Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/BRbnhuHn4NRyUcsRQJ9svf3LZCM.roa
File: BRbnhuHn4NRyUcsRQJ9svf3LZCM.roa (raw, json)
Hash identifier: MLDbKjxuf+PVVw0mIocqJf+wa7tptja6xAIxeqHzV9c=
Subject key identifier: 05:16:E7:86:E1:E7:E0:D4:72:51:CB:11:40:9F:6C:BD:FD:CB:64:23
Certificate issuer: /CN=f1333a6754c008edbbac5f32ebd019ea6473aea8
Certificate serial: 01856BD36108A0F0B15D17A5152DB7898D80
Authority key identifier: F1:33:3A:67:54:C0:08:ED:BB:AC:5F:32:EB:D0:19:EA:64:73:AE:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TM6Z1TACO27rF8y69AZ6mRzrqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/BRbnhuHn4NRyUcsRQJ9svf3LZCM.roa
Signing time: Sun 01 Jan 2023 05:34:53 +0000
ROA not before: Sun 01 Jan 2023 05:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42386
IP address blocks: 77.241.124.0/22 maxlen: 22
77.241.120.0/22 maxlen: 22
77.241.112.0/22 maxlen: 22
77.241.112.0/20 maxlen: 20
77.241.116.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d3:61:08:a0:f0:b1:5d:17:a5:15:2d:b7:89:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1333a6754c008edbbac5f32ebd019ea6473aea8
Validity
Not Before: Jan 1 05:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0516e786e1e7e0d47251cb11409f6cbdfdcb6423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d6:57:da:8e:11:ef:65:de:e2:f1:52:8c:0b:
fa:14:4b:53:1f:7e:2c:e0:b3:ac:31:8f:ff:f7:30:
cf:23:af:aa:96:f8:3b:36:80:b5:06:35:c9:81:9d:
7c:ce:55:1f:d3:ff:4e:e2:54:8d:c7:48:a5:e9:bb:
63:c4:64:4d:2c:c7:ef:1c:df:68:c7:e4:fa:22:95:
35:c9:e4:b3:96:47:28:94:48:4a:59:15:6f:8f:6e:
9c:61:54:ab:f7:ce:6c:67:bc:ec:2c:f0:d4:2d:ab:
a7:50:db:fe:1d:90:99:89:38:44:08:0e:ce:a1:72:
af:94:40:e2:c5:22:9c:76:ad:e6:b5:9c:0b:e7:9b:
cc:37:4b:c8:b1:1f:b4:21:fc:af:ff:7c:bc:fd:42:
b7:bf:a7:66:96:c0:38:d4:88:e8:1e:2e:13:f4:64:
08:c1:67:21:4f:f1:f8:91:69:ea:7f:c9:0c:b3:3e:
43:41:b1:5b:5e:ce:a2:f5:16:ef:12:16:4a:3a:2b:
9f:9c:f1:36:8f:21:4c:cf:df:ca:92:9e:c2:25:9d:
87:cf:ef:30:44:40:06:f6:2a:cc:49:dc:13:eb:81:
5e:23:ff:09:29:66:dc:b2:4b:b4:28:4b:f7:33:90:
85:b3:11:f4:1f:e7:dc:de:5c:0d:04:aa:ed:42:87:
4a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:16:E7:86:E1:E7:E0:D4:72:51:CB:11:40:9F:6C:BD:FD:CB:64:23
X509v3 Authority Key Identifier:
keyid:F1:33:3A:67:54:C0:08:ED:BB:AC:5F:32:EB:D0:19:EA:64:73:AE:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TM6Z1TACO27rF8y69AZ6mRzrqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/BRbnhuHn4NRyUcsRQJ9svf3LZCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.241.112.0/20
Signature Algorithm: sha256WithRSAEncryption
86:2e:83:da:55:96:01:eb:4e:fb:d1:dc:af:c8:8c:b3:2e:40:
c9:df:d6:80:85:a3:ef:56:0a:76:20:46:ef:11:f0:6a:2d:3a:
30:62:c7:2e:dc:71:99:18:ee:af:b2:5f:0d:a7:09:e7:74:9d:
de:2b:e5:c3:39:f5:52:1f:8e:e5:2f:80:93:de:a5:12:b8:11:
19:bd:ae:93:f4:01:d8:8a:96:f1:fd:29:6c:04:f4:91:61:80:
86:5e:4d:46:31:ec:1c:6a:82:5b:b2:a1:1e:e0:1e:fa:1d:7b:
03:e3:9c:73:f0:c6:d5:0b:d6:c8:32:0d:3d:ea:b0:54:7f:ed:
b2:06:7a:d9:d2:b5:b5:19:27:70:2f:78:e0:49:a5:c0:13:dc:
1c:ca:f0:74:eb:34:10:e6:2d:ef:7d:80:d7:e9:8a:36:dd:17:
3c:4d:81:e0:6d:91:b9:c7:29:d5:60:3e:ec:f6:8d:8d:a6:7b:
1c:87:20:d5:1a:55:4c:82:37:b9:2a:39:14:14:b7:95:85:dc:
51:bb:bb:ec:e0:74:0f:ac:52:67:6c:0a:8a:a3:29:c7:37:97:
8f:6f:df:2a:53:c3:a5:88:66:e9:97:9d:27:09:a3:f5:01:a4:
a0:e9:73:57:74:22:ff:5c:f6:c5:ae:57:20:7f:2b:02:32:e2:
13:bf:c5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:01 2024 by rpki-client on console-ams.rpki-client.org