Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/b8OgqSlowy0HHDvxZr3WkA2j8SE.roa
File: b8OgqSlowy0HHDvxZr3WkA2j8SE.roa (raw, json)
Hash identifier: IkmHklHKZ6YIlrGKI3dgSRswfbaTNCjQU0EGcazsZGE=
Subject key identifier: 6F:C3:A0:A9:29:68:C3:2D:07:1C:3B:F1:66:BD:D6:90:0D:A3:F1:21
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019289615C7448E0A338B1FF67269A97E07E
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/b8OgqSlowy0HHDvxZr3WkA2j8SE.roa
Signing time: Mon 14 Oct 2024 04:55:12 +0000
ROA not before: Mon 14 Oct 2024 04:55:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 84.55.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Oct 2024 07:07:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:89:61:5c:74:48:e0:a3:38:b1:ff:67:26:9a:97:e0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Oct 14 04:55:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6fc3a0a92968c32d071c3bf166bdd6900da3f121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:43:9d:1f:8e:5a:18:09:9c:4f:56:56:76:74:
88:da:7a:17:f6:f4:52:e4:e3:1b:c6:14:20:8e:1c:
2c:d3:e1:f0:67:b7:90:de:87:b8:b4:b0:39:d0:22:
ca:d2:1c:98:04:f9:b0:aa:36:16:2d:97:c1:95:c3:
ec:42:b4:2d:11:e9:de:30:00:7e:a1:c1:8d:19:7e:
9d:ca:7d:ba:c0:01:c0:48:74:bb:a7:76:85:90:02:
dd:92:12:2a:b9:6c:1b:a0:ab:77:42:48:a8:af:63:
f0:aa:31:a7:54:1c:38:6d:99:49:63:fa:1a:8c:64:
d4:c7:9b:0e:d9:c9:2d:ff:45:be:d0:0d:64:53:05:
c1:b6:7c:66:b2:f6:f4:09:93:76:62:1a:74:20:02:
06:5b:28:46:ec:03:66:d5:2e:2a:3c:5e:0a:ca:fb:
fa:6c:d0:fe:37:64:b7:04:cf:a7:12:ba:fc:29:65:
5d:93:f2:af:66:66:10:36:99:c6:cd:cb:46:1b:ea:
1c:ec:bb:51:0e:a2:1d:33:c4:81:3f:21:f0:5d:64:
86:6f:a5:b7:a0:30:ba:79:3d:e5:6c:d6:b6:11:c8:
28:2d:3b:dc:bc:32:90:aa:79:e8:ee:ee:c0:67:9d:
79:d8:f5:da:5b:36:40:66:b8:3f:01:2f:aa:46:49:
81:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C3:A0:A9:29:68:C3:2D:07:1C:3B:F1:66:BD:D6:90:0D:A3:F1:21
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/b8OgqSlowy0HHDvxZr3WkA2j8SE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.15.0/24
Signature Algorithm: sha256WithRSAEncryption
14:36:3e:ec:42:35:38:26:88:cd:05:19:56:fb:9d:ce:c2:3c:
f5:bc:99:a0:b0:9f:aa:a4:5d:97:c5:9a:96:0c:4d:7b:9c:cb:
f2:94:c0:a0:71:02:e1:5b:2f:22:5e:9f:e9:ec:40:c4:15:48:
a3:61:2c:d4:53:2d:a9:d9:f3:32:23:af:a7:cb:ec:3a:7b:b3:
2f:62:38:73:a8:c7:51:ae:f8:46:06:43:1d:d4:2a:3d:0f:00:
b0:89:ce:02:db:39:44:5f:21:08:60:aa:e5:d1:e2:f6:6c:13:
47:0c:43:3a:e3:39:72:17:22:22:f6:59:4e:9d:9e:f2:a6:99:
3b:3b:35:20:28:0b:d0:1c:77:0f:da:7b:8e:7b:e3:f2:06:c2:
bc:78:c7:b7:99:36:d0:8f:be:b8:85:3d:59:65:fe:7d:6b:47:
7e:c7:62:6e:89:2d:62:6f:90:e6:31:51:3b:d1:8f:34:93:49:
39:f4:f9:bb:7b:bc:14:51:bd:68:07:2a:f2:cd:d1:a6:36:38:
89:1e:6b:e3:5e:2b:db:50:f3:94:80:58:f0:df:72:c7:07:97:
66:f9:bc:89:9c:a8:97:d6:fd:a0:d8:71:96:74:c3:34:7d:fd:
92:f9:55:ee:8c:70:17:22:ca:79:91:49:15:84:eb:ca:ca:79:
dd:7e:b7:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZKJYVx0SOCjOLH/Zyaal+B+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0
ZjgzYzQwHhcNMjQxMDE0MDQ1NTEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmMzYTBhOTI5NjhjMzJkMDcxYzNiZjE2NmJkZDY5MDBkYTNmMTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEOdH45aGAmcT1ZWdnSI2noX9vRS
5OMbxhQgjhws0+HwZ7eQ3oe4tLA50CLK0hyYBPmwqjYWLZfBlcPsQrQtEeneMAB+
ocGNGX6dyn26wAHASHS7p3aFkALdkhIquWwboKt3Qkior2PwqjGnVBw4bZlJY/oa
jGTUx5sO2ckt/0W+0A1kUwXBtnxmsvb0CZN2Yhp0IAIGWyhG7ANm1S4qPF4Kyvv6
bND+N2S3BM+nErr8KWVdk/KvZmYQNpnGzctGG+oc7LtRDqIdM8SBPyHwXWSGb6W3
oDC6eT3lbNa2EcgoLTvcvDKQqnno7u7AZ5152PXaWzZAZrg/AS+qRkmB4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG/DoKkpaMMtBxw78Wa91pANo/EhMB8GA1UdIwQY
MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut
MWY4NzQ2OTQ1NDgzLzEvYjhPZ3FTbG93eTBISER2eFpyM1drQTJqOFNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz
LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVDcPMA0G
CSqGSIb3DQEBCwUAA4IBAQAUNj7sQjU4JojNBRlW+53Owjz1vJmgsJ+qpF2XxZqW
DE17nMvylMCgcQLhWy8iXp/p7EDEFUijYSzUUy2p2fMyI6+ny+w6e7MvYjhzqMdR
rvhGBkMd1Co9DwCwic4C2zlEXyEIYKrl0eL2bBNHDEM64zlyFyIi9llOnZ7yppk7
OzUgKAvQHHcP2nuOe+PyBsK8eMe3mTbQj764hT1ZZf59a0d+x2JuiS1ib5DmMVE7
0Y80k0k59Pm7e7wUUb1oByryzdGmNjiJHmvjXivbUPOUgFjw33LHB5dm+byJnKiX
1v2g2HGWdMM0ff2S+VXujHAXIsp5kUkVhOvKynndfrcK
Generated at Wed Oct 16 09:53:49 2024 by rpki-client on console-fra.rpki-client.org