Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/pZmvhPt28RY7vSfISCimduKUC_s.roa
File: pZmvhPt28RY7vSfISCimduKUC_s.roa (raw, json)
Hash identifier: SWHoJivJBxIt/5K67zea1tWTJZOaMgwrB8K2Gr47RZQ=
Subject key identifier: A5:99:AF:84:FB:76:F1:16:3B:BD:27:C8:48:28:A6:76:E2:94:0B:FB
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 01896478ECFC9EA2F7392DDD50E8B2F49448
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/pZmvhPt28RY7vSfISCimduKUC_s.roa
Signing time: Mon 17 Jul 2023 15:29:53 +0000
ROA not before: Mon 17 Jul 2023 15:29:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 185.179.198.0/24 maxlen: 24
77.83.4.0/24 maxlen: 24
77.83.7.0/24 maxlen: 24
77.83.6.0/24 maxlen: 24
77.83.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:78:ec:fc:9e:a2:f7:39:2d:dd:50:e8:b2:f4:94:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jul 17 15:29:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a599af84fb76f1163bbd27c84828a676e2940bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:74:a7:2b:7d:7f:f6:45:fc:d5:c7:9d:a2:7b:
06:b2:7e:c3:2f:d0:6c:de:99:c2:0a:dd:2a:14:cf:
0f:38:61:b9:17:01:d3:91:f1:8e:52:8d:5b:b8:fd:
2b:95:cf:83:c8:08:5b:00:b5:cd:b1:b3:ad:b3:96:
2c:2d:83:25:c3:a6:ce:35:a9:0c:8f:dd:c7:c8:53:
97:ed:18:a9:35:6f:ee:2b:3b:2c:59:53:63:e4:21:
8d:23:b2:9e:61:04:fb:86:15:5f:83:b5:4c:0e:4a:
84:bc:5e:d8:51:04:6a:5f:55:71:75:44:a1:53:d1:
05:31:a9:44:fd:45:69:2d:93:d3:64:7b:17:35:c8:
6e:e4:38:6a:95:67:e8:3e:6a:24:d4:ca:eb:75:b7:
67:09:cb:dd:8e:76:1e:2f:d5:e9:ca:3d:07:54:77:
9d:03:7f:29:98:34:6a:80:a5:18:ee:85:61:39:b9:
c5:37:73:18:f1:5f:ef:99:35:6b:78:b4:4d:d5:cb:
33:29:32:3a:31:70:b2:26:6f:a3:89:a4:11:74:82:
ec:35:a3:23:45:be:48:c8:2f:f3:cb:97:33:d6:33:
b0:38:a9:55:2a:62:36:9f:4c:92:ab:bd:43:f6:3c:
19:72:a6:33:b4:aa:c9:9d:0c:09:b0:89:6a:4e:44:
78:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:99:AF:84:FB:76:F1:16:3B:BD:27:C8:48:28:A6:76:E2:94:0B:FB
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/pZmvhPt28RY7vSfISCimduKUC_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.4.0/22
185.179.198.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:07:44:7b:55:60:8a:9d:21:41:01:5a:8c:15:f7:6b:89:57:
89:52:a9:3e:f2:45:b8:66:3f:ce:9e:5c:5b:39:7c:0c:87:19:
d6:e8:ca:43:e0:b3:72:e6:95:a7:0a:58:95:42:d0:27:72:56:
b0:80:2f:e9:d2:70:8e:52:f4:6f:f5:f5:6b:48:e3:ff:2a:6c:
1d:68:8f:f1:3d:fb:cf:e3:e3:97:97:af:c3:ce:a8:e8:52:86:
fa:ad:e5:40:03:f6:43:7b:40:1d:2d:f7:0b:8e:d4:cd:1c:6c:
66:00:e7:2f:55:0a:ad:3a:de:8e:4f:31:4f:0b:a6:fa:8b:0e:
60:27:16:42:13:ca:4e:b9:cf:13:44:b7:63:16:45:74:58:c9:
37:c5:33:54:fa:eb:35:66:1d:97:06:94:76:e5:90:da:26:57:
ba:84:c4:e0:bc:03:5a:1e:96:97:01:52:d6:1a:02:d0:83:2d:
ae:61:21:3b:6f:7a:f3:51:78:0d:96:2f:ac:de:41:95:9e:5b:
f0:dd:30:48:74:2a:2b:54:6d:5e:99:7f:f8:3d:c2:38:16:7b:
71:e2:26:7a:ab:77:a7:be:4a:34:d8:3e:4b:31:0b:a2:87:47:
17:3a:3e:23:f3:42:fc:19:01:33:50:8e:72:9b:e0:17:1b:a7:
93:ba:98:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:34 2023 by rpki-client on console.sobornost.net