Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/BrrnHGD2arWC9nhfusNsxhRThzA.roa
File: BrrnHGD2arWC9nhfusNsxhRThzA.roa (raw, json)
Hash identifier: Fviqtq3aBuRwAK7d+64pFQmI4zduRSeSKMZKhljPRo0=
Subject key identifier: 06:BA:E7:1C:60:F6:6A:B5:82:F6:78:5F:BA:C3:6C:C6:14:53:87:30
Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial: 01857295CAFCE3DE712C39C5E219310B3456
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/BrrnHGD2arWC9nhfusNsxhRThzA.roa
Signing time: Mon 02 Jan 2023 13:04:57 +0000
ROA not before: Mon 02 Jan 2023 13:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211695
IP address blocks: 81.199.112.0/24 maxlen: 24
81.199.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:95:ca:fc:e3:de:71:2c:39:c5:e2:19:31:0b:34:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Validity
Not Before: Jan 2 13:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06bae71c60f66ab582f6785fbac36cc614538730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:43:70:ab:cc:63:42:10:33:dd:b4:97:c8:ae:
00:12:7d:04:f2:8a:3e:32:a1:30:a9:9f:72:df:09:
57:08:4c:33:a7:e0:6f:d8:17:92:07:b6:87:ab:ce:
dd:6b:db:e8:3e:08:0b:6e:f3:ad:3a:2f:b8:dc:0b:
66:3d:2d:1e:f0:cb:91:9e:67:9b:76:37:34:03:24:
d2:98:19:25:f4:69:b5:09:e8:06:e7:f3:95:43:0d:
c1:1c:23:ca:6b:43:9f:fb:26:e0:1d:f0:6e:e5:04:
e8:ab:f7:85:96:04:e9:d9:13:c3:75:a1:c8:fd:a6:
4a:86:36:d9:4f:f1:3d:7d:00:26:9c:3d:dc:90:9f:
37:61:38:99:36:31:9c:69:2d:65:f7:c8:09:54:1e:
da:88:86:75:b4:92:4b:79:a1:18:f8:8a:6d:49:e5:
6b:c7:ac:86:62:6a:fc:f9:e2:ca:cc:32:f5:92:cc:
d7:9a:b9:e8:8a:ec:92:be:35:49:0c:45:8f:17:c3:
34:9c:e3:6f:e9:22:50:89:df:eb:44:a0:cb:67:f6:
40:a5:a3:9f:e4:18:ab:02:51:37:e6:34:fb:44:01:
c3:85:29:92:1b:bb:f5:49:93:2a:cf:bc:6d:6a:ae:
df:0e:4a:d7:2b:5a:5c:52:2d:97:0f:92:4f:98:93:
0a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BA:E7:1C:60:F6:6A:B5:82:F6:78:5F:BA:C3:6C:C6:14:53:87:30
X509v3 Authority Key Identifier:
keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/BrrnHGD2arWC9nhfusNsxhRThzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.112.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:f6:19:d2:3a:d8:5b:53:0b:8b:c0:b4:c7:65:78:e6:96:78:
88:5a:f6:9f:e3:a8:98:b8:37:5d:c6:5c:e1:98:71:f4:06:8f:
39:98:1f:19:d4:16:3a:f9:ee:74:2a:f1:05:75:6b:3d:41:de:
b1:6f:35:15:4c:2e:a8:b3:3f:d6:7e:5a:39:58:66:e5:61:93:
11:b5:0c:99:7e:53:f7:30:4a:36:41:83:20:bc:1b:86:f3:da:
ac:29:e1:56:50:40:41:23:b0:05:3b:55:04:f8:1a:c4:2e:89:
83:35:11:72:75:2b:af:6b:07:1d:a0:25:45:bf:79:3c:f2:ac:
cc:68:de:ba:d6:8e:53:91:f7:b9:35:cf:fc:65:a7:7d:22:bd:
96:1f:61:bc:41:4e:30:5c:d9:8a:6c:e5:11:82:e4:7c:86:ab:
5b:da:04:63:24:58:0c:e9:cc:b7:5a:ce:83:70:97:88:a2:56:
42:3a:0a:37:67:e1:bd:d3:d5:7a:aa:2a:58:d5:92:ee:79:9f:
a1:3a:f1:ee:6b:a9:87:e9:73:db:e7:97:fc:3d:67:b7:aa:26:
d4:5d:d8:53:e4:7f:0b:00:07:b7:31:25:2a:cc:fa:b9:e7:18:
e3:d2:53:a5:60:47:d9:b2:86:d8:ac:89:31:2e:44:a6:e9:04:
5d:e5:30:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:50 2024 by rpki-client on console-ams.rpki-client.org