Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/246d61-ab75-4b19-aec2-a75abc2ab7e7/1/mprFuzoa1uLwbkxCTSGWs1q8wnA.roa
File: mprFuzoa1uLwbkxCTSGWs1q8wnA.roa (raw, json)
Hash identifier: pBZvAxA7eNQgLxnCu6ifARuvyfraJQTxw9MKDNrSGb8=
Subject key identifier: 9A:9A:C5:BB:3A:1A:D6:E2:F0:6E:4C:42:4D:21:96:B3:5A:BC:C2:70
Certificate issuer: /CN=733bda0008dfb5a2eb4e2a56902448fed940d59f
Certificate serial: 01856BA57494F5D51597E66841D6F401DC3B
Authority key identifier: 73:3B:DA:00:08:DF:B5:A2:EB:4E:2A:56:90:24:48:FE:D9:40:D5:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czvaAAjftaLrTipWkCRI_tlA1Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/246d61-ab75-4b19-aec2-a75abc2ab7e7/1/mprFuzoa1uLwbkxCTSGWs1q8wnA.roa
Signing time: Sun 01 Jan 2023 04:44:43 +0000
ROA not before: Sun 01 Jan 2023 04:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 212.46.33.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:a5:74:94:f5:d5:15:97:e6:68:41:d6:f4:01:dc:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733bda0008dfb5a2eb4e2a56902448fed940d59f
Validity
Not Before: Jan 1 04:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a9ac5bb3a1ad6e2f06e4c424d2196b35abcc270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:66:b4:05:55:71:4e:8a:e8:70:a3:de:b7:07:
f0:e4:64:ba:a7:21:64:64:db:df:20:34:b4:e4:97:
35:12:9c:78:7a:3b:7d:b2:b6:af:bc:23:34:ce:90:
0d:67:a3:56:d6:f0:1a:63:34:52:72:14:8f:a1:95:
5a:9d:15:72:2a:00:ea:29:29:b7:73:50:dd:7d:a4:
f7:16:18:f8:08:f4:b4:ff:33:fe:cb:4e:4e:f3:6b:
3b:c1:70:2e:40:03:5a:c3:6d:13:8c:d8:28:63:da:
79:73:4f:07:1c:84:02:f3:ab:f6:6a:f7:f9:21:24:
70:9f:53:80:31:95:87:ea:49:b2:32:fc:9f:02:ac:
bb:c7:14:a0:06:40:2b:a4:02:93:92:93:99:b5:e3:
80:c0:9f:bd:9c:1e:a6:c8:d3:fa:8e:ce:c3:68:b0:
78:dc:9b:61:bd:43:0f:b9:70:f2:67:c6:89:3a:e3:
57:84:84:1d:d5:22:39:3e:a0:90:3e:58:97:f9:22:
7d:6a:69:58:df:96:08:98:03:6f:e3:6c:41:47:ef:
c7:ce:ba:ef:c2:19:38:bb:01:c6:16:a8:ec:1d:4f:
ec:27:ea:b4:c2:5f:b5:03:45:fa:75:00:47:78:04:
d3:73:3b:1a:89:ff:62:4c:55:ff:54:43:eb:72:19:
06:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9A:C5:BB:3A:1A:D6:E2:F0:6E:4C:42:4D:21:96:B3:5A:BC:C2:70
X509v3 Authority Key Identifier:
keyid:73:3B:DA:00:08:DF:B5:A2:EB:4E:2A:56:90:24:48:FE:D9:40:D5:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czvaAAjftaLrTipWkCRI_tlA1Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/246d61-ab75-4b19-aec2-a75abc2ab7e7/1/mprFuzoa1uLwbkxCTSGWs1q8wnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/246d61-ab75-4b19-aec2-a75abc2ab7e7/1/czvaAAjftaLrTipWkCRI_tlA1Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.33.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:53:70:e3:94:00:a4:ff:85:e5:62:c5:4e:bd:ad:02:c4:99:
75:e5:e7:3d:23:21:b6:2a:5d:ee:4f:49:b9:df:e2:cd:50:a3:
2a:ef:11:72:d3:c3:9c:61:87:34:c4:96:9c:8c:2d:6a:0d:31:
e3:39:90:68:2a:1e:e2:16:8c:3d:e2:69:1b:0d:ad:ba:8d:f8:
91:88:bd:bd:13:35:58:d2:31:56:af:05:40:15:b3:8e:80:2c:
bf:05:f1:44:a9:6b:a0:4c:79:29:cb:aa:48:f4:78:fd:6e:12:
5a:16:b0:18:20:e1:a1:97:ba:22:50:48:68:7a:7b:6d:56:c3:
1e:d8:7a:2c:b5:84:0a:12:bf:5a:9f:17:26:f8:fc:3c:a5:b6:
8c:9e:53:2c:57:b7:73:14:31:f0:0a:13:88:b4:53:32:ab:3c:
b3:5a:74:d9:de:b0:a0:64:6d:9c:cf:d2:0b:79:e6:72:af:08:
e0:98:12:83:73:7f:51:c4:f5:a1:30:ef:c9:bf:ca:90:7c:bb:
97:b7:42:87:58:53:4f:69:2f:44:f4:7c:9b:09:e0:31:42:4b:
e0:bf:2c:ff:91:f8:82:83:dc:5d:74:c4:51:83:7e:07:d5:8d:
bd:b0:ed:ba:69:82:81:08:58:32:41:e1:d0:f2:81:d9:c4:eb:
f9:4a:fb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:00:49 2024 by rpki-client on console.sobornost.net