Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/MScMWY1Gk0BWmp0GZy9fjgZuURs.roa
File: MScMWY1Gk0BWmp0GZy9fjgZuURs.roa (raw, json)
Hash identifier: ZJYVnvGuEFrLCYSgIQrjy+nUw5GYLw9nN8xrhNiBMc8=
Subject key identifier: 31:27:0C:59:8D:46:93:40:56:9A:9D:06:67:2F:5F:8E:06:6E:51:1B
Certificate issuer: /CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
Certificate serial: 01856F14E3FC10A913FD66BD62BE6091A264
Authority key identifier: 0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/MScMWY1Gk0BWmp0GZy9fjgZuURs.roa
Signing time: Sun 01 Jan 2023 20:45:17 +0000
ROA not before: Sun 01 Jan 2023 20:45:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5593
IP address blocks: 212.110.128.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:e3:fc:10:a9:13:fd:66:bd:62:be:60:91:a2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
Validity
Not Before: Jan 1 20:45:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31270c598d469340569a9d06672f5f8e066e511b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:34:6c:84:ff:06:6e:b5:15:5c:fc:6a:e2:cb:
01:f3:13:51:d7:6f:e0:e9:67:ab:36:33:18:61:69:
e0:25:71:ca:b1:ea:49:50:f6:4b:ad:20:d5:ea:da:
4f:62:4e:99:d1:a8:52:7f:a4:2f:3e:6a:d7:d3:22:
32:24:2d:fc:78:ca:38:db:80:c6:fb:ae:0b:ac:9d:
ab:23:98:0b:03:d0:e2:2d:e4:9a:b5:27:b7:cc:ff:
61:11:0d:f8:63:99:c3:d5:01:33:38:9f:a8:1b:2f:
5b:69:f6:36:03:a5:44:a8:e3:29:5b:8f:95:ac:5d:
51:22:35:31:09:8d:af:50:51:a8:5c:95:b6:a5:a6:
b8:8f:17:d6:11:14:11:99:1e:2b:4d:02:a8:18:f4:
a2:77:5f:13:6b:07:bf:9c:da:fd:94:9d:46:2f:fe:
07:be:b7:03:1e:e2:9c:67:00:d8:fc:76:af:bf:53:
6d:2d:53:e0:ac:37:03:9c:d3:99:01:32:c7:89:9f:
1a:f2:75:2e:e9:6c:3b:ac:1b:ff:7e:c4:f7:cd:7c:
7b:73:91:30:9a:2a:6b:b5:cd:bc:98:81:4a:2c:11:
9d:b0:a1:51:de:88:54:b5:73:fa:9b:38:06:a0:06:
3c:74:43:24:fa:56:a5:07:f4:0d:8f:fd:9a:c0:91:
44:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:27:0C:59:8D:46:93:40:56:9A:9D:06:67:2F:5F:8E:06:6E:51:1B
X509v3 Authority Key Identifier:
keyid:0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/MScMWY1Gk0BWmp0GZy9fjgZuURs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/DYcUK9wrPw0ISKDYALaTCxq7NLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.110.128.0/24
Signature Algorithm: sha256WithRSAEncryption
27:6e:81:88:33:b1:a9:e7:0a:ef:1c:e3:83:da:48:59:79:91:
92:12:28:2d:26:f2:36:fa:2d:82:fc:ce:be:ce:e8:b3:8d:07:
8b:5c:e9:60:8f:f8:cb:06:b9:13:8e:28:85:c1:d4:9e:fb:73:
b5:54:4b:d2:74:c5:54:97:27:19:5a:fc:61:27:4c:f4:64:37:
15:de:ed:6a:34:9d:31:86:0b:d8:64:86:77:17:04:a7:cb:6f:
92:49:32:36:46:6d:e3:34:65:bd:ba:95:a6:66:32:52:65:c9:
55:a1:97:d3:0b:e3:17:f7:8b:73:95:10:66:6e:ba:7d:48:7a:
36:ca:03:37:17:d4:fc:70:cb:1b:dd:de:fb:79:17:a7:14:2d:
d0:6a:e8:1d:c7:f7:8a:5e:b2:f3:f6:00:4a:76:83:f6:d4:6f:
7a:f7:d3:cd:a3:4a:fa:9f:83:2f:ec:04:eb:d8:b2:e8:99:f2:
c0:9e:4c:3e:19:0b:5f:36:f1:d4:f6:15:91:4d:ab:ab:fd:c0:
49:13:90:65:58:b8:86:de:b2:44:a8:71:fb:fe:e1:cb:7b:f5:
2c:c1:04:fc:10:44:c6:b0:4b:e1:a1:5c:b2:bd:98:3a:61:f1:
29:96:0c:c4:aa:b3:1b:c7:54:db:0e:8c:7e:0f:62:7a:8b:95:
de:93:9d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:09:57 2024 by rpki-client on console.sobornost.net