Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/Hm8LX4eQwXQ0dzu5KwBnvOvq82g.roa
File: Hm8LX4eQwXQ0dzu5KwBnvOvq82g.roa (raw, json)
Hash identifier: X4DJU/QOlYZ4iIaRrUE+Zn1W/0XK8yZYmESRt8AgUd8=
Subject key identifier: 1E:6F:0B:5F:87:90:C1:74:34:77:3B:B9:2B:00:67:BC:EB:EA:F3:68
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 018DD2168987B042157EE78669FD5A1DFBFC
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/Hm8LX4eQwXQ0dzu5KwBnvOvq82g.roa
Signing time: Thu 22 Feb 2024 18:31:48 +0000
ROA not before: Thu 22 Feb 2024 18:31:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57604
IP address blocks: 139.28.168.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 27 Feb 2024 08:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d2:16:89:87:b0:42:15:7e:e7:86:69:fd:5a:1d:fb:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Feb 22 18:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e6f0b5f8790c17434773bb92b0067bcebeaf368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b4:7d:1c:fd:bf:77:ee:e4:e5:a5:13:71:2a:
8c:79:78:59:24:53:66:4a:97:79:7c:31:5c:3e:0c:
70:64:f1:64:aa:f2:de:cf:77:25:7b:36:5d:89:90:
ca:d4:c1:17:ab:d7:26:50:c8:fd:be:9b:fe:7f:eb:
a6:73:53:8a:9f:22:36:47:ca:b9:24:6f:2d:d4:d9:
2c:82:4d:d7:f3:6b:89:dc:0f:7d:70:3f:ec:a9:91:
61:94:7d:4e:23:9b:05:3e:12:c0:c7:69:40:3f:bf:
5b:d9:de:ea:ed:b9:b0:69:15:4b:ea:e3:b3:30:fa:
5b:18:4f:e3:04:d2:6b:23:86:f2:2a:fc:2d:b3:10:
6c:1e:5c:f1:db:85:86:fa:df:8a:db:76:8d:12:83:
4d:96:c3:e5:94:1a:50:aa:65:5b:85:33:52:fe:13:
fc:f2:c4:79:47:d7:b6:7c:c5:29:49:62:9e:6e:a9:
24:2c:39:93:6b:77:49:52:97:94:8f:9c:50:86:52:
6d:83:0a:58:f8:4d:dd:bd:27:db:7c:43:4a:43:ba:
42:4b:d0:68:e5:ab:6e:d6:f6:fe:18:c9:0b:49:fb:
e1:54:81:79:d0:7e:52:6e:ff:bd:b4:2d:14:b2:e1:
be:40:06:da:d3:53:d0:e3:2e:9a:23:a4:bf:26:07:
95:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6F:0B:5F:87:90:C1:74:34:77:3B:B9:2B:00:67:BC:EB:EA:F3:68
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/Hm8LX4eQwXQ0dzu5KwBnvOvq82g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.168.0/22
Signature Algorithm: sha256WithRSAEncryption
80:85:0f:22:e5:48:97:54:b3:31:fd:f4:ad:89:93:be:0f:f5:
be:35:8c:56:59:dd:65:7b:8e:b4:25:1c:a7:9d:50:72:f7:79:
b0:a0:bb:30:39:b2:3b:a5:01:6b:54:51:89:1f:de:65:c3:7e:
a2:6c:f7:7f:66:1f:2a:b4:de:25:55:6f:39:53:3f:95:7f:ca:
20:ca:cb:1f:9c:de:e2:d6:0c:67:9c:74:17:17:7d:0f:4f:ef:
c9:ed:39:86:47:10:35:68:85:cf:85:22:bb:7c:9c:cf:68:0b:
ef:cf:30:9a:60:6f:6a:f9:53:1e:2f:5b:ed:40:82:a6:f3:60:
67:e0:ac:87:f4:5d:4d:72:4b:1f:00:71:6f:b0:a1:7c:cd:be:
66:c2:12:4c:dc:82:63:cd:dd:a4:8e:ff:9d:9e:2d:23:7c:cf:
35:81:b2:5b:52:a8:74:02:bd:19:fd:55:df:cd:7b:5b:35:c6:
e5:fd:bd:e0:b0:c5:52:fe:6f:c6:b0:fc:14:2a:f8:67:d9:2e:
47:8c:1b:47:a6:32:89:b6:0c:3f:cb:e6:80:94:55:76:56:4d:
45:a6:ce:8a:28:e0:43:55:8e:08:74:1d:a7:48:8a:db:a0:27:
b6:ad:c4:13:33:b2:c4:ee:f2:71:91:ca:6f:dd:4b:af:93:98:
68:10:40:0f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY3SFomHsEIVfueGaf1aHfv8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYTI1YWFmZTNhOTg3MGU5NTI0YWZhMDI2NTk4N2VkNWE1
YTRkYTMwHhcNMjQwMjIyMTgzMTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTZmMGI1Zjg3OTBjMTc0MzQ3NzNiYjkyYjAwNjdiY2ViZWFmMzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbR9HP2/d+7k5aUTcSqMeXhZJFNm
Spd5fDFcPgxwZPFkqvLez3clezZdiZDK1MEXq9cmUMj9vpv+f+umc1OKnyI2R8q5
JG8t1Nksgk3X82uJ3A99cD/sqZFhlH1OI5sFPhLAx2lAP79b2d7q7bmwaRVL6uOz
MPpbGE/jBNJrI4byKvwtsxBsHlzx24WG+t+K23aNEoNNlsPllBpQqmVbhTNS/hP8
8sR5R9e2fMUpSWKebqkkLDmTa3dJUpeUj5xQhlJtgwpY+E3dvSfbfENKQ7pCS9Bo
5atu1vb+GMkLSfvhVIF50H5Sbv+9tC0UsuG+QAba01PQ4y6aI6S/JgeV6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB5vC1+HkMF0NHc7uSsAZ7zr6vNoMB8GA1UdIwQY
MBaAFK2iWq/jqYcOlSSvoCZZh+1aWk2jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84MTBkMjQtYWNiZS00Y2IyLTlhYzUt
OWQ1ODc1ZDg2MzczLzEvSG04TFg0ZVF3WFEwZHp1NUt3Qm52T3ZxODJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS84MTBkMjQtYWNiZS00Y2IyLTlhYzUtOWQ1ODc1ZDg2Mzcz
LzEvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCixyoMA0G
CSqGSIb3DQEBCwUAA4IBAQCAhQ8i5UiXVLMx/fStiZO+D/W+NYxWWd1le460JRyn
nVBy93mwoLswObI7pQFrVFGJH95lw36ibPd/Zh8qtN4lVW85Uz+Vf8ogyssfnN7i
1gxnnHQXF30PT+/J7TmGRxA1aIXPhSK7fJzPaAvvzzCaYG9q+VMeL1vtQIKm82Bn
4KyH9F1NcksfAHFvsKF8zb5mwhJM3IJjzd2kjv+dni0jfM81gbJbUqh0Ar0Z/VXf
zXtbNcbl/b3gsMVS/m/GsPwUKvhn2S5HjBtHpjKJtgw/y+aAlFV2Vk1Fps6KKOBD
VY4IdB2nSIrboCe2rcQTM7LE7vJxkcpv3Uuvk5hoEEAP
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-fra.rpki-client.org