Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/5Jsa8ScIaAaxic_A2OXfxWcQ1c8.roa
File: 5Jsa8ScIaAaxic_A2OXfxWcQ1c8.roa (raw, json)
Hash identifier: dUL3Umdp5BfZ1qpkuF1ugp5vogTsa3j4GPeMuGIRIqA=
Subject key identifier: E4:9B:1A:F1:27:08:68:06:B1:89:CF:C0:D8:E5:DF:C5:67:10:D5:CF
Certificate issuer: /CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Certificate serial: 0185B1F2A9AF4633D51F97E5151B673169F3
Authority key identifier: DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/5Jsa8ScIaAaxic_A2OXfxWcQ1c8.roa
Signing time: Sat 14 Jan 2023 20:22:28 +0000
ROA not before: Sat 14 Jan 2023 20:22:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43019
IP address blocks: 77.75.92.0/29 maxlen: 29
77.75.91.0/24 maxlen: 24
77.75.89.0/24 maxlen: 24
77.75.90.0/24 maxlen: 24
77.75.88.0/24 maxlen: 24
77.75.94.0/24 maxlen: 24
77.75.94.64/26 maxlen: 26
77.75.95.0/24 maxlen: 24
77.75.93.0/24 maxlen: 24
77.75.92.0/24 maxlen: 24
185.206.203.128/26 maxlen: 26
185.206.203.0/24 maxlen: 24
185.206.201.0/24 maxlen: 24
185.206.202.0/24 maxlen: 24
185.206.200.0/24 maxlen: 24
77.75.94.0/30 maxlen: 30
2a0b:3f80:0:204::/64 maxlen: 64
2a0b:3f87:fc1b::/48 maxlen: 48
2a0b:3f87::/32 maxlen: 32
2a0b:3f87:fc20::/48 maxlen: 48
2a0b:3f87:fc19::/48 maxlen: 48
2a0b:3f80:0:203::/64 maxlen: 64
2a0b:3f80:3::/126 maxlen: 126
2a0b:3f80:2::/126 maxlen: 126
2a0b:3f80::/29 maxlen: 29
2a0b:3f80:15::/48 maxlen: 48
2a0b:3f87:fc1a::/48 maxlen: 48
2a0b:3f80:0:201::/64 maxlen: 64
2a0b:3f80:0:202::/64 maxlen: 64
2a0b:3f87:fc18::/48 maxlen: 48
2a0b:3f81::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b1:f2:a9:af:46:33:d5:1f:97:e5:15:1b:67:31:69:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Validity
Not Before: Jan 14 20:22:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e49b1af127086806b189cfc0d8e5dfc56710d5cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f7:ee:48:53:f8:97:b5:60:a5:df:09:8c:7f:
24:cf:30:c2:7e:93:47:cb:43:d4:2c:8b:70:f6:5e:
c8:a6:99:75:c9:12:fb:6e:49:ca:0c:6d:9f:db:7f:
ba:b3:d6:59:f3:c8:0b:21:ab:45:ef:5d:b3:d8:7a:
2a:07:36:b0:da:c6:39:ff:07:3b:9a:41:0a:3d:be:
a7:fb:f6:32:b0:99:82:29:ed:41:56:b3:48:5a:e2:
4f:86:fa:03:fe:f7:5c:bc:64:1b:99:b5:24:ea:52:
31:bf:0a:05:3e:32:c1:0f:1d:8b:7d:28:e3:68:e6:
0b:1b:05:31:85:1e:14:00:f9:3f:b6:09:43:56:3b:
fd:53:fe:c3:7e:45:80:a4:e7:c6:26:c8:b4:65:da:
f5:2d:3d:86:05:20:5b:e2:c9:f2:33:76:4c:45:7b:
56:82:d9:e3:b3:b8:ce:84:be:85:1d:5e:1f:a1:03:
e5:df:06:f5:ac:93:6e:51:4a:79:55:f0:d6:a0:32:
94:46:59:25:05:19:5a:58:05:8d:5b:2d:41:6e:67:
e9:35:38:70:b8:55:a5:8a:68:8c:de:ef:bb:15:06:
6d:a6:87:df:82:8b:a1:6e:6d:ae:cf:85:c0:58:53:
aa:9c:7f:26:de:e1:8a:6d:ec:d0:35:d5:53:89:93:
1f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9B:1A:F1:27:08:68:06:B1:89:CF:C0:D8:E5:DF:C5:67:10:D5:CF
X509v3 Authority Key Identifier:
keyid:DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/5Jsa8ScIaAaxic_A2OXfxWcQ1c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.88.0/21
185.206.200.0/22
IPv6:
2a0b:3f80::/29
Signature Algorithm: sha256WithRSAEncryption
02:3a:4a:8d:b4:59:9e:f7:b8:df:89:a2:f1:5f:8d:e2:e9:02:
87:1a:52:43:32:b0:62:d7:4d:40:2c:d9:53:1b:71:97:07:a2:
bf:15:76:13:4a:ad:05:c4:33:98:0d:97:42:63:12:5c:ae:4f:
2b:ae:e0:bc:82:ab:45:9c:87:8e:16:87:f7:52:60:1e:2b:14:
06:5b:19:33:0e:07:85:40:a8:67:5e:84:54:4f:39:28:dd:24:
07:80:ed:dd:a2:6a:ed:6c:c8:39:81:eb:2f:75:66:b2:7f:2a:
19:47:c7:5f:b3:e3:e6:89:4c:1e:ab:48:60:8c:f0:dc:2f:21:
d1:3c:05:99:15:d4:1b:bb:81:51:5d:36:1c:90:e9:e4:c2:c0:
a6:76:de:86:60:17:29:35:7b:4f:37:60:dc:03:4d:00:fe:99:
e5:40:d0:e2:ad:49:d1:f5:b8:fa:e3:c4:12:79:50:15:14:4e:
9c:25:ee:fc:c8:56:49:b3:bb:3f:6c:6e:1e:ca:31:cb:fe:f2:
a7:a1:4e:b1:49:f2:ec:98:b0:2d:ac:df:4f:bf:19:20:03:11:
b9:93:5d:eb:ed:40:cb:ec:ba:d9:8d:8d:7a:27:e2:82:bb:94:
9e:cf:93:7a:b5:ff:62:6c:8b:a6:ff:31:6e:d6:10:3a:88:c2:
0d:b6:11:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:07 2023 by rpki-client on console.sobornost.net