Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/VunwMrcLtHfXQrpxRNDPVdGg5Bk.roa
File: VunwMrcLtHfXQrpxRNDPVdGg5Bk.roa (raw, json)
Hash identifier: Da9m5kd0hH/b/3NWs9ksw9Wn8GRb10uKTWENnBzGjDk=
Subject key identifier: 56:E9:F0:32:B7:0B:B4:77:D7:42:BA:71:44:D0:CF:55:D1:A0:E4:19
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019085042083A205F8805167241AF0D33455
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/VunwMrcLtHfXQrpxRNDPVdGg5Bk.roa
Signing time: Fri 05 Jul 2024 22:29:18 +0000
ROA not before: Fri 05 Jul 2024 22:29:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47585
IP address blocks: 84.55.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jul 2024 10:42:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:85:04:20:83:a2:05:f8:80:51:67:24:1a:f0:d3:34:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jul 5 22:29:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56e9f032b70bb477d742ba7144d0cf55d1a0e419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7d:f2:7b:50:0f:1e:b5:2f:19:df:c9:f2:22:
fa:88:3e:dc:6e:5b:20:03:1b:ff:b2:09:e2:43:f5:
3b:52:c8:55:12:e5:45:30:2e:1b:e5:8e:4b:8b:fe:
88:6c:44:34:f4:8c:d3:f3:5c:d7:67:ce:21:83:8f:
b3:3e:0c:94:50:bf:28:cf:b3:d4:4f:32:1c:75:66:
c2:6e:cd:90:e0:f0:6c:f0:96:d9:5c:fc:e8:fe:ef:
93:a1:87:e0:bb:c4:87:19:47:0d:fa:29:c3:45:3b:
0b:d9:21:2c:18:61:d9:0e:f8:30:f3:3a:aa:08:14:
35:fb:1a:92:e1:30:49:4b:cb:d2:35:21:83:7f:75:
3e:19:f2:8c:e1:4a:cf:0b:4e:b1:1e:b5:3b:92:e5:
f2:83:aa:cf:5e:7c:31:09:b0:9c:c4:21:7a:ce:74:
f1:4a:b3:cf:aa:ad:23:ec:dd:e0:28:16:3c:0f:ec:
e3:df:a8:b2:f9:1e:56:ba:8c:76:ea:38:4c:98:c2:
af:ce:43:ad:58:f4:fb:9b:0b:c1:02:27:d4:68:34:
b9:e3:15:d9:13:e8:40:d9:a4:fa:a0:81:9a:65:75:
dc:db:d1:83:b2:ec:64:41:9f:4b:11:7c:de:4b:5d:
23:c1:46:9d:30:a6:3d:e9:b3:39:59:e6:b7:93:97:
b0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E9:F0:32:B7:0B:B4:77:D7:42:BA:71:44:D0:CF:55:D1:A0:E4:19
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/VunwMrcLtHfXQrpxRNDPVdGg5Bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.20.0/24
Signature Algorithm: sha256WithRSAEncryption
47:62:bd:c5:d0:3b:c7:52:2e:95:1b:b7:e5:7a:93:1f:5e:1a:
18:b0:f7:b8:00:cc:c3:cf:9f:82:e3:0f:38:ec:ca:2c:32:d7:
f4:04:99:f4:13:15:d8:0e:ad:6b:d1:83:d2:82:88:56:c7:38:
0e:25:ef:4e:8d:d5:60:c6:4b:80:aa:08:68:f5:c0:3c:e8:c7:
ed:13:ce:28:12:63:c2:4e:9b:8d:35:d5:53:99:cd:a5:16:8b:
2e:fd:f8:a2:37:62:4e:e4:96:3c:5c:bf:c3:2f:da:da:11:27:
c9:f7:9f:46:12:e9:bd:32:99:c2:e6:db:cb:48:dc:d4:52:94:
ee:5c:42:d3:a5:5b:af:11:16:89:96:6e:c0:be:fd:1a:6a:75:
c2:4e:53:ea:b8:02:18:92:a8:f8:45:70:ee:b6:b2:e9:88:17:
3b:8e:50:18:ca:56:81:d6:e0:29:a8:71:2d:19:ea:0a:da:4d:
73:9b:ce:4a:d9:1e:27:53:62:59:97:da:a1:14:8e:86:0a:37:
29:4c:82:63:24:2c:56:18:b5:ca:67:4f:11:95:d5:17:52:46:
70:ec:c6:59:1e:94:af:0d:67:c0:b9:c5:65:a2:6e:ab:b5:d6:
b7:64:9f:07:69:21:8c:00:65:74:19:f0:ca:6b:e1:74:df:cb:
96:d3:a8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 12:40:22 2024 by rpki-client on console-fra.rpki-client.org