Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/1-C_BNmaJ_ukykVF7gFPOk1mPTpc.roa
File: 1-C_BNmaJ_ukykVF7gFPOk1mPTpc.roa (raw, json)
Hash identifier: 1ZPQElq/I+Ktirn97mRqUiy3SoYWNB/kCK/YnVtXUqU=
Subject key identifier: F8:2F:C1:36:66:89:FE:E9:32:91:51:7B:80:53:CE:93:59:8F:4E:97
Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial: 018CC2DB417C8AC06E9DA741D019FEA635AD
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/1-C_BNmaJ_ukykVF7gFPOk1mPTpc.roa
Signing time: Mon 01 Jan 2024 02:29:58 +0000
ROA not before: Mon 01 Jan 2024 02:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5650
IP address blocks: 139.28.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Feb 2024 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:41:7c:8a:c0:6e:9d:a7:41:d0:19:fe:a6:35:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Validity
Not Before: Jan 1 02:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f82fc1366689fee93291517b8053ce93598f4e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:60:6f:5f:fd:b0:a7:32:be:68:62:b7:66:e5:
0e:ee:9e:fe:10:b1:2c:67:23:be:1b:08:c7:09:3d:
f7:89:e9:52:c2:14:1f:50:98:c1:02:4e:f8:d1:70:
a8:64:22:fc:10:1c:36:2a:2d:e9:cc:52:c6:bb:e9:
ce:87:ae:ba:4d:e7:6e:c6:23:10:53:11:7b:9a:9d:
fb:7d:c2:db:87:9a:e1:77:91:d0:e4:02:b7:83:7c:
58:a6:bf:ce:f7:3f:33:e9:22:2b:88:7d:a5:cf:0c:
ed:71:6e:e2:34:5d:e6:5f:4c:0e:97:b9:55:2a:d0:
41:61:05:a3:09:22:3c:b4:99:b5:22:f8:61:fd:f6:
b5:e5:d0:54:b3:52:e0:d4:1b:98:ab:71:18:4d:17:
f1:e1:0c:0e:93:e7:5c:38:a8:c1:0e:5f:7d:8f:cd:
22:ed:65:d3:a4:5c:a9:c1:25:3a:81:15:4c:0d:de:
9c:c0:18:8f:75:dd:50:63:94:15:4a:76:57:f7:79:
0b:4f:d2:d5:50:8c:f6:38:4f:ab:92:70:42:f8:23:
63:3d:c3:ed:cd:9d:4b:95:fa:ad:82:0f:30:e9:a3:
d3:de:77:11:ea:31:9b:aa:e7:cb:00:d4:dc:bb:33:
c5:c1:13:09:22:20:85:2f:6b:39:07:f7:28:a7:81:
04:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2F:C1:36:66:89:FE:E9:32:91:51:7B:80:53:CE:93:59:8F:4E:97
X509v3 Authority Key Identifier:
keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/1-C_BNmaJ_ukykVF7gFPOk1mPTpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.227.0/24
Signature Algorithm: sha256WithRSAEncryption
42:3c:89:cd:1b:c3:55:94:77:b2:7a:91:ba:e7:79:ed:70:5b:
51:d8:d2:b1:0f:1a:cd:ac:de:06:9b:d8:1e:e5:8c:a6:60:05:
4c:30:29:06:b7:38:7f:db:48:f8:11:f1:77:55:c1:ac:36:16:
71:fc:dc:ca:2c:93:e2:b7:c7:8a:22:f4:3c:63:33:d2:a1:fc:
9e:7d:82:a6:83:fa:07:c0:87:b4:87:4c:1a:f3:58:6d:32:7e:
e1:2a:11:dd:96:e5:9c:8d:fa:5b:37:b9:7d:0f:0a:b0:12:21:
da:bc:9f:42:e0:26:17:fd:a6:0d:c2:38:e6:7b:4d:31:75:68:
01:0b:1a:25:f5:65:42:4a:ba:b6:f0:62:78:69:5e:d3:01:2e:
d6:45:c6:62:c3:09:86:5a:52:17:8c:2c:b8:6a:80:3c:67:ea:
df:10:f5:1b:07:88:d9:88:af:d3:75:ab:ef:84:a5:a8:dc:8a:
26:96:45:f3:56:b5:e1:6f:16:54:70:38:84:c8:d2:1a:6f:31:
ca:25:6a:ea:dc:aa:2c:d2:1d:96:02:0d:80:ef:8e:d7:2c:09:
7e:cd:21:25:ba:04:cb:e2:aa:aa:ad:9b:f9:5f:f0:42:0e:e4:
2b:f3:0a:82:c6:82:e3:0a:da:20:cc:79:a9:70:81:3e:fd:05:
6b:9e:76:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:30 2024 by rpki-client on console-fra.rpki-client.org