Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/bIkWIryINbCaUd6Wo4T9tXDcqLI.roa
File: bIkWIryINbCaUd6Wo4T9tXDcqLI.roa (raw, json)
Hash identifier: 63F2YtoPOiSH4c+5iN5wQRFfX5jH43Xal6l+Ojblfho=
Subject key identifier: 6C:89:16:22:BC:88:35:B0:9A:51:DE:96:A3:84:FD:B5:70:DC:A8:B2
Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Certificate serial: 01856C65E447E62A5F72708EF286230FD3A6
Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/bIkWIryINbCaUd6Wo4T9tXDcqLI.roa
Signing time: Sun 01 Jan 2023 08:14:55 +0000
ROA not before: Sun 01 Jan 2023 08:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212910
IP address blocks: 77.221.58.0/23 maxlen: 23
77.221.63.0/24 maxlen: 24
77.221.60.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:e4:47:e6:2a:5f:72:70:8e:f2:86:23:0f:d3:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Validity
Not Before: Jan 1 08:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c891622bc8835b09a51de96a384fdb570dca8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:eb:0d:79:65:cb:d3:be:b0:9d:cf:04:b8:15:
0f:b7:e6:03:4c:13:8d:cc:8f:00:40:4c:86:e7:ad:
f6:7b:f1:49:90:7a:e4:f6:69:9c:07:77:1c:96:e9:
c8:9a:2f:e8:94:ba:6a:c4:fc:51:88:0f:ac:9f:cd:
5a:a3:ab:23:28:51:c3:30:ff:8d:e6:ee:f4:aa:81:
53:ab:80:a5:85:85:94:8a:cc:32:fb:f2:54:87:8b:
66:c9:4c:b6:0b:ac:8c:4f:58:49:a2:44:d9:9c:27:
a9:9a:d2:8f:7e:2a:87:4e:95:9b:43:69:25:52:09:
df:2a:bf:ed:93:5f:bf:23:e7:0c:e4:1a:6c:50:1d:
65:ca:77:37:8a:5b:1c:ad:70:ac:bf:5a:21:24:62:
12:9b:3e:a3:53:a8:63:b7:3a:01:87:44:ad:3a:8e:
12:4a:1c:32:1a:1d:2e:f2:7e:3a:9d:de:c1:75:6e:
93:ac:44:ec:40:f7:c7:92:58:92:d1:d7:00:d4:57:
f7:ce:e9:60:56:e5:e8:73:73:3a:8f:20:c4:1e:ac:
71:71:8c:eb:e1:37:05:a7:8e:da:d6:2d:ca:ed:ef:
8f:27:cb:6c:e6:ae:9a:44:75:d1:ab:cb:a9:de:e3:
1e:19:8e:91:13:3e:85:ff:26:f0:02:34:56:4c:96:
c3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:89:16:22:BC:88:35:B0:9A:51:DE:96:A3:84:FD:B5:70:DC:A8:B2
X509v3 Authority Key Identifier:
keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/bIkWIryINbCaUd6Wo4T9tXDcqLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.58.0-77.221.61.255
77.221.63.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:f9:1d:92:f1:ff:2c:f9:4c:d6:14:2b:7c:09:10:8a:47:ec:
52:0a:94:07:5d:52:45:f9:7a:9f:8c:c5:5a:13:bf:c9:5c:b3:
70:30:44:91:09:82:3d:d4:e7:ba:4f:1c:87:1d:c3:14:75:8c:
19:4d:40:38:53:04:1b:f5:22:9c:7c:e2:a1:d4:6a:84:ca:4c:
05:f0:f1:68:08:3d:d4:68:52:65:c7:cc:ce:ee:4b:85:db:c2:
55:8e:f5:16:0b:64:32:94:fc:0e:43:f3:d6:b9:c1:cc:a2:78:
57:54:ab:16:3a:a8:70:5f:44:50:1b:aa:c2:69:1d:06:ba:fe:
86:60:8b:eb:d1:72:d7:55:54:6d:a3:02:37:82:e0:13:25:67:
0c:31:10:42:28:2c:30:db:3a:e8:c9:f5:f5:75:09:a2:07:b7:
bd:e6:23:b2:64:42:f1:4a:85:67:c4:c5:2d:67:08:92:da:a1:
d9:3a:e9:8a:fb:85:63:d5:1a:6f:7f:de:8a:82:ec:7a:37:09:
71:4e:9a:31:c3:59:03:2a:0d:3a:7e:12:b2:d2:88:b1:67:2f:
36:17:c2:6a:4a:b4:16:a1:66:86:3a:7f:08:12:31:9f:5f:fa:
cb:cb:f4:4a:10:7f:8a:70:fa:ed:4d:8a:2a:04:38:64:93:f4:
05:03:28:1a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:16:31 2024 by rpki-client on console.sobornost.net