Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/BryKhj9J8M3turyMty2kVpsZKYY.roa
File: BryKhj9J8M3turyMty2kVpsZKYY.roa (raw, json)
Hash identifier: h7K/XwkjF25c1yCQgoqKQ+l+tFTAWkAPmJzAowZcbd4=
Subject key identifier: 06:BC:8A:86:3F:49:F0:CD:ED:BA:BC:8C:B7:2D:A4:56:9B:19:29:86
Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Certificate serial: 018CC492270789539B6A9E9A60A4591672BD
Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/BryKhj9J8M3turyMty2kVpsZKYY.roa
Signing time: Mon 01 Jan 2024 10:29:21 +0000
ROA not before: Mon 01 Jan 2024 10:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47787
IP address blocks: 193.163.151.0/24 maxlen: 24
188.93.192.0/21 maxlen: 24
188.93.198.0/24 maxlen: 24
188.93.199.0/24 maxlen: 24
146.19.95.0/24 maxlen: 24
193.107.13.0/24 maxlen: 24
185.112.251.0/24 maxlen: 24
185.166.144.0/24 maxlen: 24
212.52.23.0/24 maxlen: 24
146.19.249.0/24 maxlen: 24
2a10:ee40::/29 maxlen: 29
2a0d:82c0::/29 maxlen: 48
2a11:c00::/29 maxlen: 48
2a0f:8900::/29 maxlen: 29
2a0d:82c7:9::/48 maxlen: 48
2a0f:d300::/29 maxlen: 48
2a0e:5f00::/29 maxlen: 48
2a0b:e740::/29 maxlen: 29
2a0f:7700::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 18 Apr 2024 10:58:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:27:07:89:53:9b:6a:9e:9a:60:a4:59:16:72:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Validity
Not Before: Jan 1 10:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06bc8a863f49f0cdedbabc8cb72da4569b192986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a3:53:d8:9c:c3:e0:3b:07:cc:98:83:f0:e3:
51:5a:63:b3:34:b3:12:6c:7e:e7:52:22:20:9c:fb:
9d:f6:7b:f0:12:f0:91:00:a7:a5:a7:9d:49:e5:12:
53:f5:cb:d7:4c:8b:1d:85:02:76:3a:07:8e:ab:e9:
70:f1:ee:7a:af:96:ab:69:92:71:4f:4f:42:9a:af:
c2:39:cb:0d:96:14:f3:dc:66:35:18:bb:43:9e:fd:
e6:46:b3:38:46:f1:0a:3e:c5:2d:56:79:a8:48:0a:
0f:e2:63:c9:0f:2c:1a:a4:4e:a5:e7:9b:a5:ed:de:
2c:dd:d0:bb:0c:e7:64:b7:dc:c2:03:51:94:f2:b2:
c2:8f:d5:9c:e1:9e:ca:c0:be:ab:41:6c:38:e8:03:
45:26:34:ca:24:bf:0f:a9:9c:1c:14:cb:97:db:8b:
73:dd:98:70:b4:04:eb:e9:99:2e:ac:6e:0b:ba:d6:
0c:9f:ed:51:6e:c2:60:88:5c:39:5a:89:c3:c5:5d:
90:22:38:bb:e9:68:60:b6:f8:1e:a4:31:24:49:af:
48:78:03:b0:1d:98:5c:69:db:44:b6:29:41:53:4a:
5c:70:4e:89:ef:84:3e:73:7d:38:39:5b:c4:89:d5:
3e:8b:fe:e0:e1:a4:b6:64:f3:30:86:1e:f8:09:f6:
6e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BC:8A:86:3F:49:F0:CD:ED:BA:BC:8C:B7:2D:A4:56:9B:19:29:86
X509v3 Authority Key Identifier:
keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/BryKhj9J8M3turyMty2kVpsZKYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.95.0/24
146.19.249.0/24
185.112.251.0/24
185.166.144.0/24
188.93.192.0/21
193.107.13.0/24
193.163.151.0/24
