Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/tE9XpTJlVRV-U0kelxFfyHTObDw.roa
File: tE9XpTJlVRV-U0kelxFfyHTObDw.roa (raw, json)
Hash identifier: eR/ZzwPOmG4XKgAZJEPRiTBXZ8g8ibPux28EJEumt9w=
Subject key identifier: B4:4F:57:A5:32:65:55:15:7E:53:49:1E:97:11:5F:C8:74:CE:6C:3C
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 018D886CE9F4097C96D89C98D30E6E01FF12
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/tE9XpTJlVRV-U0kelxFfyHTObDw.roa
Signing time: Thu 08 Feb 2024 11:14:15 +0000
ROA not before: Thu 08 Feb 2024 11:14:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57604
IP address blocks: 139.28.72.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Feb 2024 14:44:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:88:6c:e9:f4:09:7c:96:d8:9c:98:d3:0e:6e:01:ff:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Feb 8 11:14:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b44f57a5326555157e53491e97115fc874ce6c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:25:95:39:91:38:d2:b0:42:f0:08:db:a9:5e:
2d:27:bb:53:ed:2e:11:cc:a6:d6:cd:a7:e3:17:e2:
69:e6:d6:a0:cf:0c:ee:35:a9:54:60:9f:eb:fd:19:
2b:1d:54:3e:c5:1a:81:a0:1d:af:7f:eb:e1:c5:a8:
bd:d8:dc:92:2c:b9:de:67:28:f0:ce:4e:28:5e:4c:
20:e2:38:6a:29:da:4e:dd:30:c2:68:66:60:67:ca:
98:b3:9d:b4:e7:f4:41:cd:c7:77:e6:f0:15:25:6c:
da:c6:3b:db:7d:f6:86:ba:ff:b4:b6:57:b5:c1:e8:
aa:4c:87:68:df:9f:ff:4b:a7:71:67:7e:0d:01:ae:
da:60:68:27:34:57:99:f8:22:6f:db:55:40:87:93:
bb:17:af:46:ec:05:5f:ae:83:10:7e:e2:d4:1f:fc:
d2:3b:36:b8:63:4a:54:f3:5b:21:03:d0:61:51:ca:
5a:c5:c7:aa:57:f3:b3:eb:7a:29:fe:80:aa:4e:ed:
df:c7:f0:22:00:ff:98:7f:fe:8d:15:71:38:43:5c:
0d:c0:81:aa:71:0d:10:e1:bf:6d:2a:15:e9:ce:ff:
6a:16:fd:ee:e3:01:76:32:34:ed:aa:51:8e:a0:06:
46:d9:34:de:6e:3a:b4:54:16:17:31:a9:48:bc:b1:
7d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4F:57:A5:32:65:55:15:7E:53:49:1E:97:11:5F:C8:74:CE:6C:3C
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/tE9XpTJlVRV-U0kelxFfyHTObDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.72.0/22
Signature Algorithm: sha256WithRSAEncryption
58:aa:ce:65:45:b1:2b:52:40:cf:89:bf:07:64:f3:f4:cf:ba:
00:bc:ce:36:9a:21:d0:c2:7c:62:f3:e8:a1:5e:b3:87:fd:ac:
70:83:16:36:95:80:89:ee:7f:6a:47:42:e4:01:5a:06:5d:9f:
32:b1:e7:33:23:86:7f:57:e6:87:4f:c2:0d:64:04:d7:a5:0d:
67:ec:67:81:69:ab:48:0f:7b:c6:df:d4:45:52:87:4d:05:08:
77:28:22:80:64:e2:b1:8a:b5:7b:e5:bd:7e:95:b1:c0:59:2e:
fb:67:76:77:78:d2:f1:c8:02:9e:16:08:a4:5e:57:06:ba:66:
49:42:07:7d:3d:6a:85:c0:b5:16:32:8c:c9:7c:bc:48:96:de:
c7:e2:36:f3:24:d0:88:ea:b3:8a:04:74:e2:1a:05:ac:69:5b:
59:c2:c0:e3:63:f1:a4:ec:c4:50:f7:09:7d:96:44:9b:cb:c6:
c0:87:df:00:71:22:74:60:d8:3e:b9:78:45:1b:7b:de:44:e3:
a4:3c:0b:be:dd:dc:7d:19:09:33:ee:93:08:29:3d:2c:8b:47:
d7:c2:30:20:99:b4:65:11:ac:57:13:7c:b5:dc:43:e4:6d:1c:
12:75:4f:ba:63:d4:26:b7:04:5f:a9:3c:2f:a8:72:c5:0d:75:
03:ae:41:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:00 2024 by rpki-client on console-ams.rpki-client.org