Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ibiphmCmThsKOt4gC_GoNGLu7aI.roa
File: ibiphmCmThsKOt4gC_GoNGLu7aI.roa (raw, json)
Hash identifier: XxR4hHi706qYhWN7uuh7aRgoNnMYqUiWbjjVO4S8PKI=
Subject key identifier: 89:B8:A9:86:60:A6:4E:1B:0A:3A:DE:20:0B:F1:A8:34:62:EE:ED:A2
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 01910E390A873E369532A3B263678E53D758
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ibiphmCmThsKOt4gC_GoNGLu7aI.roa
Signing time: Thu 01 Aug 2024 13:55:04 +0000
ROA not before: Thu 01 Aug 2024 13:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29641
IP address blocks: 193.124.184.0/24 maxlen: 24
193.124.186.0/24 maxlen: 24
193.124.187.0/24 maxlen: 24
193.124.189.0/24 maxlen: 24
193.124.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Aug 2024 10:40:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0e:39:0a:87:3e:36:95:32:a3:b2:63:67:8e:53:d7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Aug 1 13:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89b8a98660a64e1b0a3ade200bf1a83462eeeda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ae:cc:d9:e7:a2:c7:b3:69:e3:55:4e:61:d7:
06:56:47:da:da:fa:ce:8b:83:0b:e4:7c:a5:50:e0:
c5:ae:00:d7:29:83:ed:80:ce:6c:e7:c0:73:58:f0:
76:db:1d:81:8d:2c:cc:a0:28:a8:49:59:e5:3a:d8:
dd:41:84:6a:64:cb:ff:9e:e4:c3:87:c5:80:aa:ef:
c7:01:43:8d:73:cd:5d:2d:27:39:fe:64:0e:7d:08:
03:85:00:3c:a2:ab:03:81:04:75:27:b9:f7:e9:3f:
a6:51:5b:15:72:e3:f9:3d:d3:cd:dd:f3:d7:b3:09:
6c:00:16:07:16:58:e8:46:2f:ae:3d:4a:9e:46:95:
2b:20:2a:e0:f4:3a:e3:59:70:89:78:e7:d3:50:18:
e3:e6:45:4b:fa:74:a9:78:7f:42:50:7e:82:41:7f:
25:80:a2:3d:57:35:2f:30:3a:89:03:25:ce:16:ae:
6c:f9:88:58:4a:1a:dc:9f:c5:e4:5e:a1:91:9f:b7:
eb:b3:e9:42:86:07:1e:4b:c1:9b:28:0e:80:56:07:
03:28:d5:39:e4:a5:ba:03:60:a2:03:19:42:ae:09:
4b:0b:91:fa:aa:a3:c0:f3:5f:7e:e7:fb:85:9d:97:
e1:d0:91:c1:67:5f:4e:ed:a8:a2:44:8b:16:ab:9a:
fd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B8:A9:86:60:A6:4E:1B:0A:3A:DE:20:0B:F1:A8:34:62:EE:ED:A2
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ibiphmCmThsKOt4gC_GoNGLu7aI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.184.0/24
193.124.186.0/23
193.124.189.0/24
193.124.191.0/24
Signature Algorithm: sha256WithRSAEncryption
30:98:4a:50:de:4c:fd:3b:68:6b:91:63:1e:0a:7a:05:fa:dc:
3f:07:a1:63:cf:c2:e6:84:e3:4c:0f:8c:97:e0:15:cb:8b:8e:
ee:de:a1:cf:38:55:43:9e:88:f8:5d:93:2a:75:31:4c:fa:5d:
df:4b:e1:b0:58:37:1d:89:8f:db:16:8d:5a:ac:8b:3b:ef:10:
be:4d:c2:73:c3:d0:22:fa:56:85:88:c2:09:31:27:01:fb:b3:
3e:88:7b:a7:0d:1e:4d:86:09:50:77:c8:b7:8e:75:22:ca:a2:
ff:93:d2:a5:b5:ef:98:e8:c9:a7:4c:34:b2:14:96:7c:c8:f6:
ae:da:cc:2f:c2:32:25:67:dd:32:34:ea:59:cc:83:95:68:3a:
17:88:57:bb:f5:2f:d8:aa:27:05:44:30:95:e5:7d:a9:59:b9:
23:d7:43:5c:f0:01:1c:32:9f:9c:3d:81:59:46:e8:7c:77:31:
6a:f8:e4:9f:7a:7d:a2:9e:87:3a:ab:ff:7e:86:28:03:14:38:
bd:4f:f3:8a:c6:13:da:85:b5:87:f5:f0:47:97:46:36:93:5c:
d3:57:41:88:f2:d0:fe:e0:40:ff:92:f0:be:23:c6:22:0f:c7:
88:66:7c:c1:3e:f3:92:03:e1:1d:e6:85:38:d8:be:57:d3:ca:
98:89:0b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 12:52:51 2024 by rpki-client on console-ams.rpki-client.org