Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/bLmiUqRB8JuDhSyTlZ1VanZxiH8.roa
File: bLmiUqRB8JuDhSyTlZ1VanZxiH8.roa (raw, json)
Hash identifier: 4HS7j3iptBybothHm1RARCqshdd8t1pZJat3F29Esw4=
Subject key identifier: 6C:B9:A2:52:A4:41:F0:9B:83:85:2C:93:95:9D:55:6A:76:71:88:7F
Certificate issuer: /CN=e4de19fcee29f7f12ef06c60f8660ed700fe90b9
Certificate serial: 018CC26D288D484127945CD6C427F25D0B98
Authority key identifier: E4:DE:19:FC:EE:29:F7:F1:2E:F0:6C:60:F8:66:0E:D7:00:FE:90:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/bLmiUqRB8JuDhSyTlZ1VanZxiH8.roa
Signing time: Mon 01 Jan 2024 00:29:42 +0000
ROA not before: Mon 01 Jan 2024 00:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31712
IP address blocks: 83.142.32.0/21 maxlen: 21
185.108.56.0/22 maxlen: 22
95.128.8.0/21 maxlen: 21
2a04:4100::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:28:8d:48:41:27:94:5c:d6:c4:27:f2:5d:0b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4de19fcee29f7f12ef06c60f8660ed700fe90b9
Validity
Not Before: Jan 1 00:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cb9a252a441f09b83852c93959d556a7671887f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a1:81:8d:ba:79:ac:08:fb:a1:73:d6:5f:2f:
b3:5a:17:82:ad:bb:eb:27:c2:7b:83:30:64:15:2f:
d6:95:82:6d:a2:9b:91:62:0c:d4:f5:6b:97:87:76:
9c:9f:0a:66:a1:fb:65:41:12:9e:d9:46:aa:be:44:
d7:68:ee:b0:09:70:06:90:a9:59:eb:8f:c4:6f:b8:
0d:43:a7:69:50:bd:14:62:b1:13:de:e0:b2:c7:b2:
d3:50:cf:28:dd:03:89:9f:6a:32:71:58:2f:e8:6c:
e2:24:dd:1e:0b:da:ec:05:fd:ae:36:22:80:3a:3b:
22:74:8d:83:90:01:fa:d6:25:71:f8:cc:f6:aa:d4:
a4:75:eb:89:a3:ea:7e:0e:60:74:9e:c7:14:1f:89:
fb:18:aa:28:79:03:94:e3:b4:f5:21:c3:bd:04:b4:
db:99:ee:d7:33:25:cd:15:0c:ee:8b:4e:7c:ed:5f:
86:a9:31:50:97:c4:6d:73:95:14:6a:0d:9d:ae:4a:
73:a6:8c:cf:14:31:7f:58:19:c9:76:c2:51:7d:62:
9e:54:fc:9b:1c:f5:ba:58:fc:34:8d:b0:df:46:a1:
de:53:48:dd:b6:87:07:1e:dd:cc:be:9e:c2:db:9d:
2c:1a:b5:d2:a5:30:17:9f:88:38:7f:f7:a1:86:1a:
4c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B9:A2:52:A4:41:F0:9B:83:85:2C:93:95:9D:55:6A:76:71:88:7F
X509v3 Authority Key Identifier:
keyid:E4:DE:19:FC:EE:29:F7:F1:2E:F0:6C:60:F8:66:0E:D7:00:FE:90:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/bLmiUqRB8JuDhSyTlZ1VanZxiH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.32.0/21
95.128.8.0/21
185.108.56.0/22
IPv6:
2a04:4100::/29
Signature Algorithm: sha256WithRSAEncryption
18:c4:2c:8c:f7:5c:f0:fb:b4:4c:2d:ed:cc:25:61:36:52:83:
2f:00:cd:f9:12:39:23:95:89:43:d4:d6:48:6c:32:03:2a:6f:
8b:3d:8b:d4:1a:fb:83:93:70:82:a7:23:41:ad:26:8d:cd:1a:
dd:f0:bf:db:74:b6:98:ff:54:69:aa:cc:30:e0:dc:a4:ad:7a:
c7:a6:61:af:15:0b:dd:22:ae:a5:63:c9:e9:02:1f:81:23:16:
75:74:b9:ee:26:ee:b9:d0:09:83:52:f0:fb:52:0f:b4:e6:f2:
cf:60:a4:c1:5c:aa:3d:bd:59:1c:cf:bf:bd:19:5b:ba:51:da:
72:7b:d4:bd:39:dd:e0:c1:49:54:4f:34:cc:9d:da:88:68:c4:
ca:82:0e:5d:bf:6c:b5:b7:e7:73:c7:78:84:47:af:e3:48:bc:
4b:39:a9:df:b9:45:2d:a3:6b:a6:5b:77:05:04:40:de:6a:6f:
df:f2:ad:a4:7e:e3:be:d1:36:cf:61:4d:eb:85:aa:71:15:aa:
0c:9e:d6:5e:41:c6:5f:09:48:51:e0:25:39:ab:be:52:9a:00:
30:94:e6:68:d0:70:98:4e:4d:4a:6e:6c:a4:52:cf:b9:54:c5:
65:49:9c:5e:4c:06:ed:f6:a5:2e:80:9d:ff:d5:50:0b:5a:9f:
b6:fb:5d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:14:38 2025 by rpki-client