Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/viEP0TUpSySrhw4ZbO5Sc-Wv45o.roa
File: viEP0TUpSySrhw4ZbO5Sc-Wv45o.roa (raw, json)
Hash identifier: JdPcYd4nst5jSbIqSCPfs98L2obeS+yxsLriHBZYUfE=
Subject key identifier: BE:21:0F:D1:35:29:4B:24:AB:87:0E:19:6C:EE:52:73:E5:AF:E3:9A
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018BD19D6E94342235E5F407D18BA8FBBF6B
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/viEP0TUpSySrhw4ZbO5Sc-Wv45o.roa
Signing time: Wed 15 Nov 2023 06:13:57 +0000
ROA not before: Wed 15 Nov 2023 06:13:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44947
IP address blocks: 212.16.85.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d1:9d:6e:94:34:22:35:e5:f4:07:d1:8b:a8:fb:bf:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Nov 15 06:13:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be210fd135294b24ab870e196cee5273e5afe39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:70:5a:ac:d2:2b:84:ec:a2:90:41:f1:92:cf:
9b:c8:60:08:49:ee:09:d6:ef:09:1a:90:75:ef:60:
78:4f:52:e6:18:93:d5:6b:68:e8:ec:25:96:81:fa:
8b:6e:d9:5a:88:67:3d:af:46:b6:b7:e3:fe:71:52:
70:35:5c:9a:0d:8a:ef:dc:96:1b:1f:56:d8:7e:62:
99:9d:01:c2:09:45:5a:6d:a2:60:e1:8c:1b:00:8d:
75:83:42:b8:8f:2c:1d:83:a3:10:46:13:b0:f3:86:
da:58:b6:91:ce:c3:e9:61:ad:a8:ce:89:8e:96:2e:
6f:5b:ed:52:c4:87:ae:94:0c:60:af:ef:a9:f5:b6:
d3:b5:d7:c3:9c:21:e8:40:0b:6f:22:4c:35:56:f7:
6c:68:78:ab:25:c7:fe:ab:2e:df:18:20:ec:d0:a6:
29:ea:7b:5e:75:82:83:e5:58:28:e6:5d:13:3f:74:
44:70:b9:fc:dc:d2:4b:6d:f2:eb:6a:aa:05:46:c1:
25:23:ec:7b:69:27:2b:00:a8:ae:3b:e3:ba:37:1a:
30:6a:7a:cf:56:0e:0a:5d:38:e8:43:25:4d:63:d9:
60:dd:b8:95:99:57:b9:8e:87:2a:59:83:33:af:db:
03:d9:61:d8:14:77:52:29:8b:17:8d:f6:ce:24:4b:
5b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:21:0F:D1:35:29:4B:24:AB:87:0E:19:6C:EE:52:73:E5:AF:E3:9A
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/viEP0TUpSySrhw4ZbO5Sc-Wv45o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.16.85.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:8f:dd:cd:e0:71:24:cc:33:08:af:d3:36:f6:bf:99:29:73:
09:eb:88:75:f1:8b:b8:b8:b5:51:51:0c:27:69:3f:5f:45:e6:
5c:ae:a4:b1:bf:03:76:9e:f2:87:2f:3b:cb:71:76:6e:82:7c:
8b:78:0c:d2:06:cb:a6:80:31:f6:e4:16:c9:b1:9d:59:86:b0:
cb:4e:0b:d0:32:10:d5:df:73:de:e9:5b:06:3a:76:fe:9e:9e:
73:f3:c8:af:5a:36:f1:9b:94:ca:45:23:80:ed:9b:51:33:b8:
18:dc:eb:5e:97:65:04:d5:ca:75:84:84:ca:90:cd:e7:e3:dc:
e6:4f:84:3e:c8:68:14:e4:f4:a7:b7:07:1c:33:96:46:86:68:
fe:11:fc:56:f6:a3:62:c0:b4:96:d0:17:2f:f3:4d:f0:2d:35:
f5:bc:33:00:fa:fc:17:f9:f6:e6:d7:36:02:42:14:01:f3:58:
19:a8:dc:d2:7d:5a:87:19:b6:01:42:b0:a7:6c:60:92:e2:98:
5d:69:20:42:6f:d5:06:37:fe:f5:fd:fd:c7:54:c3:24:34:d6:
b7:f0:f8:ba:ac:21:da:b6:0e:98:da:45:2d:3c:64:85:0a:9c:
f2:05:f7:44:c0:b8:90:7d:d5:4c:ce:c1:8c:77:21:3f:5d:33:
74:ef:1e:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYvRnW6UNCI15fQH0Yuo+79rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjMxMTE1MDYxMzU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTIxMGZkMTM1Mjk0YjI0YWI4NzBlMTk2Y2VlNTI3M2U1YWZlMzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+nBarNIrhOyikEHxks+byGAISe4J
1u8JGpB172B4T1LmGJPVa2jo7CWWgfqLbtlaiGc9r0a2t+P+cVJwNVyaDYrv3JYb
H1bYfmKZnQHCCUVabaJg4YwbAI11g0K4jywdg6MQRhOw84baWLaRzsPpYa2ozomO
li5vW+1SxIeulAxgr++p9bbTtdfDnCHoQAtvIkw1VvdsaHirJcf+qy7fGCDs0KYp
6ntedYKD5Vgo5l0TP3REcLn83NJLbfLraqoFRsElI+x7aScrAKiuO+O6NxowanrP
Vg4KXTjoQyVNY9lg3biVmVe5jocqWYMzr9sD2WHYFHdSKYsXjfbOJEtb3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL4hD9E1KUskq4cOGWzuUnPlr+OaMB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvdmlFUDBUVXBTeVNyaHc0WmJPNVNjLVd2NDVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BBVMA0G
CSqGSIb3DQEBCwUAA4IBAQC7j93N4HEkzDMIr9M29r+ZKXMJ64h18Yu4uLVRUQwn
aT9fReZcrqSxvwN2nvKHLzvLcXZugnyLeAzSBsumgDH25BbJsZ1ZhrDLTgvQMhDV
33Pe6VsGOnb+np5z88ivWjbxm5TKRSOA7ZtRM7gY3Otel2UE1cp1hITKkM3n49zm
T4Q+yGgU5PSntwccM5ZGhmj+EfxW9qNiwLSW0Bcv803wLTX1vDMA+vwX+fbm1zYC
QhQB81gZqNzSfVqHGbYBQrCnbGCS4phdaSBCb9UGN/71/f3HVMMkNNa38Pi6rCHa
tg6Y2kUtPGSFCpzyBfdEwLiQfdVMzsGMdyE/XTN07x4M
-----END CERTIFICATE-----
Generated at Sun Nov 26 07:08:36 2023 by rpki-client on console-ams.rpki-client.org