Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/LF64aA59ngJVPsJ6Q9yBWuZDOXs.roa
File: LF64aA59ngJVPsJ6Q9yBWuZDOXs.roa (raw, json)
Hash identifier: NpjNRlvJWbOa9YXvK67TT+8lJI+3cMn+mlXmVI4AkJg=
Subject key identifier: 2C:5E:B8:68:0E:7D:9E:02:55:3E:C2:7A:43:DC:81:5A:E6:43:39:7B
Certificate issuer: /CN=cd979ccf10aff5f773694d9f43e5d5db472d6485
Certificate serial: 01856BCA4BD7A22C23062C8166BF014BC3AC
Authority key identifier: CD:97:9C:CF:10:AF:F5:F7:73:69:4D:9F:43:E5:D5:DB:47:2D:64:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/LF64aA59ngJVPsJ6Q9yBWuZDOXs.roa
Signing time: Sun 01 Jan 2023 05:24:57 +0000
ROA not before: Sun 01 Jan 2023 05:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200701
IP address blocks: 77.244.0.0/20 maxlen: 20
185.212.24.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ca:4b:d7:a2:2c:23:06:2c:81:66:bf:01:4b:c3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd979ccf10aff5f773694d9f43e5d5db472d6485
Validity
Not Before: Jan 1 05:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c5eb8680e7d9e02553ec27a43dc815ae643397b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:83:46:f2:7d:a4:b8:26:f5:6c:1f:6b:b5:8c:
83:d4:7a:99:68:27:a8:5d:da:b2:8a:e4:8d:8d:32:
d5:67:ec:4f:07:83:cc:3e:40:0d:2b:95:bc:f8:95:
fb:e5:ec:11:45:0c:a3:7e:04:f3:1b:17:de:16:0f:
91:a6:08:eb:19:63:70:37:c3:e3:fd:d8:3d:0c:4a:
51:e2:b0:ca:a7:0e:8d:ec:69:3d:8e:cd:ec:fc:46:
15:e6:cf:5c:1b:d6:fb:d5:f4:8a:7d:e3:bb:70:db:
1f:45:98:38:37:29:96:34:b7:52:67:96:27:d2:8f:
1b:b1:3b:4f:93:fa:e2:31:81:3f:aa:a2:f7:33:66:
46:fb:f3:75:a8:fd:c6:f9:c4:32:c5:ed:21:1d:5e:
96:15:36:48:9f:66:0a:eb:91:85:91:d7:5e:88:02:
ce:d8:53:4d:a5:1e:a9:d0:b6:4f:c9:7f:eb:35:5e:
a0:ad:5a:fa:83:ca:51:cc:4e:f4:52:06:7c:74:4d:
95:25:e9:da:02:6e:9f:c4:da:61:66:44:97:c1:b4:
39:01:79:f3:41:01:29:0d:23:9e:39:6e:e8:1b:9c:
38:45:cd:06:51:71:55:9e:10:6c:cc:26:b3:17:ac:
b3:a2:ef:6e:99:ae:f5:da:32:f1:4b:c8:42:3d:ea:
33:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5E:B8:68:0E:7D:9E:02:55:3E:C2:7A:43:DC:81:5A:E6:43:39:7B
X509v3 Authority Key Identifier:
keyid:CD:97:9C:CF:10:AF:F5:F7:73:69:4D:9F:43:E5:D5:DB:47:2D:64:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/LF64aA59ngJVPsJ6Q9yBWuZDOXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.244.0.0/20
185.212.24.0/22
Signature Algorithm: sha256WithRSAEncryption
66:ed:4f:61:9c:d4:7d:4f:97:d3:21:6e:2a:4c:3a:1f:7e:08:
0c:6d:04:d6:2f:35:3d:9c:85:36:77:66:51:53:aa:44:73:0d:
a9:a6:c8:2c:56:b2:40:55:08:e3:02:c1:c6:b2:44:a3:f2:b8:
fb:94:09:7c:44:b2:55:b3:38:ad:04:1e:b9:f3:80:fb:f8:b3:
a3:52:4a:f5:ef:c6:5d:9a:e4:3b:be:5e:10:44:99:a4:c4:ab:
24:8a:84:95:3f:53:9f:fa:b6:89:c4:64:e2:4e:b6:af:28:32:
50:60:25:77:b7:7f:5f:67:bf:3b:ee:13:e5:b5:d1:bb:ff:a0:
4c:86:c9:57:0e:9a:a1:ab:50:f5:56:86:67:12:17:ed:96:8b:
44:c9:9d:57:c6:64:e3:cc:8e:f7:d8:2b:15:59:d0:15:f5:e0:
78:f9:ca:e4:97:e1:57:b2:80:83:70:f2:74:bb:bc:05:68:a4:
9c:2c:d8:7c:08:43:39:8f:a1:60:40:48:cf:31:cd:e6:cf:db:
3b:5f:33:50:4d:1e:ec:1b:ad:c2:41:aa:7e:5e:5f:cd:58:62:
60:17:3f:b7:eb:1a:e6:85:fc:b1:05:83:df:e6:df:70:72:3c:
54:12:48:4d:5e:62:b6:a4:60:fc:4a:83:68:20:79:8e:de:0b:
20:9a:93:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:31:03 2024 by rpki-client on console.sobornost.net