Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/spdO_o4DYgXLsZY4qy2k2krKYC0.roa
File: spdO_o4DYgXLsZY4qy2k2krKYC0.roa (raw, json)
Hash identifier: NEH6K7lic3vZm5RM/s64UBTnIm1ikchiAA9DNKwyweo=
Subject key identifier: B2:97:4E:FE:8E:03:62:05:CB:B1:96:38:AB:2D:A4:DA:4A:CA:60:2D
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 0187470D6C17838E0DD2AD6E048F87D9AE23
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/spdO_o4DYgXLsZY4qy2k2krKYC0.roa
Signing time: Mon 03 Apr 2023 12:17:54 +0000
ROA not before: Mon 03 Apr 2023 12:17:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209372
IP address blocks: 178.171.50.0/23 maxlen: 24
178.171.48.0/23 maxlen: 24
158.46.149.0/24 maxlen: 24
158.46.148.0/24 maxlen: 24
178.171.60.0/23 maxlen: 24
178.171.62.0/23 maxlen: 24
178.171.70.0/24 maxlen: 24
178.171.69.0/24 maxlen: 24
158.46.160.0/23 maxlen: 23
158.46.177.0/24 maxlen: 24
178.171.88.0/23 maxlen: 23
178.171.0.0/20 maxlen: 24
178.171.20.0/22 maxlen: 24
178.171.32.0/22 maxlen: 22
178.171.36.0/24 maxlen: 24
178.171.37.0/24 maxlen: 24
158.46.251.0/24 maxlen: 24
158.46.250.0/24 maxlen: 24
158.46.188.0/22 maxlen: 24
178.171.104.0/24 maxlen: 24
178.171.101.0/24 maxlen: 24
158.46.196.0/22 maxlen: 24
178.171.100.0/24 maxlen: 24
158.46.205.0/24 maxlen: 24
158.46.200.0/21 maxlen: 24
158.46.207.0/24 maxlen: 24
178.171.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Apr 2023 10:19:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:47:0d:6c:17:83:8e:0d:d2:ad:6e:04:8f:87:d9:ae:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Apr 3 12:17:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2974efe8e036205cbb19638ab2da4da4aca602d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3a:e9:8f:50:0d:67:bb:83:03:d6:51:d8:e4:
4a:05:e0:7a:53:fc:7c:be:c0:af:c6:56:66:e2:3f:
ed:0a:59:f7:41:4b:b1:64:21:e0:8d:01:6f:16:00:
61:ef:5d:c9:85:2b:40:1e:b5:b6:07:8d:43:fa:c2:
f8:cf:82:b2:75:d7:e3:5b:8c:ce:1e:ba:b4:0a:4c:
54:c2:81:6f:77:1b:3f:05:3d:13:1c:b9:16:28:b1:
31:1b:59:e7:ea:e8:db:f1:03:aa:2a:ca:b2:fb:c6:
b6:f9:2f:a9:4b:14:d8:75:f1:d1:21:28:91:d0:83:
51:fd:b6:cf:a5:a4:64:2d:2d:18:66:ea:ce:8f:78:
84:c3:f9:66:93:33:be:cd:09:2a:73:49:a2:a6:fc:
22:96:06:ae:57:3d:ce:d8:b0:f2:e3:67:ed:57:59:
49:cf:85:d8:55:a9:65:c5:53:d4:16:31:56:9b:41:
bc:1e:46:b8:6f:5f:88:b0:2c:d1:a5:29:9b:7b:b6:
8a:ab:98:e7:1c:f9:c5:da:e4:e3:7d:0f:5b:e6:d9:
ec:28:e2:8a:b4:14:76:5f:0c:ef:5d:96:73:f8:82:
f1:e4:b2:d3:23:2e:5d:56:b5:ce:db:cd:5f:4b:9f:
75:ad:14:1e:09:ff:eb:8a:4c:37:44:2e:fa:1d:bf:
82:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:97:4E:FE:8E:03:62:05:CB:B1:96:38:AB:2D:A4:DA:4A:CA:60:2D
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/spdO_o4DYgXLsZY4qy2k2krKYC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.46.148.0/23
158.46.160.0/23
158.46.177.0/24
158.46.188.0/22
