Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/jLDgmPVQvCvOjCOQHNPtNssA8EU.roa
File: jLDgmPVQvCvOjCOQHNPtNssA8EU.roa (raw, json)
Hash identifier: ygqtDlUA7utBgsTIdmeUcq6bfg/Z4n/9G1AVB6vTZb0=
Subject key identifier: 8C:B0:E0:98:F5:50:BC:2B:CE:8C:23:90:1C:D3:ED:36:CB:00:F0:45
Certificate issuer: /CN=69507f066f2bb0389dd88436074e1426114f2d92
Certificate serial: 018B3E2EB75143904D2866714FF17EDE5E15
Authority key identifier: 69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/jLDgmPVQvCvOjCOQHNPtNssA8EU.roa
Signing time: Tue 17 Oct 2023 15:08:50 +0000
ROA not before: Tue 17 Oct 2023 15:08:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216139
IP address blocks: 178.208.64.0/24 maxlen: 24
178.208.65.0/24 maxlen: 24
178.208.66.0/24 maxlen: 24
178.208.67.0/24 maxlen: 24
178.208.72.0/24 maxlen: 24
178.208.73.0/24 maxlen: 24
178.208.78.0/24 maxlen: 24
178.208.76.0/24 maxlen: 24
178.208.77.0/24 maxlen: 24
178.208.74.0/24 maxlen: 24
178.208.75.0/24 maxlen: 24
178.208.85.0/24 maxlen: 24
178.208.83.0/24 maxlen: 24
178.208.84.0/24 maxlen: 24
178.208.81.0/24 maxlen: 24
178.208.82.0/24 maxlen: 24
178.208.79.0/24 maxlen: 24
178.208.80.0/24 maxlen: 24
178.208.86.0/24 maxlen: 24
178.208.90.0/24 maxlen: 24
178.208.91.0/24 maxlen: 24
178.208.88.0/24 maxlen: 24
178.208.89.0/24 maxlen: 24
178.208.93.0/24 maxlen: 24
185.105.108.0/24 maxlen: 24
109.234.32.0/24 maxlen: 24
95.142.32.0/24 maxlen: 24
2.56.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Dec 2023 08:57:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3e:2e:b7:51:43:90:4d:28:66:71:4f:f1:7e:de:5e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69507f066f2bb0389dd88436074e1426114f2d92
Validity
Not Before: Oct 17 15:08:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8cb0e098f550bc2bce8c23901cd3ed36cb00f045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9b:8a:99:41:cc:a0:2d:88:8f:65:fd:21:1d:
ba:be:e2:88:13:1e:69:6a:a7:84:24:fd:b7:f6:91:
b4:18:19:ad:fd:08:9b:44:50:fa:ca:b6:7c:33:e1:
f2:4c:c2:83:65:ec:d6:76:84:69:c7:83:41:85:3f:
8c:35:38:f0:07:8c:e5:0a:6d:ba:a6:fe:37:f9:88:
0b:f0:46:29:23:c2:0f:5c:1c:61:e5:77:08:35:a3:
8a:4e:b6:16:7d:51:33:66:6c:57:91:f4:fd:69:12:
1a:12:24:28:3c:66:3d:9a:60:49:c4:36:4a:6d:f5:
43:42:cf:54:43:98:2b:7b:be:52:43:17:ab:4b:af:
fb:2a:11:98:91:5c:55:94:1e:73:e8:d0:51:6a:6d:
f8:cd:7e:6f:68:0d:9d:88:12:6c:01:05:a6:90:94:
c1:87:41:76:df:83:f0:0c:d1:2e:8d:66:34:e6:d0:
bf:05:c7:be:9d:a6:e0:b0:e3:36:48:b2:40:10:8d:
33:98:26:52:aa:7e:80:7f:61:5a:8e:a1:57:23:a9:
d9:6f:38:8c:7f:16:c7:a7:b4:bf:86:36:0c:95:8a:
45:06:dd:47:63:5f:ee:aa:2a:b0:c0:93:b4:47:cd:
cb:a7:20:db:ee:cb:6f:54:09:7c:3a:1d:a0:68:16:
72:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B0:E0:98:F5:50:BC:2B:CE:8C:23:90:1C:D3:ED:36:CB:00:F0:45
X509v3 Authority Key Identifier:
