Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/0cFcv9MA_vb7XXK5q8pyvcg1dfw.roa
File: 0cFcv9MA_vb7XXK5q8pyvcg1dfw.roa (raw, json)
Hash identifier: Xo/b6k0DNMCvgYP9WGM/deBbuKuwBeJCRAf1RdVPogI=
Subject key identifier: D1:C1:5C:BF:D3:00:FE:F6:FB:5D:72:B9:AB:CA:72:BD:C8:35:75:FC
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019289615CBECEBD6981BDC12927825F9AD2
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/0cFcv9MA_vb7XXK5q8pyvcg1dfw.roa
Signing time: Mon 14 Oct 2024 04:55:12 +0000
ROA not before: Mon 14 Oct 2024 04:55:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 84.55.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Oct 2024 07:07:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:89:61:5c:be:ce:bd:69:81:bd:c1:29:27:82:5f:9a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Oct 14 04:55:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1c15cbfd300fef6fb5d72b9abca72bdc83575fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9b:ba:08:6f:30:0c:1f:c3:b0:d5:59:f7:39:
ff:7c:02:4a:7d:2e:04:0d:ef:58:71:83:0e:d3:3e:
90:e9:85:cd:0a:62:80:c4:7e:13:cd:ca:27:9e:e5:
63:42:a3:e4:14:cd:20:82:e8:aa:73:c5:9f:84:8e:
ee:e0:01:c1:f6:f2:3a:2e:28:28:fc:0b:b2:8e:b0:
75:55:80:ae:ed:d4:2b:a0:a7:01:df:d5:ad:d7:f4:
35:24:9f:a7:69:ff:4c:78:44:90:34:c7:47:41:29:
02:6c:27:9b:c9:2b:fb:f2:53:60:b8:3e:06:05:fb:
18:2e:76:db:d9:e3:49:dc:94:de:02:5e:ba:50:53:
9f:4b:0d:e4:01:06:b8:f1:df:43:17:52:75:a3:98:
28:8f:55:be:aa:cf:a8:5e:6f:48:ab:de:ca:11:97:
21:8f:2f:03:c9:d9:53:fe:a4:2d:39:1a:ac:e8:4e:
9d:f5:84:ce:ef:ff:c2:52:06:08:60:48:25:66:f2:
57:ee:02:09:53:af:2d:04:0d:18:a1:4a:06:04:79:
c4:78:46:a1:0a:7e:e3:06:91:e9:5a:4e:db:74:67:
78:18:d6:31:a3:47:42:9f:93:69:31:be:e8:1c:99:
58:f1:1f:bf:a0:d6:6f:3a:6d:07:5c:61:88:48:a7:
0b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C1:5C:BF:D3:00:FE:F6:FB:5D:72:B9:AB:CA:72:BD:C8:35:75:FC
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/0cFcv9MA_vb7XXK5q8pyvcg1dfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.14.0/24
Signature Algorithm: sha256WithRSAEncryption
23:9e:9a:e2:5a:4f:30:3c:41:22:5a:c6:08:8f:40:33:31:f2:
47:a4:82:98:ae:19:95:f2:86:c0:9a:97:5a:6d:2c:2b:30:8e:
04:99:cc:e2:dd:50:a9:14:1e:14:53:d5:87:3f:1b:da:f2:74:
5c:2c:8c:64:79:3f:53:47:86:4e:ac:24:9c:fe:17:08:69:b2:
96:8b:77:d0:93:ad:01:eb:81:80:af:47:45:d9:13:3e:09:81:
fa:2c:54:7d:e0:52:9c:c6:33:c0:8d:06:1d:93:a6:ec:95:c2:
02:f7:a5:f8:da:69:74:e3:f3:d5:5a:e7:8d:f2:d0:5f:f2:29:
4c:eb:0f:76:f8:a0:a1:8d:95:e7:44:76:42:07:4a:cf:ca:e5:
79:4e:83:fe:22:0f:6f:33:c0:49:8d:15:2f:a6:08:dc:3a:e9:
fb:e5:50:1d:44:b3:ed:3b:0b:f5:ee:ca:1f:de:40:49:a8:c6:
c7:34:8c:d2:78:90:96:18:b1:07:51:d6:5c:27:7c:59:8c:8d:
9c:c5:31:5c:25:a9:77:b9:f1:57:be:85:0b:75:88:db:8b:2a:
fe:ff:66:78:96:00:65:02:68:21:76:b5:04:03:37:e1:93:3d:
a6:a3:e8:ce:4e:3e:56:7a:e4:3d:42:13:cb:2c:01:08:88:ff:
e8:fe:8d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 09:53:49 2024 by rpki-client on console-fra.rpki-client.org