Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/Gfo82Zu_WkoG6Rl1--elwvHX3SU.roa
File: Gfo82Zu_WkoG6Rl1--elwvHX3SU.roa (raw, json)
Hash identifier: BCMKP8OZ9Nf6Is8tcdsPSTANPXAaCULyvWcZCt33evA=
Subject key identifier: 19:FA:3C:D9:9B:BF:5A:4A:06:E9:19:75:FB:E7:A5:C2:F1:D7:DD:25
Certificate issuer: /CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Certificate serial: 018BB96DB7BEBF1003C2ADA9E559FEECC01D
Authority key identifier: 29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/Gfo82Zu_WkoG6Rl1--elwvHX3SU.roa
Signing time: Fri 10 Nov 2023 13:30:57 +0000
ROA not before: Fri 10 Nov 2023 13:30:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25106
IP address blocks: 176.60.4.0/22 maxlen: 22
176.60.0.0/18 maxlen: 24
176.60.44.0/22 maxlen: 22
176.60.40.0/22 maxlen: 22
46.56.114.0/23 maxlen: 23
46.56.125.0/24 maxlen: 24
176.60.128.0/18 maxlen: 24
176.60.132.0/22 maxlen: 22
176.60.64.0/18 maxlen: 24
176.60.80.0/23 maxlen: 23
46.56.56.0/22 maxlen: 24
46.56.60.0/23 maxlen: 24
46.56.60.0/24 maxlen: 24
46.56.62.0/23 maxlen: 23
46.56.64.0/19 maxlen: 24
46.56.96.0/19 maxlen: 24
46.56.40.0/24 maxlen: 24
46.56.41.0/24 maxlen: 24
46.56.42.0/24 maxlen: 24
46.56.40.0/21 maxlen: 21
46.216.184.0/21 maxlen: 21
46.216.192.0/21 maxlen: 21
46.216.192.0/18 maxlen: 24
46.216.128.0/18 maxlen: 24
46.216.144.0/21 maxlen: 21
134.17.208.0/22 maxlen: 24
134.17.208.0/20 maxlen: 24
46.216.152.0/21 maxlen: 21
134.17.224.0/20 maxlen: 24
46.216.246.0/24 maxlen: 24
134.17.16.0/21 maxlen: 21
134.17.17.0/24 maxlen: 24
185.20.112.0/23 maxlen: 23
178.168.160.0/21 maxlen: 21
185.20.114.0/23 maxlen: 23
178.168.168.0/21 maxlen: 24
134.17.24.0/21 maxlen: 21
134.17.24.0/22 maxlen: 22
134.17.28.0/24 maxlen: 24
134.17.32.0/19 maxlen: 19
134.17.32.0/22 maxlen: 22
178.168.180.0/22 maxlen: 22
178.168.192.0/19 maxlen: 24
134.17.64.0/20 maxlen: 20
176.60.176.0/23 maxlen: 23
178.168.128.0/18 maxlen: 24
176.60.184.0/22 maxlen: 24
176.60.192.0/20 maxlen: 20
178.168.144.0/23 maxlen: 23
176.60.192.0/18 maxlen: 24
134.17.0.0/20 maxlen: 24
176.60.208.0/23 maxlen: 23
134.17.124.0/24 maxlen: 24
134.17.128.0/19 maxlen: 19
134.17.128.0/21 maxlen: 21
134.17.136.0/21 maxlen: 21
134.17.144.0/20 maxlen: 20
134.17.160.0/19 maxlen: 19
46.216.0.0/17 maxlen: 24
178.168.220.0/22 maxlen: 22
178.168.224.0/19 maxlen: 24
134.17.79.0/24 maxlen: 24
134.17.80.0/21 maxlen: 21
134.17.80.0/22 maxlen: 22
134.17.88.0/21 maxlen: 24
134.17.89.0/24 maxlen: 24
178.168.242.0/23 maxlen: 23
134.17.96.0/19 maxlen: 19
178.168.253.0/24 maxlen: 24
2a02:bf0:6000::/36 maxlen: 36
2a02:bf0:4000::/36 maxlen: 36
2a02:bf0:1000::/36 maxlen: 36
2a02:bf0::/32 maxlen: 32
2a02:bf0:5000::/36 maxlen: 44
2a02:bf0:3000::/36 maxlen: 44
2a02:bf0:7000::/36 maxlen: 44
2a02:bf0:27::/48 maxlen: 48
2a02:bf0:1002::/48 maxlen: 48
