Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/460pt76-C9XnewedSHEvwcwV7RQ.roa
File: 460pt76-C9XnewedSHEvwcwV7RQ.roa (raw, json)
Hash identifier: 38U2wH92Y2vGobZvZbscVxgdpezo4sdtmmhwk6zpi4o=
Subject key identifier: E3:AD:29:B7:BE:BE:0B:D5:E7:7B:07:9D:48:71:2F:C1:CC:15:ED:14
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0190B74473620A99A11821227E7955674F10
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/460pt76-C9XnewedSHEvwcwV7RQ.roa
Signing time: Mon 15 Jul 2024 16:40:34 +0000
ROA not before: Mon 15 Jul 2024 16:40:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29641
IP address blocks: 193.124.184.0/24 maxlen: 24
193.124.186.0/24 maxlen: 24
193.124.187.0/24 maxlen: 24
193.124.188.0/24 maxlen: 24
193.124.189.0/24 maxlen: 24
193.124.190.0/24 maxlen: 24
193.124.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jul 2024 07:40:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b7:44:73:62:0a:99:a1:18:21:22:7e:79:55:67:4f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jul 15 16:40:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3ad29b7bebe0bd5e77b079d48712fc1cc15ed14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8c:95:1b:38:62:f6:a8:47:b0:67:21:4f:f8:
58:f7:a0:a3:ee:46:76:f2:44:0a:c7:74:f5:f8:d5:
68:52:d8:86:9a:7f:89:59:46:36:97:bb:1e:27:f0:
11:0d:a9:74:8e:48:9c:6d:eb:e9:d3:05:6c:90:0c:
da:ce:29:3a:ac:b3:0e:3a:4c:74:22:19:31:45:a3:
80:d6:f7:d2:16:f7:cb:15:d7:f4:b8:40:37:b4:6e:
1f:2a:d5:96:b2:a0:2e:ec:fa:b9:73:e2:21:a6:b0:
ed:7f:7b:17:1d:53:d7:fd:72:a9:f2:57:13:0a:0b:
5b:bd:d2:2c:3d:18:28:af:7b:e9:a4:53:cd:62:d8:
d1:12:fc:16:92:c5:af:2f:fb:e7:c5:a1:86:52:d8:
44:bf:02:8c:68:d9:db:3c:db:6f:bc:ad:f8:f9:dc:
88:94:eb:80:2b:5c:11:95:0b:05:51:11:8b:8e:3d:
ec:11:80:93:52:2d:7b:a0:7e:f2:3e:24:cb:4e:03:
b7:b0:af:32:b8:59:2d:34:d3:4f:29:44:8c:5e:b4:
c8:a6:fa:18:38:13:48:7c:e1:ab:4e:7e:23:83:d7:
f2:07:c9:14:c4:04:5a:51:25:7d:44:68:b7:78:56:
1c:d0:1f:ed:23:27:31:96:4f:2d:4b:94:c6:7f:f7:
10:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AD:29:B7:BE:BE:0B:D5:E7:7B:07:9D:48:71:2F:C1:CC:15:ED:14
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/460pt76-C9XnewedSHEvwcwV7RQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.184.0/24
193.124.186.0-193.124.191.255
Signature Algorithm: sha256WithRSAEncryption
a1:47:8c:d7:d5:90:9f:c8:3e:f4:9e:73:ab:15:ac:70:0f:8a:
98:db:c5:78:2a:cc:72:bd:b1:6f:8d:0c:1a:b4:33:0a:8c:50:
a0:17:7c:cd:47:04:ed:d8:58:45:eb:2a:dd:57:ba:39:c5:05:
fb:d3:5d:f3:8b:e5:f3:c7:1b:df:90:c4:74:8b:a7:1a:38:e1:
89:7d:fe:88:d4:82:ed:7c:1f:8b:36:8e:60:4f:a4:fe:71:81:
c4:2a:95:f4:59:59:94:ef:57:0c:f9:71:a6:6a:7d:b9:94:6e:
ca:c6:af:56:a1:8b:bc:8b:ae:78:a8:88:ef:9c:8a:de:12:5f:
2e:51:b5:7f:98:75:6c:db:b2:3c:80:54:de:ac:50:b4:81:0d:
13:72:95:10:ed:62:60:5f:07:ec:3f:15:8e:78:99:58:e2:62:
ec:ef:32:01:9c:42:ce:92:4a:dd:0b:17:6b:4c:cb:bf:6c:50:
6c:72:11:d7:44:f7:80:d6:5e:6b:3d:75:45:b8:a6:d2:9d:56:
74:f6:9b:2d:ac:6e:df:2f:44:0f:51:f2:58:d5:b4:90:d7:17:
bc:7c:c5:0a:cc:45:ba:00:3b:4b:fa:a7:86:00:9b:68:48:c7:
c8:6d:f0:83:87:ee:3e:a6:4e:b9:47:d5:bf:99:11:04:57:99:
c2:3d:be:52
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jul 29 10:02:43 2024 by rpki-client on console-fra.rpki-client.org