Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/t7m_zm-Ea1czRCeLx8EAmAbq600.roa
File: t7m_zm-Ea1czRCeLx8EAmAbq600.roa (raw, json)
Hash identifier: z2JEJXdgmMagrxPVM3SwW+OY4w3Bkp+Ks0xfA286hHI=
Subject key identifier: B7:B9:BF:CE:6F:84:6B:57:33:44:27:8B:C7:C1:00:98:06:EA:EB:4D
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0191319306F82B8932EF5A092D34AF9DC5A8
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/t7m_zm-Ea1czRCeLx8EAmAbq600.roa
Signing time: Thu 08 Aug 2024 10:40:04 +0000
ROA not before: Thu 08 Aug 2024 10:40:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29641
IP address blocks: 193.124.184.0/24 maxlen: 24
193.124.189.0/24 maxlen: 24
193.124.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Aug 2024 08:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:31:93:06:f8:2b:89:32:ef:5a:09:2d:34:af:9d:c5:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Aug 8 10:40:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7b9bfce6f846b573344278bc7c1009806eaeb4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fa:57:20:33:58:91:aa:32:46:b5:d7:88:31:
48:4a:d0:b7:0a:95:a5:84:cf:f7:a1:fb:41:7d:3a:
2d:14:75:da:2f:bb:a6:96:9a:c2:76:66:d7:4d:6d:
31:f9:9c:c5:f4:73:a0:8a:a9:c0:bd:c9:4c:25:90:
b9:2a:8d:5e:7f:4f:23:fa:74:70:b3:b1:53:78:85:
31:88:b9:84:71:70:dc:38:49:ca:9a:5f:e6:71:52:
76:df:dd:30:e0:fd:ea:9c:c8:75:08:19:35:8b:55:
41:38:0c:0a:20:c5:03:6e:83:07:9d:6c:20:17:ad:
7d:bc:a7:14:34:c5:87:1d:2c:36:22:2a:9b:ad:d6:
ae:66:a5:44:1b:12:5c:73:a1:21:c0:73:55:c3:50:
c8:ae:68:9b:11:4d:39:83:40:56:e4:a5:44:dc:d2:
de:54:6b:49:e3:1f:9a:ed:1e:49:d3:9e:2c:d0:2b:
e9:c2:29:59:c7:da:72:df:a2:eb:02:77:02:e5:f7:
e9:a0:16:66:f3:77:68:7f:b5:7c:d5:8d:9e:ea:b2:
d0:f1:9f:be:96:30:0c:25:c9:8e:69:dc:bc:14:ca:
4e:cd:f7:f2:44:46:ee:9d:36:10:91:7d:93:72:eb:
2e:10:f2:85:69:57:50:45:e1:aa:b3:e5:9a:c1:d0:
69:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B9:BF:CE:6F:84:6B:57:33:44:27:8B:C7:C1:00:98:06:EA:EB:4D
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/t7m_zm-Ea1czRCeLx8EAmAbq600.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.184.0/24
193.124.189.0/24
193.124.191.0/24
Signature Algorithm: sha256WithRSAEncryption
34:44:39:0f:82:19:6b:2f:f9:1b:72:4f:df:83:5f:1b:fc:36:
11:25:3b:68:38:1e:f1:37:d7:46:ee:8f:fe:0e:d9:e4:eb:67:
27:06:2d:c9:3c:22:13:f0:df:69:3f:87:83:b3:52:73:d6:e0:
58:e1:ae:c6:e7:39:a5:5f:9e:f0:ac:a6:6a:af:c4:16:6a:8d:
27:8c:e0:d4:5c:67:14:08:4d:47:3c:ce:74:08:45:b5:b9:b9:
45:a1:68:ca:60:5d:d2:98:ec:48:92:62:1e:99:a7:18:3c:ee:
a0:f6:74:3b:d7:21:b9:9b:8a:04:fc:18:63:7e:9a:f3:04:c4:
c3:50:3f:83:0e:3f:30:04:75:f2:a8:90:55:ea:1d:e2:96:ad:
6f:c3:d4:16:b3:86:94:04:a9:aa:93:2b:a2:6e:ec:a9:c9:6c:
27:41:ab:88:2a:95:db:f6:98:e1:c6:4e:4d:65:bc:05:b8:8f:
34:de:33:bd:91:b4:cd:b1:1a:2a:2b:a1:08:22:bb:fd:b7:3d:
94:de:f3:68:47:e7:b6:fc:e7:9d:fb:90:b0:df:0d:99:b8:e3:
93:9e:1a:d1:dd:9f:35:41:44:4b:3e:3a:7c:20:9c:9d:ba:2e:
b1:a5:85:42:1c:f5:bf:06:3a:60:67:2a:93:8f:ef:06:96:be:
9a:ec:e3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 11:36:48 2024 by rpki-client on console-ams.rpki-client.org