Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/braCksvYcFzFfcCk2rJtHRwTHDU.roa
File: braCksvYcFzFfcCk2rJtHRwTHDU.roa (raw, json)
Hash identifier: qMcuQeIKAa/PTlXDMNFx52JT4xBKLx4NuywQkwzauRc=
Subject key identifier: 6E:B6:82:92:CB:D8:70:5C:C5:7D:C0:A4:DA:B2:6D:1D:1C:13:1C:35
Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a
Certificate serial: 0185E27D3ED4FB5E7E80A2BF98CCE2174341
Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/braCksvYcFzFfcCk2rJtHRwTHDU.roa
Signing time: Tue 24 Jan 2023 06:35:36 +0000
ROA not before: Tue 24 Jan 2023 06:35:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209372
IP address blocks: 85.28.57.0/24 maxlen: 24
85.28.58.0/24 maxlen: 24
85.28.56.0/24 maxlen: 24
85.28.59.0/24 maxlen: 24
85.28.60.0/22 maxlen: 22
109.238.205.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e2:7d:3e:d4:fb:5e:7e:80:a2:bf:98:cc:e2:17:43:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a
Validity
Not Before: Jan 24 06:35:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6eb68292cbd8705cc57dc0a4dab26d1d1c131c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:54:b4:93:1e:e2:ca:f3:3b:0e:03:64:92:e1:
37:7b:f5:3b:dd:89:cf:b6:04:8f:d2:45:87:00:d7:
a9:21:0c:ab:5d:36:c4:4f:a2:58:2b:ff:92:3d:18:
38:20:d6:49:2a:f5:6a:e5:76:bf:c2:ee:bb:60:c2:
49:d7:25:ba:18:2a:86:c0:27:4a:8e:0b:14:5e:c9:
60:af:da:f7:05:73:97:65:d1:0a:b6:d6:25:8e:14:
11:52:d1:48:4d:a4:8b:ac:5e:48:c6:70:b3:1a:bb:
e0:c6:0f:09:b6:b1:bf:fc:83:74:c8:e9:0f:67:d4:
a9:b3:3f:c4:d6:e1:8e:0e:9b:9b:fb:c1:e0:42:1c:
1e:57:e9:6b:8e:ad:24:c3:48:19:91:01:06:1d:1e:
75:4a:c1:a3:c2:16:2c:0e:dc:66:3c:36:83:c2:c9:
9f:f5:f4:a7:96:e1:f3:9d:cb:d6:a5:4c:5c:62:56:
11:ee:24:07:1e:65:03:73:3c:b8:8f:23:3c:32:1a:
ad:1d:2b:20:b9:b9:7e:81:ff:33:c7:0c:86:aa:f9:
58:24:26:f9:45:3e:90:e7:88:e0:34:34:03:0c:4c:
54:13:18:fc:af:93:b1:58:d4:10:0d:ca:f1:6b:93:
56:d5:5a:30:7f:8f:2c:f8:cb:b5:c6:9b:e2:a4:5c:
10:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B6:82:92:CB:D8:70:5C:C5:7D:C0:A4:DA:B2:6D:1D:1C:13:1C:35
X509v3 Authority Key Identifier:
keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/braCksvYcFzFfcCk2rJtHRwTHDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.28.56.0/21
109.238.205.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:51:ea:9d:a6:07:5c:b2:70:51:0e:1e:30:2c:2a:05:bd:c0:
f6:24:9d:24:fc:29:b1:6a:68:c4:25:c9:08:5e:91:15:42:c0:
b5:92:23:29:e8:a8:88:06:b2:b2:96:85:52:92:2b:5e:19:46:
42:73:52:dd:1a:92:7e:a9:0f:aa:66:17:2b:ac:db:da:13:19:
4f:27:2f:0e:1b:52:31:d4:13:ad:8d:c8:7a:a5:33:d4:cb:cf:
30:bc:c6:77:d9:e8:c5:68:1b:25:20:8e:a5:6f:4e:17:04:37:
b6:b6:ea:81:2c:9a:ec:69:5a:53:77:45:4d:ad:3b:a1:17:bd:
fa:b5:f7:79:74:8a:29:5d:83:8f:c8:d1:74:99:04:54:41:2a:
59:41:67:4e:4b:71:b1:f1:31:af:44:8d:e3:9a:f7:e5:f9:f1:
37:c3:8e:cc:4d:90:d9:72:ee:73:ea:24:a6:f8:2c:66:6d:a2:
0a:eb:0e:6e:80:75:38:ef:d6:84:f4:d7:13:1f:71:08:1c:00:
50:0d:59:b5:f5:84:ad:49:4e:f6:cc:62:36:b2:2b:04:41:55:
54:c5:08:1c:fa:13:c7:2e:bd:21:5b:b2:93:74:a5:f2:7f:dd:
66:08:2f:1e:d8:d4:d5:2c:36:f8:c3:72:c7:6a:b1:53:64:2c:
9c:e3:63:22
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYXifT7U+15+gKK/mMziF0NBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZjM0NGE2M2RjYjcwZTg5MDU3ZGViOGUyNzYxZGM0NTE2
NTg4MWEwHhcNMjMwMTI0MDYzNTM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWI2ODI5MmNiZDg3MDVjYzU3ZGMwYTRkYWIyNmQxZDFjMTMxYzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFS0kx7iyvM7DgNkkuE3e/U73YnP
tgSP0kWHANepIQyrXTbET6JYK/+SPRg4INZJKvVq5Xa/wu67YMJJ1yW6GCqGwCdK
jgsUXslgr9r3BXOXZdEKttYljhQRUtFITaSLrF5IxnCzGrvgxg8JtrG//IN0yOkP
Z9Spsz/E1uGODpub+8HgQhweV+lrjq0kw0gZkQEGHR51SsGjwhYsDtxmPDaDwsmf
9fSnluHzncvWpUxcYlYR7iQHHmUDczy4jyM8MhqtHSsgubl+gf8zxwyGqvlYJCb5
RT6Q54jgNDQDDExUExj8r5OxWNQQDcrxa5NW1Vowf48s+Mu1xpvipFwQJQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFG62gpLL2HBcxX3ApNqybR0cExw1MB8GA1UdIwQY
MBaAFCLzRKY9y3DokFfeuOJ2HcRRZYgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5Yzct
ZmViYjY0YjVlMTY0LzEvYnJhQ2tzdlljRnpGZmNDazJySnRIUndUSERVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5YzctZmViYjY0YjVlMTY0
LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDVRw4AwQA
be7NMA0GCSqGSIb3DQEBCwUAA4IBAQDHUeqdpgdcsnBRDh4wLCoFvcD2JJ0k/Cmx
amjEJckIXpEVQsC1kiMp6KiIBrKyloVSkiteGUZCc1LdGpJ+qQ+qZhcrrNvaExlP
Jy8OG1Ix1BOtjch6pTPUy88wvMZ32ejFaBslII6lb04XBDe2tuqBLJrsaVpTd0VN
rTuhF736tfd5dIopXYOPyNF0mQRUQSpZQWdOS3Gx8TGvRI3jmvfl+fE3w47MTZDZ
cu5z6iSm+CxmbaIK6w5ugHU479aE9NcTH3EIHABQDVm19YStSU72zGI2sisEQVVU
xQgc+hPHLr0hW7KTdKXyf91mCC8e2NTVLDb4w3LHarFTZCyc42Mi
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:32 2023 by rpki-client on console-ams.rpki-client.org