212.52.23.0/24
IPv6:
2a0b:e740::/29
2a0d:82c0::/29
2a0e:5f00::/29
2a0f:7700::/29
2a0f:8900::/29
2a0f:d300::/29
2a10:ee40::/29
2a11:c00::/29
Signature Algorithm: sha256WithRSAEncryption
a1:0b:7b:4e:c6:15:0b:4c:94:31:85:dd:0a:ff:23:37:22:91:
04:db:a6:3f:ca:30:ec:c1:ae:ce:98:a3:74:3c:20:68:36:06:
27:44:f5:a3:d4:c4:7d:d1:02:a9:2c:ae:88:c2:75:e8:c3:36:
3f:b7:61:f8:e0:9a:06:79:07:73:4a:05:77:ff:de:e2:95:d7:
9e:50:c7:fa:c7:7b:01:17:73:bc:a6:15:c4:a1:05:9d:eb:71:
8d:04:e1:2b:e9:d3:83:34:f6:4e:6e:f1:64:f4:c7:7b:67:7c:
67:48:a4:58:7d:8d:b5:7d:0a:a0:e3:af:13:a7:bb:ee:00:22:
18:29:4d:9c:fd:4d:6f:79:de:c0:ed:61:48:84:41:20:16:9a:
50:38:e2:ce:60:1a:be:c6:2d:32:6d:58:f8:c1:cc:01:66:1d:
26:9a:05:e9:b6:cf:04:ca:dc:cf:a9:82:5a:02:13:43:3b:dc:
30:0f:1c:c0:fd:11:5a:12:40:4e:ad:8e:ea:5d:3c:b5:4b:b5:
cb:55:9b:25:4f:54:5a:3f:97:c7:b2:c1:9c:15:85:92:a4:19:
bc:02:2e:8a:06:5e:4c:af:c1:73:15:c0:a1:15:2c:82:26:df:
65:a2:71:0f:80:2e:cb:5c:ab:e4:b1:ab:95:16:76:18:6d:6f:
9a:4d:05:e3
-----BEGIN CERTIFICATE-----
MIIFaDCCBFCgAwIBAgISAYzEkicHiVObap6aYKRZFnK9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3OWY1Y2E4YzMzZjEzNGMzYzE1N2Q0OGI5YzJhZTRlOTFi
NjMwYmYwHhcNMjQwMTAxMTAyOTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmJjOGE4NjNmNDlmMGNkZWRiYWJjOGNiNzJkYTQ1NjliMTkyOTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaNT2JzD4DsHzJiD8ONRWmOzNLMS
bH7nUiIgnPud9nvwEvCRAKelp51J5RJT9cvXTIsdhQJ2OgeOq+lw8e56r5araZJx
T09Cmq/COcsNlhTz3GY1GLtDnv3mRrM4RvEKPsUtVnmoSAoP4mPJDywapE6l55ul
7d4s3dC7DOdkt9zCA1GU8rLCj9Wc4Z7KwL6rQWw46ANFJjTKJL8PqZwcFMuX24tz
3ZhwtATr6ZkurG4LutYMn+1RbsJgiFw5WonDxV2QIji76WhgtvgepDEkSa9IeAOw
HZhcadtEtilBU0pccE6J74Q+c304OVvEidU+i/7g4aS2ZPMwhh74CfZuLwIDAQAB
o4ICdDCCAnAwHQYDVR0OBBYEFAa8ioY/SfDN7bq8jLctpFabGSmGMB8GA1UdIwQY
MBaAFJefXKjDPxNMPBV9SLnCrk6RtjC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgt
MTQ3MGFjMzY0ZGQyLzEvQnJ5S2hqOUo4TTN0dXJ5TXR5MmtWcHNaS1lZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgtMTQ3MGFjMzY0ZGQy
LzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGJBggrBgEFBQcBBwEB/wR6MHgwNgQCAAEwMAMEAJITXwME
AJIT+QMEALlw+wMEALmmkAMEA7xdwAMEAMFrDQMEAMGjlwMEANQ0FzA+BAIAAjA4
AwUDKgvnQAMFAyoNgsADBQMqDl8AAwUDKg93AAMFAyoPiQADBQMqD9MAAwUDKhDu
QAMFAyoRDAAwDQYJKoZIhvcNAQELBQADggEBAKELe07GFQtMlDGF3Qr/IzcikQTb
pj/KMOzBrs6Yo3Q8IGg2BidE9aPUxH3RAqksrojCdejDNj+3YfjgmgZ5B3NKBXf/
3uKV155Qx/rHewEXc7ymFcShBZ3rcY0E4Svp04M09k5u8WT0x3tnfGdIpFh9jbV9
CqDjrxOnu+4AIhgpTZz9TW953sDtYUiEQSAWmlA44s5gGr7GLTJtWPjBzAFmHSaa
Bem2zwTK3M+pgloCE0M73DAPHMD9EVoSQE6tjupdPLVLtctVmyVPVFo/l8eywZwV
hZKkGbwCLooGXkyvwXMVwKEVLIIm32WicQ+ALstcq+Sxq5UWdhhtb5pNBeM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:18 2024 by rpki-client on console-ams.rpki-client.org