Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/2TII2_VDmaI1gbpE3SUPcqbg47c.roa
File: 2TII2_VDmaI1gbpE3SUPcqbg47c.roa (raw, json)
Hash identifier: u6917F5UGsKHnon7I7mQ8FLPEQYWbaM6VaA3YnGEPAk=
Subject key identifier: D9:32:08:DB:F5:43:99:A2:35:81:BA:44:DD:25:0F:72:A6:E0:E3:B7
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 0186DEDCBEDC1CFA82601FE1AD611651C1F6
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/2TII2_VDmaI1gbpE3SUPcqbg47c.roa
Signing time: Tue 14 Mar 2023 06:44:14 +0000
ROA not before: Tue 14 Mar 2023 06:44:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48715
IP address blocks: 185.141.105.0/24 maxlen: 24
185.141.104.0/24 maxlen: 24
185.141.104.0/22 maxlen: 22
185.141.107.0/24 maxlen: 24
185.141.106.0/24 maxlen: 24
185.18.212.0/22 maxlen: 22
185.18.212.0/24 maxlen: 24
185.18.213.0/24 maxlen: 24
185.18.214.0/24 maxlen: 24
185.18.215.0/24 maxlen: 24
195.211.44.0/24 maxlen: 24
195.211.44.0/22 maxlen: 22
195.211.47.0/24 maxlen: 24
195.211.45.0/24 maxlen: 24
195.211.46.0/24 maxlen: 24
195.110.38.0/23 maxlen: 23
91.236.168.0/24 maxlen: 24
91.236.168.0/23 maxlen: 23
91.236.169.0/24 maxlen: 24
152.89.44.0/24 maxlen: 24
152.89.44.0/22 maxlen: 22
152.89.47.0/24 maxlen: 24
152.89.46.0/24 maxlen: 24
152.89.45.0/24 maxlen: 24
185.58.240.0/22 maxlen: 24
185.51.200.0/22 maxlen: 22
185.51.200.0/24 maxlen: 24
185.51.203.0/24 maxlen: 24
185.51.201.0/24 maxlen: 24
185.51.202.0/24 maxlen: 24
185.112.150.0/23 maxlen: 23
185.112.150.0/24 maxlen: 24
185.112.151.0/24 maxlen: 24
185.112.149.0/24 maxlen: 24
185.121.131.0/24 maxlen: 24
185.121.130.0/24 maxlen: 24
185.121.130.0/23 maxlen: 23
88.135.38.0/24 maxlen: 24
88.135.36.0/22 maxlen: 22
88.135.36.0/24 maxlen: 24
88.135.37.0/24 maxlen: 24
185.141.132.0/24 maxlen: 24
185.141.132.0/22 maxlen: 22
185.141.134.0/24 maxlen: 24
185.141.135.0/24 maxlen: 24
185.141.133.0/24 maxlen: 24
188.209.152.0/24 maxlen: 24
188.209.152.0/23 maxlen: 23
188.209.153.0/24 maxlen: 24
88.135.39.0/24 maxlen: 24
185.128.138.0/24 maxlen: 24
185.128.139.0/24 maxlen: 24
185.128.136.0/22 maxlen: 22
185.128.137.0/24 maxlen: 24
185.128.136.0/24 maxlen: 24
2a0a:5e80::/48 maxlen: 48
2a0a:5e80::/64 maxlen: 64
2a0a:5e80::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 18 Apr 2023 09:15:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:de:dc:be:dc:1c:fa:82:60:1f:e1:ad:61:16:51:c1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Mar 14 06:44:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d93208dbf54399a23581ba44dd250f72a6e0e3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fd:f8:96:e7:2c:06:3d:40:f0:90:bf:4f:f5:
0b:1f:93:77:42:5e:c2:45:74:fc:16:b9:0a:7d:69:
23:05:69:8c:d4:9b:e5:0c:6b:52:ff:c7:eb:24:38:
b3:c4:62:a2:8f:4e:d9:86:00:5d:3f:d8:92:bb:e3:
d3:dd:67:63:b9:5d:19:c5:d8:5f:69:ff:1a:b8:72:
a1:ba:0a:a7:3c:de:aa:06:0f:09:0d:1f:41:c7:af:
bf:a5:dc:f0:e9:7c:f2:9b:67:56:d2:3b:07:2f:15:
8e:4d:34:a4:1d:07:ea:e2:af:8a:02:30:14:22:39:
5f:15:5e:2c:40:e0:0c:80:ed:cc:ea:7f:f9:e1:34:
9d:f7:0a:5e:0d:08:6c:ae:e4:ad:10:78:66:36:3b:
df:b4:cd:f5:8d:5e:3f:7a:1e:e3:78:ab:78:1d:66:
41:8c:61:fb:e9:77:50:cf:a8:d3:64:cf:c7:f8:42:
98:39:56:c0:ce:5b:31:ab:e2:8c:e0:f0:54:34:f9:
