Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/uE90R-5Do1Cc21NcIfjZwu_GYsM.roa
File: uE90R-5Do1Cc21NcIfjZwu_GYsM.roa (raw, json)
Hash identifier: 6MJQdRI3cd7OVfRh9exgZ8kcAsGjqird7yc4amaQ7a8=
Subject key identifier: B8:4F:74:47:EE:43:A3:50:9C:DB:53:5C:21:F8:D9:C2:EF:C6:62:C3
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 018DFA2BC4A72865BC31BA170E4010AA3A44
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/uE90R-5Do1Cc21NcIfjZwu_GYsM.roa
Signing time: Fri 01 Mar 2024 13:19:48 +0000
ROA not before: Fri 01 Mar 2024 13:19:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39629
IP address blocks: 139.28.8.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 14:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fa:2b:c4:a7:28:65:bc:31:ba:17:0e:40:10:aa:3a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Mar 1 13:19:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b84f7447ee43a3509cdb535c21f8d9c2efc662c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:98:0d:76:54:a0:ec:b3:b9:fc:81:23:f6:83:
91:5c:5c:b1:7d:d4:b4:4b:d9:22:ec:3d:35:20:98:
6b:71:e9:47:a2:95:71:c7:02:f6:58:7f:66:f1:e1:
88:56:93:9e:9f:9a:f7:c6:56:f8:f3:51:f7:f4:a6:
9a:f4:e8:0a:46:68:72:0d:39:1f:9c:09:fa:fd:4e:
79:5c:e7:c3:30:4c:ab:97:5b:0c:ab:58:de:be:05:
a6:e7:98:ec:8d:5b:cf:a1:e7:ff:aa:63:5a:b4:eb:
93:10:58:b4:e5:b0:de:4c:ee:a3:dc:f1:a1:bd:9e:
8e:68:ca:95:09:ca:a0:57:0e:0e:c1:23:3d:18:fb:
9b:8b:a7:6b:ed:2f:26:49:02:e3:90:d2:9a:e2:83:
a6:85:28:80:f0:4f:62:f9:cb:16:30:6c:cc:4b:90:
29:f4:a5:c4:41:24:66:2f:50:17:0b:a7:f6:7c:14:
0b:2e:ac:c2:e9:be:c6:22:83:36:9e:ce:4d:43:0a:
f4:92:0e:91:49:9e:98:58:17:31:1f:ad:af:83:eb:
c4:46:cc:c4:90:f9:2f:d3:c0:e0:dd:a3:95:44:37:
59:a1:50:6c:3d:41:7f:b1:f1:7d:08:e1:e5:45:08:
14:c2:61:4d:67:b3:66:92:e4:a3:a5:50:72:6d:f5:
86:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4F:74:47:EE:43:A3:50:9C:DB:53:5C:21:F8:D9:C2:EF:C6:62:C3
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/uE90R-5Do1Cc21NcIfjZwu_GYsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.8.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:02:ae:a9:ff:e3:c6:6a:a2:17:1f:bb:1b:51:b1:f6:31:92:
e2:73:c8:33:04:65:e3:51:42:36:34:20:58:ab:41:d7:81:3e:
90:50:2f:29:3f:fa:3f:67:4f:f5:e8:aa:e4:f0:9f:48:ae:62:
07:ea:fa:4d:ee:53:24:08:7c:08:96:7f:02:9b:d0:cb:9f:1d:
3b:f5:e2:a2:79:3d:49:5c:84:3a:a8:f5:7f:8e:99:29:61:40:
57:ac:a2:64:30:2c:7d:79:26:61:ae:35:66:79:e5:9e:fd:c3:
15:d5:e6:34:ef:26:af:82:cb:13:74:97:7a:6f:35:ce:07:61:
93:1c:00:1e:2e:25:43:1e:ba:28:d5:93:6f:b1:17:d2:ef:a5:
1c:a6:9f:a5:8d:27:27:4d:0e:1a:70:d0:fe:53:76:3d:c5:d0:
c6:00:cb:39:1d:a3:9a:a2:d5:cf:5f:4c:c5:81:bb:71:21:ed:
ef:01:8a:3f:39:b0:26:f3:49:60:21:89:4a:46:ff:9c:ef:4b:
02:fe:ca:a2:5a:b5:c5:e1:48:10:4a:a6:5b:cb:aa:62:eb:02:
1b:65:b5:75:b1:ce:5a:bb:da:5d:4e:3f:0c:71:a1:c8:2b:45:
00:ab:48:e2:d3:78:75:8d:66:cb:6e:a7:97:47:e0:49:fd:d0:
49:b5:34:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY36K8SnKGW8MboXDkAQqjpEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5
M2FlYjkwHhcNMjQwMzAxMTMxOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODRmNzQ0N2VlNDNhMzUwOWNkYjUzNWMyMWY4ZDljMmVmYzY2MmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJgNdlSg7LO5/IEj9oORXFyxfdS0
S9ki7D01IJhrcelHopVxxwL2WH9m8eGIVpOen5r3xlb481H39Kaa9OgKRmhyDTkf
nAn6/U55XOfDMEyrl1sMq1jevgWm55jsjVvPoef/qmNatOuTEFi05bDeTO6j3PGh
vZ6OaMqVCcqgVw4OwSM9GPubi6dr7S8mSQLjkNKa4oOmhSiA8E9i+csWMGzMS5Ap
9KXEQSRmL1AXC6f2fBQLLqzC6b7GIoM2ns5NQwr0kg6RSZ6YWBcxH62vg+vERszE
kPkv08Dg3aOVRDdZoVBsPUF/sfF9COHlRQgUwmFNZ7NmkuSjpVBybfWGfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLhPdEfuQ6NQnNtTXCH42cLvxmLDMB8GA1UdIwQY
MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt
NWQ0OGI2NWNlNTczLzEvdUU5MFItNURvMUNjMjFOY0lmalp3dV9HWXNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz
LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCixwIMA0G
CSqGSIb3DQEBCwUAA4IBAQAOAq6p/+PGaqIXH7sbUbH2MZLic8gzBGXjUUI2NCBY
q0HXgT6QUC8pP/o/Z0/16Krk8J9IrmIH6vpN7lMkCHwIln8Cm9DLnx079eKieT1J
XIQ6qPV/jpkpYUBXrKJkMCx9eSZhrjVmeeWe/cMV1eY07yavgssTdJd6bzXOB2GT
HAAeLiVDHroo1ZNvsRfS76Ucpp+ljScnTQ4acND+U3Y9xdDGAMs5HaOaotXPX0zF
gbtxIe3vAYo/ObAm80lgIYlKRv+c70sC/sqiWrXF4UgQSqZby6pi6wIbZbV1sc5a
u9pdTj8McaHIK0UAq0ji03h1jWbLbqeXR+BJ/dBJtTQx
-----END CERTIFICATE-----
Generated at Mon Mar 4 19:43:29 2024 by rpki-client on console-fra.rpki-client.org