Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/LDWtqAVuFk6Tf-kGHh9MstYLpIM.roa
File: LDWtqAVuFk6Tf-kGHh9MstYLpIM.roa (raw, json)
Hash identifier: Ozu89zhL7Ig2aEGaWWZlH2JsGz9ZfHWasu8ahv6XqeE=
Subject key identifier: 2C:35:AD:A8:05:6E:16:4E:93:7F:E9:06:1E:1F:4C:B2:D6:0B:A4:83
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018D75C84816E72CDD74D49D85F84B0FE406
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/LDWtqAVuFk6Tf-kGHh9MstYLpIM.roa
Signing time: Sun 04 Feb 2024 20:21:16 +0000
ROA not before: Sun 04 Feb 2024 20:21:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 83.147.232.0/22 maxlen: 22
178.253.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 07:44:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:75:c8:48:16:e7:2c:dd:74:d4:9d:85:f8:4b:0f:e4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Feb 4 20:21:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c35ada8056e164e937fe9061e1f4cb2d60ba483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a4:2c:7f:38:60:11:08:e9:25:6f:85:d7:68:
bd:08:39:b9:de:b5:62:59:c8:55:c7:39:e5:99:5a:
37:bc:c3:7b:40:6b:c9:53:e5:c8:c5:b5:c8:42:84:
0c:df:13:41:3f:d3:70:50:4b:3b:1d:6b:29:62:2f:
b6:eb:36:03:44:18:91:83:ef:58:88:82:d1:6b:8a:
57:48:a6:c0:9b:c4:86:4d:77:02:5a:09:f5:ac:bf:
1c:26:e5:0d:e0:32:b6:4a:56:11:c3:a9:35:7b:b9:
3f:47:a0:e7:c3:b2:5f:15:f1:c6:b2:a1:0a:0c:34:
10:8a:a0:52:0d:9a:54:56:b1:3b:a1:ac:2c:fb:d9:
78:e3:70:00:1a:56:53:a7:52:e2:25:f3:41:66:b4:
65:ab:1c:36:ec:31:41:af:08:ee:fe:ce:2b:b2:7b:
e9:ab:42:e9:67:6c:6d:b7:59:e3:aa:b7:cd:0e:c4:
f7:5d:40:fe:ef:3d:4d:65:5b:ca:d1:3d:98:d5:11:
db:55:7d:ef:6f:ba:6d:3c:77:57:29:38:d7:20:4a:
3f:73:d0:1b:9e:2b:85:c8:d6:cc:7d:6b:fb:df:05:
81:25:fc:84:1d:0d:0c:eb:a0:c9:6e:69:36:aa:ac:
c0:38:b9:f6:85:e9:d5:b1:45:71:c5:22:a4:eb:29:
79:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:35:AD:A8:05:6E:16:4E:93:7F:E9:06:1E:1F:4C:B2:D6:0B:A4:83
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/LDWtqAVuFk6Tf-kGHh9MstYLpIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.232.0/22
178.253.16.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:5a:d9:89:24:26:ae:d0:d6:34:04:44:ed:54:fb:77:0f:6f:
6d:5a:b2:01:d0:81:24:e5:3e:69:fe:b3:5b:db:ae:34:e3:a7:
b5:bf:67:dc:5c:f0:4b:a4:f3:99:d2:16:3f:d1:81:a2:1c:63:
8b:12:cb:3f:db:89:eb:b5:cb:86:b2:09:f1:cc:d8:97:b6:36:
6a:47:a0:82:ae:00:d1:fd:b4:04:46:4e:fb:74:85:b5:d8:d5:
d9:f4:b4:96:69:c8:35:26:62:f7:01:52:ed:d9:63:f4:6a:5a:
df:bc:ff:a8:f1:b0:09:fa:ba:b4:a0:f2:77:0e:8d:cb:93:22:
11:c3:d2:d8:63:03:71:84:e1:89:7e:85:1f:dc:ef:e5:05:ad:
34:8b:5c:8d:13:83:89:bb:b0:95:35:0f:97:41:7c:72:05:40:
6a:5c:eb:f7:7a:2b:92:d2:9d:db:5b:41:40:da:d5:d5:44:0a:
d3:bb:8e:9b:72:d3:27:e9:06:48:55:7b:20:6d:3a:23:77:0a:
b6:5c:36:98:8d:f6:31:65:b5:cd:32:a8:84:cc:f9:00:37:65:
ad:f2:0d:78:bf:03:e3:6a:35:a7:09:78:77:24:8d:dd:f2:d4:
1b:3a:5e:77:d4:32:f0:b3:2e:7c:e0:5f:59:d6:1b:6a:3a:cb:
c7:84:60:da
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY11yEgW5yzddNSdhfhLD+QGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3
MmMyYWUwHhcNMjQwMjA0MjAyMTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzM1YWRhODA1NmUxNjRlOTM3ZmU5MDYxZTFmNGNiMmQ2MGJhNDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaQsfzhgEQjpJW+F12i9CDm53rVi
WchVxznlmVo3vMN7QGvJU+XIxbXIQoQM3xNBP9NwUEs7HWspYi+26zYDRBiRg+9Y
iILRa4pXSKbAm8SGTXcCWgn1rL8cJuUN4DK2SlYRw6k1e7k/R6Dnw7JfFfHGsqEK
DDQQiqBSDZpUVrE7oaws+9l443AAGlZTp1LiJfNBZrRlqxw27DFBrwju/s4rsnvp
q0LpZ2xtt1njqrfNDsT3XUD+7z1NZVvK0T2Y1RHbVX3vb7ptPHdXKTjXIEo/c9Ab
niuFyNbMfWv73wWBJfyEHQ0M66DJbmk2qqzAOLn2henVsUVxxSKk6yl5OQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCw1ragFbhZOk3/pBh4fTLLWC6SDMB8GA1UdIwQY
MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt
Zjk4ZGE1NGFmNDM0LzEvTERXdHFBVnVGazZUZi1rR0hoOU1zdFlMcElNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEtZjk4ZGE1NGFmNDM0
LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCU5PoAwQA
sv0QMA0GCSqGSIb3DQEBCwUAA4IBAQBLWtmJJCau0NY0BETtVPt3D29tWrIB0IEk
5T5p/rNb264046e1v2fcXPBLpPOZ0hY/0YGiHGOLEss/24nrtcuGsgnxzNiXtjZq
R6CCrgDR/bQERk77dIW12NXZ9LSWacg1JmL3AVLt2WP0alrfvP+o8bAJ+rq0oPJ3
Do3LkyIRw9LYYwNxhOGJfoUf3O/lBa00i1yNE4OJu7CVNQ+XQXxyBUBqXOv3eiuS
0p3bW0FA2tXVRArTu46bctMn6QZIVXsgbTojdwq2XDaYjfYxZbXNMqiEzPkAN2Wt
8g14vwPjajWnCXh3JI3d8tQbOl531DLwsy584F9Z1htqOsvHhGDa
-----END CERTIFICATE-----
Generated at Thu Apr 4 11:58:00 2024 by rpki-client on console-ams.rpki-client.org