Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/53I1knHviWLWXrUVf_T27UwSbpw.roa
File: 53I1knHviWLWXrUVf_T27UwSbpw.roa (raw, json)
Hash identifier: rPLGz6gCiDJmDwCewwJlqkoyQ8fLj7klCPbTeA/vlWU=
Subject key identifier: E7:72:35:92:71:EF:89:62:D6:5E:B5:15:7F:F4:F6:ED:4C:12:6E:9C
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 0194B570F638A05D6AE57C8AE3281F33CC35
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/53I1knHviWLWXrUVf_T27UwSbpw.roa
Signing time: Thu 30 Jan 2025 04:21:06 +0000
ROA not before: Thu 30 Jan 2025 04:21:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 86.110.44.0/24 maxlen: 24
86.110.46.0/24 maxlen: 24
86.110.54.0/24 maxlen: 24
86.110.59.0/24 maxlen: 24
86.110.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Feb 2025 10:56:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b5:70:f6:38:a0:5d:6a:e5:7c:8a:e3:28:1f:33:cc:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Jan 30 04:21:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e772359271ef8962d65eb5157ff4f6ed4c126e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:df:05:d1:30:ef:63:c1:17:33:11:a3:a9:6d:
42:fe:a2:94:a4:1e:41:4e:d3:ac:31:1e:97:6c:c2:
c5:0b:f8:f3:52:f0:48:dd:84:d7:98:99:33:de:93:
03:fd:6b:24:6e:6d:15:a3:d3:c4:5b:d8:60:1c:e0:
09:6e:7c:e2:79:0b:1b:da:33:c6:9e:7c:67:a9:9f:
ce:06:2f:ca:3d:ac:12:f6:6f:6a:73:37:14:30:0e:
b4:02:ff:57:87:0c:28:96:cd:2f:d3:1d:1d:ba:b3:
b6:b3:9f:e0:36:28:45:18:74:bd:9a:23:2c:50:60:
10:54:e3:de:00:5a:c9:5a:02:43:86:36:d0:54:33:
24:0e:fd:f6:d8:6b:92:00:05:28:ab:13:5a:b7:e2:
e7:74:7f:be:28:80:dc:e8:41:49:10:2a:ca:43:dc:
67:2f:0b:6f:98:6d:46:b8:c8:cc:c1:47:da:ee:a4:
ad:6d:2f:86:94:5b:7d:15:c0:90:51:9c:81:1b:b7:
97:9f:61:b2:a4:cd:2a:2d:87:d7:f0:12:2e:23:9b:
c7:07:d7:e3:01:26:06:73:21:43:ce:92:b8:10:3b:
ba:6a:3b:0d:01:9c:ed:da:77:83:26:b3:f6:30:e4:
af:6c:ff:e9:05:2a:75:e9:87:83:b1:1d:9d:2b:92:
36:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:72:35:92:71:EF:89:62:D6:5E:B5:15:7F:F4:F6:ED:4C:12:6E:9C
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/53I1knHviWLWXrUVf_T27UwSbpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.44.0/24
86.110.46.0/24
86.110.54.0/24
86.110.59.0/24
86.110.63.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:c7:8e:b9:bd:06:b5:c2:23:a1:7b:b8:83:61:ea:44:03:5d:
77:bd:5f:38:37:05:be:5a:1b:ce:50:91:79:e4:cc:0f:76:fa:
1e:b6:86:5c:c1:90:7b:3a:56:7c:78:bb:7c:52:52:55:f6:4b:
10:ca:19:aa:8d:6f:b9:80:16:8a:c9:51:9c:6e:ac:8a:cf:82:
d4:93:f2:bc:09:24:d2:92:12:e8:40:ce:6d:8d:77:c8:24:81:
15:a7:12:c3:29:38:db:8c:36:32:c9:a8:7a:1f:d8:92:35:e5:
6c:25:eb:7f:fd:62:85:91:4e:20:ba:1c:0e:0f:9a:6c:c9:f4:
87:32:90:f8:d4:db:01:56:30:10:5e:a1:ef:4a:8d:1c:0c:fc:
3a:a6:88:47:02:0c:1e:4d:b5:c0:53:1b:f1:7e:97:91:66:e3:
4a:30:93:4f:0d:c9:44:3e:bb:b5:55:43:40:16:01:c5:94:fd:
ef:95:b6:58:2a:f9:a4:d5:7b:a9:ef:5e:41:07:1c:19:b1:b6:
9f:40:31:33:59:7e:ec:98:f3:e0:fe:ec:5f:e5:cd:0b:3b:bc:
e9:a2:7b:82:82:09:d5:b5:c8:ef:c7:ca:ef:e5:c1:62:21:03:
a2:24:81:2f:e7:7f:57:60:88:5b:3d:35:41:91:7e:57:08:64:
16:c0:87:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:26:56 2025 by rpki-client