Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/IJ-rTBQ00jW4MBSu8OpNN4RCy_Y.roa
File: IJ-rTBQ00jW4MBSu8OpNN4RCy_Y.roa (raw, json)
Hash identifier: jXZZ/X6iUQQNME91yGJJOZDxy+5s0CR0scDZK43fIaY=
Subject key identifier: 20:9F:AB:4C:14:34:D2:35:B8:30:14:AE:F0:EA:4D:37:84:42:CB:F6
Certificate issuer: /CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Certificate serial: 01905DAB81ECC4D05BF89F872F6B32C36CE9
Authority key identifier: A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/IJ-rTBQ00jW4MBSu8OpNN4RCy_Y.roa
Signing time: Fri 28 Jun 2024 07:07:19 +0000
ROA not before: Fri 28 Jun 2024 07:07:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206642
IP address blocks: 185.179.140.0/24 maxlen: 24
185.179.141.0/24 maxlen: 24
185.179.142.0/24 maxlen: 24
185.179.143.0/24 maxlen: 24
2a0a:8780::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5d:ab:81:ec:c4:d0:5b:f8:9f:87:2f:6b:32:c3:6c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Validity
Not Before: Jun 28 07:07:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=209fab4c1434d235b83014aef0ea4d378442cbf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a3:fd:6a:cc:60:ef:68:c4:78:57:16:9c:a5:
27:81:33:bc:f1:fe:30:0c:1d:d7:54:7d:04:ed:48:
00:19:f2:40:b8:68:22:ae:6e:2b:23:0b:7f:56:cd:
f4:de:d6:a9:74:60:08:71:e9:ba:cf:fe:51:64:46:
2b:4e:ed:c9:57:9d:fb:4d:a8:da:ec:3d:61:21:19:
13:18:e4:0d:53:79:5b:cb:08:21:f3:d8:13:77:d8:
1a:81:70:54:73:d3:d1:d7:7f:29:ba:fe:eb:14:52:
75:9a:71:41:8a:fc:21:8c:90:a0:cb:ec:12:d7:6c:
31:3c:2c:2e:83:0a:f1:93:01:30:c3:80:43:e0:32:
3b:34:6c:4c:0d:97:a4:6c:b4:5b:08:75:e4:49:83:
b1:49:13:35:d2:9e:17:ba:3b:44:bb:9b:76:c3:ad:
c4:6e:2e:aa:3c:cf:a3:cd:92:e7:14:e9:08:02:d4:
ff:1b:85:32:08:ae:28:84:9b:f2:4d:91:dd:01:ca:
20:ea:d6:aa:70:60:d9:0b:65:cc:66:a5:55:b5:1b:
d3:39:f1:2f:76:ac:c2:d1:52:03:6a:42:5c:8f:51:
9a:fa:c5:f6:91:26:e6:44:ca:3e:c7:5b:3e:b2:bb:
ee:ef:ad:08:bb:48:72:76:31:27:52:a5:a7:11:2f:
5d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9F:AB:4C:14:34:D2:35:B8:30:14:AE:F0:EA:4D:37:84:42:CB:F6
X509v3 Authority Key Identifier:
keyid:A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/IJ-rTBQ00jW4MBSu8OpNN4RCy_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.140.0/22
IPv6:
2a0a:8780::/32
Signature Algorithm: sha256WithRSAEncryption
75:66:09:11:d9:25:f9:6a:d5:08:80:85:d6:27:0c:59:62:cc:
de:aa:c2:f4:13:19:21:4b:0d:6d:02:ef:a1:7a:1c:81:7f:ca:
53:bd:b9:56:f0:ac:9d:26:a3:c5:87:23:ec:12:94:94:f8:35:
de:85:bc:fa:4d:26:00:d0:22:91:bd:1f:f9:61:c4:ce:01:b6:
9a:58:8f:d2:4c:93:10:cc:fd:14:b9:6c:74:25:88:7d:d7:48:
96:a9:10:df:d3:25:e8:96:26:21:d3:b7:62:c9:5c:c4:c7:68:
64:17:d0:48:63:82:e9:a4:b5:84:89:5b:d8:d2:b5:69:55:9b:
18:59:d7:7a:61:f0:87:47:4e:5a:85:32:26:1e:65:8b:f4:44:
07:15:20:5a:e8:6b:d0:75:55:b3:71:ac:c0:79:70:14:2d:91:
41:c5:d7:9c:bf:b8:0a:2b:2f:cf:77:0a:2a:6f:20:57:1d:26:
8a:39:f3:f6:0d:d0:fd:76:c1:f4:41:a9:58:0b:17:52:ef:d0:
55:62:80:93:5d:97:c3:b5:c5:23:8b:29:69:9f:78:c2:0c:fc:
bd:69:1d:18:ca:db:ee:c4:8e:c7:46:1d:a4:90:c5:aa:67:90:
b7:73:e5:94:40:8b:fe:a9:4f:58:ce:e2:2e:07:0c:88:e4:e2:
da:d5:7e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:35 2025 by rpki-client