Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/BRSmspu6h61E8yIDfnD63o9bSCQ.roa
File: BRSmspu6h61E8yIDfnD63o9bSCQ.roa (raw, json)
Hash identifier: +f/08mo1Y/g35X+1aUxsRSR+49IiOViRnXO9lLhHDCU=
Subject key identifier: 05:14:A6:B2:9B:BA:87:AD:44:F3:22:03:7E:70:FA:DE:8F:5B:48:24
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01928FD852F78D07FA5568CB4A1072046270
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/BRSmspu6h61E8yIDfnD63o9bSCQ.roa
Signing time: Tue 15 Oct 2024 11:02:51 +0000
ROA not before: Tue 15 Oct 2024 11:02:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215350
IP address blocks: 109.122.247.0/24 maxlen: 24
109.122.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Oct 2024 14:47:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8f:d8:52:f7:8d:07:fa:55:68:cb:4a:10:72:04:62:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Oct 15 11:02:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0514a6b29bba87ad44f322037e70fade8f5b4824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6c:dd:ed:50:c2:72:1c:af:d6:c9:96:bc:3d:
c4:28:db:78:af:d7:c9:2b:da:b7:ee:3a:44:e0:78:
d1:1b:54:6e:31:96:b1:be:a1:83:54:47:87:bb:67:
19:d7:99:9a:fd:8c:cb:ec:60:f9:30:74:0e:20:49:
b3:80:97:87:03:21:40:66:1f:83:9c:7b:9e:74:4f:
39:3b:31:0a:0b:f0:50:e0:bd:b7:f4:17:4a:37:a4:
51:96:4b:73:96:f4:8c:13:1b:61:05:6b:6a:1e:91:
30:c3:9b:e9:2c:9f:1d:a3:a3:05:cf:11:e3:e9:79:
b2:56:4e:54:c1:c6:5f:3d:be:f7:52:a7:e1:9f:83:
fe:a8:67:89:cd:3b:71:26:2e:4a:f9:bd:aa:84:a5:
68:07:68:ad:3e:0e:36:0a:49:a0:cd:dc:5e:ff:14:
71:3c:d0:19:b1:8b:83:fd:8e:cc:4c:f9:a6:49:09:
8a:5a:13:ea:fd:6b:a9:86:47:06:34:ca:a6:e7:fd:
e8:8b:b3:0b:d7:32:06:7a:b4:5d:94:9b:a9:b4:03:
e6:fa:ad:db:b8:03:35:74:2f:65:b7:f5:e9:4f:91:
6a:3f:52:52:09:5d:10:43:e7:99:94:6f:62:8c:8b:
87:db:7a:9a:d8:08:66:c8:d7:57:58:51:6b:37:09:
5c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:14:A6:B2:9B:BA:87:AD:44:F3:22:03:7E:70:FA:DE:8F:5B:48:24
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/BRSmspu6h61E8yIDfnD63o9bSCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.247.0/24
109.122.251.0/24
Signature Algorithm: sha256WithRSAEncryption
29:24:1d:48:14:59:86:df:d6:6b:16:84:2a:d9:57:63:05:55:
4a:b6:63:9e:33:39:6b:b1:b8:85:86:e5:6b:38:c0:8e:5d:55:
da:b8:43:ff:25:16:9b:85:52:ad:71:9a:c7:22:29:bb:dc:e3:
ad:da:f3:41:78:1b:74:2a:3c:1b:e5:9e:de:de:7e:a9:e9:c9:
bd:03:47:76:a9:1b:07:26:5c:f8:6c:bd:7f:0f:f7:0b:6c:7b:
a0:c0:bd:25:21:70:7a:0a:13:83:58:51:f7:e9:f1:a9:cf:be:
d7:0c:a9:c3:cc:75:9a:6d:8f:f2:9f:60:bc:71:dd:e6:d6:5f:
47:e9:4f:de:e7:ec:d5:36:d5:e7:f1:a7:90:07:bd:1b:84:83:
44:6d:3e:ba:48:4b:a5:f1:bd:88:14:1e:b1:23:d1:08:04:04:
9a:ab:88:c0:0b:ab:5e:0f:de:3e:5d:44:e4:c2:37:fa:31:7b:
01:a3:ff:da:7a:f2:46:d7:25:db:bf:23:c2:47:4e:fc:40:19:
ca:f1:6c:e8:1b:5b:5a:a9:5c:4c:79:38:33:89:b4:1c:57:e7:
69:c8:5c:53:3c:f3:c4:cf:b5:43:db:e5:22:f2:b4:6d:d5:0b:
d7:c9:0f:3d:c2:d8:19:81:d1:f2:46:f1:74:f2:6a:b0:d6:76:
21:0f:fe:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 18:13:44 2024 by rpki-client on console-fra.rpki-client.org