2a02:bf0:2::/48 maxlen: 48
2a02:bf0:26::/48 maxlen: 48
2a02:bf0:29::/48 maxlen: 48
2a02:bf0:10::/44 maxlen: 44
2a02:bf0:1::/48 maxlen: 48
2a02:bf0:25::/48 maxlen: 48
2a02:bf0::/48 maxlen: 48
2a02:bf0:7::/48 maxlen: 48
2a02:bf0:6::/48 maxlen: 48
2a02:bf0:28::/48 maxlen: 48
2a02:bf0:3::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b9:6d:b7:be:bf:10:03:c2:ad:a9:e5:59:fe:ec:c0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Validity
Not Before: Nov 10 13:30:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19fa3cd99bbf5a4a06e91975fbe7a5c2f1d7dd25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cc:16:32:ef:88:2a:ba:a9:8a:9b:c7:fb:e1:
0a:71:29:b1:20:12:b7:b3:cd:23:62:6e:2c:27:c9:
be:0f:d7:50:49:83:30:06:23:05:e1:26:f3:2c:cc:
fb:5d:d5:3c:91:2f:dc:dd:75:ec:de:19:1a:8f:b8:
2e:f3:70:ce:9d:48:62:4e:e3:71:65:a0:ce:ac:96:
ee:87:83:c7:2a:a5:d8:aa:a8:84:ed:5a:fd:ae:2c:
3c:95:37:b5:8d:4b:64:79:a8:36:1a:7e:45:7e:7a:
d0:58:42:21:ca:ac:81:bf:c5:b5:9e:97:e3:21:58:
6f:99:73:f7:00:6e:76:62:d1:e0:9f:c6:ea:31:c5:
62:11:4d:9d:14:7d:5d:87:39:0d:35:2d:46:66:98:
12:b6:b9:43:04:4f:f8:a1:f1:fa:f0:82:3c:75:72:
de:8f:5c:51:58:49:d5:d0:a4:f4:74:a9:a4:d5:e6:
d5:1b:27:36:72:ed:60:97:09:e2:1f:19:eb:4b:49:
b0:60:ca:b1:31:a8:24:ca:3a:13:8b:e6:ae:74:26:
4f:52:44:28:44:66:f2:65:e0:39:58:a1:fc:c2:ab:
07:66:cd:2e:7f:9e:4d:27:13:ab:0d:b0:3a:d9:f9:
20:81:b1:02:8d:82:d9:f3:12:e1:8f:65:d0:c8:14:
04:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FA:3C:D9:9B:BF:5A:4A:06:E9:19:75:FB:E7:A5:C2:F1:D7:DD:25
X509v3 Authority Key Identifier:
keyid:29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/Gfo82Zu_WkoG6Rl1--elwvHX3SU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.56.40.0/21
46.56.56.0-46.56.127.255
46.216.0.0/16
134.17.0.0-134.17.191.255
134.17.208.0-134.17.239.255
176.60.0.0/16
178.168.128.0/17
185.20.112.0/22
IPv6:
2a02:bf0::/32
Signature Algorithm: sha256WithRSAEncryption
28:4f:94:27:47:c0:e4:6c:12:25:c1:7b:25:fa:c3:00:8f:c3:
67:ea:a3:ce:e1:a7:8a:f7:ee:f4:0b:27:d3:f7:19:bc:9d:de:
0f:92:00:33:35:41:8e:c8:18:b4:be:98:62:eb:88:27:d8:90:
6d:93:21:30:0e:8a:e4:5a:0f:b9:be:17:36:c0:ae:80:44:b5:
ce:a7:0a:c8:a6:83:0a:0e:d3:1f:b6:d2:a0:01:05:81:ec:62:
43:ea:e6:cb:7b:92:95:25:88:fd:8d:a2:09:ea:92:20:41:0b:
7f:fc:dc:88:ad:2d:a0:a3:63:c5:dc:81:ec:32:7e:fd:a9:44:
f9:1a:a2:6d:58:64:dc:8e:bc:b9:3f:52:52:39:72:e4:be:97:
c4:da:4c:4b:a7:b2:d1:15:e6:53:4c:ef:c3:90:17:8e:2e:f0:
df:72:9d:f2:23:bf:76:b2:c5:55:f1:ae:8c:d4:2b:7d:7c:21:
20:c3:09:86:86:58:a4:86:ee:52:7e:23:4c:f0:b8:a1:09:6e:
48:57:6a:8c:30:48:e5:54:d8:bc:8f:ad:45:ab:f4:8f:02:24:
ef:5a:3c:dd:84:11:8a:80:0d:9a:67:3f:f8:3f:3e:9c:73:ad:
98:2b:17:fe:0c:1c:90:3a:0c:b2:87:2d:6f:01:ab:95:8a:89:
ff:46:56:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:53 2023 by rpki-client on console.sobornost.net