Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/BrkUnO7uLZAShmR2YpP7740Xoeo.roa
File: BrkUnO7uLZAShmR2YpP7740Xoeo.roa (raw, json)
Hash identifier: l1z20v4/Vf6wEKngXBKpPYVKc2atR0ccKqMHfh0vLq8=
Subject key identifier: 06:B9:14:9C:EE:EE:2D:90:12:86:64:76:62:93:FB:EF:8D:17:A1:EA
Certificate issuer: /CN=a088b0547f09fe9224050d70a523da5bedbe0738
Certificate serial: 0190AA1A635BCD70E6EF0BB90EB39B1A0838
Authority key identifier: A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/BrkUnO7uLZAShmR2YpP7740Xoeo.roa
Signing time: Sat 13 Jul 2024 03:19:34 +0000
ROA not before: Sat 13 Jul 2024 03:19:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215413
IP address blocks: 185.206.151.0/24 maxlen: 24
188.64.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Oct 2024 19:54:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:aa:1a:63:5b:cd:70:e6:ef:0b:b9:0e:b3:9b:1a:08:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a088b0547f09fe9224050d70a523da5bedbe0738
Validity
Not Before: Jul 13 03:19:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06b9149ceeee2d90128664766293fbef8d17a1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c4:fc:90:bc:5a:4d:ff:9e:52:9c:39:ca:03:
e9:67:e3:70:99:e4:f3:d2:7a:25:c4:57:bf:f8:ad:
ec:0b:6a:c8:1e:b2:42:b2:a5:e5:af:ca:9d:d3:1d:
e7:54:ad:14:f2:cc:e8:28:bb:0c:c2:09:ea:50:3c:
21:3a:7a:92:35:94:4c:3f:c1:8a:c9:9e:35:6c:ce:
e6:df:c0:d8:ca:2e:8a:b0:77:da:d9:80:7b:b8:89:
ec:61:f8:01:85:51:ac:6d:28:6c:55:3f:cb:0a:63:
76:0e:b4:71:bb:44:08:cc:a5:83:12:d1:dd:f5:32:
81:1e:cb:b1:1c:e3:3b:a1:2c:43:a2:a3:6d:9f:a4:
90:0a:4e:ed:24:a8:d1:db:f9:e8:b8:3f:ab:5f:98:
95:e2:af:f2:56:7d:e8:24:d0:0c:2c:70:50:97:03:
b0:0c:e6:67:39:ee:a1:e1:ec:f9:b5:9d:c8:31:d9:
85:1c:28:b3:87:11:cb:a4:2a:38:00:87:86:3b:e2:
56:3b:f2:90:f3:95:33:f6:31:86:12:78:56:3c:3b:
1e:0e:8c:85:61:a5:5c:88:77:b0:6d:20:d2:8c:86:
bd:07:2f:89:35:ac:b0:0f:21:88:32:c0:1e:b1:43:
1d:3d:2e:db:f6:e4:6a:ff:d4:ab:af:4f:04:c9:2e:
c8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B9:14:9C:EE:EE:2D:90:12:86:64:76:62:93:FB:EF:8D:17:A1:EA
X509v3 Authority Key Identifier:
keyid:A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/BrkUnO7uLZAShmR2YpP7740Xoeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.151.0/24
188.64.33.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:b6:aa:d5:11:15:3e:ab:7e:34:d9:2c:db:be:10:d1:2a:c9:
0a:8d:a7:4d:8c:4c:cf:0c:1e:f9:c9:a6:d9:83:8b:82:7d:96:
