Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/E750phILMu2AienNOZFzl_usl1E.roa
File: E750phILMu2AienNOZFzl_usl1E.roa (raw, json)
Hash identifier: T/Zz4IE4IpWm1LtEqjj4tSx9NO+AON4uqR/pvqIbRKw=
Subject key identifier: 13:BE:74:A6:12:0B:32:ED:80:89:E9:CD:39:91:73:97:FB:AC:97:51
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0186873B99CA89FCD966CFC17D9C805770FE
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/E750phILMu2AienNOZFzl_usl1E.roa
Signing time: Sat 25 Feb 2023 06:21:15 +0000
ROA not before: Sat 25 Feb 2023 06:21:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59432
IP address blocks: 185.121.228.0/23 maxlen: 24
185.121.230.0/23 maxlen: 24
194.4.158.0/23 maxlen: 24
89.43.212.0/22 maxlen: 24
213.32.248.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:87:3b:99:ca:89:fc:d9:66:cf:c1:7d:9c:80:57:70:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 25 06:21:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13be74a6120b32ed8089e9cd39917397fbac9751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:87:e2:04:2a:0c:0b:e8:d7:ae:b4:38:a7:15:
6d:64:06:30:0b:c6:48:b2:4b:d8:bf:ee:fa:c0:d0:
4e:f8:91:a4:4f:56:75:c2:33:b8:f3:db:82:8a:60:
27:de:85:f9:1e:ef:7f:82:de:e5:29:d9:83:6f:f1:
8e:aa:52:94:0f:0f:54:f1:f4:a8:7f:28:a6:69:e0:
f4:2e:80:e0:b7:df:8c:16:89:e5:74:60:dc:03:b7:
fd:97:90:cb:d5:22:fe:4c:00:ad:21:53:35:35:f3:
10:14:f3:69:f0:2c:ff:13:bd:6e:85:d2:6b:70:47:
89:9f:09:8f:41:0f:0c:14:22:ad:66:cb:89:01:ee:
0b:01:1a:c9:14:ce:d7:6b:68:6c:a9:a3:88:52:ed:
c1:29:db:60:0d:fd:e8:c5:1f:83:96:1e:d3:62:28:
29:16:ab:7b:0c:28:eb:87:36:dd:e7:75:18:90:c7:
1a:c9:f3:44:75:04:e6:85:dc:7f:33:58:b6:0d:84:
34:53:63:f7:5d:15:0b:27:c5:93:a9:0e:e8:bf:85:
aa:e4:57:70:da:15:db:92:86:86:c5:f6:43:99:ad:
6a:aa:05:14:c4:1d:95:88:15:eb:a4:ae:92:71:8f:
5b:e5:b5:f2:ee:3d:22:41:8a:f8:25:60:2f:f9:41:
80:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BE:74:A6:12:0B:32:ED:80:89:E9:CD:39:91:73:97:FB:AC:97:51
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/E750phILMu2AienNOZFzl_usl1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.43.212.0/22
185.121.228.0/22
194.4.158.0/23
213.32.248.0/23
Signature Algorithm: sha256WithRSAEncryption
29:9c:08:d2:db:6d:16:32:84:0a:c7:4d:2b:b7:2c:45:13:a3:
fb:f6:e6:09:2a:75:91:f2:2d:9c:a1:0a:ec:25:3c:f3:6e:32:
e2:25:13:31:cb:b4:b2:44:6f:c5:ac:d3:07:c6:a8:f9:22:aa:
1c:e2:1f:4c:30:3a:de:06:79:5f:96:24:86:f0:91:45:4e:44:
b1:bf:7e:4d:2a:ad:f9:42:11:11:fd:35:3a:62:d2:34:40:f5:
ca:f9:53:86:9d:47:64:e6:a5:ac:43:b9:b2:fb:a2:f2:3f:a6:
14:c8:41:6a:58:b7:ef:d9:ef:72:69:7d:f0:3c:ab:d8:09:a4:
b2:48:db:f3:f1:7a:18:03:09:2f:71:bb:ab:7d:c6:7e:f7:79:
19:1b:f6:92:31:6b:d2:18:f7:07:9f:0e:23:6c:00:ea:eb:89:
54:4f:77:f0:a6:d3:a2:6b:ce:a8:ad:f3:fd:02:26:95:d5:d8:
1d:8a:9c:c0:78:44:dd:dc:f6:79:f9:d2:07:10:33:e8:64:15:
cb:c8:6e:22:d4:65:ce:85:a7:f7:21:57:5c:d3:d2:da:79:39:
8f:2b:88:27:5c:88:9f:b3:5f:bf:49:69:0a:a7:7e:12:60:f9:
84:6d:83:44:3a:7d:19:ea:4b:2d:36:2d:bd:e7:22:4b:b4:3f:
0f:e0:ce:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:54 2023 by rpki-client on console-ams.rpki-client.org