Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/kQDlNWBf3EvITEaAMeGMpq-0pds.roa
File: kQDlNWBf3EvITEaAMeGMpq-0pds.roa (raw, json)
Hash identifier: TwV5U5FNypiKtn8vk95YFwJf+DnxYTx+BhQATlqDvkM=
Subject key identifier: 91:00:E5:35:60:5F:DC:4B:C8:4C:46:80:31:E1:8C:A6:AF:B4:A5:DB
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 018D886BFFFD269B19BB6D0B39EFB5E0211A
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/kQDlNWBf3EvITEaAMeGMpq-0pds.roa
Signing time: Thu 08 Feb 2024 11:13:15 +0000
ROA not before: Thu 08 Feb 2024 11:13:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57604
IP address blocks: 139.28.168.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 08 Feb 2024 14:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:88:6b:ff:fd:26:9b:19:bb:6d:0b:39:ef:b5:e0:21:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Feb 8 11:13:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9100e535605fdc4bc84c468031e18ca6afb4a5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:69:e7:29:9a:ba:3d:f5:c9:c1:27:d7:a2:f7:
5e:ed:db:b8:11:56:68:5b:4f:70:dc:db:ca:b1:18:
0e:2e:e9:f6:eb:6f:b8:5c:76:55:c9:0b:bf:b7:93:
2d:65:37:e8:79:3c:35:44:36:2d:93:13:fa:05:8a:
3f:c4:bc:5f:b0:14:4f:a9:be:a3:98:2d:72:00:39:
90:c8:37:3e:c6:09:a2:79:51:9d:8a:ec:62:d5:ff:
16:bf:10:81:70:62:97:de:17:91:ce:14:5e:78:29:
7b:f9:e6:ac:78:a7:b2:e6:c3:0a:49:c8:79:49:7b:
0c:c3:67:35:12:45:13:88:86:c0:58:6e:70:33:83:
d4:c6:0a:d5:8b:a2:6d:38:c0:ec:c1:f8:46:e5:f6:
1a:6f:70:d8:e4:94:ad:91:8a:b9:e7:fd:8e:50:d2:
bd:a2:9a:44:b4:b1:ac:c2:5c:e7:fd:66:6e:e1:28:
22:fa:04:c7:c4:6b:08:19:26:8b:8e:60:58:ba:40:
7b:fd:4a:da:ec:c2:f8:56:e8:ef:7d:df:ff:b7:45:
4b:49:49:77:88:5c:cf:1a:af:b4:5b:6b:a6:78:6f:
36:6c:d9:c6:23:d5:80:d2:00:8e:79:56:2b:68:7e:
5f:51:37:78:1d:86:d9:98:5f:0c:5d:3f:9e:62:aa:
14:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:00:E5:35:60:5F:DC:4B:C8:4C:46:80:31:E1:8C:A6:AF:B4:A5:DB
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/kQDlNWBf3EvITEaAMeGMpq-0pds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.168.0/22
Signature Algorithm: sha256WithRSAEncryption
30:77:40:8e:5d:0e:57:c9:9d:f9:14:9f:e9:b1:33:8f:93:c0:
7d:4f:04:e0:aa:5a:36:22:4c:09:b2:76:7f:f2:4b:85:55:5b:
6e:07:b9:0b:9c:7b:d0:42:39:e2:3a:c2:4a:b5:04:35:4e:25:
61:18:83:d0:db:f5:06:23:96:1b:b4:d3:94:5b:b9:73:c0:cc:
5c:b1:b1:8e:4f:b2:a1:a4:e1:95:17:ab:89:2b:83:ee:07:f4:
a0:40:e9:35:13:2e:f1:f4:e7:81:63:28:f6:05:92:a3:bf:03:
82:32:d3:59:0a:85:9b:26:be:9a:55:a8:3e:e8:a4:ec:b2:fc:
e5:6b:1a:b1:35:fa:d8:e6:51:b9:da:2e:ac:c5:95:76:0f:79:
6e:d0:87:95:ac:c0:be:b2:d3:bf:cb:9c:a7:0d:c6:d7:aa:a3:
0f:bf:dd:d1:9f:65:79:72:d4:f2:c5:11:96:49:8b:9e:57:2d:
8f:29:18:b4:0d:4b:7b:7c:3c:eb:26:6a:9c:aa:fb:9b:35:1b:
92:bf:74:2e:20:78:bc:89:4c:91:3b:a6:d8:2c:eb:d2:b3:cc:
2d:27:78:6d:f0:c1:c0:55:09:78:a5:9e:b1:55:1d:8f:b3:8f:
9e:1a:7f:cc:70:5f:e6:3b:bf:45:bd:3a:39:b3:93:42:6b:9d:
30:0b:92:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:41 2024 by rpki-client on console-ams.rpki-client.org