Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/6cDFamJrrp2o6RWq5xLzXzDRuEM.roa
File: 6cDFamJrrp2o6RWq5xLzXzDRuEM.roa (raw, json)
Hash identifier: IspWZHTdlNdeZD5ZpwThPonHBSo3nSOIzK8NPauAIYs=
Subject key identifier: E9:C0:C5:6A:62:6B:AE:9D:A8:E9:15:AA:E7:12:F3:5F:30:D1:B8:43
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 0195FAAD82018D87730DAB9F7B447D0C321C
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/6cDFamJrrp2o6RWq5xLzXzDRuEM.roa
Signing time: Thu 03 Apr 2025 08:03:49 +0000
ROA not before: Thu 03 Apr 2025 08:03:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 86.110.33.0/24 maxlen: 24
86.110.54.0/24 maxlen: 24
86.110.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Apr 2025 09:20:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fa:ad:82:01:8d:87:73:0d:ab:9f:7b:44:7d:0c:32:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Apr 3 08:03:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9c0c56a626bae9da8e915aae712f35f30d1b843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f2:24:77:fa:d1:94:c5:4a:3f:6c:01:7c:36:
a3:65:2c:d7:c9:bb:4e:fa:f8:29:ff:b4:48:0b:e9:
9d:fc:c3:27:f6:0c:d7:6c:3f:18:a5:c8:af:7c:97:
3d:cd:54:6f:96:06:9c:3d:4b:58:42:e1:64:18:34:
1d:94:8a:18:ba:7e:fe:9b:f8:b1:24:5f:48:8c:0c:
d6:de:84:88:9b:b1:e5:48:b9:53:0e:e9:31:c5:b5:
2a:b9:f8:96:d5:a1:da:b4:fb:f5:ab:97:36:e0:17:
2d:c3:61:3c:8c:df:33:a3:6e:5b:e3:63:23:61:41:
91:bf:b6:c4:89:21:93:9b:02:0d:d0:13:4f:00:24:
d1:23:7a:7e:e6:74:b4:c9:61:22:e8:88:bc:a5:30:
64:9e:88:cc:08:bb:79:0b:20:76:88:f1:13:5c:87:
01:b5:49:14:4e:1d:3a:8f:6f:26:35:58:f8:98:ad:
51:a6:dc:78:aa:84:5a:62:e0:92:36:37:fe:3a:02:
a1:9c:fb:5f:9a:91:66:44:98:3a:7a:06:84:ba:bd:
ba:ec:c6:9a:9e:e1:3b:14:1c:2f:84:38:d9:7f:b8:
43:e1:f5:3c:5c:69:28:0d:53:36:a1:14:7f:a7:68:
dd:ae:19:e0:77:66:a2:7a:4f:f1:fe:1f:20:5b:bf:
0c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C0:C5:6A:62:6B:AE:9D:A8:E9:15:AA:E7:12:F3:5F:30:D1:B8:43
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/6cDFamJrrp2o6RWq5xLzXzDRuEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.33.0/24
86.110.54.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:bc:1a:af:24:1b:5e:6e:05:10:ca:db:06:8f:a1:aa:2c:4f:
aa:61:2c:8e:1f:52:2d:9f:33:88:d3:72:a7:6a:b0:fd:d5:05:
40:11:d4:b6:f1:27:f7:87:7a:1e:9a:6a:a7:68:5f:cb:24:33:
8b:36:c5:e5:b4:83:2a:4d:fe:44:28:46:e2:22:e2:45:32:cf:
bf:6c:3d:6b:43:f9:14:98:78:24:ab:06:50:ef:38:5e:57:f3:
28:51:c4:0e:17:64:f9:b9:e5:9a:fa:a9:54:08:3d:b7:81:ed:
b4:44:c2:d4:20:8f:e0:74:d5:15:8f:80:2e:9c:7d:7e:9a:88:
bb:85:2b:1c:61:3a:03:14:f6:6b:58:3d:6f:d0:11:38:cb:97:
be:d6:9b:02:d8:60:f9:79:3e:b2:4e:50:d8:26:2c:9c:b7:98:
32:87:7d:4b:21:5a:1d:3c:bf:22:35:fd:98:65:f9:04:70:a0:
4f:98:21:79:bb:dd:bf:81:e1:72:c9:cb:c0:38:9d:e5:92:59:
c7:ac:c2:60:7f:c5:30:c0:32:18:f2:14:10:98:2a:0f:35:52:
c5:3e:73:1f:d6:3d:e9:22:53:58:e2:54:9d:0c:f2:d6:97:1a:
a7:1b:90:73:9c:c3:9a:4f:07:f3:e7:4a:63:a1:61:8c:8d:3c:
a8:f8:1f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:43:03 2025 by rpki-client