Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/brcxMXyhNe8FTvHe6baLNYZi_DM.roa
File: brcxMXyhNe8FTvHe6baLNYZi_DM.roa (raw, json)
Hash identifier: 5oZzLfXugj2+5EG/89w+wa1vWWN4hogCMWxd9uCh2ic=
Subject key identifier: 6E:B7:31:31:7C:A1:35:EF:05:4E:F1:DE:E9:B6:8B:35:86:62:FC:33
Certificate issuer: /CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Certificate serial: 01856E1457500103781637DC7EAEEFC8B864
Authority key identifier: D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/brcxMXyhNe8FTvHe6baLNYZi_DM.roa
Signing time: Sun 01 Jan 2023 16:05:04 +0000
ROA not before: Sun 01 Jan 2023 16:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 45.81.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:57:50:01:03:78:16:37:dc:7e:ae:ef:c8:b8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Validity
Not Before: Jan 1 16:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6eb731317ca135ef054ef1dee9b68b358662fc33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8e:ba:e0:35:2c:83:05:68:96:a6:5d:07:0b:
78:9b:43:d6:a3:76:fb:47:c2:e3:44:55:88:44:15:
c1:d4:27:a9:70:24:6d:f8:85:7f:a3:7b:6e:06:fa:
c6:fa:db:ac:23:0d:58:ad:ce:95:56:5a:7d:85:86:
b2:fe:60:db:e7:ad:ab:54:47:4e:9e:79:8c:0f:46:
7a:26:0f:22:68:ae:3e:59:ba:ba:01:7c:ee:3a:ba:
ce:59:e6:9c:69:07:de:29:58:ea:9a:f2:ed:a1:11:
5f:dc:6b:2b:b7:fb:fd:c3:63:f8:90:7d:ab:6c:3b:
2f:06:e5:36:08:8b:06:66:81:65:07:7f:2f:f6:2b:
f7:ab:68:50:ea:c0:0b:8a:d7:fc:26:c0:34:17:03:
70:21:11:2b:c8:27:e3:59:76:93:d5:50:6e:1e:05:
88:69:81:8b:7c:a2:3d:7c:67:db:98:4f:32:56:0e:
f3:4d:29:06:e3:7a:ab:94:c3:81:4f:33:f7:93:d8:
0f:32:7d:af:fb:4b:7b:b9:db:47:4c:3f:07:b8:a2:
f0:09:dc:b1:b5:0f:e7:66:13:46:ae:b1:2f:97:fb:
80:db:97:b2:22:b6:42:37:b6:69:c1:1a:c2:b9:33:
1c:ad:e4:ce:94:3b:de:d6:58:56:87:15:1b:27:49:
e7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B7:31:31:7C:A1:35:EF:05:4E:F1:DE:E9:B6:8B:35:86:62:FC:33
X509v3 Authority Key Identifier:
keyid:D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/brcxMXyhNe8FTvHe6baLNYZi_DM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.255.0/24
Signature Algorithm: sha256WithRSAEncryption
47:64:04:3e:fc:a7:9a:24:ae:97:30:51:50:4d:fe:cf:8e:02:
94:b7:09:55:36:36:25:45:00:c9:80:85:66:ee:90:93:46:a8:
db:49:44:38:64:26:1d:95:9f:0e:9a:5d:64:c0:36:d0:1e:ba:
46:35:48:ad:bc:4c:29:5e:24:30:dd:e6:0b:cc:bd:4c:cf:4d:
b6:3d:b3:8d:52:ad:9d:c6:8a:72:c8:b0:a0:12:c2:a2:ae:f8:
10:82:48:45:a6:3d:a8:c0:86:08:0a:77:3e:77:60:42:ea:39:
c7:d7:47:41:b1:21:2b:1d:3d:a0:ad:84:cc:cb:ea:c4:27:15:
9e:76:91:4f:01:d0:6d:45:e2:b1:88:55:79:df:81:61:0b:07:
4d:33:1c:64:03:43:31:b8:2d:9e:c1:d4:59:c0:42:a7:e5:6c:
ef:a0:d0:80:dd:e7:5c:6e:6f:1d:e4:7c:6d:a1:d4:1c:01:83:
73:cc:9e:09:1a:cc:cc:f4:1c:6c:36:79:6e:a6:06:3a:16:39:
14:7e:ed:83:ea:be:63:3a:56:c4:c6:51:3b:a7:24:bd:23:b6:
9a:ed:6e:69:1d:ff:f1:7a:00:87:20:6f:0d:16:ee:d0:7d:a2:
b5:24:7d:24:66:12:74:1a:a4:56:8b:d7:6e:f4:49:d0:59:f0:
9b:99:72:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:28 2024 by rpki-client on console-ams.rpki-client.org