Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/3VDfgVBxmlHxLaf1BhZUtXugflY.roa
File: 3VDfgVBxmlHxLaf1BhZUtXugflY.roa (raw, json)
Hash identifier: g+kLOlKKFZD74rSeTUmewNlHB0YVmtXDXBo1ZtuxmAE=
Subject key identifier: DD:50:DF:81:50:71:9A:51:F1:2D:A7:F5:06:16:54:B5:7B:A0:7E:56
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019107E3A39F4697727583DE33B31978150F
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/3VDfgVBxmlHxLaf1BhZUtXugflY.roa
Signing time: Wed 31 Jul 2024 08:24:04 +0000
ROA not before: Wed 31 Jul 2024 08:24:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42689
IP address blocks: 84.55.12.0/24 maxlen: 24
84.55.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jul 2024 20:08:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:07:e3:a3:9f:46:97:72:75:83:de:33:b3:19:78:15:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jul 31 08:24:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd50df8150719a51f12da7f5061654b57ba07e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ed:d4:ae:f7:69:f6:05:6c:c8:69:3e:7c:fe:
8b:6a:ee:9e:1b:cb:86:d4:3f:06:c8:09:3b:ff:36:
e0:04:78:52:51:fc:ea:1e:ef:74:7a:70:c8:a0:a3:
05:4b:fb:d4:c6:5a:41:1f:c7:92:b6:a1:25:54:8e:
72:1e:f3:b7:c2:07:77:d7:03:f0:38:9d:a9:1c:16:
2f:15:a2:27:96:ad:9a:65:8e:7d:49:d2:b9:9a:20:
8f:d5:34:0f:3d:5b:3e:4d:78:15:f6:12:39:80:a3:
ce:13:97:e5:59:23:b1:9a:1d:44:75:f5:ef:da:1e:
43:3d:87:6a:1a:5b:26:52:32:dc:9e:d4:bc:23:e7:
fd:ff:e3:71:cf:23:50:1f:05:48:9f:b6:53:bd:c7:
5e:ec:a3:b6:11:03:53:d7:23:58:66:d8:c7:8d:44:
e4:6f:8f:67:2a:94:55:0b:eb:dd:5c:26:cd:dd:29:
e8:ec:c8:58:c3:f3:81:58:ac:91:87:00:4e:eb:14:
13:52:a9:c4:0e:16:67:cc:09:91:35:13:bb:58:d5:
38:10:03:3e:78:6d:06:5b:ac:6c:3c:77:d4:91:77:
3e:ce:22:83:b6:ea:b7:85:31:58:7c:10:f6:0c:a3:
6e:01:cd:56:6d:5a:dd:93:c1:44:49:9a:52:7c:d8:
25:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:50:DF:81:50:71:9A:51:F1:2D:A7:F5:06:16:54:B5:7B:A0:7E:56
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/3VDfgVBxmlHxLaf1BhZUtXugflY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.12.0/23
Signature Algorithm: sha256WithRSAEncryption
45:c2:4b:22:1b:d7:7c:f8:6e:e0:96:5a:fd:c8:c2:51:d6:e3:
ac:42:8b:48:37:94:e0:41:30:79:35:aa:bb:4f:85:3a:bf:38:
5e:89:0f:a1:ab:e4:c1:98:fe:63:de:e5:48:c4:e4:61:03:f6:
0e:48:10:db:c8:1f:aa:1b:74:af:91:3a:5f:ff:26:d8:ee:3b:
16:3e:3a:e1:77:be:8f:98:db:76:82:7b:a7:6b:23:8d:79:68:
de:9b:96:ef:9c:1e:4c:49:88:09:16:63:49:34:f4:55:d5:7a:
e8:4d:75:f0:5c:97:ee:4a:a8:4b:eb:0e:34:13:ee:18:25:61:
54:10:93:8b:5e:18:4e:c0:1e:0d:55:53:05:41:c0:5f:08:03:
21:34:bb:c6:8a:4e:d4:bc:2b:3a:49:ad:7f:81:e3:b9:6e:b5:
dc:fa:64:9f:95:56:c7:dd:4f:8d:ba:a5:42:ce:c8:b2:38:9e:
8f:f9:ec:3d:33:e4:7c:6f:33:42:5c:d4:b1:bb:f8:92:42:8d:
90:58:00:9c:a3:fa:e4:b4:e6:50:3c:4f:3f:d0:b7:27:fa:35:
fd:3c:67:82:83:7c:03:88:c6:62:b4:f8:d4:4e:9c:04:87:8c:
13:7b:76:e1:9b:76:b1:a4:04:14:7a:89:71:09:af:99:c2:e8:
7d:43:e9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 22:46:35 2024 by rpki-client on console-fra.rpki-client.org