Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/e4_idC3UYMEn68MD0DgqA_vKxQM.roa
File: e4_idC3UYMEn68MD0DgqA_vKxQM.roa (raw, json)
Hash identifier: +vI8upo2c4N8gWkrwhkTI6Jw2VJIJztsA5iphgogoNU=
Subject key identifier: 7B:8F:E2:74:2D:D4:60:C1:27:EB:C3:03:D0:38:2A:03:FB:CA:C5:03
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0187CE7895A6AB8BC83AF86267F314B26B13
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/e4_idC3UYMEn68MD0DgqA_vKxQM.roa
Signing time: Sat 29 Apr 2023 19:23:41 +0000
ROA not before: Sat 29 Apr 2023 19:23:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.115.146.0/24 maxlen: 24
185.230.248.0/24 maxlen: 24
185.230.249.0/24 maxlen: 24
185.229.104.0/24 maxlen: 24
185.229.106.0/24 maxlen: 24
194.4.156.0/23 maxlen: 24
194.4.159.0/24 maxlen: 24
185.245.238.0/24 maxlen: 24
89.43.208.0/24 maxlen: 24
185.245.237.0/24 maxlen: 24
213.32.249.0/24 maxlen: 24
185.121.231.0/24 maxlen: 24
178.239.203.0/24 maxlen: 24
78.142.242.0/23 maxlen: 24
185.121.230.0/24 maxlen: 24
45.159.152.0/24 maxlen: 24
45.159.154.0/24 maxlen: 24
45.159.153.0/24 maxlen: 24
62.197.135.0/24 maxlen: 24
185.103.75.0/24 maxlen: 24
178.239.192.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ce:78:95:a6:ab:8b:c8:3a:f8:62:67:f3:14:b2:6b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 29 19:23:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b8fe2742dd460c127ebc303d0382a03fbcac503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d7:62:df:fe:6a:75:45:da:c2:67:cf:5f:50:
72:0a:0d:f0:7f:09:75:ed:ec:cf:46:bb:07:34:f1:
15:10:31:2c:db:9f:37:41:f2:3b:f7:e6:c4:17:1c:
0f:31:7a:a4:7a:b0:e3:d7:c9:80:be:80:8b:c0:99:
47:8f:2e:e9:ae:0d:87:8f:c5:c0:73:52:99:5d:60:
5c:2f:4c:31:17:ef:5b:bb:6f:8e:ba:f4:6f:2e:13:
e1:1e:7a:fc:12:12:21:d1:81:84:b4:62:64:e5:34:
7f:64:a9:bb:39:e0:21:da:bb:4a:09:43:c9:ec:eb:
ab:56:e1:0d:bf:06:13:53:14:0f:28:4e:fa:24:08:
4a:20:7b:c4:d9:a5:e8:74:bd:32:04:ff:08:6d:1e:
71:7a:dc:c4:74:51:c1:ed:4b:c3:b8:0f:5b:e9:ee:
17:fc:d1:8a:ed:51:8c:f4:54:ad:a4:c6:57:be:22:
db:c9:95:85:55:df:ec:21:0f:1b:a4:fb:81:af:52:
24:98:d8:a4:2f:14:cb:ee:f9:86:5f:81:4f:1d:c7:
d1:40:3a:c2:7f:45:d8:fa:d8:df:3f:48:e2:d5:c7:
c9:de:c3:00:b2:57:22:5b:6d:65:e6:5e:1a:dc:d1:
0c:74:75:31:1d:6f:f5:74:02:61:3c:d3:25:e9:7b:
a0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8F:E2:74:2D:D4:60:C1:27:EB:C3:03:D0:38:2A:03:FB:CA:C5:03
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/e4_idC3UYMEn68MD0DgqA_vKxQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.152.0-45.159.154.255
62.197.135.0/24
78.142.242.0/23
89.43.208.0/24
