Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/LBPuHTOgVmJiIAMvP8qnI9bcC-8.roa
File: LBPuHTOgVmJiIAMvP8qnI9bcC-8.roa (raw, json)
Hash identifier: 6MUu8U7r9do+OYc2/HqvGm/U4e3LeEcIe8aI0dL2XS0=
Subject key identifier: 2C:13:EE:1D:33:A0:56:62:62:20:03:2F:3F:CA:A7:23:D6:DC:0B:EF
Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial: 01856ED4A38C5412BF1B98CD0110BE4A5B14
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/LBPuHTOgVmJiIAMvP8qnI9bcC-8.roa
Signing time: Sun 01 Jan 2023 19:35:07 +0000
ROA not before: Sun 01 Jan 2023 19:35:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 11325
IP address blocks: 139.28.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:a3:8c:54:12:bf:1b:98:cd:01:10:be:4a:5b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Validity
Not Before: Jan 1 19:35:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c13ee1d33a056626220032f3fcaa723d6dc0bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bc:33:b2:69:7d:78:d8:88:d9:e2:01:4f:bb:
bb:2f:d4:4e:3e:c1:d4:27:26:0a:2d:eb:1b:27:69:
ce:ad:f4:02:90:58:b3:48:72:07:42:d7:10:44:02:
f5:c6:78:bf:31:c7:40:a3:b6:3d:cf:7f:35:79:99:
6b:d9:a8:1f:fc:07:e7:6c:64:9c:e2:79:10:25:19:
2f:2e:8e:96:e2:ce:bb:60:8c:ed:cb:ae:81:91:5b:
db:71:ce:b2:9b:81:1b:2b:9e:cf:7e:e8:cd:ca:fc:
1f:e0:48:22:3b:81:2c:8b:5e:fb:1d:27:09:c5:0d:
57:81:e7:e1:e5:42:d1:b4:15:ef:5c:65:a7:55:83:
2b:c4:a8:b2:01:4d:ad:26:f0:ac:d7:04:57:20:ab:
27:83:af:25:f7:c0:10:0c:43:b7:79:14:f3:24:a3:
09:3c:10:fe:54:35:07:5c:4a:44:94:7e:5b:02:c2:
3e:fe:76:f5:b9:6c:93:27:23:c7:28:c9:9e:78:37:
d7:3f:26:e6:1c:dc:cc:38:67:13:2e:a1:78:d2:64:
a6:5c:28:7f:70:9a:2f:78:67:66:04:90:ec:af:ab:
88:b0:15:1c:78:89:34:b1:c6:59:ac:d2:cd:16:95:
40:5b:5c:35:8d:1d:85:f7:63:4d:fe:cf:fc:6d:98:
b8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:13:EE:1D:33:A0:56:62:62:20:03:2F:3F:CA:A7:23:D6:DC:0B:EF
X509v3 Authority Key Identifier:
keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/LBPuHTOgVmJiIAMvP8qnI9bcC-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.227.0/24
Signature Algorithm: sha256WithRSAEncryption
40:a5:2a:bb:ea:76:3f:75:11:d9:96:ee:7b:07:bb:80:ff:d3:
2c:54:0b:eb:12:43:03:c9:7b:44:e9:f9:c7:58:ef:32:79:80:
2a:32:4b:1e:8d:6b:70:b9:2a:dd:fe:77:51:70:fd:15:23:df:
15:08:90:0e:93:9a:72:25:b9:fb:d1:c6:ee:e2:74:f3:24:2e:
de:4f:e0:29:52:40:f9:37:07:72:90:56:b4:82:f0:af:f6:b8:
de:29:55:5f:e8:36:ea:98:fb:d6:82:f9:61:96:5d:87:2b:09:
8c:4d:1a:95:ee:f4:2e:e1:83:15:96:f5:0a:48:81:d4:85:b7:
6c:0c:3e:ff:31:d1:3b:d5:30:11:b4:bb:69:01:73:a3:78:d2:
9f:cd:63:66:5c:66:ac:ba:33:8f:2b:12:87:17:23:a6:fa:b4:
2f:64:10:02:44:46:1a:83:22:03:5f:be:41:1f:66:20:e1:eb:
c4:96:a4:08:de:a1:a9:60:3e:a8:95:21:2b:9c:3d:6e:e7:46:
9d:0f:c0:b7:d7:a6:c4:08:22:a0:81:dd:57:7c:d6:df:78:77:
05:e5:43:f4:7c:2e:7f:7e:7d:55:33:d9:08:b4:7c:a9:83:d4:
99:16:5c:21:67:6b:60:56:52:a2:fe:29:28:d3:57:44:0d:09:
74:1c:99:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVu1KOMVBK/G5jNARC+SlsUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMTk1YmQ2ODJhOGU5YTEyNGQ1ODUzZGM1ZTkwOGFhZTcz
MzliYWUwHhcNMjMwMTAxMTkzNTA3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzEzZWUxZDMzYTA1NjYyNjIyMDAzMmYzZmNhYTcyM2Q2ZGMwYmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbwzsml9eNiI2eIBT7u7L9ROPsHU
JyYKLesbJ2nOrfQCkFizSHIHQtcQRAL1xni/McdAo7Y9z381eZlr2agf/AfnbGSc
4nkQJRkvLo6W4s67YIzty66BkVvbcc6ym4EbK57PfujNyvwf4EgiO4Esi177HScJ
xQ1Xgefh5ULRtBXvXGWnVYMrxKiyAU2tJvCs1wRXIKsng68l98AQDEO3eRTzJKMJ
PBD+VDUHXEpElH5bAsI+/nb1uWyTJyPHKMmeeDfXPybmHNzMOGcTLqF40mSmXCh/
cJoveGdmBJDsr6uIsBUceIk0scZZrNLNFpVAW1w1jR2F92NN/s/8bZi4VQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCwT7h0zoFZiYiADLz/KpyPW3AvvMB8GA1UdIwQY
MBaAFPwZW9aCqOmhJNWFPcXpCKrnM5uuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0JsYjFvS282YUVrMVlVOXhla0lxdWN6bTY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9kYjkxMmYtYmY2ZC00ZjI0LTk2YWUt
Y2M3YjI4OTkwYjgxLzEvTEJQdUhUT2dWbUppSUFNdlA4cW5JOWJjQy04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9kYjkxMmYtYmY2ZC00ZjI0LTk2YWUtY2M3YjI4OTkwYjgx
LzEvX0JsYjFvS282YUVrMVlVOXhla0lxdWN6bTY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAixzjMA0G
CSqGSIb3DQEBCwUAA4IBAQBApSq76nY/dRHZlu57B7uA/9MsVAvrEkMDyXtE6fnH
WO8yeYAqMksejWtwuSrd/ndRcP0VI98VCJAOk5pyJbn70cbu4nTzJC7eT+ApUkD5
NwdykFa0gvCv9rjeKVVf6DbqmPvWgvlhll2HKwmMTRqV7vQu4YMVlvUKSIHUhbds
DD7/MdE71TARtLtpAXOjeNKfzWNmXGasujOPKxKHFyOm+rQvZBACREYagyIDX75B
H2Yg4evElqQI3qGpYD6olSErnD1u50adD8C316bECCKggd1XfNbfeHcF5UP0fC5/
fn1VM9kItHypg9SZFlwhZ2tgVlKi/iko01dEDQl0HJlg
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:39 2024 by rpki-client on console-ams.rpki-client.org