Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/9B8nO7viW9IqHMyu_BEEI4PQVtg.roa
File: 9B8nO7viW9IqHMyu_BEEI4PQVtg.roa (raw, json)
Hash identifier: q9P8y905Yt8DBJWNrRSBYg+CYSEChpmt8aMkpa5Rp+w=
Subject key identifier: F4:1F:27:3B:BB:E2:5B:D2:2A:1C:CC:AE:FC:11:04:23:83:D0:56:D8
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01949194F84727742118988216DC8DE1848E
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/9B8nO7viW9IqHMyu_BEEI4PQVtg.roa
Signing time: Thu 23 Jan 2025 05:14:06 +0000
ROA not before: Thu 23 Jan 2025 05:14:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 84.55.2.0/24 maxlen: 24
84.55.4.0/24 maxlen: 24
84.55.5.0/24 maxlen: 24
84.55.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Jan 2025 12:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:91:94:f8:47:27:74:21:18:98:82:16:dc:8d:e1:84:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jan 23 05:14:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f41f273bbbe25bd22a1cccaefc11042383d056d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bd:e1:8d:69:73:7d:74:de:92:44:36:54:64:
0a:fc:03:fe:9b:f8:1e:11:57:cd:47:c0:fc:e7:64:
23:46:9d:ea:4b:f7:ad:4c:0f:46:d7:dc:99:49:81:
92:dc:76:fb:9e:f5:90:ea:6b:bf:4b:22:36:af:61:
e3:51:e6:4b:9d:d6:50:40:b3:e6:5a:5c:27:b8:c8:
05:66:7f:6d:df:b3:df:e6:f8:a0:cf:a3:c5:1a:89:
fc:84:d7:d9:5b:3c:04:6a:22:b4:5c:0a:8a:50:a8:
b8:ad:72:02:c3:cc:0f:69:10:0a:c1:e0:fc:d2:0c:
2a:c2:df:b8:8d:09:ff:5f:d6:8f:34:f5:46:ef:71:
73:54:50:91:64:9d:79:7b:9f:26:07:31:33:3b:09:
4e:9c:12:6b:ed:7e:91:73:e7:1e:66:13:e2:5d:46:
fc:1b:c6:ae:fb:04:68:ca:bf:25:c7:20:e6:1e:fb:
32:3f:f6:86:2c:d1:80:65:b5:3e:0b:f7:46:47:43:
13:b4:8b:36:4a:ce:ff:1c:78:2f:b9:0a:f3:5a:dc:
b8:da:73:ee:56:94:ae:7f:eb:e6:0c:89:49:c8:21:
1b:a2:2b:b7:f9:68:b2:46:40:84:dc:b5:d2:2e:58:
99:bb:4f:ff:64:f8:7e:b6:23:13:55:fe:42:ed:d1:
d9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1F:27:3B:BB:E2:5B:D2:2A:1C:CC:AE:FC:11:04:23:83:D0:56:D8
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/9B8nO7viW9IqHMyu_BEEI4PQVtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.2.0/24
84.55.4.0/23
84.55.7.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:86:93:a6:d8:86:94:b3:5d:a5:f1:ac:04:05:db:68:43:67:
8b:cc:9e:12:0e:27:85:34:07:57:30:dd:ba:e2:2b:68:f8:c2:
40:c4:da:84:ac:a6:4f:55:ee:2d:0d:e2:71:d4:52:c9:f5:72:
32:14:4d:6e:22:dc:d8:92:74:39:95:d9:e7:8d:43:47:f1:32:
04:0b:34:44:c7:d0:a1:2a:8e:96:0d:8d:8d:71:28:1e:ac:f2:
41:59:fb:47:3f:75:18:8d:f2:2d:b8:78:ad:fc:cb:4a:ac:d0:
e0:1b:94:75:67:c6:69:77:85:a7:03:81:cc:d1:37:c7:40:49:
23:e1:ef:c1:b7:98:09:8b:80:b3:66:62:da:b6:f0:65:b3:91:
f1:64:91:76:cf:32:b3:e0:c2:61:58:e7:ba:62:28:10:07:0e:
b0:ec:cb:0a:56:02:0a:1d:14:61:aa:bc:c6:d5:75:15:0d:57:
8a:b9:c4:57:33:4e:97:7c:82:df:ed:7c:dc:3d:93:e2:9d:f8:
5b:9e:e1:60:4e:95:9e:c2:05:86:5d:81:c9:96:47:c2:5c:ae:
9c:d8:da:f4:c7:47:80:c0:53:fe:a3:e4:48:58:a0:05:e5:03:
e7:e3:f2:2d:d9:57:3d:2a:1d:c7:81:35:f5:ec:02:a8:de:b6:
9d:1a:98:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:46:48 2025 by rpki-client