Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/I-wsSTqicua_qb7vIE32Bc-X51s.roa
File: I-wsSTqicua_qb7vIE32Bc-X51s.roa (raw, json)
Hash identifier: j/JWA0qm26UMu9aqBKFjGum/hn86AI1NaAtK7jiEGLU=
Subject key identifier: 23:EC:2C:49:3A:A2:72:E6:BF:A9:BE:EF:20:4D:F6:05:CF:97:E7:5B
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0190B74474873D2CCD6EF82A0AC362DC84BA
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/I-wsSTqicua_qb7vIE32Bc-X51s.roa
Signing time: Mon 15 Jul 2024 16:40:35 +0000
ROA not before: Mon 15 Jul 2024 16:40:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214927
IP address blocks: 193.124.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Aug 2024 08:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b7:44:74:87:3d:2c:cd:6e:f8:2a:0a:c3:62:dc:84:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jul 15 16:40:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23ec2c493aa272e6bfa9beef204df605cf97e75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2a:02:04:c0:8e:73:85:f5:9b:2e:c6:17:7e:
c1:68:b1:6b:5b:82:13:a9:91:8e:c7:51:d8:83:b2:
6a:18:89:c3:c8:94:ae:c3:30:ec:c5:b3:a1:83:18:
64:53:23:0d:71:9f:25:5e:05:ac:3c:75:09:b5:df:
c4:bf:ef:a9:b9:9c:58:ee:ef:c1:32:ee:16:0e:bf:
f7:66:55:e9:bc:de:1f:fa:7d:f7:88:2b:f2:64:c2:
95:e6:17:bd:3a:12:3c:9a:dd:b4:85:6f:56:d1:ba:
b1:45:d4:3e:37:35:c7:61:82:c4:9b:cd:a9:f5:97:
19:be:92:80:4f:49:1d:a1:07:e6:6b:a3:0a:7d:1b:
e6:eb:65:a8:24:0b:e2:ab:c0:59:65:9d:aa:fd:cc:
13:d3:e8:c2:32:41:4c:0d:01:e3:5d:91:8b:70:85:
7b:98:ee:81:46:3e:a8:aa:58:46:ba:86:3c:cc:d2:
89:11:5f:d0:71:37:f6:65:d8:66:44:71:eb:03:db:
92:ef:e3:56:9b:47:de:7e:5a:5e:38:aa:e5:d4:1d:
ac:83:d9:4f:1c:a6:70:e2:a1:0f:01:0c:fb:66:b6:
31:c9:5b:5f:f2:85:a6:02:91:32:41:f7:18:b7:0f:
a0:69:e0:7f:6f:41:50:53:66:1c:52:8d:31:08:df:
8c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EC:2C:49:3A:A2:72:E6:BF:A9:BE:EF:20:4D:F6:05:CF:97:E7:5B
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/I-wsSTqicua_qb7vIE32Bc-X51s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.185.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:df:f7:05:e1:40:89:16:5e:04:14:4d:fb:fe:8d:dc:ad:c1:
4d:de:96:75:d3:bd:92:8e:83:5a:85:18:fa:47:6c:78:db:51:
0d:47:64:ee:51:45:8c:7c:99:5a:ba:66:aa:19:5c:3a:4b:0a:
07:e8:49:56:65:fb:e9:7d:6d:da:86:9f:be:aa:24:e5:8d:17:
c2:7c:05:32:8d:ad:4e:dd:5b:8e:0e:f8:3c:13:bd:2d:54:bc:
37:45:25:54:25:73:eb:18:3e:09:a4:86:8b:fa:37:a3:df:1d:
0f:f3:53:db:6f:16:f2:5a:d7:62:af:3c:ee:15:56:61:7a:05:
84:08:f1:01:d0:22:b1:2a:58:5a:c0:13:64:b3:a0:e9:f1:55:
09:a8:c3:22:20:8f:17:94:a8:42:73:d3:2b:5e:ee:02:cb:d6:
32:bc:79:7e:a8:54:6e:7c:31:82:bf:93:60:96:11:b3:36:c7:
0e:ca:da:21:2c:b1:2f:3e:61:ef:27:30:bb:74:8a:1d:f9:03:
fc:c7:07:2e:4e:97:6b:5b:6d:ff:bd:2e:15:74:b8:b3:1b:da:
85:3a:e5:dd:e8:74:61:ac:a2:4f:5e:93:b1:10:cd:d8:6e:bd:
a3:70:4b:cd:4d:68:8d:db:4d:dd:45:a8:c6:f7:08:76:62:8b:
01:89:41:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 10:16:19 2024 by rpki-client on console-ams.rpki-client.org