Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/2-LEwr-IQbjuWcfjhnufvWCVlnU.roa
File: 2-LEwr-IQbjuWcfjhnufvWCVlnU.roa (raw, json)
Hash identifier: oqr1qk5RPW8Gha98DB0ijnsOe8zSedEUc5hw9ppyXEE=
Subject key identifier: DB:E2:C4:C2:BF:88:41:B8:EE:59:C7:E3:86:7B:9F:BD:60:95:96:75
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0187A2F0C76413E942AD9263367EE6E01010
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/2-LEwr-IQbjuWcfjhnufvWCVlnU.roa
Signing time: Fri 21 Apr 2023 08:31:41 +0000
ROA not before: Fri 21 Apr 2023 08:31:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 91.186.200.0/22 maxlen: 24
91.186.214.0/23 maxlen: 24
94.241.168.0/21 maxlen: 24
178.253.12.0/23 maxlen: 24
83.147.216.0/23 maxlen: 24
83.147.217.0/24 maxlen: 24
178.253.31.0/24 maxlen: 24
83.147.222.0/24 maxlen: 24
83.147.232.0/22 maxlen: 24
178.253.52.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Jun 2023 14:34:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a2:f0:c7:64:13:e9:42:ad:92:63:36:7e:e6:e0:10:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Apr 21 08:31:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbe2c4c2bf8841b8ee59c7e3867b9fbd60959675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5e:0c:a1:07:2c:15:aa:ba:0b:75:40:5c:a8:
59:9b:ce:72:81:67:2c:6b:71:2e:d0:28:32:ca:7c:
74:f9:6e:7c:54:3f:10:fe:5d:23:ec:5e:9c:9d:db:
21:cc:79:79:17:eb:51:a0:6e:42:24:e5:eb:e4:28:
59:4c:6a:0c:d9:b2:34:65:7b:2c:d3:78:a2:2d:da:
2a:d9:90:c9:49:8c:64:67:51:05:af:6f:1a:bf:ff:
3e:8b:56:22:b3:a2:61:5b:99:28:3f:29:2b:f3:67:
6b:13:34:87:1e:ef:6d:d4:f2:e0:1d:4a:b6:01:38:
36:a1:dc:7f:e5:71:1a:3c:fa:e3:d5:ff:34:61:3c:
b7:30:cb:1b:f0:93:df:6b:18:6f:d4:01:da:4f:bc:
4a:a3:97:b1:58:7d:66:ef:12:e5:e2:a9:16:b6:93:
ad:40:df:2b:f3:bb:87:53:94:0b:60:3f:13:83:51:
da:db:8b:8f:84:cd:99:2c:2e:f8:03:9a:91:ff:de:
09:f8:b0:b9:45:cf:56:c1:df:4d:e3:85:c0:a4:4e:
e3:85:09:af:96:6e:00:33:22:67:34:ea:2b:86:61:
a9:78:0d:e2:4e:d2:df:cc:49:76:8f:ee:33:89:33:
bd:d4:60:dc:bd:98:6e:a4:89:91:f7:df:a5:72:5a:
60:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E2:C4:C2:BF:88:41:B8:EE:59:C7:E3:86:7B:9F:BD:60:95:96:75
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/2-LEwr-IQbjuWcfjhnufvWCVlnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.216.0/23
83.147.222.0/24
83.147.232.0/22
91.186.200.0/22
91.186.214.0/23
94.241.168.0/21
178.253.12.0/23
178.253.31.0/24
