Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f5c020-e1d7-4fe9-83c0-a3be63b8572f/1/IBLMS2Z108Icpn6x-_chsY4YjuI.roa
File: IBLMS2Z108Icpn6x-_chsY4YjuI.roa (raw, json)
Hash identifier: TaLKsrJYrZatdc/U+b+XKUY52bVPKGLUAaxNdeGFUYw=
Subject key identifier: 20:12:CC:4B:66:75:D3:C2:1C:A6:7E:B1:FB:F7:21:B1:8E:18:8E:E2
Certificate issuer: /CN=6b85894a84baa0eca0e6ef44a992fc2ba00f5277
Certificate serial: 018570E752E2AC6F225FC863EFB926F3ACF1
Authority key identifier: 6B:85:89:4A:84:BA:A0:EC:A0:E6:EF:44:A9:92:FC:2B:A0:0F:52:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4WJSoS6oOyg5u9EqZL8K6APUnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f5c020-e1d7-4fe9-83c0-a3be63b8572f/1/IBLMS2Z108Icpn6x-_chsY4YjuI.roa
Signing time: Mon 02 Jan 2023 05:14:46 +0000
ROA not before: Mon 02 Jan 2023 05:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39582
IP address blocks: 77.79.95.0/24 maxlen: 24
77.79.94.0/24 maxlen: 24
77.79.93.0/24 maxlen: 24
77.79.98.0/24 maxlen: 24
77.79.97.0/24 maxlen: 24
77.79.96.0/20 maxlen: 24
77.79.92.0/24 maxlen: 24
77.79.106.0/24 maxlen: 24
77.79.111.0/24 maxlen: 24
77.79.112.0/21 maxlen: 24
77.79.120.0/21 maxlen: 24
89.106.31.0/24 maxlen: 24
89.106.26.0/24 maxlen: 24
89.106.25.0/24 maxlen: 24
89.106.30.0/24 maxlen: 24
89.106.29.0/24 maxlen: 24
89.106.28.0/24 maxlen: 24
89.106.27.0/24 maxlen: 24
77.79.64.0/24 maxlen: 24
77.79.68.0/24 maxlen: 24
77.79.67.0/24 maxlen: 24
77.79.66.0/24 maxlen: 24
77.79.64.0/18 maxlen: 24
77.79.65.0/24 maxlen: 24
77.79.71.0/24 maxlen: 24
77.79.70.0/24 maxlen: 24
77.79.69.0/24 maxlen: 24
77.79.74.0/24 maxlen: 24
77.79.73.0/24 maxlen: 24
77.79.72.0/24 maxlen: 24
77.79.78.0/24 maxlen: 24
77.79.77.0/24 maxlen: 24
77.79.76.0/24 maxlen: 24
77.79.81.0/24 maxlen: 24
77.79.80.0/24 maxlen: 24
77.79.79.0/24 maxlen: 24
77.79.85.0/24 maxlen: 24
77.79.84.0/24 maxlen: 24
77.79.83.0/24 maxlen: 24
77.79.88.0/24 maxlen: 24
77.79.87.0/24 maxlen: 24
77.79.86.0/24 maxlen: 24
77.79.91.0/24 maxlen: 24
77.79.90.0/24 maxlen: 24
89.106.4.0/24 maxlen: 24
89.106.3.0/24 maxlen: 24
89.106.2.0/24 maxlen: 24
89.106.1.0/24 maxlen: 24
89.106.0.0/24 maxlen: 24
89.106.0.0/19 maxlen: 24
89.106.6.0/24 maxlen: 24
89.106.5.0/24 maxlen: 24
89.106.9.0/24 maxlen: 24
89.106.8.0/24 maxlen: 24
89.106.7.0/24 maxlen: 24
89.106.11.0/24 maxlen: 24
89.106.10.0/24 maxlen: 24
89.106.17.0/24 maxlen: 24
89.106.12.0/24 maxlen: 24
89.106.16.0/24 maxlen: 24
89.106.15.0/24 maxlen: 24
89.106.24.0/24 maxlen: 24
89.106.19.0/24 maxlen: 24
89.106.18.0/24 maxlen: 24
89.106.23.0/24 maxlen: 24
89.106.22.0/24 maxlen: 24
89.106.21.0/24 maxlen: 24
89.106.20.0/24 maxlen: 24
37.77.3.0/24 maxlen: 24
37.77.2.0/24 maxlen: 24
37.77.0.0/19 maxlen: 24
37.77.1.0/24 maxlen: 24
37.77.0.0/24 maxlen: 24
37.77.4.0/24 maxlen: 24
37.77.6.0/24 maxlen: 24
37.77.5.0/24 maxlen: 24
37.77.9.0/24 maxlen: 24
37.77.8.0/24 maxlen: 24
37.77.7.0/24 maxlen: 24
37.77.10.0/24 maxlen: 24
37.77.16.0/24 maxlen: 24
37.77.15.0/24 maxlen: 24
37.77.17.0/24 maxlen: 24
37.77.12.0/24 maxlen: 24
37.77.20.0/24 maxlen: 24
