Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/DRIp5ct2-Et0Z0vrupTLGoY7FFE.roa
File: DRIp5ct2-Et0Z0vrupTLGoY7FFE.roa (raw, json)
Hash identifier: AisH0QGGOo+f9ZM2KNtXCFNoTHWxQar/WmMUZ+Q3WCo=
Subject key identifier: 0D:12:29:E5:CB:76:F8:4B:74:67:4B:EB:BA:94:CB:1A:86:3B:14:51
Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial: 018CC2DB4248D7038959C07D353688921BA7
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/DRIp5ct2-Et0Z0vrupTLGoY7FFE.roa
Signing time: Mon 01 Jan 2024 02:29:58 +0000
ROA not before: Mon 01 Jan 2024 02:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 11325
IP address blocks: 139.28.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Feb 2024 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:42:48:d7:03:89:59:c0:7d:35:36:88:92:1b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Validity
Not Before: Jan 1 02:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d1229e5cb76f84b74674bebba94cb1a863b1451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e0:07:e2:96:48:20:1a:67:c2:27:30:32:6f:
e7:3b:f2:49:ca:3c:14:79:49:f3:8a:1b:15:f7:d2:
0c:01:1f:44:61:28:b9:f2:b0:a4:c8:18:f9:c0:4f:
69:39:fa:8e:3c:72:1d:61:0c:52:40:bb:21:96:95:
f1:5a:8a:7d:37:23:b9:21:70:11:26:bd:15:27:2c:
97:ab:c8:77:ef:fb:e4:1c:a8:b2:69:76:6f:56:8c:
02:d0:67:34:e7:50:dc:3e:45:67:65:e1:9f:d1:08:
5e:f7:c7:01:53:a2:99:58:dd:3f:2f:32:8a:9e:67:
53:78:9d:52:d1:8c:3e:45:16:51:bb:d9:a4:d3:81:
a3:43:af:63:47:02:b1:39:10:57:22:bd:fd:37:ed:
c5:53:fc:cc:0a:33:4b:ac:0b:1c:6b:49:62:08:02:
df:19:ff:2d:49:f7:1d:8b:ea:20:1d:f3:b1:52:31:
fc:41:1a:8b:15:5c:eb:19:c4:dd:5a:9c:64:c0:0b:
e7:0e:d5:24:51:c8:44:e0:a0:8e:64:bb:91:95:74:
37:54:52:af:ed:5a:8d:59:6d:4d:60:19:7e:10:45:
d8:7b:94:e2:cd:01:18:67:44:e3:09:f4:55:ed:9f:
26:1d:b8:74:92:d4:b9:04:1b:7c:8f:05:0f:ef:66:
9b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:12:29:E5:CB:76:F8:4B:74:67:4B:EB:BA:94:CB:1A:86:3B:14:51
X509v3 Authority Key Identifier:
keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/DRIp5ct2-Et0Z0vrupTLGoY7FFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.227.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:65:dc:d6:72:c9:53:54:d6:aa:bf:66:09:21:53:60:91:18:
7e:ea:a8:48:b3:60:81:e6:49:5a:34:84:bf:f6:e1:cf:8d:1f:
60:bd:23:9a:98:00:78:dd:94:1a:0f:c2:13:0b:71:a0:0e:40:
76:3d:14:3d:44:18:b8:dc:28:06:99:86:7a:ff:6a:ab:60:08:
be:f7:a5:44:35:d5:f4:de:71:fc:df:58:ed:93:cf:b2:82:63:
45:6b:f9:fa:5b:ea:f4:59:85:4c:d0:fe:20:af:3d:3b:f5:ec:
7d:be:ce:fd:94:29:0c:32:4c:51:d0:25:fd:a7:93:66:c7:3d:
cb:70:92:09:db:2e:14:20:ea:1f:47:f6:6d:94:79:07:4a:d8:
b7:d9:cd:ba:20:26:ec:70:a1:e6:2f:7a:65:f0:f3:36:0f:5c:
29:5f:f6:ff:2d:e6:05:20:54:48:08:b1:75:97:34:2d:5a:b7:
44:8a:6b:6e:2e:c1:9d:da:ef:1f:8b:58:f1:f7:9a:39:46:17:
36:9f:a6:91:9d:d1:48:c7:fb:78:2f:38:63:0a:c5:d6:7c:b4:
c2:fb:6f:88:e0:15:27:71:7e:c6:35:db:38:e2:43:83:a3:b2:
65:a5:30:a2:31:a0:47:bb:f7:2c:c8:de:69:5d:95:ba:ef:36:
02:38:4f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:39 2024 by rpki-client on console-ams.rpki-client.org