Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/goIC6uqTXWQ-HwVXAmlPhTWdMC8.roa
File: goIC6uqTXWQ-HwVXAmlPhTWdMC8.roa (raw, json)
Hash identifier: iOl2fBqGHiCPuoW0WRmxojkg8ZZjJCqzhnOFLuElBcE=
Subject key identifier: 82:82:02:EA:EA:93:5D:64:3E:1F:05:57:02:69:4F:85:35:9D:30:2F
Certificate issuer: /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial: 01900C331BB133023534E7AFF336820E385A
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/goIC6uqTXWQ-HwVXAmlPhTWdMC8.roa
Signing time: Wed 12 Jun 2024 11:26:34 +0000
ROA not before: Wed 12 Jun 2024 11:26:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202391
IP address blocks: 46.34.160.0/22 maxlen: 24
89.42.196.0/22 maxlen: 22
89.42.196.0/24 maxlen: 24
89.47.196.0/22 maxlen: 24
89.47.197.0/24 maxlen: 24
89.47.198.0/24 maxlen: 24
89.47.200.0/22 maxlen: 22
89.47.200.0/24 maxlen: 24
89.47.201.0/24 maxlen: 24
89.47.202.0/24 maxlen: 24
92.114.48.0/24 maxlen: 24
92.114.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Jun 2024 11:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0c:33:1b:b1:33:02:35:34:e7:af:f3:36:82:0e:38:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Validity
Not Before: Jun 12 11:26:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=828202eaea935d643e1f055702694f85359d302f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6d:6e:c2:41:82:92:bd:b4:f3:f6:a5:9e:1c:
0d:af:8c:a4:35:ed:09:0c:9b:2a:93:ef:b7:49:e2:
c6:45:48:ba:36:4a:4c:03:8c:f8:91:23:4d:5d:62:
0d:ad:2b:23:59:68:e7:ea:57:bc:d7:e3:52:b2:fc:
3c:40:d8:9b:8c:4d:9e:1c:94:b3:2c:7a:18:54:f6:
d9:d9:57:f7:d3:c4:ad:22:aa:3f:3a:c1:75:5c:6f:
30:01:7c:86:db:f7:a8:2f:0f:a8:88:6d:80:92:22:
8b:71:aa:8d:de:55:05:57:2e:62:95:6b:24:ad:1e:
7f:dc:09:54:19:95:5a:40:05:65:79:04:e0:67:f1:
e2:4a:ac:70:d1:eb:5c:77:b5:bc:2f:d0:f3:52:9e:
8b:59:f6:39:c3:b8:53:69:c7:67:b4:e3:d7:4f:0a:
4f:7c:ea:25:6f:15:37:da:f6:19:cd:e7:76:12:11:
2a:a9:9d:3c:69:c5:eb:f4:86:3c:ad:26:71:3e:ef:
45:41:93:2e:09:56:d4:e4:15:3c:84:34:fa:6a:14:
d0:05:3a:01:6b:2d:cb:8f:de:6c:2c:ba:a2:46:7d:
20:95:bf:b5:4e:ba:22:e5:b9:e4:6a:03:56:81:8c:
1b:16:40:d9:b5:ee:a3:6d:e5:2c:d2:9f:c1:8e:ea:
98:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:82:02:EA:EA:93:5D:64:3E:1F:05:57:02:69:4F:85:35:9D:30:2F
X509v3 Authority Key Identifier:
keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/goIC6uqTXWQ-HwVXAmlPhTWdMC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.160.0/22
89.42.196.0/22
89.47.196.0-89.47.203.255
92.114.48.0/23
Signature Algorithm: sha256WithRSAEncryption
