Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MpK-ZTYSaUdYiiz0CNv1He3DRcw.roa
File: MpK-ZTYSaUdYiiz0CNv1He3DRcw.roa (raw, json)
Hash identifier: iOLk8hF7o3RQoM2u/hWyMBhL1+/U5E7nlvmCvb38e+E=
Subject key identifier: 32:92:BE:65:36:12:69:47:58:8A:2C:F4:08:DB:F5:1D:ED:C3:45:CC
Certificate issuer: /CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
Certificate serial: 01856B8A33C6AA6101CB7D5C506249E3206A
Authority key identifier: 30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MpK-ZTYSaUdYiiz0CNv1He3DRcw.roa
Signing time: Sun 01 Jan 2023 04:14:57 +0000
ROA not before: Sun 01 Jan 2023 04:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43350
IP address blocks: 185.56.80.0/24 maxlen: 24
2a06:e80::/36 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:33:c6:aa:61:01:cb:7d:5c:50:62:49:e3:20:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
Validity
Not Before: Jan 1 04:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3292be6536126947588a2cf408dbf51dedc345cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7b:4b:cb:2b:4f:b1:88:b9:84:67:91:48:5f:
50:18:8f:29:ca:e4:09:6e:7d:77:a2:29:05:91:7d:
7f:8b:78:ea:0b:ad:f4:4e:f9:81:b3:0e:71:12:3f:
9a:0d:6c:46:6d:54:16:5f:a5:af:af:da:48:19:20:
d0:f9:4a:49:16:ba:d6:07:95:07:fc:ff:7e:df:56:
d6:44:9e:6e:fe:f9:13:3d:22:ae:0f:c1:a4:d4:95:
2f:a9:6a:a8:33:8a:11:05:78:38:89:d2:88:ca:8d:
d0:0c:49:84:3f:e6:2e:68:1c:32:ab:f9:a0:4e:64:
f8:c0:a9:19:b1:b4:ec:c0:bf:43:2d:b2:3c:93:b1:
7c:c4:86:85:c4:de:45:61:1d:a6:7c:31:8a:2a:a3:
57:7c:fe:02:cf:82:34:d2:56:bd:f7:23:94:ae:89:
c3:d4:00:07:c7:ae:0f:fd:e8:90:3f:6b:74:67:14:
12:09:e9:d0:bf:51:85:11:7f:c0:08:ad:36:69:eb:
e8:fc:90:f0:23:1f:cd:28:ab:12:a0:29:15:80:3a:
2d:56:1c:8e:a1:cd:bf:8e:50:de:b3:f9:75:45:41:
00:27:d5:4f:ba:0c:32:9f:ba:b4:27:3b:c4:75:f8:
3e:89:9d:5e:7a:eb:a3:1e:3f:6a:57:49:80:a9:a8:
89:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:92:BE:65:36:12:69:47:58:8A:2C:F4:08:DB:F5:1D:ED:C3:45:CC
X509v3 Authority Key Identifier:
keyid:30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MpK-ZTYSaUdYiiz0CNv1He3DRcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.80.0/24
IPv6:
2a06:e80::/36
Signature Algorithm: sha256WithRSAEncryption
2c:3e:55:36:0a:6b:b5:5e:71:28:37:3e:7a:e2:38:da:21:96:
d9:dd:a2:6d:d4:0d:2b:b7:b4:fb:1b:e2:61:99:27:00:f8:4b:
1b:b4:72:b2:70:96:b7:28:72:f9:68:2e:2e:05:53:f1:b3:f6:
c6:f2:ec:50:b6:7f:e7:a4:9d:1d:65:aa:c2:9c:05:a7:36:c7:
28:77:9c:6e:13:42:92:12:c1:b6:be:8c:40:ee:33:10:0d:bb:
1f:f5:d6:9b:3e:8d:52:89:8e:ec:83:cc:9c:3b:a6:dc:b2:a8:
97:8a:6e:e0:0b:e9:09:f2:5d:f8:11:4a:9a:2f:f0:21:81:f2:
f7:dd:3b:c8:8d:98:4e:ac:20:9e:80:44:23:c9:c3:26:20:c8:
0a:89:2f:a3:52:2d:cf:d3:13:5f:c8:fb:16:1b:b5:b8:ca:c9:
5d:1f:54:b9:ad:1c:46:26:70:3a:7e:da:24:d6:82:bd:e2:dc:
c7:89:25:a9:96:ef:5c:6e:50:77:87:7f:6b:09:cb:cd:08:b3:
c6:cb:90:e0:de:17:23:74:f8:5e:23:13:c3:76:2b:1e:e4:db:
8f:62:d5:59:87:a4:98:15:e4:20:6c:fd:d9:a1:4e:28:45:c7:
ab:37:eb:61:98:d8:91:22:0e:a0:04:5d:2a:69:bc:99:48:c6:
bd:a5:d2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:15:03 2024 by rpki-client on console.sobornost.net