Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0df1c2-9ad3-41ca-a12e-9f79143e9c60/1/Bryaa_IoDIOckc8AA3mNyFmU1-Y.roa
File: Bryaa_IoDIOckc8AA3mNyFmU1-Y.roa (raw, json)
Hash identifier: jQO30VQyfkQZm96UkhyWJJsksQFsIUEvP/Dq85Eot18=
Subject key identifier: 06:BC:9A:6B:F2:28:0C:83:9C:91:CF:00:03:79:8D:C8:59:94:D7:E6
Certificate issuer: /CN=26f55db66c509a9c0a6dfeb023770d5b2ac860b9
Certificate serial: 018C6C9C8656528E8524B2C49FF25018DC5F
Authority key identifier: 26:F5:5D:B6:6C:50:9A:9C:0A:6D:FE:B0:23:77:0D:5B:2A:C8:60:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JvVdtmxQmpwKbf6wI3cNWyrIYLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/0df1c2-9ad3-41ca-a12e-9f79143e9c60/1/Bryaa_IoDIOckc8AA3mNyFmU1-Y.roa
Signing time: Fri 15 Dec 2023 08:34:06 +0000
ROA not before: Fri 15 Dec 2023 08:34:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200019
IP address blocks: 146.19.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6c:9c:86:56:52:8e:85:24:b2:c4:9f:f2:50:18:dc:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26f55db66c509a9c0a6dfeb023770d5b2ac860b9
Validity
Not Before: Dec 15 08:34:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06bc9a6bf2280c839c91cf0003798dc85994d7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:de:f1:ef:a7:df:38:28:64:17:5f:fe:ee:5f:
ce:ac:93:78:87:f5:e1:95:77:be:e3:cd:fc:e9:88:
9a:d8:e7:43:7f:b4:92:e8:92:93:7a:23:1f:97:f5:
03:e4:25:79:a1:2d:62:45:a7:ae:64:0f:9b:a5:4b:
63:ee:e1:ff:f4:a8:c8:0a:17:7a:76:21:4a:49:23:
fc:a1:54:c7:11:af:df:98:0e:6c:ca:6d:59:76:af:
b8:88:a8:5f:53:76:77:d0:a3:16:45:8f:98:92:de:
9c:c7:13:b5:bc:b3:5f:7d:f6:c2:ca:d2:b8:3f:7e:
fb:e2:ff:37:04:c4:70:e4:a5:55:89:67:f3:68:76:
01:b1:12:ce:e3:77:97:dd:d9:c5:d2:31:3a:1a:0c:
24:c9:30:f6:4f:9a:3c:2b:76:81:5e:0c:2c:be:66:
41:8d:a9:87:8e:da:be:5a:96:4a:a2:00:5e:18:bc:
16:ee:93:6f:6a:79:17:c1:da:87:c6:7d:70:dd:0a:
d9:46:00:a0:e4:80:af:91:cb:ac:ab:9c:3f:98:6a:
cb:bf:55:3b:03:01:2f:24:89:f1:ab:12:36:37:79:
12:35:7d:54:83:04:4e:67:bf:b9:b6:40:37:9b:88:
d9:cd:a7:df:4c:e3:0b:29:9a:2c:e0:d9:c6:28:8e:
9a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BC:9A:6B:F2:28:0C:83:9C:91:CF:00:03:79:8D:C8:59:94:D7:E6
X509v3 Authority Key Identifier:
keyid:26:F5:5D:B6:6C:50:9A:9C:0A:6D:FE:B0:23:77:0D:5B:2A:C8:60:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvVdtmxQmpwKbf6wI3cNWyrIYLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0df1c2-9ad3-41ca-a12e-9f79143e9c60/1/Bryaa_IoDIOckc8AA3mNyFmU1-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0df1c2-9ad3-41ca-a12e-9f79143e9c60/1/JvVdtmxQmpwKbf6wI3cNWyrIYLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.213.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:5c:16:f6:a8:bf:d1:f3:aa:85:43:1e:97:d2:9a:55:ac:02:
0c:02:92:57:2a:f2:da:49:16:d1:d3:9e:9a:21:53:49:d9:0f:
56:03:99:ee:aa:e8:7d:6a:6e:23:74:f2:ce:1c:b8:31:70:7d:
4b:9e:32:ea:ba:63:82:25:c3:58:67:8d:66:a7:e3:49:d6:7e:
ce:96:36:2f:4b:3a:39:f3:de:4d:12:b3:1f:45:7f:62:f3:47:
b9:04:4f:d4:f6:a0:82:0f:73:37:62:51:19:1d:ba:6d:c5:0e:
21:d0:90:0a:bd:c3:52:9d:a7:75:bf:24:0a:1e:3e:00:40:2a:
45:53:33:3a:da:ab:20:48:05:e9:6a:0c:2a:d1:bc:c1:04:ba:
9f:71:45:f4:32:a2:4c:67:22:c2:6e:d0:ae:b9:48:e4:f1:4e:
a6:c3:47:db:e9:c8:ae:3c:da:20:ea:95:77:2f:ce:85:dd:30:
0e:56:12:40:44:c2:49:ee:57:24:2d:60:51:62:43:6b:33:00:
2e:b6:a3:6f:b2:51:9a:70:a0:8f:b7:a1:fc:46:e7:c7:f0:01:
1b:ff:45:dc:93:73:ec:a6:34:a1:98:15:5d:e7:0d:d1:f0:48:
cc:64:da:b0:9e:d3:9f:89:ab:74:9d:8b:86:b9:72:20:83:66:
27:91:ba:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:04 2024 by rpki-client on console-fra.rpki-client.org