Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/wq4XOwRRJmRLDDuGb0H1DJt9nnQ.roa
File: wq4XOwRRJmRLDDuGb0H1DJt9nnQ.roa (raw, json)
Hash identifier: jM9oQ/sdbl2wmgmf1oetS+3+BB8dv7ULOZ25WZEdxbo=
Subject key identifier: C2:AE:17:3B:04:51:26:64:4B:0C:3B:86:6F:41:F5:0C:9B:7D:9E:74
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 0190BF1C31FE131E6B5CF84CEDD209DA7DAD
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/wq4XOwRRJmRLDDuGb0H1DJt9nnQ.roa
Signing time: Wed 17 Jul 2024 05:13:34 +0000
ROA not before: Wed 17 Jul 2024 05:13:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 84.55.14.0/24 maxlen: 24
84.55.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Oct 2024 04:55:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bf:1c:31:fe:13:1e:6b:5c:f8:4c:ed:d2:09:da:7d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jul 17 05:13:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2ae173b045126644b0c3b866f41f50c9b7d9e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2c:d7:f2:d9:30:13:fd:63:69:34:74:7b:f4:
40:31:c9:b8:e8:be:f8:e4:43:1c:6f:53:78:4c:09:
70:13:50:12:22:35:8d:c1:cf:fa:27:d4:47:64:67:
66:fe:34:1d:6f:58:39:53:29:76:87:00:2b:cf:9e:
58:bc:ba:04:50:c3:66:f8:bd:8d:4b:2b:4c:55:61:
f4:7a:fd:1b:41:32:98:03:e2:cd:5e:47:71:4c:4e:
04:c5:5d:c7:20:ab:17:04:7f:ee:dc:01:08:57:7b:
33:bc:a5:fd:fc:a0:b8:60:8f:a7:8d:49:10:f8:54:
fc:a0:f3:92:fc:81:50:94:cd:e2:54:53:25:bc:6c:
3a:27:3e:70:3b:2f:11:87:67:f2:21:bc:0a:b2:6f:
ef:1c:2d:7a:9c:c6:b8:ae:87:92:56:c7:e7:3d:65:
fa:66:f5:68:db:da:6e:eb:d8:80:5b:e3:bb:bc:c0:
36:40:7d:9c:a0:4b:35:32:d8:f6:cd:48:9d:4c:ab:
55:7e:03:55:28:ac:a2:e0:29:c9:bf:9c:5c:61:f0:
3e:6f:f2:18:0d:4e:82:77:e0:04:76:c3:a3:d0:6d:
fb:e0:84:89:4e:7f:d2:be:6b:5b:76:0a:81:1e:56:
4c:37:e7:25:9e:91:89:31:56:e7:2e:ef:4f:a6:3d:
64:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AE:17:3B:04:51:26:64:4B:0C:3B:86:6F:41:F5:0C:9B:7D:9E:74
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/wq4XOwRRJmRLDDuGb0H1DJt9nnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.14.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:9c:1a:56:5f:34:05:c9:cb:00:51:87:73:0a:2a:87:b6:ae:
aa:45:a3:3d:37:a4:3f:49:37:53:73:da:05:86:42:5e:f7:e2:
65:f0:a2:17:c9:7b:18:a3:65:5f:9b:51:b9:c3:ba:05:e5:58:
f4:45:3d:2e:0d:eb:bd:92:07:12:6e:25:c7:dd:8a:4e:2c:83:
70:06:fc:63:df:53:d1:29:63:8c:bb:6d:9b:57:b7:b4:0f:cf:
88:9d:74:fc:45:ba:4a:92:8c:d1:86:c2:e6:33:09:c0:25:bd:
e3:a5:aa:61:a2:3d:66:08:5a:8f:55:06:10:31:ad:67:b1:ae:
0d:6d:fd:b3:00:5a:8d:51:b2:1a:2c:95:f2:4a:a1:b2:6d:0b:
81:1b:3b:11:2c:66:ad:f3:8b:23:c8:42:05:2d:9a:51:1a:4c:
86:90:c0:64:d1:ce:9c:50:98:7d:1e:99:c9:5e:37:06:0e:d7:
7a:3b:92:71:1e:88:56:2b:4d:ce:6d:00:58:8e:5f:c1:ac:b3:
34:cc:f4:d6:f6:8d:1b:de:78:87:09:8f:7e:78:9a:17:7b:eb:
e0:4e:a3:fe:de:02:03:7c:d4:24:70:3b:e1:4d:d3:b0:06:71:
59:dc:ac:5d:48:07:9f:1b:79:f1:88:5b:a6:d5:01:22:f5:4f:
05:d7:0f:d4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZC/HDH+Ex5rXPhM7dIJ2n2tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0
ZjgzYzQwHhcNMjQwNzE3MDUxMzM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmFlMTczYjA0NTEyNjY0NGIwYzNiODY2ZjQxZjUwYzliN2Q5ZTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCzX8tkwE/1jaTR0e/RAMcm46L74
5EMcb1N4TAlwE1ASIjWNwc/6J9RHZGdm/jQdb1g5Uyl2hwArz55YvLoEUMNm+L2N
SytMVWH0ev0bQTKYA+LNXkdxTE4ExV3HIKsXBH/u3AEIV3szvKX9/KC4YI+njUkQ
+FT8oPOS/IFQlM3iVFMlvGw6Jz5wOy8Rh2fyIbwKsm/vHC16nMa4roeSVsfnPWX6
ZvVo29pu69iAW+O7vMA2QH2coEs1Mtj2zUidTKtVfgNVKKyi4CnJv5xcYfA+b/IY
DU6Cd+AEdsOj0G374ISJTn/SvmtbdgqBHlZMN+clnpGJMVbnLu9Ppj1k/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMKuFzsEUSZkSww7hm9B9QybfZ50MB8GA1UdIwQY
MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut
MWY4NzQ2OTQ1NDgzLzEvd3E0WE93UlJKbVJMRER1R2IwSDFESnQ5bm5RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz
LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVDcOMA0G
CSqGSIb3DQEBCwUAA4IBAQBcnBpWXzQFycsAUYdzCiqHtq6qRaM9N6Q/STdTc9oF
hkJe9+Jl8KIXyXsYo2Vfm1G5w7oF5Vj0RT0uDeu9kgcSbiXH3YpOLINwBvxj31PR
KWOMu22bV7e0D8+InXT8RbpKkozRhsLmMwnAJb3jpaphoj1mCFqPVQYQMa1nsa4N
bf2zAFqNUbIaLJXySqGybQuBGzsRLGat84sjyEIFLZpRGkyGkMBk0c6cUJh9HpnJ
XjcGDtd6O5JxHohWK03ObQBYjl/BrLM0zPTW9o0b3niHCY9+eJoXe+vgTqP+3gID
fNQkcDvhTdOwBnFZ3KxdSAefG3nxiFum1QEi9U8F1w/U
-----END CERTIFICATE-----
Generated at Mon Oct 14 06:42:05 2024 by rpki-client on console-fra.rpki-client.org