Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/ViBYhqX-G4wjTiv0P27y_pGDeww.roa
File: ViBYhqX-G4wjTiv0P27y_pGDeww.roa (raw, json)
Hash identifier: 1C72ul+jUPPh1jcTq+H+M9bVKSH894ULxhw04fOwh30=
Subject key identifier: 56:20:58:86:A5:FE:1B:8C:23:4E:2B:F4:3F:6E:F2:FE:91:83:7B:0C
Certificate issuer: /CN=d0a10944704d723c8dd9ce730cabf96fe26bab25
Certificate serial: 018570153EA37D6071446D43A19FC76748D1
Authority key identifier: D0:A1:09:44:70:4D:72:3C:8D:D9:CE:73:0C:AB:F9:6F:E2:6B:AB:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/ViBYhqX-G4wjTiv0P27y_pGDeww.roa
Signing time: Mon 02 Jan 2023 01:25:18 +0000
ROA not before: Mon 02 Jan 2023 01:25:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196721
IP address blocks: 212.6.30.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:3e:a3:7d:60:71:44:6d:43:a1:9f:c7:67:48:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a10944704d723c8dd9ce730cabf96fe26bab25
Validity
Not Before: Jan 2 01:25:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56205886a5fe1b8c234e2bf43f6ef2fe91837b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1d:1d:f0:17:dc:79:b6:2c:ff:d2:d0:3d:3c:
df:9b:6a:f5:f7:c8:8b:9a:ba:3f:62:22:b2:07:af:
5b:a6:68:1e:a9:61:cb:ea:2b:85:05:e8:f0:73:07:
99:dd:11:49:c3:d6:b7:31:85:f3:ce:26:ad:0c:ff:
8e:28:26:46:d8:43:65:f1:11:35:77:92:a1:bb:e4:
23:cf:d8:bf:f3:0c:ee:4d:ab:6a:4a:fc:dd:26:7a:
7f:bc:e2:c6:11:a1:0c:7b:64:c4:87:66:65:e7:14:
e7:f1:69:5b:ae:82:83:4b:68:dc:7c:a4:42:88:ce:
ca:c3:89:ac:89:15:a8:2b:b0:20:a2:33:a1:e1:51:
c3:93:ba:21:ab:94:64:08:96:05:82:1d:1e:36:ca:
a7:41:9e:f6:fe:df:b2:88:ce:eb:96:2f:c3:2a:e2:
5b:3d:dc:2e:47:58:db:6c:37:ce:6d:6e:eb:58:52:
9b:66:a5:27:bd:d7:f9:80:3c:45:c8:44:0a:ba:96:
3c:44:c3:fc:8f:e5:16:09:dc:97:9d:87:31:18:5d:
60:de:f4:70:d9:5e:71:94:08:ab:db:c5:26:25:13:
39:51:c6:c0:df:39:39:f2:62:a2:1c:04:34:ba:a2:
e6:7a:fd:cb:77:27:5d:6d:10:3d:f5:bc:7a:5d:2c:
fc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:20:58:86:A5:FE:1B:8C:23:4E:2B:F4:3F:6E:F2:FE:91:83:7B:0C
X509v3 Authority Key Identifier:
keyid:D0:A1:09:44:70:4D:72:3C:8D:D9:CE:73:0C:AB:F9:6F:E2:6B:AB:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/ViBYhqX-G4wjTiv0P27y_pGDeww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.30.0/24
Signature Algorithm: sha256WithRSAEncryption
95:6d:92:81:de:ac:02:a8:3d:c9:b7:91:8c:1f:3e:87:95:7a:
c2:35:d0:ad:0a:14:26:e9:8a:46:f8:55:ef:bb:8c:a7:53:ad:
