Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/M4kVJ8YZcOoRnipKVqztn2JFh8Q.roa
File: M4kVJ8YZcOoRnipKVqztn2JFh8Q.roa (raw, json)
Hash identifier: kar/6RvXdIl+q/YpPrQDavf8MltOb1zI4BPVwQGqFLg=
Subject key identifier: 33:89:15:27:C6:19:70:EA:11:9E:2A:4A:56:AC:ED:9F:62:45:87:C4
Certificate issuer: /CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
Certificate serial: 01856F14E882E200568FD0B01EF8B3035947
Authority key identifier: 0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/M4kVJ8YZcOoRnipKVqztn2JFh8Q.roa
Signing time: Sun 01 Jan 2023 20:45:19 +0000
ROA not before: Sun 01 Jan 2023 20:45:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212730
IP address blocks: 212.110.133.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:e8:82:e2:00:56:8f:d0:b0:1e:f8:b3:03:59:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
Validity
Not Before: Jan 1 20:45:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33891527c61970ea119e2a4a56aced9f624587c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:94:d8:0b:05:8e:63:c7:87:8e:d9:1d:00:4a:
06:8c:a2:96:1b:98:40:94:cd:cf:5f:4d:32:5c:9b:
c5:e9:e8:e0:eb:a8:c9:a4:05:b1:f7:8a:f9:f7:4f:
39:d4:b5:17:1a:08:14:93:43:0b:bd:ec:d7:6d:5a:
f4:14:54:19:f7:1f:83:ab:3b:83:77:dc:26:ec:ef:
c3:a8:e2:ea:5d:5f:dd:da:ad:cd:e6:97:f1:81:80:
a1:39:40:d0:ce:0d:0b:42:aa:32:c5:81:e5:f7:b1:
ef:d9:de:68:9a:4a:9e:eb:19:3a:8e:65:f3:8b:28:
39:1c:b2:b4:90:72:4d:d7:b7:a1:c2:22:3c:c0:c0:
94:00:dd:7e:aa:ac:8b:01:b1:71:1b:05:95:5d:d4:
1b:20:43:ac:40:6b:ce:70:63:ef:31:b2:02:32:28:
82:a4:f2:4e:2c:82:ae:53:b1:3a:ca:67:6d:11:9a:
ce:98:fe:fa:57:8d:d6:95:2e:ad:85:07:49:2c:87:
39:3d:c8:8b:80:a8:a5:80:43:a6:f9:bf:24:27:7c:
7c:1e:84:83:7c:7a:13:d6:ea:f5:fb:49:b6:ce:dd:
ee:6f:48:77:0a:3e:4d:71:b4:74:04:76:9c:62:4e:
ee:0f:b1:17:b3:00:c8:9d:b4:b3:b1:a6:2b:96:dc:
7c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:89:15:27:C6:19:70:EA:11:9E:2A:4A:56:AC:ED:9F:62:45:87:C4
X509v3 Authority Key Identifier:
keyid:0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/M4kVJ8YZcOoRnipKVqztn2JFh8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/DYcUK9wrPw0ISKDYALaTCxq7NLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.110.133.0/24
Signature Algorithm: sha256WithRSAEncryption
55:50:f2:27:fa:68:01:a9:b3:a2:6b:89:b2:91:cb:4e:06:34:
74:dd:42:3d:e2:55:27:41:f7:96:40:e0:1e:79:88:f7:16:e9:
35:86:d1:0f:8d:79:d2:d5:d1:f3:fd:9b:48:dd:e2:bc:a2:02:
96:5d:a1:e5:17:92:9a:b7:d7:c8:65:53:75:c3:da:a0:ac:3c:
6d:3c:12:72:0a:19:42:96:a3:22:3c:8e:76:4e:1a:e7:92:b6:
de:e0:30:45:57:31:7a:e8:8f:2d:2f:30:54:f4:3e:95:3a:40:
8d:38:99:a8:36:2a:bc:2f:06:ec:1e:04:70:ff:c5:2d:4e:5a:
bb:45:5b:71:00:ac:34:9e:4a:d4:9a:3a:60:e1:e2:83:c3:81:
d8:93:06:0f:57:89:e4:2b:c3:89:2f:eb:09:68:02:ca:bd:e0:
d3:0f:42:f0:95:da:9f:33:f1:3a:a9:d3:87:28:29:87:f8:27:
92:f6:8f:53:2c:5d:56:dd:bf:79:97:17:89:20:2f:fa:d1:c3:
8d:2c:91:69:7e:67:ae:18:e9:31:12:1e:22:4b:07:32:3d:31:
2f:11:f2:da:6c:8f:f1:4e:b9:18:2f:18:f4:5d:1f:67:07:6c:
b4:f1:67:b7:b6:31:3b:de:ab:ec:9a:75:62:b4:60:21:68:32:
8b:a2:1d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:09:57 2024 by rpki-client on console.sobornost.net