Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/uUuQntBMBpvghNsGFDefcuC2_kA.roa
File: uUuQntBMBpvghNsGFDefcuC2_kA.roa (raw, json)
Hash identifier: v8bA5ldgtOrVPLiPDbL8thjI+SCJWk+HaVmoCpQrhNI=
Subject key identifier: B9:4B:90:9E:D0:4C:06:9B:E0:84:DB:06:14:37:9F:72:E0:B6:FE:40
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 018DE9C9BADA62B01BB245B19E7EB165302B
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/uUuQntBMBpvghNsGFDefcuC2_kA.roa
Signing time: Tue 27 Feb 2024 08:58:48 +0000
ROA not before: Tue 27 Feb 2024 08:58:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57844
IP address blocks: 139.28.168.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Apr 2024 06:41:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e9:c9:ba:da:62:b0:1b:b2:45:b1:9e:7e:b1:65:30:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Feb 27 08:58:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b94b909ed04c069be084db0614379f72e0b6fe40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6d:51:e6:d7:eb:ad:1b:84:a1:97:0b:6e:6e:
75:02:ca:11:79:43:ba:68:da:20:2b:85:4f:11:b0:
6e:54:6f:a7:96:99:3a:c6:5b:8b:16:07:d0:73:79:
b6:e8:ad:13:f2:20:b7:64:2c:2c:30:c8:79:1a:cd:
14:2e:4a:18:68:ea:ed:97:20:97:12:6f:92:12:ad:
94:73:57:d7:c0:43:5f:75:3a:cc:59:7b:cc:a2:07:
ec:54:85:aa:d8:2a:59:4e:30:b0:da:03:54:97:5b:
84:4f:a6:6b:0a:b7:77:71:c5:71:65:c6:fd:ab:89:
b7:e9:73:9c:a0:b5:38:6f:b9:cf:f4:7f:55:47:d5:
af:08:5f:2f:6e:8c:62:70:c4:27:cb:30:c5:a5:44:
d1:eb:5f:63:5d:8a:4a:8d:a9:20:71:94:10:20:60:
d5:54:71:1d:3b:d7:21:52:46:11:62:f8:1e:17:78:
a4:d5:50:de:cd:33:60:49:2d:9e:a9:6c:4d:72:e7:
7c:e7:c0:4b:46:67:e4:55:da:7e:94:34:eb:e4:5e:
12:6e:9a:7d:27:5e:ac:6c:1e:b5:31:fa:76:79:9d:
d8:af:5d:43:72:08:b3:70:5d:12:36:0e:59:0c:e7:
f5:f7:79:32:c0:a9:26:d7:ef:11:c1:e6:e8:a4:09:
1b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:4B:90:9E:D0:4C:06:9B:E0:84:DB:06:14:37:9F:72:E0:B6:FE:40
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/uUuQntBMBpvghNsGFDefcuC2_kA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.168.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:df:26:63:58:ad:bf:5a:67:51:5a:86:af:5a:9d:67:c7:b4:
1f:08:e6:24:d5:6e:82:5c:0e:85:29:66:3a:21:14:a6:5a:a0:
0e:54:5d:0f:37:09:0d:ff:c6:6a:af:95:d2:95:38:76:cf:4e:
ce:ba:24:bf:1a:2d:7d:85:39:17:f5:3f:48:6e:14:ba:8a:53:
3d:bc:49:a0:a4:1f:f8:d3:18:8c:12:c8:7c:bc:98:78:bc:47:
a4:e0:c2:4c:42:59:23:66:b4:e6:33:32:d5:d7:f2:1f:d0:53:
33:f9:1b:8d:60:73:15:9b:58:2e:d5:86:7f:74:08:f1:c5:34:
fb:b1:76:d3:90:77:05:01:a8:5b:27:04:f8:9a:4b:f6:dd:68:
71:ec:e3:99:05:2f:3b:68:f9:7f:57:86:7d:93:f8:0e:39:24:
c9:17:0e:65:a0:a3:80:03:26:e3:45:1a:82:01:c9:8f:18:f5:
db:6c:30:a9:41:77:bc:0e:24:67:4d:dd:51:ce:fe:58:90:02:
2f:3f:6a:c6:d3:37:cd:c5:9b:d7:9d:80:51:cb:f0:96:03:84:
39:f5:09:46:da:d4:b4:7e:7f:8f:75:a0:cb:a0:d3:64:74:c4:
78:e5:a4:3b:85:f8:35:ee:44:00:a3:17:98:d4:7c:f7:d8:96:
c2:9f:c7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-fra.rpki-client.org