178.239.192.0/24
178.239.203.0/24
185.103.75.0/24
185.115.146.0/24
185.121.230.0/23
185.229.104.0/24
185.229.106.0/24
185.230.248.0/23
185.245.237.0-185.245.238.255
194.4.156.0/23
194.4.159.0/24
213.32.249.0/24
Signature Algorithm: sha256WithRSAEncryption
16:09:24:5c:6a:b0:98:ce:56:7b:f2:b1:a0:5c:ca:32:27:ed:
9d:d1:1c:66:31:bb:f2:b3:07:3d:7e:4b:52:f0:1a:77:e2:05:
ab:ea:d2:5b:20:98:a4:6b:e6:6d:a1:8d:fd:f2:3a:cd:e8:fc:
33:8d:e9:2d:24:34:b3:d8:c8:52:8d:d5:a8:d2:01:fd:e2:f9:
a9:a9:5d:f2:92:38:e0:20:10:61:07:30:c3:12:32:64:3a:28:
a4:c1:37:62:72:55:2a:3f:3d:da:23:cd:3e:b7:69:01:6a:c3:
ea:c5:40:fe:36:40:8d:53:14:dc:19:6d:27:16:6d:51:d1:54:
1d:d5:42:ca:fa:06:87:7a:fe:93:16:d5:a2:5d:c3:7e:2f:8e:
b1:08:00:62:18:9e:e4:60:ad:6e:67:4e:03:74:0e:c2:bb:14:
5c:cc:7e:12:a1:37:24:f7:e6:1f:11:04:62:a7:d8:cc:fc:4c:
de:c2:b3:8a:ee:09:ef:79:ce:c9:b8:a4:1b:dd:5b:49:48:cf:
72:0a:51:f0:59:6c:99:3a:6c:aa:be:12:0b:c2:4e:c8:8f:82:
ab:62:19:99:87:cf:34:77:18:39:c4:4c:3f:dc:65:cb:1b:c0:
1c:5d:ed:66:1d:25:94:e9:ec:77:99:2d:1c:f6:e4:55:c3:d2:
dc:98:95:b1
-----BEGIN CERTIFICATE-----
MIIFaDCCBFCgAwIBAgISAYfOeJWmq4vIOvhiZ/MUsmsTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjMwNDI5MTkyMzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjhmZTI3NDJkZDQ2MGMxMjdlYmMzMDNkMDM4MmEwM2ZiY2FjNTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09di3/5qdUXawmfPX1ByCg3wfwl1
7ezPRrsHNPEVEDEs2583QfI79+bEFxwPMXqkerDj18mAvoCLwJlHjy7prg2Hj8XA
c1KZXWBcL0wxF+9bu2+OuvRvLhPhHnr8EhIh0YGEtGJk5TR/ZKm7OeAh2rtKCUPJ
7OurVuENvwYTUxQPKE76JAhKIHvE2aXodL0yBP8IbR5xetzEdFHB7UvDuA9b6e4X
/NGK7VGM9FStpMZXviLbyZWFVd/sIQ8bpPuBr1IkmNikLxTL7vmGX4FPHcfRQDrC
f0XY+tjfP0ji1cfJ3sMAslciW21l5l4a3NEMdHUxHW/1dAJhPNMl6XugQQIDAQAB
o4ICdDCCAnAwHQYDVR0OBBYEFHuP4nQt1GDBJ+vDA9A4KgP7ysUDMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvZTRfaWRDM1VZTUVuNjhNRDBEZ3FBX3ZLeFFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGJBggrBgEFBQcBBwEB/wR6MHgwdgQCAAEwcDAMAwQDLZ+Y
AwQALZ+aAwQAPsWHAwQBTo7yAwQAWSvQAwQAsu/AAwQAsu/LAwQAuWdLAwQAuXOS
AwQBuXnmAwQAueVoAwQAueVqAwQBueb4MAwDBAC59e0DBAC59e4DBAHCBJwDBADC
BJ8DBADVIPkwDQYJKoZIhvcNAQELBQADggEBABYJJFxqsJjOVnvysaBcyjIn7Z3R
HGYxu/KzBz1+S1LwGnfiBavq0lsgmKRr5m2hjf3yOs3o/DON6S0kNLPYyFKN1ajS
Af3i+ampXfKSOOAgEGEHMMMSMmQ6KKTBN2JyVSo/PdojzT63aQFqw+rFQP42QI1T
FNwZbScWbVHRVB3VQsr6Bod6/pMW1aJdw34vjrEIAGIYnuRgrW5nTgN0DsK7FFzM
fhKhNyT35h8RBGKn2Mz8TN7Cs4ruCe95zsm4pBvdW0lIz3IKUfBZbJk6bKq+EgvC
TsiPgqtiGZmHzzR3GDnETD/cZcsbwBxd7WYdJZTp7HeZLRz25FXD0tyYlbE=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:02 2023 by rpki-client on console-fra.rpki-client.org