Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4mrVyUgkWQRrwAHlDNhSzYJh13c.roa
File: 4mrVyUgkWQRrwAHlDNhSzYJh13c.roa (raw, json)
Hash identifier: x2Euqol9PeIvOISAP8BmZXf05Uu4bpivwmtgd/OYEw4=
Subject key identifier: E2:6A:D5:C9:48:24:59:04:6B:C0:01:E5:0C:D8:52:CD:82:61:D7:77
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0187517FB39FB8B6BF8A7B3D742A8675CB95
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4mrVyUgkWQRrwAHlDNhSzYJh13c.roa
Signing time: Wed 05 Apr 2023 12:58:56 +0000
ROA not before: Wed 05 Apr 2023 12:58:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 185.121.230.0/24 maxlen: 24
185.121.231.0/24 maxlen: 24
185.230.248.0/24 maxlen: 24
185.229.104.0/24 maxlen: 24
194.4.159.0/24 maxlen: 24
45.159.152.0/24 maxlen: 24
89.43.208.0/24 maxlen: 24
213.32.249.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:51:7f:b3:9f:b8:b6:bf:8a:7b:3d:74:2a:86:75:cb:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 5 12:58:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e26ad5c9482459046bc001e50cd852cd8261d777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ce:2f:34:c3:bb:58:91:23:23:1d:0f:2d:20:
25:6e:f6:b2:c9:e3:1a:e2:63:24:22:ff:77:fe:a3:
04:f0:0c:60:fd:02:a4:e3:2e:ea:d4:e7:f4:05:0b:
fd:28:cb:06:08:64:1f:92:64:29:14:c1:dd:f5:ed:
6b:f7:d8:f2:2f:d7:a5:a4:a7:47:9b:a5:38:ac:a4:
cb:3e:a8:a9:09:e3:ce:48:a6:15:8d:4d:e1:b4:69:
85:e4:80:21:aa:ad:5d:fb:40:08:89:93:54:52:65:
41:6e:0f:e2:38:d9:c0:ed:53:85:21:f4:43:b0:22:
80:8f:bd:60:8b:51:e7:a1:f5:c4:08:06:b9:3a:23:
41:fd:bf:c0:68:a3:71:5e:8c:35:65:9d:28:f7:e3:
e5:eb:91:b7:ae:6e:4b:51:49:57:ce:09:d4:26:66:
c3:4c:57:64:6b:7e:2d:47:7d:90:7c:db:33:e0:87:
13:19:e5:15:32:3a:8f:89:8f:6b:6a:2b:9a:27:bd:
8e:13:10:d6:6f:c0:ca:f5:7a:8c:4d:93:48:08:76:
3e:15:01:a5:5f:8e:f2:73:22:28:d6:70:66:af:de:
dd:ef:f0:02:34:af:d7:56:2b:66:d2:85:62:ca:9e:
78:55:ae:46:96:b2:d4:59:b0:61:7f:be:6a:51:4a:
c5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6A:D5:C9:48:24:59:04:6B:C0:01:E5:0C:D8:52:CD:82:61:D7:77
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4mrVyUgkWQRrwAHlDNhSzYJh13c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.152.0/24
89.43.208.0/24
185.121.230.0/23
185.229.104.0/24
185.230.248.0/24
194.4.159.0/24
213.32.249.0/24
Signature Algorithm: sha256WithRSAEncryption
01:4e:ec:4a:43:82:09:19:53:93:26:71:79:e1:4d:97:51:1e:
e0:3a:f0:5f:39:d0:e9:0d:28:d1:38:b4:42:32:2b:ef:ee:be:
42:72:98:47:05:23:a1:8e:05:b2:69:bf:e8:3b:d8:87:f1:86:
ea:55:c3:88:bb:ce:aa:81:6a:55:34:fb:6c:fa:b3:06:0b:10:
c2:88:98:54:af:9f:a3:9d:41:ca:64:21:74:04:73:35:6a:c5:
1a:ff:25:ae:12:50:ba:19:88:4e:58:f7:b3:9c:e9:1b:df:31:
16:cb:01:ab:27:0f:86:58:4a:24:33:f9:fd:87:ff:75:9d:43:
73:2e:a8:62:e2:f1:6a:83:54:ed:3a:bc:a4:de:b2:35:3a:6b:
d3:18:dc:d2:eb:a3:ca:5a:57:e1:f7:08:fd:e2:ff:5b:1c:cb:
12:96:55:29:3d:c7:c7:2e:ab:d5:5a:26:90:ae:e6:b5:45:30:
38:32:44:cd:e3:8b:31:ca:fe:ee:f7:66:df:b6:a3:fe:6e:9f:
31:1e:69:cb:5e:c2:7d:a2:00:5b:5e:5c:97:b0:1d:f7:ba:8c:
41:6c:75:a4:f8:3c:c4:b5:d0:c7:d0:e9:e4:f3:32:f2:53:9b:
77:ac:00:ff:1a:43:d2:77:fc:31:d5:61:1d:2d:c8:14:42:c9:
8e:c5:92:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:53 2023 by rpki-client on console-ams.rpki-client.org