Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/rVfrIEAm65pn6jNLSE36iC3FpfQ.roa
File: rVfrIEAm65pn6jNLSE36iC3FpfQ.roa (raw, json)
Hash identifier: Kf/m1vs0TapPX7z0NXJCeSU3mwsPTZAbED44a1r+sd8=
Subject key identifier: AD:57:EB:20:40:26:EB:9A:67:EA:33:4B:48:4D:FA:88:2D:C5:A5:F4
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01961E46D0CD688FBD200774A9D92C7D442D
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/rVfrIEAm65pn6jNLSE36iC3FpfQ.roa
Signing time: Thu 10 Apr 2025 05:57:59 +0000
ROA not before: Thu 10 Apr 2025 05:57:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 84.55.9.0/24 maxlen: 24
84.55.10.0/24 maxlen: 24
84.55.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Apr 2025 11:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1e:46:d0:cd:68:8f:bd:20:07:74:a9:d9:2c:7d:44:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Apr 10 05:57:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad57eb204026eb9a67ea334b484dfa882dc5a5f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:df:d6:ce:7f:b5:e9:07:48:80:e5:9f:9f:39:
63:b5:2b:fa:df:f8:e6:e0:2d:26:5b:54:78:41:e4:
bd:53:ed:ce:dd:c8:00:47:9f:60:cb:7e:2f:0e:2c:
21:01:59:5f:0f:64:e4:69:9e:97:47:f8:37:ed:6f:
c2:7a:7f:da:ba:d9:9c:90:7e:d8:a6:9b:ec:f1:94:
01:95:e3:fd:6f:b6:dd:c5:bc:31:4f:2d:8a:8e:86:
cf:6b:30:c5:36:02:9a:8e:c9:53:d9:cf:10:fa:f0:
1a:68:6d:f2:ad:7a:c4:b5:b6:e3:c6:2b:95:4e:aa:
8f:00:f0:e5:5a:b1:a1:ee:83:a3:6a:b5:c7:77:81:
4e:8e:0e:8b:7e:8b:cd:77:75:45:58:62:e1:45:4d:
5e:21:f6:a7:e4:f2:e7:c1:76:9f:17:db:43:fc:7c:
2f:29:2b:13:64:66:3e:97:e7:cf:42:f7:d3:21:33:
c6:75:d4:99:53:17:f5:97:32:3a:c6:ed:2a:0e:38:
a4:ce:1a:23:0d:8f:47:a9:06:25:f6:94:00:a0:8d:
7b:bc:63:29:18:74:a9:c8:b1:65:20:f7:64:e7:93:
95:92:19:57:c4:fe:33:87:f3:83:5d:81:0a:f8:7a:
09:b2:6a:22:4b:54:ba:83:85:3d:a3:b3:71:d6:6c:
f4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:57:EB:20:40:26:EB:9A:67:EA:33:4B:48:4D:FA:88:2D:C5:A5:F4
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/rVfrIEAm65pn6jNLSE36iC3FpfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.9.0-84.55.10.255
84.55.18.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:43:a5:94:9a:2e:ff:56:79:77:f2:88:03:53:37:39:1f:f9:
18:80:64:16:5c:12:da:a1:58:a8:3c:8b:6b:35:c9:0f:d0:5b:
59:c4:c3:d3:e5:32:66:00:0f:7c:08:bf:a8:1f:06:ef:25:a6:
4c:42:55:7f:17:55:98:e8:ee:93:6d:eb:0a:75:31:d0:ca:f2:
73:72:83:95:3a:44:ed:a6:37:3b:be:bf:fc:80:36:33:65:0b:
a8:eb:9b:0e:64:4a:16:a4:f5:e2:16:73:e3:6d:7f:00:58:1e:
f9:fc:58:a7:f5:02:f3:04:3b:fa:59:c5:3b:f1:92:b6:fe:57:
50:b0:ad:c6:82:49:15:ad:77:89:1e:b2:63:f2:2b:31:b2:73:
8b:f9:6b:bb:8b:3b:12:06:f1:20:7e:57:18:2a:c2:7a:66:a2:
73:09:28:fe:61:bb:bb:41:bf:47:de:d6:cd:f1:17:c0:70:75:
89:63:48:5e:eb:a1:ef:61:df:c9:d6:71:5a:cc:22:06:0b:8c:
c1:5f:3e:90:0c:08:30:bd:46:97:94:51:f6:fd:6e:50:04:ef:
cd:40:f6:73:88:04:39:49:5c:45:b3:d2:fa:8b:e8:4c:6a:c0:
9f:33:f9:63:1d:c0:eb:61:ab:98:12:12:1e:7b:9d:7a:02:bb:
d9:ee:2f:69
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 15 04:02:07 2025 by rpki-client