Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/RNNIOSnOFjdxzT0oI3kMd3nwXbo.roa
File: RNNIOSnOFjdxzT0oI3kMd3nwXbo.roa (raw, json)
Hash identifier: sUeyej56sQDYO3zOWi/DwYmPIp5MyndUhm6/i0uFCIA=
Subject key identifier: 44:D3:48:39:29:CE:16:37:71:CD:3D:28:23:79:0C:77:79:F0:5D:BA
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 018EA3F28A87C73A77E58A3A160147E54232
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/RNNIOSnOFjdxzT0oI3kMd3nwXbo.roa
Signing time: Wed 03 Apr 2024 12:32:45 +0000
ROA not before: Wed 03 Apr 2024 12:32:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 46261
IP address blocks: 139.28.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:49:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a3:f2:8a:87:c7:3a:77:e5:8a:3a:16:01:47:e5:42:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Apr 3 12:32:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44d3483929ce163771cd3d2823790c7779f05dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1c:8c:f3:41:01:89:45:1c:ac:a2:e8:6d:37:
8d:c8:6b:3f:aa:46:e0:82:a2:8f:1e:bf:42:5a:c9:
8d:5e:de:2f:cb:29:c7:e1:05:a6:1d:4c:f0:24:4d:
b3:12:b7:41:1f:3b:7d:68:11:fb:b0:f6:5f:c1:a5:
6d:9d:c7:23:16:03:34:2b:79:8f:ab:b5:cc:d4:b6:
cd:2f:51:74:5a:46:cf:42:04:9b:ca:9a:83:c9:88:
8a:6f:bd:81:c5:36:5b:42:fe:31:cf:0c:eb:0a:18:
de:56:2e:52:70:f1:a7:b9:15:e5:03:58:9b:b4:e8:
67:83:c0:d5:b8:e6:3d:9a:d8:14:a6:88:74:b6:cb:
d8:c8:16:f3:cc:ca:2d:ee:b0:e0:66:de:77:6d:73:
24:a9:2f:91:2b:7a:62:a7:51:b3:65:c8:c9:d2:6b:
a0:d3:86:69:43:60:5b:2f:6d:34:76:7b:d4:3d:e5:
63:bb:18:bc:f2:5a:cb:5d:38:4f:73:ae:fa:f5:f1:
37:6b:06:2f:34:7d:14:ca:54:cb:57:32:2a:83:6d:
90:c7:8e:51:a4:6a:db:05:e2:44:ad:6c:74:f7:bf:
9f:20:40:b2:fe:95:a5:45:ef:ac:55:d5:ff:84:b9:
28:58:38:8e:2b:7c:9c:bf:6e:20:96:7e:08:31:1e:
ab:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D3:48:39:29:CE:16:37:71:CD:3D:28:23:79:0C:77:79:F0:5D:BA
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/RNNIOSnOFjdxzT0oI3kMd3nwXbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.136.0/24
Signature Algorithm: sha256WithRSAEncryption
51:2f:cd:20:6b:9d:82:62:d8:55:26:be:e7:ac:1c:93:6b:42:
99:e6:3c:c1:fb:28:65:46:9d:8d:14:d6:5b:b2:3c:09:fc:ef:
07:17:10:00:5f:2a:8f:fc:70:02:45:60:b5:a0:df:18:5a:d9:
41:71:09:b7:68:e3:9a:69:4b:3b:8e:d7:19:eb:e8:fd:be:48:
9d:fd:45:9a:78:16:8a:21:ba:c0:8d:6f:1f:0e:34:8e:e0:8e:
81:b2:63:50:54:57:fc:25:d8:fa:4b:28:8a:6e:7f:a4:e4:6a:
83:a4:9b:e9:3c:48:10:58:96:e0:94:8a:0c:21:a7:b4:18:85:
30:b3:81:db:b8:07:f3:29:f0:2e:e4:c2:4f:51:0e:f2:93:32:
da:46:33:c7:c3:a9:4a:ff:91:a3:38:ad:9d:14:8e:8a:5b:e6:
30:e9:4d:f4:fd:c0:fb:52:50:0f:11:d7:a3:95:a3:f8:13:a8:
97:09:93:47:3d:a5:0e:60:81:ab:b6:41:04:46:55:ab:32:4a:
5b:37:62:79:8d:c0:16:31:60:ed:ac:e6:f2:bc:f9:84:b7:20:
ce:46:61:a2:53:d6:71:13:cd:61:54:c2:62:92:5f:1a:71:d2:
8b:cb:ca:e0:e0:06:fa:82:86:b5:39:f7:51:88:76:44:62:73:
4a:25:ad:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:17 2025 by rpki-client