Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/ZYElIK7pL4b8Xzv2oMgdCTt6Rf4.roa
File: ZYElIK7pL4b8Xzv2oMgdCTt6Rf4.roa (raw, json)
Hash identifier: MuKqFMxd85rUviLoUCDTGTMY+t013rdXGqSPQWnu+xk=
Subject key identifier: 65:81:25:20:AE:E9:2F:86:FC:5F:3B:F6:A0:C8:1D:09:3B:7A:45:FE
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 0190641075C2FD8C1C0B2742556A19F411BD
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/ZYElIK7pL4b8Xzv2oMgdCTt6Rf4.roa
Signing time: Sat 29 Jun 2024 12:55:18 +0000
ROA not before: Sat 29 Jun 2024 12:55:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 84.55.16.0/24 maxlen: 24
84.55.17.0/24 maxlen: 24
84.55.21.0/24 maxlen: 24
84.55.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 15 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:64:10:75:c2:fd:8c:1c:0b:27:42:55:6a:19:f4:11:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jun 29 12:55:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65812520aee92f86fc5f3bf6a0c81d093b7a45fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:11:20:7a:6c:1d:6d:1d:d7:cd:36:16:61:56:
96:7b:6f:2e:e3:d3:f4:7a:1f:79:ee:92:e7:19:c4:
8d:c0:ba:74:27:4a:94:5b:5a:2c:ec:c2:62:58:13:
23:ba:a3:fe:3d:15:80:2f:10:39:a0:c1:24:93:62:
fb:be:36:4c:41:95:f6:7d:5d:22:76:03:58:f5:bc:
b2:b2:77:01:5a:96:60:2f:aa:72:f5:b1:c1:9a:bd:
ed:f8:ea:8b:ea:b8:bb:22:c2:b2:1f:e8:d0:25:74:
e9:fb:b2:f7:f4:3e:ef:0b:32:5f:14:4e:18:af:d5:
41:8d:13:99:5d:69:9f:c1:c8:4f:b6:d1:48:54:f5:
71:8c:9d:16:06:fd:42:e5:2d:e6:0f:55:b6:f6:a1:
70:3e:e2:c7:cb:04:1f:97:fd:c7:0d:67:df:ea:d1:
00:77:e8:d4:6f:5c:64:9e:02:7f:4d:44:1a:be:3b:
41:88:17:42:e1:d9:38:3e:21:01:01:be:0d:e2:19:
81:fa:ac:44:da:05:44:4e:3f:ab:c3:38:3e:d0:46:
f7:19:06:85:d4:ad:61:4b:cc:87:65:e6:2d:15:0d:
aa:e9:52:39:83:1c:ea:a4:a9:29:ae:b3:36:92:1e:
df:3a:0a:99:79:2e:aa:09:e6:26:87:a8:8e:cf:96:
88:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:81:25:20:AE:E9:2F:86:FC:5F:3B:F6:A0:C8:1D:09:3B:7A:45:FE
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/ZYElIK7pL4b8Xzv2oMgdCTt6Rf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.16.0/23
84.55.21.0-84.55.22.255
Signature Algorithm: sha256WithRSAEncryption
61:80:8e:59:fc:2b:6b:a8:1b:4d:29:d0:d5:c9:1d:15:f5:13:
0b:45:44:ad:6c:d6:74:1f:2c:72:ce:08:a1:ad:df:6a:03:eb:
66:5b:71:28:06:bd:8e:89:cd:9a:0a:9b:68:0d:19:a7:e0:d7:
67:4c:fb:42:37:ff:01:ae:77:2a:a9:93:e2:d0:c3:9d:5b:14:
03:91:f0:f5:3b:25:a4:37:0e:2a:b2:13:0c:54:3c:09:c4:e3:
d8:31:f3:18:1f:e1:18:80:2c:46:69:67:ff:0e:f8:19:fc:ce:
44:1e:ad:fc:43:76:72:65:ef:1b:ef:47:c7:8b:7e:82:19:da:
01:d6:f3:6d:e1:11:e7:5d:8a:85:bd:23:51:59:b8:74:b6:96:
24:95:9c:ef:5f:92:a8:58:1e:c5:ba:a4:a4:8d:c4:1d:65:98:
f4:da:d9:aa:94:a0:70:e2:b9:63:6d:cb:17:f0:65:1d:0a:8f:
6f:8b:c0:f5:26:6d:22:31:a9:b2:11:21:8c:06:5c:d0:82:27:
90:4c:b0:cb:f9:6f:e0:e8:44:b3:f2:d0:99:b7:11:73:f4:de:
8d:c4:db:81:78:3e:a3:ad:9a:de:30:87:0a:2a:10:27:8c:82:
61:82:ad:06:31:09:25:1f:5a:52:a7:55:4e:4d:d1:a8:00:c6:
e3:99:64:30
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 15 09:19:46 2024 by rpki-client on console-ams.rpki-client.org