Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/iBMRktlv4_i5sSc-bhpa3l1fFn4.roa
File: iBMRktlv4_i5sSc-bhpa3l1fFn4.roa (raw, json)
Hash identifier: gDOmiw5KETPiBdGCkHGdUSQIGYBThgbmjCB/mDhOiPw=
Subject key identifier: 88:13:11:92:D9:6F:E3:F8:B9:B1:27:3E:6E:1A:5A:DE:5D:5F:16:7E
Certificate issuer: /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Certificate serial: 0194DBB8C4057B259A3F568DB508D09D9E50
Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/iBMRktlv4_i5sSc-bhpa3l1fFn4.roa
Signing time: Thu 06 Feb 2025 14:45:06 +0000
ROA not before: Thu 06 Feb 2025 14:45:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29286
IP address blocks: 128.140.128.0/20 maxlen: 20
185.23.96.0/23 maxlen: 23
185.23.99.0/24 maxlen: 24
213.180.228.0/24 maxlen: 24
213.180.229.0/24 maxlen: 24
213.180.230.0/24 maxlen: 24
213.180.252.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 25 Feb 2025 14:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:db:b8:c4:05:7b:25:9a:3f:56:8d:b5:08:d0:9d:9e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Validity
Not Before: Feb 6 14:45:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88131192d96fe3f8b9b1273e6e1a5ade5d5f167e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f1:2c:fb:8d:ca:e3:ee:02:c2:89:75:03:8c:
d8:b8:19:ba:49:d3:ae:76:42:4e:ea:d9:7f:4a:f0:
81:25:7f:7e:55:df:78:16:f7:86:12:ec:be:31:f0:
97:23:99:14:04:6d:7c:9e:21:4d:55:3e:e9:61:b7:
73:0f:9f:a1:08:85:4e:f5:7f:b6:87:19:44:35:af:
8c:f9:8c:84:5f:dd:91:2b:f8:94:79:47:30:04:a1:
93:0b:9c:dc:f9:93:43:6f:34:74:be:eb:2d:5f:30:
4e:a6:bf:f4:90:b7:97:15:b8:29:e3:b5:fd:3d:c3:
ac:cf:86:31:6a:04:d5:bc:5f:7b:8a:02:f8:9b:e4:
01:82:a7:a6:ca:5a:dd:c0:ef:8b:a0:91:a2:ad:d0:
0f:a6:57:5e:96:4e:18:50:ee:95:ac:e9:51:77:fb:
04:b7:14:87:4a:ef:19:77:37:ae:c8:47:af:c0:02:
45:dc:11:b6:c2:01:55:39:a2:1b:f4:92:b3:ae:84:
1a:06:e8:dd:f5:e5:f3:fb:7f:2f:3e:f1:fb:7f:0f:
b3:5a:ae:96:65:0a:4a:9c:97:1f:58:56:61:b7:f9:
57:9a:2a:38:fd:bc:d3:20:aa:f4:64:32:36:73:a5:
69:79:70:ae:b6:93:05:14:32:83:91:e7:44:0d:6c:
1a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:13:11:92:D9:6F:E3:F8:B9:B1:27:3E:6E:1A:5A:DE:5D:5F:16:7E
X509v3 Authority Key Identifier:
keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/iBMRktlv4_i5sSc-bhpa3l1fFn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.140.128.0/20
185.23.96.0/23
185.23.99.0/24
213.180.228.0-213.180.230.255
213.180.252.0/22
Signature Algorithm: sha256WithRSAEncryption
80:72:37:96:09:aa:7a:58:33:72:80:5a:4c:f3:24:db:c7:43:
26:9e:0c:a1:db:cf:38:6d:49:43:bf:c1:72:0f:5e:48:42:5c:
14:db:27:04:3f:8d:99:ca:8f:43:05:2d:b6:0b:61:d8:63:da:
1d:da:b4:7a:dd:75:9c:06:0d:bc:0d:08:f8:ce:1c:5f:45:64:
c4:00:73:3c:57:0e:7b:9e:a2:b9:56:a6:f1:80:4b:ce:61:dc:
6f:d7:c9:5c:60:03:c2:d0:b8:f1:27:e1:ef:10:09:1c:3e:c6:
88:d7:73:3f:1f:a3:6b:17:03:dd:0e:6b:5f:2d:6d:56:f9:1b:
9b:c8:a2:c9:e5:b2:0e:8a:0b:45:06:33:07:f5:9c:3c:c3:40:
e3:50:67:31:44:01:d1:d9:3a:7b:41:a8:96:9b:b6:3c:8b:f7:
15:32:2a:e5:df:ee:d4:61:a2:90:3d:87:6f:68:f4:28:96:86:
cd:83:24:40:04:59:37:91:9a:4e:8d:41:36:66:2a:4a:41:1d:
73:9a:79:0e:36:7b:e8:f0:6a:33:db:49:68:eb:34:df:c5:a7:
81:d0:10:6a:08:1a:1f:ce:2a:07:6f:a6:f4:b8:8e:7c:d6:f1:
e1:c2:db:5b:96:9a:4a:49:6c:1d:32:09:5a:7f:69:0e:e2:e5:
7c:a0:5b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:02:29 2025 by rpki-client