Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/BRL0kNYeQldTyd0Nb7FXTyxEMk4.roa
File: BRL0kNYeQldTyd0Nb7FXTyxEMk4.roa (raw, json)
Hash identifier: 5gpi2xCaNBoMkD6wEq5geA5hQrj5i2r4dw3GxOxtaCU=
Subject key identifier: 05:12:F4:90:D6:1E:42:57:53:C9:DD:0D:6F:B1:57:4F:2C:44:32:4E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018F2ECD78FF9F1AD9322B4F20875DFE2AF5
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/BRL0kNYeQldTyd0Nb7FXTyxEMk4.roa
Signing time: Tue 30 Apr 2024 11:39:28 +0000
ROA not before: Tue 30 Apr 2024 11:39:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 185.194.177.0/24 maxlen: 24
185.209.38.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
185.246.112.0/24 maxlen: 24
193.58.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Aug 2024 11:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2e:cd:78:ff:9f:1a:d9:32:2b:4f:20:87:5d:fe:2a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 30 11:39:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0512f490d61e425753c9dd0d6fb1574f2c44324e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:af:6c:82:4a:93:6e:6c:93:b9:35:6a:29:f8:
aa:42:1c:ba:80:97:a6:4c:dd:5b:c9:af:d1:4a:83:
eb:de:c1:79:8e:d0:b3:fd:57:2d:d6:5d:23:29:e9:
b8:fa:1f:3f:29:b4:c9:60:c3:9c:87:3c:a0:0d:6b:
d9:9a:b9:ee:ab:e9:a7:a9:7c:d0:b1:7a:88:26:f2:
ac:97:e6:8a:54:11:7b:a1:58:5e:9f:d7:f8:2c:3c:
3e:33:9b:52:56:da:62:6b:07:06:63:2a:d7:8e:78:
10:de:65:19:cd:ce:61:46:16:78:5a:df:30:4b:61:
cf:74:3a:25:c7:1f:52:b4:e3:cb:0b:3a:e5:dc:51:
8b:8a:59:66:78:1b:41:f8:23:f6:1c:3f:66:ce:4f:
8d:36:6e:9c:5a:d6:eb:63:c8:54:bd:ee:53:33:ed:
f2:a3:93:cf:a8:41:1e:0d:9b:53:69:f6:07:76:3b:
50:47:47:ab:77:e8:ae:d5:5e:ac:af:86:eb:76:e3:
db:16:bf:bc:ef:9c:1f:f2:e0:62:1c:1a:7e:9f:b1:
c2:f8:a5:17:5b:56:12:44:94:df:99:cf:d8:83:34:
37:8a:87:10:9d:e0:02:3a:92:6b:92:22:8c:d1:78:
01:26:27:97:15:f1:13:12:e1:d6:06:5a:75:3f:cc:
1a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:12:F4:90:D6:1E:42:57:53:C9:DD:0D:6F:B1:57:4F:2C:44:32:4E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/BRL0kNYeQldTyd0Nb7FXTyxEMk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.177.0/24
185.209.38.0/24
185.209.73.0/24
185.210.235.0/24
185.218.20.0/24
185.222.29.0/24
185.246.112.0/24
193.58.146.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:a0:06:7f:21:a0:60:a3:45:cb:1d:6b:2a:21:db:73:2e:d6:
ad:cb:cf:f5:12:be:c0:59:f2:04:b3:aa:d5:d5:e9:01:25:b2:
2b:28:97:47:29:99:b1:fe:fc:f2:a2:3b:d2:00:3b:66:da:b9:
9c:b1:69:e3:bc:48:34:2d:75:f6:92:78:92:80:de:64:87:13:
8d:f7:59:3c:ea:12:d1:18:ab:e5:ad:b7:87:5b:b2:7f:82:66:
7c:5a:45:1a:66:f7:c0:3a:d1:c8:b0:a2:e8:97:9a:35:2c:6c:
f6:a9:09:39:40:be:db:cf:d0:c7:4d:c3:d1:3d:a8:6d:65:34:
7f:60:c3:f3:46:92:fa:e1:fa:ef:5b:1b:81:96:d3:cf:8d:34:
43:80:91:90:11:01:85:dc:2f:e3:de:0b:7d:4d:5e:53:84:21:
8b:76:37:34:1f:22:14:de:68:e4:8e:a1:d2:3b:a1:ef:6e:5f:
53:75:43:e0:76:af:4f:41:4e:8c:18:47:6e:83:7e:e6:85:a1:
0e:01:0b:ee:e3:54:db:44:6b:bb:bf:33:fb:77:d2:aa:e3:69:
e5:28:45:dd:eb:46:d1:8b:20:60:f4:51:60:2e:d4:b5:9a:23:
67:77:60:44:a8:ba:d1:18:d9:d8:d7:9c:6f:20:ed:f1:83:b3:
d8:31:b1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 14:11:18 2024 by rpki-client on console-fra.rpki-client.org