Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/00AtWZ9N4akX1ejNlIELvWbVzfs.roa
File: 00AtWZ9N4akX1ejNlIELvWbVzfs.roa (raw, json)
Hash identifier: IqXOcAXglPXTc32Ymoz/wEL9jr11wnx4jgsCFJ/GPQs=
Subject key identifier: D3:40:2D:59:9F:4D:E1:A9:17:D5:E8:CD:94:81:0B:BD:66:D5:CD:FB
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 01926C9A1BF9936807909F23C8482E6CE596
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/00AtWZ9N4akX1ejNlIELvWbVzfs.roa
Signing time: Tue 08 Oct 2024 14:48:11 +0000
ROA not before: Tue 08 Oct 2024 14:48:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 393942
IP address blocks: 86.110.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6c:9a:1b:f9:93:68:07:90:9f:23:c8:48:2e:6c:e5:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Oct 8 14:48:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3402d599f4de1a917d5e8cd94810bbd66d5cdfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:48:58:c6:35:40:93:f6:bd:01:e4:8a:d7:33:
49:08:25:39:ac:76:f7:58:1d:3e:75:af:12:5e:9d:
3a:33:4a:43:83:e1:6d:ab:1e:2b:96:57:ec:a8:f6:
d1:c4:92:cb:8d:5d:9f:74:89:be:fc:f5:f4:7a:a9:
3b:c5:e4:ad:09:46:ec:56:6f:5e:3b:99:1b:a8:58:
ad:99:8c:15:61:5b:dd:29:13:8f:07:c0:c2:2f:6e:
ba:8a:29:1e:96:4f:97:17:86:9f:93:35:71:de:bc:
a6:82:43:a5:80:7f:8d:f7:41:28:eb:f1:18:e4:29:
dd:c6:d2:3d:78:58:c5:9a:84:94:a8:8f:7a:25:29:
54:f6:4c:f6:36:1c:5e:ec:a1:d7:a0:a8:5d:24:b3:
b8:25:1b:c2:7c:2c:cd:08:b8:20:77:03:ca:aa:de:
4d:60:41:86:7a:cc:76:6b:d9:14:e2:f3:20:02:35:
38:a6:a8:c2:7e:2b:1e:69:84:71:06:24:51:d0:44:
0e:f5:f9:1c:ae:65:82:e5:d7:fe:55:6b:c8:99:54:
32:d1:d0:a8:8f:d1:2e:90:78:da:62:f1:87:6e:f5:
a8:8a:bd:9d:8a:89:82:06:65:2c:2d:a5:99:e7:ff:
6c:93:0e:ab:38:c3:7d:c7:9a:34:af:91:29:af:28:
b6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:40:2D:59:9F:4D:E1:A9:17:D5:E8:CD:94:81:0B:BD:66:D5:CD:FB
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/00AtWZ9N4akX1ejNlIELvWbVzfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.47.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:a4:a7:86:e3:b4:08:a4:b7:27:4e:7b:23:fc:da:e6:be:55:
55:ad:92:b4:be:72:e9:9c:03:77:19:71:8e:0e:ca:9c:a6:a9:
3b:b4:90:da:9a:c3:e7:62:70:42:9a:95:4c:5a:a2:8c:a7:99:
e7:6e:53:15:fe:11:2b:9e:a5:bf:17:4d:59:57:1a:d1:22:7d:
c8:88:25:98:d2:74:9f:39:b4:a6:8c:f1:4e:f6:35:bd:b8:c3:
2c:b2:01:7f:3e:9b:89:ba:1d:ee:ad:80:2a:47:dc:e3:59:92:
c9:01:9b:d2:31:49:ae:f8:05:e9:c3:ce:6f:6e:6d:4b:ac:89:
dc:43:fd:92:e6:8b:3b:ae:df:64:c0:28:05:99:8f:eb:96:46:
8f:44:26:4c:3d:11:17:fc:54:f2:b0:59:47:5c:b2:37:a4:1d:
d4:fb:9c:04:1d:4e:34:f6:72:a1:cb:d7:0f:c7:52:59:49:f1:
e4:98:1f:93:d9:37:ee:0e:17:bc:9b:a8:26:9f:3a:33:bd:7c:
58:6a:9d:82:bc:ee:3b:07:c5:1d:7c:ad:f4:79:13:cb:d9:47:
b2:96:23:69:f7:b0:45:e1:ad:1f:94:92:eb:a6:78:53:a9:fe:
51:07:3b:af:0b:13:e6:23:39:94:c9:dd:5d:04:ba:c1:48:c9:
2a:0c:62:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJsmhv5k2gHkJ8jyEgubOWWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi
YjAxODQwHhcNMjQxMDA4MTQ0ODExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzQwMmQ1OTlmNGRlMWE5MTdkNWU4Y2Q5NDgxMGJiZDY2ZDVjZGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUhYxjVAk/a9AeSK1zNJCCU5rHb3
WB0+da8SXp06M0pDg+Ftqx4rllfsqPbRxJLLjV2fdIm+/PX0eqk7xeStCUbsVm9e
O5kbqFitmYwVYVvdKROPB8DCL266iikelk+XF4afkzVx3rymgkOlgH+N90Eo6/EY
5CndxtI9eFjFmoSUqI96JSlU9kz2Nhxe7KHXoKhdJLO4JRvCfCzNCLggdwPKqt5N
YEGGesx2a9kU4vMgAjU4pqjCfiseaYRxBiRR0EQO9fkcrmWC5df+VWvImVQy0dCo
j9EukHjaYvGHbvWoir2diomCBmUsLaWZ5/9skw6rOMN9x5o0r5Epryi2KwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNNALVmfTeGpF9XozZSBC71m1c37MB8GA1UdIwQY
MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt
ZDFhNzc3MmRiMDc2LzEvMDBBdFdaOU40YWtYMWVqTmxJRUx2V2JWemZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2
LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVm4vMA0G
CSqGSIb3DQEBCwUAA4IBAQAapKeG47QIpLcnTnsj/NrmvlVVrZK0vnLpnAN3GXGO
Dsqcpqk7tJDamsPnYnBCmpVMWqKMp5nnblMV/hErnqW/F01ZVxrRIn3IiCWY0nSf
ObSmjPFO9jW9uMMssgF/PpuJuh3urYAqR9zjWZLJAZvSMUmu+AXpw85vbm1LrInc
Q/2S5os7rt9kwCgFmY/rlkaPRCZMPREX/FTysFlHXLI3pB3U+5wEHU409nKhy9cP
x1JZSfHkmB+T2TfuDhe8m6gmnzozvXxYap2CvO47B8UdfK30eRPL2UeyliNp97BF
4a0flJLrpnhTqf5RBzuvCxPmIzmUyd1dBLrBSMkqDGJI
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:44 2025 by rpki-client