37.77.18.0/24 maxlen: 24
37.77.23.0/24 maxlen: 24
37.77.22.0/24 maxlen: 24
37.77.21.0/24 maxlen: 24
37.77.24.0/24 maxlen: 24
37.77.30.0/24 maxlen: 24
37.77.29.0/24 maxlen: 24
37.77.28.0/24 maxlen: 24
37.77.31.0/24 maxlen: 24
37.77.27.0/24 maxlen: 24
37.77.26.0/24 maxlen: 24
37.77.25.0/24 maxlen: 24
2a02:4300::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:52:e2:ac:6f:22:5f:c8:63:ef:b9:26:f3:ac:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b85894a84baa0eca0e6ef44a992fc2ba00f5277
Validity
Not Before: Jan 2 05:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2012cc4b6675d3c21ca67eb1fbf721b18e188ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3b:c5:53:c8:a9:a5:ce:92:0b:5f:dd:55:2c:
c1:ed:a7:16:4c:f0:78:39:5d:6c:1a:19:e5:78:6c:
42:d0:a9:ff:c2:9f:df:8d:2f:cb:44:33:4f:05:50:
d8:dd:e5:11:4d:d8:c5:67:5c:92:36:7d:c5:ff:95:
73:cb:50:1b:f7:25:b5:fa:e2:7d:a2:98:82:70:b4:
a2:0b:1a:b8:3b:71:6f:c8:96:ce:5b:31:08:98:8d:
4a:fa:31:56:fe:7d:e1:b6:57:be:38:d4:2f:03:67:
3f:c3:46:3d:8c:ec:44:ed:c7:4e:1b:1b:58:cc:85:
6d:db:bf:a4:0d:11:70:09:c3:bd:8d:ee:4d:9d:61:
f5:7b:8b:61:7a:9e:15:4e:5d:01:03:25:5c:82:9f:
61:70:ed:b7:1b:ef:09:12:d5:f7:b5:ab:53:d7:0e:
66:77:63:dd:c7:88:99:6f:4a:10:72:df:2f:23:95:
74:f6:99:31:e5:64:80:ee:87:36:ac:76:eb:ad:98:
62:29:50:2d:23:29:cc:b1:7a:1d:e1:6b:fc:83:1c:
9c:6d:3b:52:4c:65:47:85:6c:c7:e4:e9:47:05:8d:
25:17:83:67:2d:ca:f9:16:38:8c:8b:41:c0:34:23:
d6:0f:b7:c7:eb:58:e4:30:97:bd:cc:5b:c1:43:4d:
92:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:12:CC:4B:66:75:D3:C2:1C:A6:7E:B1:FB:F7:21:B1:8E:18:8E:E2
X509v3 Authority Key Identifier:
keyid:6B:85:89:4A:84:BA:A0:EC:A0:E6:EF:44:A9:92:FC:2B:A0:0F:52:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4WJSoS6oOyg5u9EqZL8K6APUnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f5c020-e1d7-4fe9-83c0-a3be63b8572f/1/IBLMS2Z108Icpn6x-_chsY4YjuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f5c020-e1d7-4fe9-83c0-a3be63b8572f/1/a4WJSoS6oOyg5u9EqZL8K6APUnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.0.0/19
77.79.64.0/18
89.106.0.0/19
IPv6:
2a02:4300::/32
Signature Algorithm: sha256WithRSAEncryption
b8:2e:6e:38:84:43:84:85:d9:9e:d4:1d:54:fd:61:ad:f5:9f:
cf:50:99:c3:74:5d:6a:c3:6b:73:e4:51:59:09:e6:ef:c9:20:
5d:f8:29:ac:c6:89:a7:96:5f:68:1b:3c:a6:33:5f:83:c5:8a:
79:19:65:bf:c4:bb:38:91:39:7d:17:4c:89:34:d3:75:76:05:
00:89:0f:37:5d:93:5f:09:4e:53:e2:63:94:fc:8a:73:01:5b:
81:b9:33:ec:4e:7e:17:7b:39:61:a9:70:d6:7c:5c:1a:d6:05:
f0:94:a7:31:6c:a4:08:e3:ce:62:88:70:e0:e9:06:df:d2:c3:
69:a7:68:a5:89:7d:8a:03:05:78:db:ac:c4:75:70:7b:ba:8f:
d0:78:b0:f7:44:7a:e5:2b:4b:34:a5:15:0d:2b:a2:46:94:94:
98:a4:64:35:9c:58:f7:ae:27:b9:97:66:ab:40:29:79:75:82:
86:4d:08:7f:15:b3:68:31:22:35:4c:f7:f2:55:b6:09:d7:91:
08:35:d0:53:6c:4f:25:34:36:c3:69:73:3b:00:e5:12:bc:8f:
c4:df:59:bb:0d:36:94:e2:f6:f7:5a:2d:fd:34:4b:76:8a:78:
b5:42:0b:0c:a5:57:5b:52:b3:e0:3e:90:34:53:85:93:94:b9:
38:25:f9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 05:00:57 2024 by rpki-client on console.sobornost.net