Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/brBGVwwAQJdtS7vhtWwB9iOQisA.roa
File: brBGVwwAQJdtS7vhtWwB9iOQisA.roa (raw, json)
Hash identifier: wrGuEiK2s3CzHLwrrg6QmoSSOemxIRDwdqa1ZNxeumY=
Subject key identifier: 6E:B0:46:57:0C:00:40:97:6D:4B:BB:E1:B5:6C:01:F6:23:90:8A:C0
Certificate issuer: /CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Certificate serial: 0187E10263AF63BBF78CA9B990793024E153
Authority key identifier: D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/brBGVwwAQJdtS7vhtWwB9iOQisA.roa
Signing time: Wed 03 May 2023 09:47:22 +0000
ROA not before: Wed 03 May 2023 09:47:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 133499
IP address blocks: 80.240.116.0/22 maxlen: 32
80.240.120.0/22 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e1:02:63:af:63:bb:f7:8c:a9:b9:90:79:30:24:e1:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Validity
Not Before: May 3 09:47:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6eb046570c0040976d4bbbe1b56c01f623908ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:93:76:23:97:e6:cd:61:ff:a2:cf:f5:f6:9f:
00:34:5c:cf:7f:5b:90:e1:a5:28:81:31:96:6b:d5:
8f:af:c5:ba:b3:f9:7e:00:78:d2:e8:15:fd:cd:bb:
74:f0:b4:3d:a2:da:36:04:7e:49:2c:57:78:2b:3e:
74:a8:80:c9:19:64:19:3d:81:76:c3:94:d7:8e:38:
f9:c1:9c:0e:5c:e9:12:9b:e0:76:ca:65:1e:08:0c:
e2:d5:64:72:d5:a5:e4:18:6e:26:0c:75:4b:ab:15:
09:90:e1:f7:f9:75:3b:a7:7b:74:10:ed:c7:ed:36:
cb:6c:11:50:5f:f6:b8:e5:3b:aa:58:0e:94:22:a3:
cb:d6:71:b2:42:ce:a2:14:af:d2:95:1f:38:46:e5:
24:8f:d8:8a:65:e6:11:ba:8d:86:f5:40:3a:35:e3:
e3:44:91:7c:36:b3:1c:b6:ff:4b:b4:ec:0b:22:20:
70:f1:38:1a:d6:91:9a:c4:41:7e:13:ab:ee:b6:19:
bb:13:1d:f1:1e:b0:25:5e:9b:47:de:ab:d3:cd:ff:
53:d5:f1:cc:f4:1f:b4:e1:36:99:72:37:e5:c2:42:
06:56:64:19:2e:cb:fb:14:8c:5d:f3:f3:b5:31:8a:
ac:76:76:06:cf:38:f2:bd:4c:88:96:d4:df:7f:10:
64:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B0:46:57:0C:00:40:97:6D:4B:BB:E1:B5:6C:01:F6:23:90:8A:C0
X509v3 Authority Key Identifier:
keyid:D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/brBGVwwAQJdtS7vhtWwB9iOQisA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.116.0-80.240.123.255
Signature Algorithm: sha256WithRSAEncryption
17:bd:69:16:fb:d7:4d:ec:0b:1c:5a:46:b4:b5:60:ef:c8:ef:
e2:e0:2e:1f:99:f7:2a:13:e9:8b:f3:1a:1c:33:d7:8e:f4:29:
d7:08:af:2e:ed:65:a5:b7:7c:ce:e6:40:19:ca:91:cb:74:26:
d0:4d:9b:0b:e6:3f:6c:c1:22:48:36:3b:50:51:10:bb:ae:42:
02:68:c5:50:ef:1a:32:45:ca:62:1e:7c:a7:a2:85:2f:87:5f:
c0:60:c5:16:f7:81:70:66:0c:bf:f6:d3:53:8b:51:61:b7:37:
89:dc:60:1b:06:3a:c3:b0:02:8b:29:2b:28:31:af:7f:75:f3:
08:7d:cb:55:9d:74:54:ae:c6:f7:c9:77:28:93:f3:5e:a4:de:
da:46:db:55:b5:55:b9:3a:ce:77:ed:ad:c5:da:ea:40:70:af:
b5:aa:5d:eb:be:a4:6c:d5:64:23:86:de:a2:7c:79:86:82:c0:
ce:f8:cb:1b:c1:cc:7d:e5:cd:7f:2e:c3:38:37:32:31:17:94:
3e:e2:a7:c3:c2:a8:2f:38:2e:05:c2:a6:03:13:e8:00:9d:d4:
2c:fa:5b:52:2f:2f:42:a5:81:f8:b3:4f:2f:7a:f9:13:25:d4:
ff:02:76:4f:43:07:6f:81:98:c3:eb:bc:54:07:3a:f9:a4:d7:
e1:15:b7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:45 2024 by rpki-client on console-fra.rpki-client.org