9f:ea:5b:e6:89:41:0b:ae:b2:f1:5a:9d:4a:0d:21:
de:2f:56:34:8c:9d:c9:3f:8c:26:1d:55:e3:7e:19:
3f:7b:6e:54:14:4b:4d:5f:9a:3d:27:6e:48:ed:b1:
29:1d:6e:43:28:5c:84:1c:e3:8f:1d:a1:dd:cb:d4:
2c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:32:08:DB:F5:43:99:A2:35:81:BA:44:DD:25:0F:72:A6:E0:E3:B7
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/2TII2_VDmaI1gbpE3SUPcqbg47c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.36.0/22
91.236.168.0/23
152.89.44.0/22
185.18.212.0/22
185.51.200.0/22
185.58.240.0/22
185.112.149.0-185.112.151.255
185.121.130.0/23
185.128.136.0/22
185.141.104.0/22
185.141.132.0/22
188.209.152.0/23
195.110.38.0/23
195.211.44.0/22
IPv6:
2a0a:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
ae:91:6a:87:fc:23:5a:17:cf:f0:8b:22:42:7a:49:eb:87:96:
36:15:72:3b:8d:0c:49:93:60:40:04:c8:73:c4:68:5f:b4:55:
e4:e6:ee:d5:61:67:8f:6b:e4:a3:dd:a8:57:e0:25:15:18:1e:
c0:27:73:7c:3a:cc:42:81:87:ab:0e:fc:33:0b:14:4a:42:7b:
2f:45:75:2a:55:da:0c:88:b1:5d:ba:ed:57:b4:c2:de:92:b9:
26:a6:e7:d2:4c:6c:c5:54:9d:5d:18:73:1c:47:cb:1c:da:5b:
45:d3:d1:3e:4b:af:60:de:1c:4e:e0:06:35:55:e9:1e:80:3a:
a5:09:fa:f9:b4:ca:f7:69:94:04:eb:c3:51:76:70:dd:f4:74:
15:0b:cf:94:6c:a2:ca:5e:8f:e0:d2:26:1c:8d:b7:66:77:68:
f6:fe:c7:d1:0c:17:7b:53:40:26:55:a6:2b:87:8f:af:b4:60:
aa:ec:f3:30:e5:8f:d2:4e:67:a3:9b:8c:0f:0c:24:8c:82:b4:
e0:3b:1e:fe:73:be:d6:16:ef:c9:a8:85:b5:aa:a3:8f:5a:c7:
dd:ed:ed:de:30:f1:a9:30:c0:af:ea:e9:9c:c6:f7:6d:90:79:
6a:48:bd:9e:22:f6:cd:72:30:8d:49:17:62:62:38:9b:0b:a9:
0f:13:07:1c
-----BEGIN CERTIFICATE-----
MIIFYzCCBEugAwIBAgISAYbe3L7cHPqCYB/hrWEWUcH2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk
OGYwNjUwHhcNMjMwMzE0MDY0NDE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTMyMDhkYmY1NDM5OWEyMzU4MWJhNDRkZDI1MGY3MmE2ZTBlM2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsP34lucsBj1A8JC/T/ULH5N3Ql7C
RXT8FrkKfWkjBWmM1JvlDGtS/8frJDizxGKij07ZhgBdP9iSu+PT3WdjuV0Zxdhf
af8auHKhugqnPN6qBg8JDR9Bx6+/pdzw6Xzym2dW0jsHLxWOTTSkHQfq4q+KAjAU
IjlfFV4sQOAMgO3M6n/54TSd9wpeDQhsruStEHhmNjvftM31jV4/eh7jeKt4HWZB
jGH76XdQz6jTZM/H+EKYOVbAzlsxq+KM4PBUNPmf6lvmiUELrrLxWp1KDSHeL1Y0
jJ3JP4wmHVXjfhk/e25UFEtNX5o9J25I7bEpHW5DKFyEHOOPHaHdy9QsYwIDAQAB
o4ICbzCCAmswHQYDVR0OBBYEFNkyCNv1Q5miNYG6RN0lD3Km4OO3MB8GA1UdIwQY
MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt
MDM2NzI2OGZmODcxLzEvMlRJSTJfVkRtYUkxZ2JwRTNTVVBjcWJnNDdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx
LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGEBggrBgEFBQcBBwEB/wR1MHMwYgQCAAEwXAMEAliHJAME
AVvsqAMEAphZLAMEArkS1AMEArkzyAMEArk68DAMAwQAuXCVAwQDuXCQAwQBuXmC
AwQCuYCIAwQCuY1oAwQCuY2EAwQBvNGYAwQBw24mAwQCw9MsMA0EAgACMAcDBQMq
Cl6AMA0GCSqGSIb3DQEBCwUAA4IBAQCukWqH/CNaF8/wiyJCeknrh5Y2FXI7jQxJ
k2BABMhzxGhftFXk5u7VYWePa+Sj3ahX4CUVGB7AJ3N8OsxCgYerDvwzCxRKQnsv
RXUqVdoMiLFduu1XtMLekrkmpufSTGzFVJ1dGHMcR8sc2ltF09E+S69g3hxO4AY1
VekegDqlCfr5tMr3aZQE68NRdnDd9HQVC8+UbKLKXo/g0iYcjbdmd2j2/sfRDBd7
U0AmVaYrh4+vtGCq7PMw5Y/STmejm4wPDCSMgrTgOx7+c77WFu/JqIW1qqOPWsfd
7e3eMPGpMMCv6umcxvdtkHlqSL2eIvbNcjCNSRdiYjibC6kPEwcc
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:22 2024 by rpki-client on console-fra.rpki-client.org