Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/iep_UehW310R5o4vsJnPbOtab7E.roa
File: iep_UehW310R5o4vsJnPbOtab7E.roa (raw, json)
Hash identifier: GKXajGk1CPF92Ducg2cKgpf1qKZAvhA4BM9GSQR4NpU=
Subject key identifier: 89:EA:7F:51:E8:56:DF:5D:11:E6:8E:2F:B0:99:CF:6C:EB:5A:6F:B1
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018ADF403026B43527387FDCB0905BF0C94A
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/iep_UehW310R5o4vsJnPbOtab7E.roa
Signing time: Fri 29 Sep 2023 04:44:00 +0000
ROA not before: Fri 29 Sep 2023 04:44:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199760
IP address blocks: 188.212.132.0/24 maxlen: 24
188.241.182.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:df:40:30:26:b4:35:27:38:7f:dc:b0:90:5b:f0:c9:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Sep 29 04:44:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89ea7f51e856df5d11e68e2fb099cf6ceb5a6fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:37:36:e5:81:9c:3d:9a:c6:99:82:07:bb:50:
49:32:29:fd:15:3b:0e:db:d3:4f:24:23:8b:b2:44:
cd:b4:a3:99:1c:09:f5:6c:24:f2:54:6a:df:fb:09:
d6:77:75:c9:0c:f9:d5:2f:c9:84:67:d7:78:be:63:
19:06:fd:8f:80:e8:cd:62:18:28:c3:0e:f3:67:96:
de:95:b0:d8:78:9b:98:27:78:e1:3d:9a:21:d8:0c:
64:50:eb:24:8b:ff:09:89:9d:a9:e9:d3:c1:9e:ea:
2f:09:83:ce:5e:35:08:72:50:05:5d:72:fd:4b:b2:
49:7a:9d:be:cc:f9:60:dc:e4:b8:d9:49:96:8e:d2:
f2:81:12:a6:28:28:39:23:93:e0:52:33:88:cb:ac:
53:87:95:4b:30:48:7b:2f:0a:8f:bb:99:32:47:c5:
90:b4:6a:a4:78:33:4b:2f:4a:ca:a4:65:da:1e:fc:
86:a3:e1:bd:6f:35:e4:dd:c3:fb:04:ee:5a:f4:db:
f2:c0:ef:58:97:a2:47:58:0f:5e:e2:05:a2:9c:38:
aa:f6:a9:d4:92:58:11:da:81:df:0e:9c:e6:d6:99:
e2:5d:be:c6:da:60:e5:60:ad:19:33:4f:15:ce:47:
af:97:fa:83:ef:5d:dc:1d:5c:80:2c:03:2f:48:30:
ef:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EA:7F:51:E8:56:DF:5D:11:E6:8E:2F:B0:99:CF:6C:EB:5A:6F:B1
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/iep_UehW310R5o4vsJnPbOtab7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.212.132.0/24
188.241.182.0/24
Signature Algorithm: sha256WithRSAEncryption
91:00:24:35:fe:87:8c:47:b2:a8:dd:76:0a:5c:ec:0a:11:68:
bd:04:dc:0c:a4:47:fb:15:4f:db:54:de:64:cf:0c:8c:bb:78:
ae:89:cd:ff:e7:35:44:03:02:62:77:c6:d3:64:89:f6:af:45:
3d:e9:cc:d8:fc:3a:f3:03:00:3e:db:cd:c9:c6:fb:1c:3f:38:
3b:81:c1:5f:31:cb:10:27:3b:53:5f:d5:e0:23:ac:4e:f8:2d:
55:16:74:5c:c8:2b:e9:b9:20:c2:ec:df:eb:b7:f3:99:71:2f:
24:9c:a4:6f:2f:da:c7:fa:c0:2b:22:0b:d2:62:62:ae:f5:cc:
dd:46:b4:63:bf:2b:c6:d9:c1:1a:1c:32:3d:65:24:34:ad:47:
c0:f1:93:75:82:44:6b:32:25:a6:f2:67:ab:11:c1:0c:41:e9:
4c:cc:8d:3f:cf:6a:86:f8:ce:95:97:78:42:dd:30:f4:02:91:
ff:d6:6a:ec:c3:c9:d7:0b:ea:73:c6:81:66:7b:0f:b1:46:2f:
46:05:39:73:79:58:ae:fb:b7:0d:04:bf:6a:58:01:ee:ae:7c:
5c:23:95:10:90:5c:fa:eb:1c:80:44:14:95:03:d8:b6:4e:d6:
da:a4:f9:28:d0:60:61:ec:ac:04:79:83:34:48:e0:a4:c8:6f:
68:8f:fc:a6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYrfQDAmtDUnOH/csJBb8MlKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjMwOTI5MDQ0NDAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OWVhN2Y1MWU4NTZkZjVkMTFlNjhlMmZiMDk5Y2Y2Y2ViNWE2ZmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTc25YGcPZrGmYIHu1BJMin9FTsO
29NPJCOLskTNtKOZHAn1bCTyVGrf+wnWd3XJDPnVL8mEZ9d4vmMZBv2PgOjNYhgo
ww7zZ5belbDYeJuYJ3jhPZoh2AxkUOski/8JiZ2p6dPBnuovCYPOXjUIclAFXXL9
S7JJep2+zPlg3OS42UmWjtLygRKmKCg5I5PgUjOIy6xTh5VLMEh7LwqPu5kyR8WQ
tGqkeDNLL0rKpGXaHvyGo+G9bzXk3cP7BO5a9NvywO9Yl6JHWA9e4gWinDiq9qnU
klgR2oHfDpzm1pniXb7G2mDlYK0ZM08Vzkevl/qD713cHVyALAMvSDDvwwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFInqf1HoVt9dEeaOL7CZz2zrWm+xMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvaWVwX1VlaFczMTBSNW80dnNKblBiT3RhYjdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAvNSEAwQA
vPG2MA0GCSqGSIb3DQEBCwUAA4IBAQCRACQ1/oeMR7Ko3XYKXOwKEWi9BNwMpEf7
FU/bVN5kzwyMu3iuic3/5zVEAwJid8bTZIn2r0U96czY/DrzAwA+283JxvscPzg7
gcFfMcsQJztTX9XgI6xO+C1VFnRcyCvpuSDC7N/rt/OZcS8knKRvL9rH+sArIgvS
YmKu9czdRrRjvyvG2cEaHDI9ZSQ0rUfA8ZN1gkRrMiWm8merEcEMQelMzI0/z2qG
+M6Vl3hC3TD0ApH/1mrsw8nXC+pzxoFmew+xRi9GBTlzeViu+7cNBL9qWAHurnxc
I5UQkFz66xyARBSVA9i2TtbapPko0GBh7KwEeYM0SOCkyG9oj/ym
-----END CERTIFICATE-----
Generated at Mon Oct 2 18:53:49 2023 by rpki-client on console-fra.rpki-client.org