c9:80:04:23:be:05:84:b4:52:eb:43:e8:b2:47:f4:b4:74:dc:
2b:82:f8:96:81:bd:b5:f4:33:02:f0:6d:8e:e6:f6:d9:1f:f6:
42:af:21:23:6d:76:f7:d3:c1:56:80:75:42:b6:23:e6:b4:8b:
44:01:10:6a:73:6e:ee:64:d6:48:2c:9b:00:f7:9c:ef:59:54:
a4:f8:8b:ab:ed:40:f3:42:f7:7e:7a:61:1c:77:ea:7c:2d:60:
f5:e6:2c:5f:19:fa:d2:ed:52:04:a3:7d:b4:c2:80:65:11:8d:
bd:9c:38:6d:02:23:93:e7:a1:b7:e7:83:fa:ef:ac:fc:bc:9b:
b0:4f:9e:16:c6:cd:af:cc:b2:90:8a:4b:71:64:17:17:29:36:
ff:db:5a:53:5a:3d:32:e3:00:17:68:0d:7d:5f:9a:c8:01:f8:
d8:f9:aa:d7:94:ef:2c:6d:bc:f3:f4:c3:a0:8f:00:0d:88:dc:
22:2a:1b:1c:c5:31:59:48:e4:79:85:41:0a:0b:ac:96:25:a4:
85:db:d7:2d:02:94:2e:fd:c1:b0:6b:0b:b5:9d:72:5e:96:ae:
bc:11:24:a9:4d:a9:74:f0:12:30:94:d1:0f:31:2a:59:9a:ce:
26:ea:18:c6:af:0b:fd:af:b8:d4:23:d5:97:7d:4a:18:8f:1e:
7d:53:d7:14
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZAMMxuxMwI1NOev8zaCDjhaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ZTFjOGM2NWM4NmU4ZDI2ZGRiZWI2ODY1OGEzOWE3YThl
Mjc4NjYwHhcNMjQwNjEyMTEyNjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjgyMDJlYWVhOTM1ZDY0M2UxZjA1NTcwMjY5NGY4NTM1OWQzMDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqW1uwkGCkr208/alnhwNr4ykNe0J
DJsqk++3SeLGRUi6NkpMA4z4kSNNXWINrSsjWWjn6le81+NSsvw8QNibjE2eHJSz
LHoYVPbZ2Vf308StIqo/OsF1XG8wAXyG2/eoLw+oiG2AkiKLcaqN3lUFVy5ilWsk
rR5/3AlUGZVaQAVleQTgZ/HiSqxw0etcd7W8L9DzUp6LWfY5w7hTacdntOPXTwpP
fOolbxU32vYZzed2EhEqqZ08acXr9IY8rSZxPu9FQZMuCVbU5BU8hDT6ahTQBToB
ay3Lj95sLLqiRn0glb+1Troi5bnkagNWgYwbFkDZte6jbeUs0p/BjuqYCwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFIKCAurqk11kPh8FVwJpT4U1nTAvMB8GA1UdIwQY
MBaAFMbhyMZchujSbdvraGWKOaeo4nhmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHVISXhseUc2Tkp0Mi10b1pZbzVwNmppZUdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hNDUzZmUtYTY2NC00N2EyLThiOGEt
Y2U1ZTAxZTcxYzkxLzEvZ29JQzZ1cVRYV1EtSHdWWEFtbFBoVFdkTUM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9hNDUzZmUtYTY2NC00N2EyLThiOGEtY2U1ZTAxZTcxYzkx
LzEveHVISXhseUc2Tkp0Mi10b1pZbzVwNmppZUdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQCLiKgAwQC
WSrEMAwDBAJZL8QDBAJZL8gDBAFccjAwDQYJKoZIhvcNAQELBQADggEBAMmABCO+
BYS0UutD6LJH9LR03CuC+JaBvbX0MwLwbY7m9tkf9kKvISNtdvfTwVaAdUK2I+a0
i0QBEGpzbu5k1kgsmwD3nO9ZVKT4i6vtQPNC9356YRx36nwtYPXmLF8Z+tLtUgSj
fbTCgGURjb2cOG0CI5Pnobfng/rvrPy8m7BPnhbGza/MspCKS3FkFxcpNv/bWlNa
PTLjABdoDX1fmsgB+Nj5qteU7yxtvPP0w6CPAA2I3CIqGxzFMVlI5HmFQQoLrJYl
pIXb1y0ClC79wbBrC7Wdcl6WrrwRJKlNqXTwEjCU0Q8xKlmazibqGMavC/2vuNQj
1Zd9ShiPHn1T1xQ=
-----END CERTIFICATE-----
Generated at Mon Jun 17 01:11:14 2024 by rpki-client on console.sobornost.net