178.253.52.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:4a:25:62:92:d9:a8:eb:17:63:fb:d8:0c:51:eb:bc:1f:c6:
2f:09:d1:a0:48:55:f7:b9:f7:11:2a:99:ad:de:ab:dc:23:ca:
b6:7c:8c:53:58:7c:80:04:31:88:df:89:75:1c:d9:93:61:77:
7c:00:d6:08:f8:43:d8:19:e1:f4:07:ff:25:c6:e7:ab:b2:51:
b2:f5:ca:91:c9:8d:34:a9:cd:18:86:f5:66:a0:94:b6:a2:e3:
bd:36:37:23:d8:11:ed:c7:85:f5:66:c5:6f:ef:60:14:41:43:
3d:9f:c9:b3:3e:cf:08:d2:43:59:cd:63:71:64:b3:f7:95:ac:
44:75:23:28:60:c0:df:e7:0c:f4:0d:53:48:5e:2a:fd:09:d7:
8c:6a:a7:04:dd:02:cf:a7:53:73:ab:f4:c7:73:a8:f3:a4:8f:
d4:24:83:03:c4:bd:1e:e7:bf:24:d4:e0:d2:b2:78:8a:4d:94:
0f:3f:88:23:8e:fc:d1:9e:6c:0b:71:d5:7b:d4:bf:62:be:93:
9b:b4:98:84:e8:cb:96:63:6a:5c:67:52:2c:37:f0:f7:73:97:
76:a9:43:f4:ea:fd:b3:3d:22:38:be:08:8b:31:ea:58:d2:15:
77:b8:39:af:a8:c8:96:9e:e8:71:4c:2b:f8:5b:84:29:e1:7c:
b2:2f:c0:63
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAYei8MdkE+lCrZJjNn7m4BAQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3
MmMyYWUwHhcNMjMwNDIxMDgzMTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYmUyYzRjMmJmODg0MWI4ZWU1OWM3ZTM4NjdiOWZiZDYwOTU5Njc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo14MoQcsFaq6C3VAXKhZm85ygWcs
a3Eu0Cgyynx0+W58VD8Q/l0j7F6cndshzHl5F+tRoG5CJOXr5ChZTGoM2bI0ZXss
03iiLdoq2ZDJSYxkZ1EFr28av/8+i1Yis6JhW5koPykr82drEzSHHu9t1PLgHUq2
ATg2odx/5XEaPPrj1f80YTy3MMsb8JPfaxhv1AHaT7xKo5exWH1m7xLl4qkWtpOt
QN8r87uHU5QLYD8Tg1Ha24uPhM2ZLC74A5qR/94J+LC5Rc9Wwd9N44XApE7jhQmv
lm4AMyJnNOorhmGpeA3iTtLfzEl2j+4ziTO91GDcvZhupImR99+lclpg+QIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFNvixMK/iEG47lnH44Z7n71glZZ1MB8GA1UdIwQY
MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt
Zjk4ZGE1NGFmNDM0LzEvMi1MRXdyLUlRYmp1V2NmamhudWZ2V0NWbG5VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEtZjk4ZGE1NGFmNDM0
LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQBU5PYAwQA
U5PeAwQCU5PoAwQCW7rIAwQBW7rWAwQDXvGoAwQBsv0MAwQAsv0fAwQBsv00MA0G
CSqGSIb3DQEBCwUAA4IBAQA8SiViktmo6xdj+9gMUeu8H8YvCdGgSFX3ufcRKpmt
3qvcI8q2fIxTWHyABDGI34l1HNmTYXd8ANYI+EPYGeH0B/8lxuerslGy9cqRyY00
qc0YhvVmoJS2ouO9Njcj2BHtx4X1ZsVv72AUQUM9n8mzPs8I0kNZzWNxZLP3laxE
dSMoYMDf5wz0DVNIXir9CdeMaqcE3QLPp1Nzq/THc6jzpI/UJIMDxL0e578k1ODS
sniKTZQPP4gjjvzRnmwLcdV71L9ivpObtJiE6MuWY2pcZ1IsN/D3c5d2qUP06v2z
PSI4vgiLMepY0hV3uDmvqMiWnuhxTCv4W4Qp4XyyL8Bj
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:09 2024 by rpki-client on console-fra.rpki-client.org