Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/6I-Mn3ZoVGOSAT9jc5-QXpmMOdk.roa
File: 6I-Mn3ZoVGOSAT9jc5-QXpmMOdk.roa (raw, json)
Hash identifier: j9qRcPhTGkAZCwdilOmwaXxEBva+VfOr7mBay3jptgw=
Subject key identifier: E8:8F:8C:9F:76:68:54:63:92:01:3F:63:73:9F:90:5E:99:8C:39:D9
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01948CC102196A3B4302DD530BE6EF9B04AB
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/6I-Mn3ZoVGOSAT9jc5-QXpmMOdk.roa
Signing time: Wed 22 Jan 2025 06:44:06 +0000
ROA not before: Wed 22 Jan 2025 06:44:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8881
IP address blocks: 84.55.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Jan 2025 05:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8c:c1:02:19:6a:3b:43:02:dd:53:0b:e6:ef:9b:04:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jan 22 06:44:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e88f8c9f7668546392013f63739f905e998c39d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5b:ee:24:72:bf:77:38:60:54:a0:7b:65:dd:
30:74:5c:55:56:ab:43:19:a5:ee:64:35:15:03:24:
0d:b4:f1:5b:eb:a9:bf:62:34:03:44:c3:c0:2f:18:
41:c0:43:70:5a:9c:0d:21:53:44:61:43:fa:21:73:
9c:b8:a5:db:86:a7:34:f3:ec:01:95:7d:29:be:f5:
e8:8a:55:62:1e:ed:10:d1:1d:83:ea:b3:21:5b:08:
02:9f:dc:6f:de:9b:93:47:c7:03:45:93:a0:d6:cc:
02:02:44:e3:be:a7:8a:ab:09:56:5b:a3:95:72:ce:
32:4c:87:2f:e7:ba:63:cd:13:71:90:b7:ad:c8:d4:
e5:df:71:fa:b8:07:78:f2:91:f7:9f:bd:18:8d:0e:
c5:dd:f7:28:11:41:8e:c0:c0:e3:0f:35:a8:8c:31:
ae:3c:05:9f:58:e8:c6:46:0d:b9:6a:96:38:89:63:
4e:14:a8:2c:b2:2a:37:8b:0a:60:ae:75:91:38:56:
bc:ee:12:df:23:81:48:c1:f4:57:89:b6:e3:dd:d7:
84:31:38:3d:4c:b5:2e:29:87:1e:52:c1:ae:1d:ed:
2e:59:0e:f9:f9:8a:f3:1b:d4:3c:e3:c2:8e:ae:90:
29:8e:2b:36:be:ac:30:db:1e:a8:52:ef:51:6a:04:
b7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:8F:8C:9F:76:68:54:63:92:01:3F:63:73:9F:90:5E:99:8C:39:D9
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/6I-Mn3ZoVGOSAT9jc5-QXpmMOdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.6.0/24
Signature Algorithm: sha256WithRSAEncryption
91:18:a3:1e:71:e1:85:bf:40:eb:0d:12:4a:e9:46:21:ae:e9:
ad:7d:f6:43:95:30:8f:e2:96:89:f4:a6:9a:c7:5f:6c:8f:4f:
d2:6c:32:7a:12:44:51:e2:92:45:30:99:8e:14:07:b3:40:5b:
d5:e7:4a:9b:e8:28:d0:9a:b3:52:0a:87:de:1a:5d:7b:99:ce:
a5:76:cd:6e:12:94:87:45:7d:5e:a9:da:36:54:f8:70:0f:87:
f0:7f:1d:1a:fa:3c:97:d3:1b:68:23:5f:09:5b:68:a2:c8:da:
1d:20:e3:08:56:c6:26:6d:6e:8f:93:ce:05:6a:8b:d6:c2:67:
ca:b4:9b:06:00:88:75:83:f0:8d:15:32:7a:b2:b3:45:37:a0:
40:34:a3:f8:97:f8:27:c5:f6:7e:a2:72:61:2e:01:1f:67:f7:
7a:ea:19:c5:b0:20:a6:6a:aa:98:d9:d3:e8:85:53:f4:e8:ca:
1d:5e:e1:af:16:c3:a8:70:b7:ce:c0:47:75:89:c7:fb:73:1e:
35:5e:46:dd:41:af:ef:80:14:bc:93:be:54:c2:57:fc:b2:25:
a4:cb:f9:26:da:90:9e:ab:f0:af:98:2e:06:46:71:5b:19:56:
e4:08:7e:d1:ed:03:79:09:5b:8f:72:4c:c0:9f:4e:e0:f4:68:
45:51:5b:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZSMwQIZajtDAt1TC+bvmwSrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0
ZjgzYzQwHhcNMjUwMTIyMDY0NDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODhmOGM5Zjc2Njg1NDYzOTIwMTNmNjM3MzlmOTA1ZTk5OGMzOWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFvuJHK/dzhgVKB7Zd0wdFxVVqtD
GaXuZDUVAyQNtPFb66m/YjQDRMPALxhBwENwWpwNIVNEYUP6IXOcuKXbhqc08+wB
lX0pvvXoilViHu0Q0R2D6rMhWwgCn9xv3puTR8cDRZOg1swCAkTjvqeKqwlWW6OV
cs4yTIcv57pjzRNxkLetyNTl33H6uAd48pH3n70YjQ7F3fcoEUGOwMDjDzWojDGu
PAWfWOjGRg25apY4iWNOFKgssio3iwpgrnWROFa87hLfI4FIwfRXibbj3deEMTg9
TLUuKYceUsGuHe0uWQ75+YrzG9Q848KOrpApjis2vqww2x6oUu9RagS3IwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOiPjJ92aFRjkgE/Y3OfkF6ZjDnZMB8GA1UdIwQY
MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut
MWY4NzQ2OTQ1NDgzLzEvNkktTW4zWm9WR09TQVQ5amM1LVFYcG1NT2RrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz
LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVDcGMA0G
CSqGSIb3DQEBCwUAA4IBAQCRGKMeceGFv0DrDRJK6UYhrumtffZDlTCP4paJ9Kaa
x19sj0/SbDJ6EkRR4pJFMJmOFAezQFvV50qb6CjQmrNSCofeGl17mc6lds1uEpSH
RX1eqdo2VPhwD4fwfx0a+jyX0xtoI18JW2iiyNodIOMIVsYmbW6Pk84FaovWwmfK
tJsGAIh1g/CNFTJ6srNFN6BANKP4l/gnxfZ+onJhLgEfZ/d66hnFsCCmaqqY2dPo
hVP06ModXuGvFsOocLfOwEd1icf7cx41XkbdQa/vgBS8k75Uwlf8siWky/km2pCe
q/CvmC4GRnFbGVbkCH7R7QN5CVuPckzAn07g9GhFUVtR
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:37:10 2025 by rpki-client