Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/iGjoKsBJ-dfLqE_YbmshAP8-lck.roa
File: iGjoKsBJ-dfLqE_YbmshAP8-lck.roa (raw, json)
Hash identifier: uYSw5BQBzKEcEOl81QFUnCR3u03hEmjvr8ZLgnfQofU=
Subject key identifier: 88:68:E8:2A:C0:49:F9:D7:CB:A8:4F:D8:6E:6B:21:00:FF:3E:95:C9
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 0190606C7388E08D4662CF4C2DDCC6297E2C
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/iGjoKsBJ-dfLqE_YbmshAP8-lck.roa
Signing time: Fri 28 Jun 2024 19:57:18 +0000
ROA not before: Fri 28 Jun 2024 19:57:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 84.55.17.0/24 maxlen: 24
84.55.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 29 Jun 2024 12:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:60:6c:73:88:e0:8d:46:62:cf:4c:2d:dc:c6:29:7e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jun 28 19:57:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8868e82ac049f9d7cba84fd86e6b2100ff3e95c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:62:9c:1d:7f:fc:5f:44:77:81:f8:18:f5:ef:
31:c6:8b:8e:6c:72:55:f6:67:1b:29:c2:e1:40:70:
f0:2b:e1:06:55:41:9f:3c:cd:d5:7d:f1:cd:ca:62:
38:65:fd:71:10:d4:3a:c9:b0:88:f1:1c:6d:c8:c7:
91:c4:06:68:6c:92:db:04:a1:6c:00:af:9c:23:6c:
d0:3b:e8:87:44:42:4e:d5:a2:03:ad:a6:86:6a:45:
54:c5:4b:8f:be:12:97:a8:4f:84:26:6a:44:ca:67:
fe:1b:4a:e9:12:80:0c:7a:6a:d4:8b:94:fb:f7:4a:
d7:21:35:0a:0d:2f:86:96:32:b9:7d:81:11:36:9a:
be:dd:97:e5:cd:88:b1:07:f4:62:9f:76:cd:8c:0b:
f6:b9:7b:7e:21:ed:e5:4a:46:8b:8a:8f:60:d1:ec:
7e:69:40:3a:c8:de:ce:57:4a:66:68:49:eb:90:30:
2c:ae:3f:c8:92:3b:10:00:f6:63:b6:0a:f8:64:44:
64:4b:1c:d2:1d:21:af:20:41:cf:a4:a8:fc:98:5d:
43:23:8e:f1:19:04:1a:8c:b0:94:20:63:c3:51:1e:
72:c1:b6:41:67:ab:24:26:82:ba:a5:c9:82:c8:fb:
8e:e3:42:76:2d:06:f3:d3:d8:34:3f:73:a2:b6:2d:
41:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:68:E8:2A:C0:49:F9:D7:CB:A8:4F:D8:6E:6B:21:00:FF:3E:95:C9
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/iGjoKsBJ-dfLqE_YbmshAP8-lck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.17.0/24
84.55.22.0/24
Signature Algorithm: sha256WithRSAEncryption
35:ea:2e:eb:ef:df:c4:1d:d4:55:0d:d6:20:e2:e0:51:00:c5:
b4:fc:fb:5a:4f:5c:83:79:90:56:5b:e7:36:04:a7:4d:d5:75:
11:12:6c:88:31:5c:f7:cb:0f:e6:e6:5f:bf:65:71:75:57:7c:
64:91:a1:8f:1f:59:f2:38:e7:5c:d8:a2:4b:d3:d9:0e:53:5d:
44:a1:4d:96:b7:fb:53:47:4b:01:da:5b:ff:df:2f:90:bf:a0:
49:2e:52:2a:5b:73:91:ca:a1:5c:0c:7e:4e:9c:b2:52:c7:f6:
3d:28:a1:64:39:2e:0b:ba:52:b6:2d:e3:34:0f:9f:8b:95:33:
3c:e0:47:e9:f2:aa:55:d9:10:66:4f:22:19:bc:b0:a1:8d:8e:
86:df:bd:4a:c0:ed:e0:5f:7f:33:9b:a4:c5:ab:0b:0f:74:e7:
aa:53:30:74:c5:55:75:28:ce:7f:8e:11:83:82:a9:bf:69:7a:
f1:e4:9f:da:64:f0:2c:63:8f:c5:66:82:21:27:8d:80:32:ce:
80:8b:c3:ea:72:59:77:5c:cc:7d:68:63:41:fe:83:b5:db:af:
c4:5a:7a:eb:fb:c0:8a:51:03:fa:cb:f5:99:40:8e:9f:4f:d1:
f7:5a:12:4e:4a:17:d3:7e:f8:77:13:56:65:d7:d0:3c:b9:aa:
49:06:9c:f8
-----BEGIN CERTIFICATE-----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Generated at Sat Jun 29 18:32:39 2024 by rpki-client on console-fra.rpki-client.org