Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/vxLraiA0UhcxM1jqYpBmNl7GTLM.roa
File: vxLraiA0UhcxM1jqYpBmNl7GTLM.roa (raw, json)
Hash identifier: 5aZUmBQ5JbUHO/qwICgETAcca51MEQYMAjIqR7Yt/mg=
Subject key identifier: BF:12:EB:6A:20:34:52:17:31:33:58:EA:62:90:66:36:5E:C6:4C:B3
Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Certificate serial: 01856C65E25E8998555F7538D8422CC147E6
Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/vxLraiA0UhcxM1jqYpBmNl7GTLM.roa
Signing time: Sun 01 Jan 2023 08:14:54 +0000
ROA not before: Sun 01 Jan 2023 08:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62214
IP address blocks: 77.221.48.0/24 maxlen: 24
2a10:4941:30::/44 maxlen: 44
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:e2:5e:89:98:55:5f:75:38:d8:42:2c:c1:47:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Validity
Not Before: Jan 1 08:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf12eb6a20345217313358ea629066365ec64cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1b:ac:ab:3b:ef:6f:a6:5a:15:1f:76:0b:24:
21:54:61:3e:a7:c0:7e:96:f3:d4:70:81:89:d5:75:
e0:9b:9f:e0:6e:8a:ee:ab:5b:c6:84:60:c1:cb:8a:
2f:28:b3:73:96:b8:eb:46:3c:e4:06:1f:26:74:aa:
3a:a4:32:46:22:7a:69:70:20:da:6a:3f:2c:a6:e4:
61:ca:06:40:79:00:7e:a8:c3:9b:0c:da:05:25:85:
b7:17:f0:7c:0d:66:8f:83:6f:ac:17:66:9e:77:50:
5d:f5:4d:4b:fa:58:c7:91:38:62:6e:3b:ab:a5:bf:
a6:56:b6:7d:42:8a:06:c1:56:87:3a:68:68:14:8f:
30:0f:c9:ca:d4:fe:ff:30:b7:ec:24:84:f7:4a:4f:
53:de:21:99:d6:bc:bf:9d:2d:55:5e:70:38:d1:aa:
8d:06:29:0d:57:f0:f7:0c:db:fb:88:9c:ba:c9:f5:
c1:07:ae:45:af:2f:99:33:91:80:37:5e:32:7e:0a:
b7:6c:92:02:30:ca:89:e1:9e:ce:72:a3:c6:59:9b:
84:2d:91:93:aa:02:93:17:35:38:f0:fb:10:92:df:
ca:69:83:cc:ca:23:e9:9e:05:d3:4c:8c:7a:75:8b:
20:19:00:e7:69:c2:02:c3:24:eb:82:cc:9a:3e:c7:
68:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:12:EB:6A:20:34:52:17:31:33:58:EA:62:90:66:36:5E:C6:4C:B3
X509v3 Authority Key Identifier:
keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/vxLraiA0UhcxM1jqYpBmNl7GTLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.48.0/24
IPv6:
2a10:4941:30::/44
Signature Algorithm: sha256WithRSAEncryption
60:fa:92:d7:ef:9a:5f:c1:dd:ea:20:a2:e6:59:3c:0d:42:54:
43:d0:2b:a3:49:05:e3:aa:54:58:be:43:d1:e9:15:d3:7d:08:
c9:45:ee:30:88:5c:26:45:d3:52:2e:9c:35:0c:66:8c:d7:18:
b4:a3:1b:c2:8f:34:3d:74:6e:8e:59:9c:be:6b:fb:b7:e1:3e:
01:84:00:87:7d:d1:4d:52:b7:bc:5f:92:c7:11:19:b8:b6:ed:
d3:e9:f9:bc:32:8a:c7:54:02:8f:2d:39:21:58:0f:5b:38:39:
11:d5:2f:4c:3e:2f:a6:a0:a7:d2:1f:fb:0b:00:c0:d6:e5:40:
78:62:86:59:6d:2a:25:23:9a:67:4a:b8:74:ef:59:91:e5:5e:
6c:50:92:e1:f5:58:60:72:4c:38:27:54:c9:07:d5:56:54:f2:
e9:8e:d3:9f:1b:7b:34:6a:16:97:c9:f8:23:e4:9d:54:cc:86:
d4:48:41:92:2c:7c:67:3f:79:3b:bc:00:ef:f9:58:c6:6d:68:
40:f3:a6:d5:23:9c:45:55:b0:70:96:bb:07:95:13:f1:66:f9:
95:f2:fd:a2:c2:ce:6a:68:f2:98:11:79:ab:68:9c:c8:b5:35:
17:e8:b6:cd:9a:7c:c6:38:fa:09:75:5a:3e:0b:f3:73:63:ad:
a9:21:71:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:16:31 2024 by rpki-client on console.sobornost.net