keyid:69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/jLDgmPVQvCvOjCOQHNPtNssA8EU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.90.0/24
95.142.32.0/24
109.234.32.0/24
178.208.64.0/22
178.208.72.0-178.208.86.255
178.208.88.0/22
178.208.93.0/24
185.105.108.0/24
Signature Algorithm: sha256WithRSAEncryption
27:18:53:78:b1:0e:a8:0a:6d:68:c7:ae:6c:fb:24:4a:77:93:
a0:ca:a1:39:f5:9b:ec:2a:26:c3:1c:2c:14:c5:22:dc:53:8f:
db:69:1b:2d:d7:eb:da:17:87:6b:88:ed:b3:74:d4:76:c6:ed:
e3:34:99:c9:40:3f:f7:17:7a:b7:55:13:0f:e9:31:17:51:b8:
6e:5b:f3:5e:35:eb:9f:6f:50:2e:ee:68:38:b4:37:69:73:04:
99:a2:29:aa:29:62:e5:93:ef:95:6b:72:bc:7d:e7:23:9d:7e:
65:46:88:24:5c:ec:41:fb:62:8f:b3:35:29:b9:be:8e:05:0e:
4f:76:8a:72:48:5b:9a:f8:bd:a2:83:91:97:a8:22:20:f1:3d:
28:97:f1:eb:68:0a:51:f1:bc:f7:21:9d:88:f6:43:0e:e7:41:
11:f0:28:b2:d7:f7:2a:03:03:69:a8:0d:cf:05:6c:44:01:9d:
30:f5:03:a9:64:ee:1a:1c:12:b0:3d:b5:20:6e:9c:21:ca:c9:
3c:d5:c5:23:18:63:5e:42:d7:a5:7b:60:98:45:39:5d:14:71:
79:11:49:46:06:0d:d4:96:08:45:e8:d9:d8:4f:7b:3e:35:00:
ed:07:32:54:05:f2:75:d1:70:7e:a2:e0:b9:34:91:ca:35:53:
c2:df:00:ce
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAYs+LrdRQ5BNKGZxT/F+3l4VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NTA3ZjA2NmYyYmIwMzg5ZGQ4ODQzNjA3NGUxNDI2MTE0
ZjJkOTIwHhcNMjMxMDE3MTUwODUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2IwZTA5OGY1NTBiYzJiY2U4YzIzOTAxY2QzZWQzNmNiMDBmMDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5uKmUHMoC2Ij2X9IR26vuKIEx5p
aqeEJP239pG0GBmt/QibRFD6yrZ8M+HyTMKDZezWdoRpx4NBhT+MNTjwB4zlCm26
pv43+YgL8EYpI8IPXBxh5XcINaOKTrYWfVEzZmxXkfT9aRIaEiQoPGY9mmBJxDZK
bfVDQs9UQ5gre75SQxerS6/7KhGYkVxVlB5z6NBRam34zX5vaA2diBJsAQWmkJTB
h0F234PwDNEujWY05tC/Bce+nabgsOM2SLJAEI0zmCZSqn6Af2FajqFXI6nZbziM
fxbHp7S/hjYMlYpFBt1HY1/uqiqwwJO0R83LpyDb7stvVAl8Oh2gaBZySwIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFIyw4Jj1ULwrzowjkBzT7TbLAPBFMB8GA1UdIwQY
MBaAFGlQfwZvK7A4ndiENgdOFCYRTy2SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVZCX0JtOHJzRGlkMklRMkIwNFVKaEZQTFpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9iZjgzMzgtODc1Mi00ZDU1LTljMzEt
MGUxYjhmZWE4OTEzLzEvakxEZ21QVlF2Q3ZPakNPUUhOUHROc3NBOEVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9iZjgzMzgtODc1Mi00ZDU1LTljMzEtMGUxYjhmZWE4OTEz
LzEvYVZCX0JtOHJzRGlkMklRMkIwNFVKaEZQTFpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAAjhaAwQA
X44gAwQAbeogAwQCstBAMAwDBAOy0EgDBACy0FYDBAKy0FgDBACy0F0DBAC5aWww
DQYJKoZIhvcNAQELBQADggEBACcYU3ixDqgKbWjHrmz7JEp3k6DKoTn1m+wqJsMc
LBTFItxTj9tpGy3X69oXh2uI7bN01HbG7eM0mclAP/cXerdVEw/pMRdRuG5b8141
659vUC7uaDi0N2lzBJmiKaopYuWT75Vrcrx95yOdfmVGiCRc7EH7Yo+zNSm5vo4F
Dk92inJIW5r4vaKDkZeoIiDxPSiX8etoClHxvPchnYj2Qw7nQRHwKLLX9yoDA2mo
Dc8FbEQBnTD1A6lk7hocErA9tSBunCHKyTzVxSMYY15C16V7YJhFOV0UcXkRSUYG
DdSWCEXo2dhPez41AO0HMlQF8nXRcH6i4Lk0kco1U8LfAM4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:20 2024 by rpki-client on console-ams.rpki-client.org