 24
213.236.48.0/24 maxlen: 24
213.236.56.0/22 maxlen: 22
213.236.56.0/21 maxlen: 21
213.236.53.0/24 maxlen: 24
213.236.59.0/24 maxlen: 24
213.236.60.0/24 maxlen: 24
89.108.60.0/22 maxlen: 22
2a02:d70::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a0:eb:c9:df:14:f8:72:5b:6a:72:df:aa:57:2a:63:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7
Validity
Not Before: Mar 2 06:04:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b0e49431b03437f554adf9158befc938ea8f586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:21:47:57:d6:d9:76:54:04:a5:e0:9f:1c:07:
7a:cb:2c:4c:76:f8:93:54:c5:87:ed:93:5e:a7:ed:
1b:f0:30:43:6c:8e:79:a2:26:c5:c6:cf:80:e1:78:
58:f1:93:0b:69:44:12:3c:fd:7f:a1:64:66:6f:16:
57:54:3f:ba:c2:1a:ab:11:7c:fc:3f:28:1f:42:63:
cd:3f:68:38:12:3a:e2:d7:be:c7:ad:dc:af:a5:77:
46:ca:05:92:91:a2:e9:e2:e5:02:57:ae:3e:56:72:
0c:8d:5a:37:b2:e7:c5:e7:26:fc:24:ea:71:4c:22:
98:6e:e2:85:70:2c:9a:18:16:96:01:53:d8:20:62:
4d:16:39:bc:1a:5c:d2:4e:1a:c2:d9:8f:f6:0a:db:
69:3c:92:f7:5a:a2:a1:00:db:71:31:37:99:c0:9b:
16:4b:6c:e3:e3:ba:f6:ad:1f:74:07:ef:b1:d1:93:
70:ed:1c:46:ae:b1:04:7a:53:6b:c0:8b:68:0b:02:
9b:ff:3e:fc:20:e3:15:7e:ea:49:0f:bf:05:2d:05:
6a:2e:17:0b:ef:e5:79:64:fc:68:72:d7:31:16:09:
36:17:8b:5d:d5:36:a4:9b:42:84:9e:d9:d9:55:ef:
82:c9:7e:9b:c9:f4:b5:4e:54:e0:58:2b:29:39:07:
11:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0E:49:43:1B:03:43:7F:55:4A:DF:91:58:BE:FC:93:8E:A8:F5:86
X509v3 Authority Key Identifier:
keyid:1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/Ow5JQxsDQ39VSt-RWL78k46o9YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.108.0.0/18
185.20.152.0/22
188.117.64.0/18
212.76.64.0/19
213.236.32.0/19
IPv6:
2a02:d70::/32
Signature Algorithm: sha256WithRSAEncryption
83:23:3f:1d:d3:66:25:68:82:a7:da:9c:66:9d:03:6e:1a:83:
f7:0b:0f:48:5e:f3:0e:3b:75:ee:cc:ee:3c:35:1b:93:ac:e3:
d1:5d:c4:6f:0d:57:2e:ff:12:13:a6:15:1d:7a:dc:c3:36:aa:
ed:2e:7d:a7:69:a1:14:b5:71:88:ba:66:30:41:38:07:64:64:
54:64:c6:a9:63:37:eb:91:06:5d:d4:f0:64:c7:61:99:e6:5e:
01:96:b0:5e:2c:b4:25:d9:4d:f4:1d:74:83:12:82:55:77:e1:
53:d1:dd:f1:42:ea:26:ba:4d:79:4e:2b:bb:74:92:7e:41:56:
47:eb:34:25:ce:fc:b6:4a:0e:3c:0c:dd:2d:ca:7b:5d:ec:33:
be:0b:63:d1:e4:27:91:e7:a8:bc:54:4f:40:7d:d1:45:01:ee:
c0:4e:34:e0:4d:ac:05:b3:fe:56:77:a7:be:8e:74:86:e6:e4:
74:0d:be:2f:dc:78:84:47:94:6d:92:37:21:f0:a3:2f:14:41:
61:5c:a7:c9:fe:f7:2d:7a:7f:6c:32:cc:43:72:da:e3:b0:87:
38:a9:0c:77:9b:08:a8:5b:f0:53:c4:63:c0:b6:7c:c7:df:55:
63:52:d4:77:e2:c3:dc:48:59:58:ec:ed:e9:6d:e1:8c:15:a4:
7e:b4:a8:13
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYag68nfFPhyW2py36pXKmM6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMmE0YmZkMmMwYzY5NzY1YTgyOTllZjc0OTY1Zjg2MmE3
MTQ4YjcwHhcNMjMwMzAyMDYwNDEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjBlNDk0MzFiMDM0MzdmNTU0YWRmOTE1OGJlZmM5MzhlYThmNTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiFHV9bZdlQEpeCfHAd6yyxMdviT
VMWH7ZNep+0b8DBDbI55oibFxs+A4XhY8ZMLaUQSPP1/oWRmbxZXVD+6whqrEXz8
PygfQmPNP2g4Ejri177HrdyvpXdGygWSkaLp4uUCV64+VnIMjVo3sufF5yb8JOpx
TCKYbuKFcCyaGBaWAVPYIGJNFjm8GlzSThrC2Y/2CttpPJL3WqKhANtxMTeZwJsW
S2zj47r2rR90B++x0ZNw7RxGrrEEelNrwItoCwKb/z78IOMVfupJD78FLQVqLhcL
7+V5ZPxoctcxFgk2F4td1Takm0KEntnZVe+CyX6byfS1TlTgWCspOQcRIwIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFDsOSUMbA0N/VUrfkVi+/JOOqPWGMB8GA1UdIwQY
MBaAFBoqS/0sDGl2WoKZ73SWX4YqcUi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2lwTF9Td01hWFphZ3BudmRKWmZoaXB4U0xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82NzdhZjgtODUzZS00OTNiLThiODUt
YmI3MDgwMGMyYTY1LzEvT3c1SlF4c0RRMzlWU3QtUldMNzhrNDZvOVlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi82NzdhZjgtODUzZS00OTNiLThiODUtYmI3MDgwMGMyYTY1
LzEvR2lwTF9Td01hWFphZ3BudmRKWmZoaXB4U0xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQGWWwAAwQC
uRSYAwQGvHVAAwQF1ExAAwQF1ewgMA0EAgACMAcDBQAqAg1wMA0GCSqGSIb3DQEB
CwUAA4IBAQCDIz8d02YlaIKn2pxmnQNuGoP3Cw9IXvMOO3XuzO48NRuTrOPRXcRv
DVcu/xITphUdetzDNqrtLn2naaEUtXGIumYwQTgHZGRUZMapYzfrkQZd1PBkx2GZ
5l4BlrBeLLQl2U30HXSDEoJVd+FT0d3xQuomuk15Tiu7dJJ+QVZH6zQlzvy2Sg48
DN0tyntd7DO+C2PR5CeR56i8VE9AfdFFAe7ATjTgTawFs/5Wd6e+jnSG5uR0Db4v
3HiER5Rtkjch8KMvFEFhXKfJ/vcten9sMsxDctrjsIc4qQx3mwioW/BTxGPAtnzH
31VjUtR34sPcSFlY7O3pbeGMFaR+tKgT
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:03 2023 by rpki-client on console-ams.rpki-client.org