Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vz6bn5I3DjJMgQwHdfz03Ze2sJQ.roa
File: vz6bn5I3DjJMgQwHdfz03Ze2sJQ.roa (raw, json)
Hash identifier: X0fhVlix40sNYbKO6v6Z0ycQZzYxHKU/A2mCQuFKF0M=
Subject key identifier: BF:3E:9B:9F:92:37:0E:32:4C:81:0C:07:75:FC:F4:DD:97:B6:B0:94
Certificate issuer: /CN=bd252a75c961ad338fd91147d461dd8b3d20cf51
Certificate serial: 01856BAEB8E3F8875772930FE1D04A4D3486
Authority key identifier: BD:25:2A:75:C9:61:AD:33:8F:D9:11:47:D4:61:DD:8B:3D:20:CF:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vz6bn5I3DjJMgQwHdfz03Ze2sJQ.roa
Signing time: Sun 01 Jan 2023 04:54:50 +0000
ROA not before: Sun 01 Jan 2023 04:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15404
IP address blocks: 5.182.152.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:b8:e3:f8:87:57:72:93:0f:e1:d0:4a:4d:34:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd252a75c961ad338fd91147d461dd8b3d20cf51
Validity
Not Before: Jan 1 04:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf3e9b9f92370e324c810c0775fcf4dd97b6b094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:81:ab:5e:35:14:49:39:8c:fa:b6:bf:dd:13:
dd:59:f2:e3:cd:43:5a:ec:87:02:95:a8:97:58:08:
28:a7:f4:55:2f:5e:3a:84:7b:df:89:4c:b7:9a:58:
ba:2d:b1:3c:1b:8f:c6:99:94:d0:fd:20:66:f1:b2:
30:3e:e7:41:c5:af:73:4b:13:03:57:14:0a:59:11:
18:34:47:a6:32:a5:a2:1e:d7:f6:7e:62:ff:0e:e7:
41:ef:33:f9:dd:e2:30:25:14:8a:c5:c7:3a:6e:d5:
36:e5:96:2d:34:96:8a:05:04:43:3b:13:7a:6c:1b:
20:6b:0c:44:d8:e9:36:0f:33:12:1c:4f:6a:d9:11:
93:11:52:93:01:81:d1:e8:0a:47:70:42:96:15:1a:
81:3a:4d:d2:5c:27:cb:c7:01:37:e0:d8:a8:e1:53:
e3:dc:ca:70:e5:d0:67:d9:86:eb:82:84:40:47:04:
4a:19:89:46:5b:1e:03:c8:98:cd:a7:29:b1:e2:8d:
ed:85:f3:2f:5f:ca:5b:59:d2:c7:41:bb:fd:63:ba:
7e:9e:9e:29:e0:c5:3f:d9:0e:2a:96:33:f2:97:50:
e7:df:79:fc:5f:f0:72:99:6a:a6:28:43:59:eb:66:
ae:9b:d3:e3:aa:3b:c9:24:56:35:8a:7c:aa:82:2e:
33:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3E:9B:9F:92:37:0E:32:4C:81:0C:07:75:FC:F4:DD:97:B6:B0:94
X509v3 Authority Key Identifier:
keyid:BD:25:2A:75:C9:61:AD:33:8F:D9:11:47:D4:61:DD:8B:3D:20:CF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vz6bn5I3DjJMgQwHdfz03Ze2sJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.152.0/24
Signature Algorithm: sha256WithRSAEncryption
18:db:94:43:b9:ac:2a:6d:53:b0:72:5e:71:a1:fa:99:c5:4c:
16:12:a0:73:ae:68:f9:09:cf:5a:38:0e:18:19:52:86:46:21:
