Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/obrrozFanuF1R9pP73uZqkm2Ang.roa
File: obrrozFanuF1R9pP73uZqkm2Ang.roa (raw, json)
Hash identifier: uBU07vz7ltUpAe0+rAiIJrTRuQx7cu4uBNsukG8lS10=
Subject key identifier: A1:BA:EB:A3:31:5A:9E:E1:75:47:DA:4F:EF:7B:99:AA:49:B6:02:78
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 018D65E756A5A84B87E4160A6A71EAE0A407
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/obrrozFanuF1R9pP73uZqkm2Ang.roa
Signing time: Thu 01 Feb 2024 18:21:16 +0000
ROA not before: Thu 01 Feb 2024 18:21:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57604
IP address blocks: 139.28.168.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 07:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:65:e7:56:a5:a8:4b:87:e4:16:0a:6a:71:ea:e0:a4:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Feb 1 18:21:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1baeba3315a9ee17547da4fef7b99aa49b60278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:34:5d:ce:c0:08:7e:ed:b8:56:42:fb:e1:47:
f6:04:17:37:36:c8:ed:87:b3:7b:a3:b1:81:6f:a2:
5b:0c:b1:03:ea:1b:a7:08:45:ff:01:7a:7f:84:26:
b1:d9:b9:da:07:c4:83:2b:37:d5:60:28:af:c8:a1:
1d:ee:dd:1f:58:18:b9:5e:50:8b:fd:13:42:01:3c:
c1:3c:87:61:9f:5b:47:f8:b6:b1:ef:f2:29:e8:09:
eb:88:6e:f6:da:88:70:25:43:92:90:4c:88:8a:75:
d7:6e:0e:91:00:17:71:89:d8:ab:ed:66:c5:58:f8:
99:6d:58:3f:ed:5f:a8:8d:34:c8:13:5e:1f:38:c2:
bb:a8:8d:c7:91:a2:ec:6d:b0:53:ce:dd:e2:e9:63:
f7:db:7b:b8:63:b2:af:6d:cd:75:c6:40:b3:de:13:
e1:bd:46:78:5a:61:99:05:5b:1d:29:5c:89:2e:7e:
82:10:72:fc:7e:08:87:99:aa:e8:d1:6c:66:1e:ac:
72:a0:ee:6b:80:c2:1d:da:d1:e4:64:d7:98:6c:e7:
4a:3e:cd:6c:57:fb:01:8d:6b:14:6f:7d:da:83:0b:
be:e5:9a:46:e5:8b:22:d8:fa:11:f3:7b:fa:82:bc:
1f:5f:4f:3b:22:ce:54:49:eb:11:be:f6:cf:5e:65:
6f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BA:EB:A3:31:5A:9E:E1:75:47:DA:4F:EF:7B:99:AA:49:B6:02:78
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/obrrozFanuF1R9pP73uZqkm2Ang.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.168.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:3c:04:08:d8:2c:31:b4:2a:1c:a1:63:e2:9e:b7:e6:04:34:
09:f7:2c:54:68:60:55:d2:5a:32:9e:cd:1e:56:3e:4f:0a:74:
09:9f:70:5d:de:9f:8d:7a:28:a0:c1:f4:45:ee:b3:2d:7a:7a:
a5:e4:fe:a2:33:88:ec:30:0f:7c:cd:0d:de:e4:4a:c1:ac:9a:
2d:31:f7:a7:15:56:a4:fd:4b:f7:c5:58:26:77:0c:42:e9:0c:
2e:b0:14:d8:b0:70:0a:c5:e6:14:28:93:1a:fd:96:78:a4:4f:
cf:63:36:97:ba:89:db:fc:80:42:86:f5:0f:f8:5f:ad:28:4f:
49:26:a7:fc:4e:83:47:2f:fb:38:cd:bd:0d:c6:4e:be:d7:19:
5b:91:18:56:9f:7f:04:ab:d2:be:e6:f8:36:6c:48:c6:4a:0e:
0c:ff:e8:9b:f7:72:e4:97:27:88:1b:9a:bc:08:22:e6:e6:c5:
ed:db:b9:f8:47:a8:f4:94:77:00:10:d5:d8:ef:2e:66:29:e2:
d4:58:7b:50:b2:fe:ab:04:a7:63:14:17:ba:9d:a1:40:b8:94:
ef:63:dc:ab:88:f5:17:49:ef:99:53:c4:5a:31:44:b2:b2:59:
8d:a4:d7:ff:46:da:d4:dc:41:49:58:92:28:2b:5d:92:a8:a2:
62:89:33:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-fra.rpki-client.org