Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/lBS_GNr29ib5LoJnjxCgh5bUrt8.roa
File: lBS_GNr29ib5LoJnjxCgh5bUrt8.roa (raw, json)
Hash identifier: 45n4ZjVT+yGepvzbDNGhUQVGIBI+x1wgH87wTawYaqI=
Subject key identifier: 94:14:BF:18:DA:F6:F6:26:F9:2E:82:67:8F:10:A0:87:96:D4:AE:DF
Certificate issuer: /CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
Certificate serial: 018CC3B6ABD280DCE3170FD41A71BECE8DAA
Authority key identifier: 1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/lBS_GNr29ib5LoJnjxCgh5bUrt8.roa
Signing time: Mon 01 Jan 2024 06:29:37 +0000
ROA not before: Mon 01 Jan 2024 06:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13101
IP address blocks: 80.66.192.0/22 maxlen: 22
113.30.180.0/22 maxlen: 22
185.181.128.0/22 maxlen: 22
113.30.220.0/22 maxlen: 22
185.152.144.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 15 Jan 2024 11:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:ab:d2:80:dc:e3:17:0f:d4:1a:71:be:ce:8d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
Validity
Not Before: Jan 1 06:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9414bf18daf6f626f92e82678f10a08796d4aedf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:87:30:50:35:55:31:e6:c4:ab:b0:30:3d:b0:
ac:44:51:da:dc:8d:a9:b4:2f:b5:94:c9:c0:7f:05:
b8:69:06:ad:68:38:87:4c:ee:0c:99:8c:68:08:a4:
c6:4e:8e:8a:11:3a:4e:7b:41:4b:c0:74:c2:94:e5:
14:8d:40:46:98:c0:c8:92:8c:d9:74:1b:be:8c:39:
d7:b9:49:a5:56:5a:45:11:7f:d6:30:cb:c3:cc:69:
4f:2e:67:8e:01:aa:d1:7a:30:57:05:5d:73:c9:be:
bf:87:5d:80:37:35:fe:3f:13:60:ae:c8:87:ed:da:
e7:6d:ff:20:17:24:76:e8:a3:a5:9b:48:98:91:82:
77:19:f5:56:3b:94:b7:23:85:4e:a5:d8:36:fd:fa:
6a:73:96:5e:1c:97:f1:da:b5:14:e2:01:c5:b6:5e:
87:3e:a5:07:c6:d8:44:93:b3:e0:bf:3a:bc:bb:3e:
3b:77:ee:97:47:84:25:79:39:49:04:61:3c:96:e4:
2c:7e:50:3e:b4:1b:e5:b7:0b:07:32:6d:71:34:e1:
87:20:9e:58:b4:0e:43:ee:fc:a7:14:14:1b:cd:1d:
31:fc:11:48:88:77:b3:50:76:8f:12:40:ce:c3:54:
70:50:bb:da:98:71:bb:a8:9c:f4:2a:2c:56:fe:27:
a4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:14:BF:18:DA:F6:F6:26:F9:2E:82:67:8F:10:A0:87:96:D4:AE:DF
X509v3 Authority Key Identifier:
keyid:1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/lBS_GNr29ib5LoJnjxCgh5bUrt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.192.0/22
113.30.180.0/22
113.30.220.0/22
185.152.144.0/22
185.181.128.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:70:4a:d9:36:88:44:3a:42:a4:58:90:54:be:db:f5:cf:69:
78:57:88:e6:b7:96:0e:f2:6e:c5:74:26:bc:37:18:4e:fd:b7:
c7:1b:94:50:ab:2c:27:24:73:a6:2c:01:ba:e1:25:81:39:62:
dc:5e:38:8f:e6:48:10:a2:3a:79:29:3c:50:6c:42:c0:26:88:
51:73:d1:5c:43:ac:90:a4:e5:0b:e5:06:12:67:5e:0c:cd:8e:
67:4e:4d:e2:ef:9b:12:ca:bd:1c:4a:75:06:f4:83:15:fa:61:
65:11:99:da:ec:ee:2d:fd:3f:23:cf:0a:55:2e:49:eb:4b:da:
d8:68:ba:a5:7f:64:69:5c:9b:76:c2:9f:57:89:0c:ac:26:22:
b9:c2:d9:61:8a:fa:ee:cd:b0:a2:63:4c:0b:28:22:d7:df:be:
dd:e9:99:96:93:0d:e4:5d:63:d4:99:2d:7b:8a:c8:2b:bd:61:
1d:88:8f:fb:fb:bc:3f:21:22:7c:1f:7f:48:c2:1a:84:22:16:
bf:ed:32:b7:28:4d:e4:1e:c0:b6:60:df:78:0b:47:ed:2c:58:
a5:c1:95:f3:1c:e5:ab:db:2d:e9:55:eb:cb:68:c2:3e:41:46:
ed:96:bf:f6:fb:9e:e8:ae:e5:92:fc:89:ca:47:b2:08:d7:45:
5a:f6:13:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:36:02 2025 by rpki-client