70:72:d0:d5:a9:bb:2d:6a:a2:99:94:b3:f1:ae:dc:d4:a6:1d:
df:82:d5:c2:c7:b6:ed:40:60:cc:81:e6:2a:90:21:2c:49:57:
51:ba:3b:70:3c:72:78:f7:f1:88:be:f0:41:aa:ac:06:c7:e0:
0c:90:ed:10:c0:94:4c:e8:c4:bb:98:4c:81:00:bd:62:7d:4c:
eb:c6:7f:3b:80:b3:3b:ee:ee:84:11:d1:05:24:63:16:6c:e7:
9f:2b:f9:dd:9b:09:9e:66:31:6f:fa:96:e9:9c:4b:63:36:d9:
40:b5:17:b5:53:aa:d7:df:c4:63:e9:6a:87:94:af:1b:57:ac:
d4:1e:16:ab:51:67:9f:31:fa:d8:9e:a5:f1:21:f5:29:6f:83:
ba:5e:70:35:99:6b:d5:5b:39:cf:96:2f:73:af:52:6e:a1:65:
b0:ba:e3:4b:a8:45:59:12:08:1d:66:39:07:51:94:48:cd:9a:
35:2a:54:b6:de:88:dc:2d:04:bb:47:20:b9:5d:9a:71:e7:54:
a8:66:0b:65:8a:a7:d2:31:aa:1c:17:8a:15:a5:d6:fd:65:e1:
48:28:95:24
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZCqGmNbzXDm7wu5DrObGgg4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwODhiMDU0N2YwOWZlOTIyNDA1MGQ3MGE1MjNkYTViZWRi
ZTA3MzgwHhcNMjQwNzEzMDMxOTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmI5MTQ5Y2VlZWUyZDkwMTI4NjY0NzY2MjkzZmJlZjhkMTdhMWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08T8kLxaTf+eUpw5ygPpZ+NwmeTz
0nolxFe/+K3sC2rIHrJCsqXlr8qd0x3nVK0U8szoKLsMwgnqUDwhOnqSNZRMP8GK
yZ41bM7m38DYyi6KsHfa2YB7uInsYfgBhVGsbShsVT/LCmN2DrRxu0QIzKWDEtHd
9TKBHsuxHOM7oSxDoqNtn6SQCk7tJKjR2/nouD+rX5iV4q/yVn3oJNAMLHBQlwOw
DOZnOe6h4ez5tZ3IMdmFHCizhxHLpCo4AIeGO+JWO/KQ85Uz9jGGEnhWPDseDoyF
YaVciHewbSDSjIa9By+JNaywDyGIMsAesUMdPS7b9uRq/9Srr08EyS7I3wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAa5FJzu7i2QEoZkdmKT+++NF6HqMB8GA1UdIwQY
MBaAFKCIsFR/Cf6SJAUNcKUj2lvtvgc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0lpd1ZIOEpfcElrQlExd3BTUGFXLTItQnpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9kOTA2MzUtYjI4Mi00ZTg2LTllNTMt
ZGY4MmZhODk3MzI2LzEvQnJrVW5PN3VMWkFTaG1SMllwUDc3NDBYb2VvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9kOTA2MzUtYjI4Mi00ZTg2LTllNTMtZGY4MmZhODk3MzI2
LzEvb0lpd1ZIOEpfcElrQlExd3BTUGFXLTItQnpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuc6XAwQA
vEAhMA0GCSqGSIb3DQEBCwUAA4IBAQArtqrVERU+q3402SzbvhDRKskKjadNjEzP
DB75yabZg4uCfZZwctDVqbstaqKZlLPxrtzUph3fgtXCx7btQGDMgeYqkCEsSVdR
ujtwPHJ49/GIvvBBqqwGx+AMkO0QwJRM6MS7mEyBAL1ifUzrxn87gLM77u6EEdEF
JGMWbOefK/ndmwmeZjFv+pbpnEtjNtlAtRe1U6rX38Rj6WqHlK8bV6zUHharUWef
MfrYnqXxIfUpb4O6XnA1mWvVWznPli9zr1JuoWWwuuNLqEVZEggdZjkHUZRIzZo1
KlS23ojcLQS7RyC5XZpx51SoZgtliqfSMaocF4oVpdb9ZeFIKJUk
-----END CERTIFICATE-----
Generated at Tue Oct 29 22:37:36 2024 by rpki-client on console-ams.rpki-client.org