Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/ib_VjLR3dUZuygYJBdfOo8B4qd4.roa
File: ib_VjLR3dUZuygYJBdfOo8B4qd4.roa (raw, json)
Hash identifier: U7vfa1wTwHFftYmHc8mfhY61BFczXpjyThBsZCArjGM=
Subject key identifier: 89:BF:D5:8C:B4:77:75:46:6E:CA:06:09:05:D7:CE:A3:C0:78:A9:DE
Certificate issuer: /CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Certificate serial: 0195180395B3847A52029F0224999035DFDA
Authority key identifier: 15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/ib_VjLR3dUZuygYJBdfOo8B4qd4.roa
Signing time: Tue 18 Feb 2025 07:44:02 +0000
ROA not before: Tue 18 Feb 2025 07:44:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61173
IP address blocks: 5.182.44.0/24 maxlen: 24
5.182.45.0/24 maxlen: 24
5.182.46.0/24 maxlen: 24
5.182.47.0/24 maxlen: 24
45.159.112.0/24 maxlen: 24
45.159.113.0/24 maxlen: 24
45.159.114.0/24 maxlen: 24
45.159.115.0/24 maxlen: 24
62.3.42.0/24 maxlen: 24
85.208.252.0/24 maxlen: 24
85.208.253.0/24 maxlen: 24
85.208.254.0/24 maxlen: 24
85.208.255.0/24 maxlen: 24
185.4.28.0/24 maxlen: 24
185.4.29.0/24 maxlen: 24
185.4.30.0/24 maxlen: 24
185.4.31.0/24 maxlen: 24
185.50.37.0/24 maxlen: 24
185.50.38.0/24 maxlen: 24
185.50.39.0/24 maxlen: 24
185.116.160.0/24 maxlen: 24
185.116.161.0/24 maxlen: 24
185.116.162.0/24 maxlen: 24
185.116.163.0/24 maxlen: 24
185.213.164.0/24 maxlen: 24
185.213.165.0/24 maxlen: 24
185.213.166.0/24 maxlen: 24
185.213.167.0/24 maxlen: 24
185.255.88.0/24 maxlen: 24
185.255.89.0/24 maxlen: 24
185.255.90.0/24 maxlen: 24
185.255.91.0/24 maxlen: 24
193.141.64.0/24 maxlen: 24
193.141.65.0/24 maxlen: 24
193.141.126.0/24 maxlen: 24
193.141.127.0/24 maxlen: 24
2a05:ab80::/48 maxlen: 48
2a05:ab80:1::/48 maxlen: 48
2a05:ab80:3::/48 maxlen: 48
2a05:ab80:4::/48 maxlen: 48
2a05:ab80:100::/48 maxlen: 48
2a05:ab80:200::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 26 Feb 2025 07:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:18:03:95:b3:84:7a:52:02:9f:02:24:99:90:35:df:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Validity
Not Before: Feb 18 07:44:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89bfd58cb47775466eca060905d7cea3c078a9de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0a:b6:82:c9:98:84:dd:79:3b:5f:17:b7:86:
47:d0:e9:b8:31:6f:02:b7:f8:c7:60:02:43:7f:ff:
ce:c9:c7:f8:86:25:4f:37:39:d9:58:b3:78:27:4b:
a8:cd:65:31:c8:bc:e4:43:ce:f1:32:32:ce:a6:19:
13:0f:0f:ff:83:3a:4a:95:28:5a:f1:af:a3:4e:5a:
24:9d:42:9d:38:4e:f2:d7:6d:e1:5a:0d:4e:3f:d4:
d5:27:c9:bb:2e:94:00:36:8f:fb:1e:c2:94:8c:dc:
81:94:91:9c:74:d3:43:58:c4:25:a7:38:97:ec:c2:
53:48:e0:6a:b7:43:9d:9e:6b:14:20:bd:bd:42:54:
bc:cc:c8:a4:b1:56:7e:99:34:c8:de:34:a1:7d:e2:
6f:ec:7c:67:44:3b:ed:de:e7:13:a7:9a:ac:e6:05:
ce:26:4c:66:f6:49:19:ac:4a:fc:8d:b8:6f:65:fb:
43:5d:fa:42:7b:9b:fa:86:1e:bb:e9:ca:50:3f:56:
9a:72:75:17:b0:8a:2c:23:ac:1c:6f:f1:39:78:dc:
42:3e:9d:0f:c2:a2:d4:1b:c1:e0:eb:30:02:91:4c:
f2:ae:cf:6b:50:d1:92:00:04:32:53:6a:85:5d:b5:
04:f2:31:d1:18:11:a6:e9:2d:d1:88:7a:b1:94:20:
57:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BF:D5:8C:B4:77:75:46:6E:CA:06:09:05:D7:CE:A3:C0:78:A9:DE
X509v3 Authority Key Identifier:
keyid:15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/ib_VjLR3dUZuygYJBdfOo8B4qd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.44.0/22
45.159.112.0/22
62.3.42.0/24
85.208.252.0/22
185.4.28.0/22
185.50.37.0-185.50.39.255
185.116.160.0/22
185.213.164.0/22
185.255.88.0/22
193.141.64.0/23
193.141.126.0/23
IPv6:
2a05:ab80::/47
2a05:ab80:3::-2a05:ab80:4:ffff:ffff:ffff:ffff:ffff
2a05:ab80:100::/48
2a05:ab80:200::/48
Signature Algorithm: sha256WithRSAEncryption
5c:b9:18:df:02:59:f2:a3:40:ab:f7:15:a0:85:b9:aa:02:b1:
25:ee:6d:8e:73:9e:2b:fa:b3:e7:b5:4a:de:f5:31:db:a8:21:
fb:1f:29:a4:38:8c:d4:20:13:53:5d:f6:8d:e2:d8:9f:c8:79:
1a:17:c9:ee:1f:44:cc:25:9d:2a:f6:6f:3d:e0:1e:cf:19:1a:
dc:3d:b0:0d:0d:85:40:d2:ea:a1:c6:b3:0a:70:78:d2:80:f3:
e3:e4:b9:60:88:54:4a:aa:a2:9e:ed:c5:8a:01:44:fb:34:8f:
29:42:4e:db:f3:bb:6b:52:24:90:78:cb:27:85:4b:78:93:6f:
6d:b3:37:cf:f9:f4:d9:d0:1e:df:09:b5:ec:a1:45:04:48:28:
67:9f:f7:82:be:b3:65:c6:48:89:5d:ea:f4:53:2c:15:b8:da:
b0:3c:f8:3d:63:31:e5:c3:63:45:d1:50:49:76:88:a8:d2:10:
44:08:51:a0:59:5e:05:cc:34:a5:2e:4c:2f:5b:82:ef:86:f2:
55:dd:c0:98:58:fd:00:d9:de:4e:7f:4f:0a:ae:70:30:ae:c7:
75:73:be:ca:c4:0c:ce:e5:ce:f1:19:f9:77:99:e8:a6:7e:c8:
09:63:71:fd:57:85:b5:41:48:17:b5:04:87:12:d2:27:01:a3:
cb:9f:90:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:22:36 2025 by rpki-client