Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/2PeVNGE1jHHWZpAY5tqVNSV3KFs.roa
File: 2PeVNGE1jHHWZpAY5tqVNSV3KFs.roa (raw, json)
Hash identifier: lV23Im+8eIlCEcjHRy3ZbWW1BK/fiw9PTOzixPFQVsw=
Subject key identifier: D8:F7:95:34:61:35:8C:71:D6:66:90:18:E6:DA:95:35:25:77:28:5B
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 019039A1F9BCF1A49A0BC3FFF6842541DB3C
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/2PeVNGE1jHHWZpAY5tqVNSV3KFs.roa
Signing time: Fri 21 Jun 2024 07:10:34 +0000
ROA not before: Fri 21 Jun 2024 07:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 83.147.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jul 2024 23:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:39:a1:f9:bc:f1:a4:9a:0b:c3:ff:f6:84:25:41:db:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jun 21 07:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8f7953461358c71d6669018e6da95352577285b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a8:5b:c5:f5:b9:a2:9f:15:18:6d:ce:15:6f:
ef:2b:de:80:61:a1:a3:13:a4:32:af:d1:50:c0:f1:
ba:e6:15:14:db:fe:14:4b:55:f7:d3:c8:07:fe:7f:
dd:fc:4a:33:74:8f:b4:e9:6c:f8:34:05:21:43:c1:
b2:ba:5d:3e:be:06:a2:32:37:7c:ac:95:24:29:d3:
5a:96:76:7a:50:3b:a0:c2:f1:9f:9e:a3:79:b2:0d:
11:ac:e3:75:e8:a9:b2:04:24:8f:e4:94:7e:2d:73:
b2:cb:5f:4c:84:fe:e9:11:fe:c5:11:8a:e9:d4:25:
4e:25:86:fe:17:f5:15:e7:79:24:92:f5:bd:59:01:
7f:6d:00:33:de:ad:e0:a2:a8:d0:e8:e4:ed:38:2d:
87:e4:07:02:e7:c6:14:f3:7d:cc:1f:c7:60:ab:8c:
76:10:a1:e2:9d:ac:65:34:f6:29:80:a7:54:82:0a:
85:09:88:c8:98:e9:a4:38:0e:a5:fc:c8:7d:77:3e:
4d:1c:0d:1f:ff:28:78:b7:ff:2a:ea:1c:7f:83:e2:
c0:23:3a:3c:06:a6:14:c9:78:13:b9:5f:21:fe:df:
0c:df:e3:3d:fb:80:8f:4c:03:56:7a:b2:c8:9d:5f:
48:0f:29:68:aa:0c:27:68:d5:97:e1:6d:55:58:84:
31:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F7:95:34:61:35:8C:71:D6:66:90:18:E6:DA:95:35:25:77:28:5B
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/2PeVNGE1jHHWZpAY5tqVNSV3KFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.232.0/22
Signature Algorithm: sha256WithRSAEncryption
31:45:b4:19:6a:2d:b8:c0:a7:76:8e:38:d2:b8:7b:a1:88:8f:
0f:eb:88:5d:5d:59:58:46:a9:48:a5:e5:25:b4:cc:c4:73:6c:
37:cd:34:36:6a:87:ef:a9:79:58:67:9d:39:34:cc:20:25:c2:
05:38:61:75:24:a6:e3:ba:00:c7:ba:78:1d:d3:89:61:8a:18:
03:57:d3:08:48:ff:54:da:56:75:0d:d2:c0:9a:26:a9:98:b9:
ad:c8:97:44:ef:b1:9e:62:c0:02:3a:6d:cb:bd:d8:32:e5:2e:
6c:9c:15:56:2c:2f:64:dd:25:d9:47:45:e3:29:61:65:2c:6f:
90:27:3a:14:71:89:82:79:b2:a5:22:c9:5b:42:48:54:5a:38:
1a:69:44:93:b1:05:88:ee:3c:33:6a:59:29:a7:9e:50:7c:35:
8f:97:56:a5:ce:cf:47:08:0a:b0:07:c0:f2:d3:6e:b6:5f:9b:
27:9d:a9:24:c7:f5:70:66:a7:a0:23:ad:fc:e9:56:72:e6:f2:
79:d1:0c:44:46:15:98:d2:07:f8:38:6c:ba:49:ee:1d:7c:f2:
5c:9e:a8:25:bb:3d:e1:45:75:f9:10:20:e3:a2:d0:19:5f:54:
e8:04:37:15:ad:65:9a:97:71:d2:75:c0:63:3b:cd:e7:da:73:
99:4c:fb:1d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZA5ofm88aSaC8P/9oQlQds8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3
MmMyYWUwHhcNMjQwNjIxMDcxMDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOGY3OTUzNDYxMzU4YzcxZDY2NjkwMThlNmRhOTUzNTI1NzcyODViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6hbxfW5op8VGG3OFW/vK96AYaGj
E6Qyr9FQwPG65hUU2/4US1X308gH/n/d/EozdI+06Wz4NAUhQ8Gyul0+vgaiMjd8
rJUkKdNalnZ6UDugwvGfnqN5sg0RrON16KmyBCSP5JR+LXOyy19MhP7pEf7FEYrp
1CVOJYb+F/UV53kkkvW9WQF/bQAz3q3goqjQ6OTtOC2H5AcC58YU833MH8dgq4x2
EKHinaxlNPYpgKdUggqFCYjImOmkOA6l/Mh9dz5NHA0f/yh4t/8q6hx/g+LAIzo8
BqYUyXgTuV8h/t8M3+M9+4CPTANWerLInV9IDyloqgwnaNWX4W1VWIQxKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNj3lTRhNYxx1maQGObalTUldyhbMB8GA1UdIwQY
MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt
Zjk4ZGE1NGFmNDM0LzEvMlBlVk5HRTFqSEhXWnBBWTV0cVZOU1YzS0ZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEtZjk4ZGE1NGFmNDM0
LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCU5PoMA0G
CSqGSIb3DQEBCwUAA4IBAQAxRbQZai24wKd2jjjSuHuhiI8P64hdXVlYRqlIpeUl
tMzEc2w3zTQ2aofvqXlYZ505NMwgJcIFOGF1JKbjugDHungd04lhihgDV9MISP9U
2lZ1DdLAmiapmLmtyJdE77GeYsACOm3Lvdgy5S5snBVWLC9k3SXZR0XjKWFlLG+Q
JzoUcYmCebKlIslbQkhUWjgaaUSTsQWI7jwzalkpp55QfDWPl1alzs9HCAqwB8Dy
0262X5snnakkx/VwZqegI6386VZy5vJ50QxERhWY0gf4OGy6Se4dfPJcnqgluz3h
RXX5ECDjotAZX1ToBDcVrWWal3HSdcBjO83n2nOZTPsd
-----END CERTIFICATE-----
Generated at Wed Jul 24 04:10:08 2024 by rpki-client on console-ams.rpki-client.org