Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/ILoQ1QX4t-9cO4_zCun5zbpuAHs.roa
File: ILoQ1QX4t-9cO4_zCun5zbpuAHs.roa (raw, json)
Hash identifier: n5yvn3q0Ujhj+DNKzDLGZk7JpYCJTMTMvtyyQzyRih4=
Subject key identifier: 20:BA:10:D5:05:F8:B7:EF:5C:3B:8F:F3:0A:E9:F9:CD:BA:6E:00:7B
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01964EEFA64E1AE23F68ECCDDF7403E68261
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/ILoQ1QX4t-9cO4_zCun5zbpuAHs.roa
Signing time: Sat 19 Apr 2025 16:44:10 +0000
ROA not before: Sat 19 Apr 2025 16:44:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 84.55.8.0/22 maxlen: 24
84.55.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Apr 2025 04:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:ef:a6:4e:1a:e2:3f:68:ec:cd:df:74:03:e6:82:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Apr 19 16:44:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20ba10d505f8b7ef5c3b8ff30ae9f9cdba6e007b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:11:02:5e:2e:ac:68:93:4b:ba:af:74:bb:8f:
70:fe:66:db:6f:ce:c2:b2:4d:a4:49:66:bb:52:e4:
2a:43:6d:67:a4:a7:b1:e6:01:ee:1e:eb:f0:62:cb:
cb:c1:85:26:c3:e3:a7:7e:e5:01:82:d3:19:e5:56:
87:ab:42:c0:5b:ea:5a:bc:90:4d:91:f7:5b:79:be:
cd:41:fc:9e:43:43:68:00:1c:6e:e5:c5:2c:57:f2:
14:22:31:77:06:b2:e6:2b:18:ac:34:db:73:d3:27:
0f:d8:0d:71:97:16:f8:3a:1c:5e:f5:39:cf:69:2c:
64:22:b1:64:d2:3d:2c:5a:01:80:10:4a:f7:e5:ba:
56:12:13:95:d9:87:93:c7:71:e5:bd:6c:ac:a5:5d:
df:75:8f:3f:56:eb:93:2c:f1:2a:73:eb:6f:ad:84:
6e:c6:89:6c:86:40:40:d5:48:b5:f3:ae:d0:30:a3:
e2:a9:e8:6b:64:0f:1c:5a:d9:ff:90:4a:41:34:93:
b5:b7:60:b7:30:98:79:08:3c:78:ef:c7:80:43:7f:
19:08:e1:1d:fc:f4:37:7b:8d:5f:26:14:a0:89:87:
72:4a:fa:83:a9:d1:db:f4:1d:f7:0d:76:79:72:a5:
ba:94:cc:f6:76:cb:62:61:13:66:db:5f:dc:ad:0a:
bf:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BA:10:D5:05:F8:B7:EF:5C:3B:8F:F3:0A:E9:F9:CD:BA:6E:00:7B
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/ILoQ1QX4t-9cO4_zCun5zbpuAHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.8.0/22
Signature Algorithm: sha256WithRSAEncryption
23:27:f9:8b:fb:6f:73:ca:47:a9:60:91:25:71:2e:67:53:b6:
3a:4b:35:4b:84:74:62:3b:38:91:3f:9e:15:1b:74:6d:5c:8c:
b5:4d:40:c5:10:66:b8:60:bb:25:3b:a5:b5:16:d7:0f:b7:f9:
20:f9:bb:66:95:bb:35:66:a9:2e:f8:92:e0:37:20:6d:b3:c7:
91:e7:ad:73:13:8e:a6:8c:5e:55:dd:11:15:d5:01:a0:06:4c:
26:3b:e3:ee:88:9a:39:c9:9e:08:66:1b:99:ce:6a:b5:b8:00:
70:a2:ba:86:69:8e:c1:3a:5d:87:8d:2e:cf:d9:d1:ce:df:9b:
2f:b9:7a:f7:d8:f1:80:8c:4e:56:06:0e:06:83:95:70:41:47:
d1:94:a6:d8:85:2b:b9:77:82:27:a5:32:c6:39:c0:1d:19:1c:
fe:66:cf:52:ff:68:ab:38:69:fc:82:a9:90:6c:df:a3:b6:11:
59:e1:98:70:a9:3c:01:b4:c4:e8:44:ec:7f:a2:3d:fe:24:bd:
a5:e3:ee:c0:62:e5:7e:f4:60:eb:a7:70:d6:d4:88:cd:6d:46:
60:57:ed:3e:29:ba:ea:22:f2:40:4f:b5:19:27:5e:c3:43:ad:
6e:a1:a7:2a:71:5d:4d:79:68:6c:8a:39:7b:1c:ea:11:95:3f:
33:56:12:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:55:22 2025 by rpki-client