9f:dc:26:d2:af:b4:42:4f:8d:de:92:53:c5:92:15:12:d9:2f:
68:26:ec:ce:ce:8e:16:83:f4:92:9a:5e:8a:ae:d8:c6:34:64:
b8:78:a3:5d:dd:fe:68:ae:3d:9f:3b:d5:2e:89:8c:9c:96:9d:
8c:71:8f:19:f8:c6:aa:87:04:cc:fc:bb:d2:16:56:96:6a:cd:
92:67:98:13:24:4f:cf:a7:68:a6:66:62:6d:cf:cb:b4:b0:79:
4d:7b:8c:ac:76:76:3d:a3:85:41:09:43:65:89:4d:7a:fc:bb:
1e:1d:92:91:a2:c7:a1:16:62:0b:c3:96:62:02:3f:b3:1a:97:
47:4f:ee:be:55:71:1a:86:75:59:ac:a3:00:ba:6e:91:c3:6e:
1d:5f:b5:f1:68:69:aa:3f:0b:f9:6a:2f:64:cc:53:1a:0a:b8:
d4:d2:a0:25:53:fe:a7:f5:ee:22:1f:2f:a0:67:bc:4a:dc:1a:
fc:e7:15:49:17:40:f2:69:9a:a6:e6:40:70:4e:0f:84:15:ff:
15:9a:b0:ce:b2:9a:8c:4b:77:28:e0:b2:54:8a:2f:df:8b:45:
23:58:4b:fb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwFT6jfWBxRG1DoZ/HZ0jRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYTEwOTQ0NzA0ZDcyM2M4ZGQ5Y2U3MzBjYWJmOTZmZTI2
YmFiMjUwHhcNMjMwMTAyMDEyNTE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjIwNTg4NmE1ZmUxYjhjMjM0ZTJiZjQzZjZlZjJmZTkxODM3YjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1R0d8BfcebYs/9LQPTzfm2r198iL
mro/YiKyB69bpmgeqWHL6iuFBejwcweZ3RFJw9a3MYXzziatDP+OKCZG2ENl8RE1
d5Khu+Qjz9i/8wzuTatqSvzdJnp/vOLGEaEMe2TEh2Zl5xTn8WlbroKDS2jcfKRC
iM7Kw4msiRWoK7AgojOh4VHDk7ohq5RkCJYFgh0eNsqnQZ72/t+yiM7rli/DKuJb
PdwuR1jbbDfObW7rWFKbZqUnvdf5gDxFyEQKupY8RMP8j+UWCdyXnYcxGF1g3vRw
2V5xlAir28UmJRM5UcbA3zk58mKiHAQ0uqLmev3LdyddbRA99bx6XSz8qwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFYgWIal/huMI04r9D9u8v6Rg3sMMB8GA1UdIwQY
MBaAFNChCURwTXI8jdnOcwyr+W/ia6slMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEtFSlJIQk5janlOMmM1ekRLdjViLUpycXlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9mODUyZTUtOTE2Zi00ZDVlLWEzMDUt
OGEwZjA0NTA1NjQ3LzEvVmlCWWhxWC1HNHdqVGl2MFAyN3lfcEdEZXd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9mODUyZTUtOTE2Zi00ZDVlLWEzMDUtOGEwZjA0NTA1NjQ3
LzEvMEtFSlJIQk5janlOMmM1ekRLdjViLUpycXlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1AYeMA0G
CSqGSIb3DQEBCwUAA4IBAQCVbZKB3qwCqD3Jt5GMHz6HlXrCNdCtChQm6YpG+FXv
u4ynU62f3CbSr7RCT43eklPFkhUS2S9oJuzOzo4Wg/SSml6KrtjGNGS4eKNd3f5o
rj2fO9UuiYyclp2McY8Z+MaqhwTM/LvSFlaWas2SZ5gTJE/Pp2imZmJtz8u0sHlN
e4ysdnY9o4VBCUNliU16/LseHZKRosehFmILw5ZiAj+zGpdHT+6+VXEahnVZrKMA
um6Rw24dX7XxaGmqPwv5ai9kzFMaCrjU0qAlU/6n9e4iHy+gZ7xK3Br85xVJF0Dy
aZqm5kBwTg+EFf8VmrDOspqMS3co4LJUii/fi0UjWEv7
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:55 2024 by rpki-client on console-ams.rpki-client.org