158.46.196.0-158.46.207.255
158.46.250.0/23
178.171.0.0/20
178.171.20.0/22
178.171.32.0-178.171.37.255
178.171.48.0/22
178.171.60.0/22
178.171.69.0-178.171.70.255
178.171.88.0/23
178.171.100.0/23
178.171.104.0/24
178.171.119.0/24
Signature Algorithm: sha256WithRSAEncryption
08:68:a2:c6:93:89:35:e9:69:91:0b:1a:71:6f:9a:75:f4:d7:
35:39:38:20:89:9b:7b:7a:ec:42:2b:46:34:0b:06:8c:ec:1b:
4b:fe:73:8e:da:47:04:57:54:de:19:e0:ae:f8:70:00:48:8f:
6e:86:1b:97:77:77:27:4f:46:21:65:a4:06:00:f8:4a:1c:12:
40:fc:51:7a:8f:07:44:00:fe:f1:f0:6a:1f:2a:78:a5:f9:e7:
d3:79:ac:5c:5d:8d:a6:a2:e2:af:d0:53:a1:48:66:ac:2b:26:
55:d7:03:53:aa:18:0e:0c:32:cf:96:0b:e3:9e:ec:f5:fd:bf:
80:cd:11:05:b7:12:ae:88:23:5e:d4:5e:ac:05:e9:3a:95:be:
be:01:ac:a5:12:34:a2:8f:55:e0:09:b8:e7:47:2b:ca:36:72:
9d:6a:d2:cc:5f:53:40:8f:12:da:42:c6:a3:17:ac:e5:2b:55:
dd:c6:8e:50:68:06:aa:7e:e8:57:73:e0:47:ce:93:6f:8b:2e:
43:05:6b:1d:15:14:af:e2:94:61:d9:16:5c:4f:79:c4:96:a8:
3d:1a:b1:6c:2f:fb:40:59:fa:2e:2a:12:1a:95:d9:83:92:18:
04:9f:4d:08:81:33:01:1b:17:0d:ee:7e:a5:64:a6:12:5c:c1:
14:ee:95:7e
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgISAYdHDWwXg44N0q1uBI+H2a4jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMTFjYjAxNWRmOWJhYWI2MTIyOGRiYmNlMTdkZDRlMDBl
NjNjMTMwHhcNMjMwNDAzMTIxNzU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjk3NGVmZThlMDM2MjA1Y2JiMTk2MzhhYjJkYTRkYTRhY2E2MDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDrpj1ANZ7uDA9ZR2ORKBeB6U/x8
vsCvxlZm4j/tCln3QUuxZCHgjQFvFgBh713JhStAHrW2B41D+sL4z4KyddfjW4zO
Hrq0CkxUwoFvdxs/BT0THLkWKLExG1nn6ujb8QOqKsqy+8a2+S+pSxTYdfHRISiR
0INR/bbPpaRkLS0YZurOj3iEw/lmkzO+zQkqc0mipvwilgauVz3O2LDy42ftV1lJ
z4XYVallxVPUFjFWm0G8Hka4b1+IsCzRpSmbe7aKq5jnHPnF2uTjfQ9b5tnsKOKK
tBR2XwzvXZZz+ILx5LLTIy5dVrXO281fS591rRQeCf/rikw3RC76Hb+CWwIDAQAB
o4ICfjCCAnowHQYDVR0OBBYEFLKXTv6OA2IFy7GWOKstpNpKymAtMB8GA1UdIwQY
MBaAFI0RywFd+bqrYSKNu84X3U4A5jwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEt
YmE3NzFmZmQyNjljLzEvc3BkT19vNERZZ1hMc1pZNHF5Mmsya3JLWUMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEtYmE3NzFmZmQyNjlj
LzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGTBggrBgEFBQcBBwEB/wSBgzCBgDB+BAIAATB4AwQBni6U
AwQBni6gAwQAni6xAwQCni68MAwDBAKeLsQDBASeLsADBAGeLvoDBASyqwADBAKy
qxQwDAMEBbKrIAMEAbKrJAMEArKrMAMEArKrPDAMAwQAsqtFAwQAsqtGAwQBsqtY
AwQBsqtkAwQAsqtoAwQAsqt3MA0GCSqGSIb3DQEBCwUAA4IBAQAIaKLGk4k16WmR
Cxpxb5p19Nc1OTggiZt7euxCK0Y0CwaM7BtL/nOO2kcEV1TeGeCu+HAASI9uhhuX
d3cnT0YhZaQGAPhKHBJA/FF6jwdEAP7x8GofKnil+efTeaxcXY2mouKv0FOhSGas
KyZV1wNTqhgODDLPlgvjnuz1/b+AzREFtxKuiCNe1F6sBek6lb6+AaylEjSij1Xg
CbjnRyvKNnKdatLMX1NAjxLaQsajF6zlK1Xdxo5QaAaqfuhXc+BHzpNviy5DBWsd
FRSv4pRh2RZcT3nElqg9GrFsL/tAWfouKhIaldmDkhgEn00IgTMBGxcN7n6lZKYS
XMEU7pV+
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:39 2024 by rpki-client on console-fra.rpki-client.org