Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/TMiuUQST21Ss_mxPUFvC5hl-UoQ.roa
File: TMiuUQST21Ss_mxPUFvC5hl-UoQ.roa (raw, json)
Hash identifier: N0Cq+HqaailE4UnZ2GdbiZP3kottLhXhaphBEcd8jKc=
Subject key identifier: 4C:C8:AE:51:04:93:DB:54:AC:FE:6C:4F:50:5B:C2:E6:19:7E:52:84
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 018E09F42D8772E73E137E851C3E78268D65
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/TMiuUQST21Ss_mxPUFvC5hl-UoQ.roa
Signing time: Mon 04 Mar 2024 14:53:01 +0000
ROA not before: Mon 04 Mar 2024 14:53:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39629
IP address blocks: 139.28.8.0/22 maxlen: 24
2a10:c300::/30 maxlen: 30
Validation: Failed, certificate revoked on Fri 15 Mar 2024 07:23:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:09:f4:2d:87:72:e7:3e:13:7e:85:1c:3e:78:26:8d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Mar 4 14:53:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4cc8ae510493db54acfe6c4f505bc2e6197e5284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:93:95:fc:ad:08:48:fe:10:39:ec:07:ab:dd:
89:f6:1d:12:e1:02:b5:46:64:86:30:db:ae:bd:2f:
c8:68:cc:b7:2c:4d:89:27:76:58:59:bf:c5:ee:aa:
52:bc:de:2e:b8:d8:84:9a:fa:a7:75:8a:d5:13:c0:
e9:4c:d4:bc:00:ab:77:07:95:ab:bc:41:21:bc:35:
5c:24:23:e3:34:d7:7a:3f:72:19:c8:d0:7c:34:54:
7b:a0:5c:83:83:ff:fd:ae:79:a1:d0:08:86:3e:81:
22:a5:c5:bf:7e:ab:3b:27:12:cc:a6:8e:cc:a9:a7:
78:cb:ad:00:88:5c:3b:24:a7:c8:87:ee:d0:fe:70:
a9:1c:a0:c9:0c:7f:e3:f3:d8:23:12:e8:83:95:e9:
d0:0d:17:de:a4:e6:59:b9:65:85:95:d5:40:fd:b7:
38:a4:22:85:b8:94:09:31:80:df:c9:57:b4:a3:d9:
4d:1a:92:26:4a:f8:44:32:55:8b:44:05:d5:dc:5d:
0b:fe:3a:0b:2a:6d:32:e5:77:fd:ed:ca:75:4f:44:
84:17:56:9a:c4:47:bd:ca:5a:28:3c:1a:1f:85:ee:
2c:94:1d:60:a0:e8:1c:9c:d3:7f:39:26:0b:ad:bb:
ee:47:42:fa:60:b2:ea:d3:79:fc:07:6a:f0:02:8b:
5d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C8:AE:51:04:93:DB:54:AC:FE:6C:4F:50:5B:C2:E6:19:7E:52:84
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/TMiuUQST21Ss_mxPUFvC5hl-UoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.8.0/22
IPv6:
2a10:c300::/30
Signature Algorithm: sha256WithRSAEncryption
92:e8:d4:79:14:38:33:82:c3:f8:c3:45:4f:80:d5:83:be:4f:
c8:fb:46:71:1b:2c:d4:68:32:56:1f:49:cb:af:f4:b7:06:1a:
79:c5:13:a8:d2:e4:df:66:88:0a:9f:13:f4:80:3a:1d:f5:f5:
06:c4:e8:47:b6:f3:d4:c1:1e:45:cf:72:a9:e9:b3:9c:f2:c9:
d7:11:42:68:17:39:cf:1e:dc:fa:34:1f:2a:23:25:b1:96:72:
97:cc:5c:82:d3:d6:69:da:46:d8:51:60:98:23:fc:e0:a8:14:
2f:ac:fb:d7:9a:54:e2:aa:e2:f2:dd:b9:29:3f:ce:2b:06:63:
1c:2e:7a:5a:21:db:6c:28:8d:4c:90:92:f5:60:b2:bc:cc:29:
9b:92:42:68:7c:84:8c:3f:9b:70:aa:cc:2d:f7:a6:f1:aa:44:
2e:f0:ae:4d:20:6f:ba:1d:cd:66:45:4d:5d:39:bf:6e:f9:5f:
00:6a:8a:f1:d1:d0:d2:fa:14:d3:55:d4:07:e8:a6:b9:11:b4:
99:d8:1f:f7:fd:b6:64:bc:1e:cb:44:3c:ff:09:c3:43:e4:0a:
60:5c:60:4d:ac:76:07:ec:5b:c1:03:4e:fd:ea:52:8a:0a:e9:
ea:8f:77:3e:d5:9c:d1:35:83:7e:f0:c0:e2:9e:e5:6c:ec:f6:
d7:ec:a5:0e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAY4J9C2Hcuc+E36FHD54Jo1lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5
M2FlYjkwHhcNMjQwMzA0MTQ1MzAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2M4YWU1MTA0OTNkYjU0YWNmZTZjNGY1MDViYzJlNjE5N2U1Mjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5OV/K0ISP4QOewHq92J9h0S4QK1
RmSGMNuuvS/IaMy3LE2JJ3ZYWb/F7qpSvN4uuNiEmvqndYrVE8DpTNS8AKt3B5Wr
vEEhvDVcJCPjNNd6P3IZyNB8NFR7oFyDg//9rnmh0AiGPoEipcW/fqs7JxLMpo7M
qad4y60AiFw7JKfIh+7Q/nCpHKDJDH/j89gjEuiDlenQDRfepOZZuWWFldVA/bc4
pCKFuJQJMYDfyVe0o9lNGpImSvhEMlWLRAXV3F0L/joLKm0y5Xf97cp1T0SEF1aa
xEe9ylooPBofhe4slB1goOgcnNN/OSYLrbvuR0L6YLLq03n8B2rwAotdAQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFEzIrlEEk9tUrP5sT1BbwuYZflKEMB8GA1UdIwQY
MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt
NWQ0OGI2NWNlNTczLzEvVE1pdVVRU1QyMVNzX214UFVGdkM1aGwtVW9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz
LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCixwIMA0E
AgACMAcDBQIqEMMAMA0GCSqGSIb3DQEBCwUAA4IBAQCS6NR5FDgzgsP4w0VPgNWD
vk/I+0ZxGyzUaDJWH0nLr/S3Bhp5xROo0uTfZogKnxP0gDod9fUGxOhHtvPUwR5F
z3Kp6bOc8snXEUJoFznPHtz6NB8qIyWxlnKXzFyC09Zp2kbYUWCYI/zgqBQvrPvX
mlTiquLy3bkpP84rBmMcLnpaIdtsKI1MkJL1YLK8zCmbkkJofISMP5twqswt96bx
qkQu8K5NIG+6Hc1mRU1dOb9u+V8Aaorx0dDS+hTTVdQH6Ka5EbSZ2B/3/bZkvB7L
RDz/CcND5ApgXGBNrHYH7FvBA0796lKKCunqj3c+1ZzRNYN+8MDinuVs7PbX7KUO
-----END CERTIFICATE-----
Generated at Fri Mar 15 10:42:51 2024 by rpki-client on console-fra.rpki-client.org