Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/RD5k-XVLm3-gQzyj6fOCLqb0laM.roa
File: RD5k-XVLm3-gQzyj6fOCLqb0laM.roa (raw, json)
Hash identifier: 3BaEFVfqQe58ZNODUniGgi0EM9J4HaxGVOXd1nAVytQ=
Subject key identifier: 44:3E:64:F9:75:4B:9B:7F:A0:43:3C:A3:E9:F3:82:2E:A6:F4:95:A3
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01929427894FFCC81C232E99BE7B604BB25F
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/RD5k-XVLm3-gQzyj6fOCLqb0laM.roa
Signing time: Wed 16 Oct 2024 07:07:51 +0000
ROA not before: Wed 16 Oct 2024 07:07:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 84.55.14.0/24 maxlen: 24
84.55.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Oct 2024 13:04:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:94:27:89:4f:fc:c8:1c:23:2e:99:be:7b:60:4b:b2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Oct 16 07:07:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=443e64f9754b9b7fa0433ca3e9f3822ea6f495a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3e:63:57:5f:54:28:b6:9c:85:ed:52:d3:65:
1a:b5:dd:58:c4:8b:ba:21:e8:84:37:38:0c:84:60:
82:9f:15:b8:06:0f:72:03:bb:ed:ef:30:8a:27:b7:
8a:ce:fb:9e:66:66:e9:82:33:44:80:f7:83:93:6f:
3a:aa:5e:1f:93:9a:c2:64:39:b8:da:f4:45:6f:cf:
93:ec:95:2a:cf:25:3f:88:85:04:70:8d:2e:2f:b4:
f7:2c:c3:8e:39:e6:51:03:b4:03:16:f5:98:7d:37:
86:c8:b2:ed:36:34:d4:d6:3d:fb:c2:91:72:28:0d:
28:b8:78:6b:e2:1d:e8:8e:2a:94:42:f6:2c:a4:b0:
d5:e5:5a:89:3a:af:16:8c:cc:b9:46:b5:39:44:4b:
8b:1c:39:91:5d:85:6b:05:5e:9e:66:d4:0d:68:1d:
b3:fc:1f:04:22:d1:d2:19:f1:d5:80:ab:a4:7c:c1:
a7:6c:46:b2:d4:ef:f2:4c:ba:c8:a4:b1:f2:b0:ac:
b5:59:5a:c0:d0:2c:61:89:5b:2d:88:3d:7f:92:f9:
29:b1:a6:80:2a:59:66:77:e0:20:e8:c3:29:e5:58:
60:2d:51:bd:c3:f1:0a:fc:d9:d7:9a:c4:49:04:74:
f3:ef:50:24:19:70:8f:58:29:a9:ab:c6:79:dc:4f:
a9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3E:64:F9:75:4B:9B:7F:A0:43:3C:A3:E9:F3:82:2E:A6:F4:95:A3
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/RD5k-XVLm3-gQzyj6fOCLqb0laM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.14.0/23
Signature Algorithm: sha256WithRSAEncryption
76:4b:a8:95:21:ec:20:85:fc:84:33:69:a0:c5:30:f4:eb:c0:
19:0e:03:25:50:90:e4:c6:25:cc:fd:b2:ce:31:11:02:cf:7c:
dc:b3:9d:07:17:34:3e:bc:69:b9:11:60:c9:d7:39:cc:86:2c:
6d:5e:20:47:55:ee:35:e6:82:19:28:b7:65:2d:54:69:e5:56:
b7:e0:35:3e:08:89:05:b1:2d:05:f2:d8:57:d5:87:df:f8:11:
8a:49:85:0a:4b:38:b9:71:17:c3:c8:e7:5d:af:0a:65:1b:f7:
38:1b:23:e9:b2:58:13:c6:1b:e7:4d:0c:a7:05:06:b2:cf:2f:
f7:f1:eb:00:6a:dc:4c:6e:30:b6:90:63:ca:ba:d5:da:9a:da:
56:0f:9f:2d:5d:03:97:69:aa:d7:a6:49:8b:dc:d4:8d:26:4d:
4c:88:9e:92:46:be:d3:b3:ee:4b:7c:b1:98:d5:17:04:cf:19:
f5:c8:f3:3c:5d:2b:2f:7f:27:67:d7:4b:36:bf:ca:45:cf:6f:
6b:42:d5:35:c7:a3:8f:38:10:7c:ad:ef:89:b0:50:66:60:9b:
56:f6:69:5a:08:5b:ba:61:56:12:a2:44:e6:cf:81:31:a6:f6:
f0:1c:9a:36:4d:cf:92:06:23:87:77:a3:fa:88:b0:d5:a6:5a:
26:24:88:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 16:01:18 2024 by rpki-client on console-fra.rpki-client.org