Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/vSq3E_sVdyu-rekupQX_3yy2WdY.roa
File: vSq3E_sVdyu-rekupQX_3yy2WdY.roa (raw, json)
Hash identifier: ZeU5nJI39vRSLW0r0/3mjdkW91yEJ5uipIuTjUdDoBE=
Subject key identifier: BD:2A:B7:13:FB:15:77:2B:BE:AD:E9:2E:A5:05:FF:DF:2C:B6:59:D6
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0190FD6EA3ABA2ED2D417997EF9AFDCF1EAD
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/vSq3E_sVdyu-rekupQX_3yy2WdY.roa
Signing time: Mon 29 Jul 2024 07:40:04 +0000
ROA not before: Mon 29 Jul 2024 07:40:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29641
IP address blocks: 193.124.184.0/24 maxlen: 24
193.124.186.0/24 maxlen: 24
193.124.187.0/24 maxlen: 24
193.124.189.0/24 maxlen: 24
193.124.190.0/24 maxlen: 24
193.124.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Aug 2024 13:55:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fd:6e:a3:ab:a2:ed:2d:41:79:97:ef:9a:fd:cf:1e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jul 29 07:40:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd2ab713fb15772bbeade92ea505ffdf2cb659d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:05:97:f7:f4:eb:a0:54:8a:c2:7a:d7:44:52:
29:75:11:68:bf:dc:83:d3:ff:f5:56:f9:70:f9:7c:
4f:fb:f2:92:c0:59:2f:c3:6b:a3:25:6f:24:50:29:
26:dd:c9:c2:67:60:26:32:ae:d0:d0:d0:24:ac:63:
02:2a:ce:45:dd:1e:46:cf:01:29:2f:9b:7a:71:23:
0e:a0:ef:51:39:f2:2f:2e:c1:70:e0:99:ca:2d:b1:
f3:2f:e7:b5:92:3b:a6:ee:bc:dd:27:50:c6:07:bf:
1d:69:61:a5:9f:93:85:fc:9b:06:38:a7:7c:e2:b8:
be:f4:83:88:ef:86:de:57:a0:bc:f0:69:78:5e:bd:
2f:9d:d6:ba:23:66:c3:31:8b:50:55:ae:54:f5:d6:
00:b5:da:3a:52:92:a0:5d:c6:50:74:cc:4e:be:3e:
24:d8:75:12:33:f0:5b:89:56:c2:3a:26:40:fa:9e:
b7:54:c1:40:54:bf:17:8d:99:e5:35:1d:66:74:68:
3b:1d:a5:b1:fa:0f:13:ba:9f:31:17:5b:40:20:f9:
1b:bb:5b:85:09:ed:96:35:c2:e5:c6:73:bb:d6:0c:
22:65:05:d0:50:5d:f1:45:fc:0d:1f:79:c7:5c:3d:
c8:e9:3b:f1:34:78:4f:61:21:15:01:00:8f:91:04:
f8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2A:B7:13:FB:15:77:2B:BE:AD:E9:2E:A5:05:FF:DF:2C:B6:59:D6
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/vSq3E_sVdyu-rekupQX_3yy2WdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.184.0/24
193.124.186.0/23
193.124.189.0-193.124.191.255
Signature Algorithm: sha256WithRSAEncryption
09:77:14:ec:26:94:a1:3f:0f:17:ff:c6:dd:90:6c:9a:e5:52:
21:70:0b:ad:ec:06:88:5f:c3:59:9a:82:d2:d1:ec:0b:9b:b3:
55:d2:3b:45:63:24:df:d8:d0:6f:fc:e5:8e:c5:f3:fa:c9:b4:
65:31:47:6c:eb:7d:05:00:a3:69:f8:10:e5:65:3c:8c:78:aa:
75:69:c7:f0:8c:4d:47:7a:22:50:6f:4d:b9:37:dd:0c:8e:eb:
10:dc:e5:7d:19:f6:d1:9e:f7:0f:98:4b:44:e0:d7:42:7e:a5:
e1:8b:da:dc:fa:fe:75:40:95:78:75:84:ca:40:10:78:17:92:
c6:97:cd:76:a7:39:c4:f9:c5:55:39:11:da:28:25:13:94:9f:
e7:62:3a:7e:d2:c4:ba:36:c8:fe:d3:b3:bb:8c:53:5e:a9:f0:
60:d8:39:6b:f5:6e:db:cb:a8:5e:64:37:6c:b6:25:2a:de:27:
48:52:1f:2e:ca:55:e7:97:6b:92:4f:a7:4d:ca:86:c9:30:4b:
cb:e1:b0:c3:ea:a5:ab:cb:f8:ec:ed:a6:d4:fd:6c:ed:96:b4:
c3:c3:e9:f7:32:64:42:26:46:8a:1a:c8:e2:f8:37:c2:03:1f:
7e:e9:4d:94:c7:f2:12:e8:5b:de:77:80:e9:ca:88:2f:a4:f5:
1c:fa:4e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 16:11:52 2024 by rpki-client on console-fra.rpki-client.org