7b:77:4a:6e:1d:a5:e6:55:44:4f:0d:4e:01:7b:98:dc:a3:8b:
c3:77:92:12:18:2b:cb:fd:38:67:b1:04:a3:cb:15:1c:d3:fb:
4d:4c:cb:46:6e:07:32:64:7a:61:36:0e:c6:f2:47:1a:6c:34:
f2:93:75:92:8a:01:ca:7d:7f:8f:40:48:db:3f:f9:86:1c:d2:
74:a4:4c:83:6f:b9:84:0f:f3:e5:d1:2b:29:aa:88:f5:da:0d:
3f:9a:1f:77:e1:4f:8b:95:e2:a8:f9:fe:68:1f:87:8e:28:e5:
97:27:c0:cb:ee:45:58:d6:dd:d5:41:07:0f:09:7a:29:59:07:
cd:f5:3e:88:94:76:5f:0f:bd:ab:78:df:30:61:14:a7:95:f6:
58:4f:76:6c:b9:39:5b:9b:d3:eb:c2:a5:f0:79:ad:1e:c1:83:
db:df:af:df:af:6c:86:d5:3d:a5:9b:ee:53:90:81:8b:47:d7:
ab:72:21:8c:f6:af:e3:46:69:34:d7:2f:19:09:43:ce:7e:70:
3a:6a:bc:9f:dd:ad:0e:ba:88:0d:c0:7e:40:7d:37:11:a2:ad:
65:91:08:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrrrjj+IdXcpMP4dBKTTSGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMjUyYTc1Yzk2MWFkMzM4ZmQ5MTE0N2Q0NjFkZDhiM2Qy
MGNmNTEwHhcNMjMwMTAxMDQ1NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjNlOWI5ZjkyMzcwZTMyNGM4MTBjMDc3NWZjZjRkZDk3YjZiMDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYGrXjUUSTmM+ra/3RPdWfLjzUNa
7IcClaiXWAgop/RVL146hHvfiUy3mli6LbE8G4/GmZTQ/SBm8bIwPudBxa9zSxMD
VxQKWREYNEemMqWiHtf2fmL/DudB7zP53eIwJRSKxcc6btU25ZYtNJaKBQRDOxN6
bBsgawxE2Ok2DzMSHE9q2RGTEVKTAYHR6ApHcEKWFRqBOk3SXCfLxwE34Nio4VPj
3Mpw5dBn2YbrgoRARwRKGYlGWx4DyJjNpymx4o3thfMvX8pbWdLHQbv9Y7p+np4p
4MU/2Q4qljPyl1Dn33n8X/BymWqmKENZ62aum9PjqjvJJFY1inyqgi4zUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL8+m5+SNw4yTIEMB3X89N2XtrCUMB8GA1UdIwQY
MBaAFL0lKnXJYa0zj9kRR9Rh3Ys9IM9RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlNVcWRjbGhyVE9QMlJGSDFHSGRpejBnejFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9kMWM3MGUtMjI2YS00NzgxLWI2NjIt
NzQxYWI5Mjk5N2QwLzEvdno2Ym41STNEakpNZ1F3SGRmejAzWmUyc0pRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9kMWM3MGUtMjI2YS00NzgxLWI2NjItNzQxYWI5Mjk5N2Qw
LzEvdlNVcWRjbGhyVE9QMlJGSDFHSGRpejBnejFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbaYMA0G
CSqGSIb3DQEBCwUAA4IBAQAY25RDuawqbVOwcl5xofqZxUwWEqBzrmj5Cc9aOA4Y
GVKGRiF7d0puHaXmVURPDU4Be5jco4vDd5ISGCvL/ThnsQSjyxUc0/tNTMtGbgcy
ZHphNg7G8kcabDTyk3WSigHKfX+PQEjbP/mGHNJ0pEyDb7mED/Pl0Sspqoj12g0/
mh934U+LleKo+f5oH4eOKOWXJ8DL7kVY1t3VQQcPCXopWQfN9T6IlHZfD72reN8w
YRSnlfZYT3ZsuTlbm9PrwqXwea0ewYPb36/fr2yG1T2lm+5TkIGLR9erciGM9q/j
Rmk01y8ZCUPOfnA6aryf3a0OuogNwH5AfTcRoq1lkQid
-----END CERTIFICATE-----
Generated at Tue Jan 2 02:56:32 2024 by rpki-client on console.sobornost.net