Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/BrMKlfCAmc15xLRUxJm79dZDa1s.roa
File: BrMKlfCAmc15xLRUxJm79dZDa1s.roa (raw, json)
Hash identifier: MOcrr8Z76cFOlIBYGBMUN4qt9MgH1AI1Zou8xbAZWiU=
Subject key identifier: 06:B3:0A:95:F0:80:99:CD:79:C4:B4:54:C4:99:BB:F5:D6:43:6B:5B
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018CA166DCDB044E6C8B9BB6230A0A23A480
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/BrMKlfCAmc15xLRUxJm79dZDa1s.roa
Signing time: Mon 25 Dec 2023 14:35:22 +0000
ROA not before: Mon 25 Dec 2023 14:35:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202468
IP address blocks: 193.109.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a1:66:dc:db:04:4e:6c:8b:9b:b6:23:0a:0a:23:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Dec 25 14:35:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06b30a95f08099cd79c4b454c499bbf5d6436b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5b:c8:9f:c1:08:67:48:d6:9e:a1:13:b2:33:
c7:10:70:fc:f4:8e:cf:d7:48:cb:f5:6c:c7:eb:7f:
84:92:50:f8:4e:67:3b:37:6e:4d:a4:26:02:8c:44:
bc:5a:72:98:8e:60:b0:8d:64:79:40:f2:90:48:5d:
67:2c:67:4f:dd:a5:aa:39:1d:81:d1:2d:be:c8:13:
3a:95:ee:dd:91:7f:80:7b:56:11:c3:47:8e:7a:8c:
7c:f5:f5:da:e4:e8:c5:f0:10:fd:fd:63:ed:bc:28:
79:bf:29:a4:29:7d:36:0e:be:0e:ea:63:50:09:83:
3b:0f:18:f9:42:52:26:92:e4:68:34:46:02:3d:21:
e2:ec:e7:52:a8:f1:ca:4e:cd:d5:c8:21:e3:0e:51:
23:66:de:fd:8f:4e:41:46:3d:c2:b6:28:9f:ce:96:
d2:76:4b:76:07:74:5f:37:cb:81:ec:8c:86:a0:3e:
64:4c:56:00:d2:50:08:e6:01:dc:b2:a8:f6:a6:53:
8a:09:4b:9a:85:0a:38:4d:ec:bd:d0:01:c1:b7:64:
2e:88:4b:ae:a0:8f:d7:37:56:65:cf:09:75:43:70:
3b:01:06:2b:9e:54:03:3f:71:ae:3a:ec:49:7a:ff:
ae:57:c6:fc:09:31:68:9a:dd:35:4a:39:dd:fd:ab:
ca:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B3:0A:95:F0:80:99:CD:79:C4:B4:54:C4:99:BB:F5:D6:43:6B:5B
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/BrMKlfCAmc15xLRUxJm79dZDa1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.137.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:0b:16:bb:1d:97:4d:58:2d:5a:79:77:cb:11:be:5e:b1:e1:
89:96:97:5a:62:78:af:73:e4:1d:26:94:d9:a2:a8:d7:06:ad:
ab:90:a5:b1:4e:2d:92:f9:11:13:9f:d9:fe:88:fa:9e:ee:33:
5e:2e:a7:9f:ca:3f:20:12:a2:2b:c9:2f:cd:e9:20:5c:1a:29:
5f:af:6c:35:0f:b1:a7:81:3a:c5:0a:6a:41:9c:fd:38:c5:78:
7f:55:89:59:e5:83:9d:e8:6c:c2:9b:88:ac:18:eb:af:f2:b6:
eb:87:1c:06:99:a0:f7:94:9e:c8:0f:d7:72:94:1b:c6:c8:bd:
33:9d:21:7f:bf:29:38:74:d1:16:03:25:c2:7c:6a:c0:6b:f6:
41:0b:d2:75:19:64:cf:cc:09:59:73:58:63:9a:32:03:e4:41:
81:7f:1c:85:3f:f2:a7:e8:27:1e:28:2f:07:ed:f8:2a:e3:bf:
13:ef:20:0c:4c:87:ea:e1:3e:27:d5:e0:1b:b2:46:66:ea:c6:
1f:fc:fc:4d:29:99:6a:cd:c2:26:c4:96:66:fc:6e:5b:ff:a2:
95:8a:75:86:1d:27:cc:86:94:32:18:b2:b8:ce:fc:e5:7b:8e:
9a:12:ab:0f:d7:27:67:2a:b9:f5:33:46:62:c3:1a:58:ca:fd:
ba:e2:b2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org