Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/mPC8Qzy3dpR56-vpor59DPt9iDo.roa
File: mPC8Qzy3dpR56-vpor59DPt9iDo.roa (raw, json)
Hash identifier: /+OcXEqBjmHLERxDabPCTff5iI/ChcSfgmMfYTq4Tm4=
Subject key identifier: 98:F0:BC:43:3C:B7:76:94:79:EB:EB:E9:A2:BE:7D:0C:FB:7D:88:3A
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01933DE0E91C89877BF704C470ADADCB9BC6
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/mPC8Qzy3dpR56-vpor59DPt9iDo.roa
Signing time: Mon 18 Nov 2024 06:06:09 +0000
ROA not before: Mon 18 Nov 2024 06:06:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 84.55.14.0/24 maxlen: 24
84.55.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Dec 2024 09:32:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3d:e0:e9:1c:89:87:7b:f7:04:c4:70:ad:ad:cb:9b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Nov 18 06:06:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98f0bc433cb7769479ebebe9a2be7d0cfb7d883a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:56:e9:8a:33:d9:fb:1a:9a:0a:56:1a:90:ff:
75:92:87:03:ea:a7:ef:4c:e4:96:5f:26:cd:c5:66:
ee:30:59:fb:c3:ae:ba:da:ed:61:eb:86:06:08:e0:
92:f4:f7:97:0b:d1:e1:18:91:95:82:14:6e:6f:28:
9c:9a:91:33:1c:8c:98:5e:bb:1a:23:be:4c:b5:f0:
ff:73:88:38:8a:a0:b5:3b:7e:e1:c3:f3:7c:52:51:
7a:66:52:bb:91:bd:00:3a:eb:48:be:c5:2f:c4:c9:
19:6f:a3:bb:1d:fb:22:da:2a:ab:b9:b5:47:e7:b2:
ef:76:94:ab:38:dd:e0:2e:88:43:3c:74:5b:8e:b2:
ee:04:38:39:04:03:ba:e5:00:5d:15:db:1b:7a:d6:
b3:19:22:b4:82:3c:8a:e1:3d:88:0d:f6:78:a8:b1:
15:a1:47:f8:ae:bc:23:9b:5e:46:1d:70:c7:5a:c8:
cc:12:4e:da:ff:25:d1:26:1f:b2:d1:a0:bb:8c:c4:
bd:00:38:c1:e3:a2:4f:15:f7:2c:17:89:36:1f:77:
3c:f1:c4:cc:02:25:a9:5c:4f:f7:1f:e6:df:f5:cb:
cd:9e:81:e7:b1:8e:f7:66:da:eb:aa:9e:72:7c:d2:
a5:04:91:42:e3:fe:7a:1e:86:3a:67:86:2d:b1:56:
33:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F0:BC:43:3C:B7:76:94:79:EB:EB:E9:A2:BE:7D:0C:FB:7D:88:3A
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/mPC8Qzy3dpR56-vpor59DPt9iDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.14.0/23
Signature Algorithm: sha256WithRSAEncryption
27:f1:06:74:53:a3:83:48:98:9a:8e:25:e2:c6:85:9d:ce:1c:
e4:65:5f:8a:19:c9:4a:11:82:08:0a:46:61:c5:35:d2:b4:cb:
3f:0e:07:64:50:c7:cc:e3:91:32:e8:d3:1d:b5:d5:59:54:6e:
a4:88:34:64:53:4e:41:38:4a:27:60:14:9d:9e:11:95:9f:16:
f5:9d:32:78:c9:63:2e:02:a4:80:6f:2a:7d:a5:57:8c:e7:eb:
00:fc:7c:17:5d:40:a7:d8:e2:69:30:7e:fb:a9:a9:09:9c:32:
38:d2:83:58:eb:e1:f1:9a:7a:07:f8:be:65:26:d3:46:2f:ef:
54:50:55:b5:47:eb:3a:94:26:27:71:3c:08:10:89:2b:17:2b:
81:ed:be:67:94:63:a7:e4:43:7a:d2:d1:37:a2:d8:78:5a:39:
e3:41:42:35:04:30:30:29:c6:12:28:8c:68:3f:d7:e8:d9:b5:
25:4c:a7:b5:72:c1:4b:80:9d:57:c0:c2:cd:83:3c:81:b5:9d:
30:6d:5f:bb:6f:af:70:ec:4e:6d:1c:ca:11:f0:a0:45:05:3b:
f5:69:9e:4b:e2:94:fb:72:b8:89:04:12:51:d1:96:87:ff:a7:
a2:0f:e6:04:8b:e1:1d:d9:29:33:a7:1e:e2:09:9e:22:74:89:
4f:cf:45:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:12:10 2025 by rpki-client