Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/8htM_OtTyLwwQytYXTfHVhLuEKc.roa
File: 8htM_OtTyLwwQytYXTfHVhLuEKc.roa (raw, json)
Hash identifier: M5a+qBwbr1+BKSogjA3pikOaNtXQezsoAcYjLUiBmTs=
Subject key identifier: F2:1B:4C:FC:EB:53:C8:BC:30:43:2B:58:5D:37:C7:56:12:EE:10:A7
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 01926DAAEF7002E283C3523B413E4DAD6FC4
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/8htM_OtTyLwwQytYXTfHVhLuEKc.roa
Signing time: Tue 08 Oct 2024 19:46:11 +0000
ROA not before: Tue 08 Oct 2024 19:46:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 86.110.36.0/24 maxlen: 24
86.110.54.0/24 maxlen: 24
86.110.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Nov 2024 07:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6d:aa:ef:70:02:e2:83:c3:52:3b:41:3e:4d:ad:6f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Oct 8 19:46:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f21b4cfceb53c8bc30432b585d37c75612ee10a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:72:af:16:d7:17:28:1b:b4:03:e2:54:7d:d7:
9e:0a:4e:33:bf:5b:86:5f:18:09:b0:6e:e2:09:bc:
2a:42:70:e8:13:13:2c:55:31:77:34:ce:9b:5f:11:
e2:f9:2e:43:a2:02:d8:a9:8d:d9:18:72:ca:8e:49:
aa:6f:f8:16:27:00:08:2b:cd:30:78:29:97:e8:1b:
e8:7f:e4:85:b0:76:b0:52:b0:33:ea:a2:2b:7d:9c:
e1:f1:4f:cf:7d:69:01:42:86:0d:f5:9e:8a:44:cd:
ee:16:10:d0:ce:af:23:c4:db:03:ec:95:95:ef:1b:
7b:cb:3d:68:5f:cf:45:74:33:8b:4a:fa:af:69:c0:
30:87:2f:0a:6d:4b:d9:77:4b:54:37:54:6c:ee:03:
96:64:61:8b:7e:c4:35:b5:4a:5f:d6:0e:3c:83:d8:
7f:44:00:2e:ba:24:41:de:e7:f5:2b:12:81:f0:c3:
e8:76:8f:e9:4c:2f:d7:6e:7d:ab:40:2b:be:99:b8:
eb:39:ef:b5:18:41:f1:26:46:d6:36:fc:1a:85:f6:
f8:c1:5d:5d:7c:e2:d9:16:df:30:0a:79:b6:a3:a7:
41:15:e2:7a:ea:b9:6b:82:db:8b:bc:b7:96:ef:22:
19:de:c4:84:e9:79:00:f7:b2:fd:09:0c:e4:25:26:
81:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1B:4C:FC:EB:53:C8:BC:30:43:2B:58:5D:37:C7:56:12:EE:10:A7
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/8htM_OtTyLwwQytYXTfHVhLuEKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.36.0/24
86.110.54.0/24
86.110.62.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:81:6f:5b:18:59:65:1a:46:9e:a9:e4:0a:8d:8f:e3:c6:aa:
f1:b0:10:05:9c:9f:c3:88:0b:57:c0:14:1b:5a:4d:54:78:77:
64:49:77:eb:43:91:4b:62:0a:73:0f:8b:e7:21:7e:5a:26:a3:
da:66:26:db:89:19:4a:b0:f8:0c:f8:b5:38:d8:6e:79:f0:5c:
f7:45:7b:fc:75:37:42:83:9b:c0:18:78:b7:59:97:58:99:e9:
ba:84:88:7f:c0:21:19:8d:7c:cf:53:94:cc:eb:dc:21:09:a7:
6f:37:40:f3:27:e8:6b:c5:a0:12:63:16:3c:b9:bc:81:30:84:
ef:21:94:06:6e:55:16:c6:fb:ca:59:cd:f7:a2:15:33:1b:2e:
98:51:e3:5f:1a:b9:96:df:70:4e:bd:49:69:c1:29:13:96:5d:
f1:bd:67:9b:91:3a:7c:2e:44:0d:30:81:23:32:5f:71:e9:d4:
28:94:98:65:62:69:92:b5:46:1f:08:e8:7f:a9:c7:0e:27:39:
ef:90:9f:cf:a1:5f:8d:ea:eb:ed:ee:35:36:1a:11:d5:c5:50:
20:a5:0c:b9:c6:64:ec:7e:22:55:a2:22:6a:9f:e7:59:4e:a1:
3f:d0:68:e9:81:66:7c:1f:c2:a3:cc:31:9a:b3:c9:bf:ad:b8:
fe:e7:08:18
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZJtqu9wAuKDw1I7QT5NrW/EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi
YjAxODQwHhcNMjQxMDA4MTk0NjExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjFiNGNmY2ViNTNjOGJjMzA0MzJiNTg1ZDM3Yzc1NjEyZWUxMGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XKvFtcXKBu0A+JUfdeeCk4zv1uG
XxgJsG7iCbwqQnDoExMsVTF3NM6bXxHi+S5DogLYqY3ZGHLKjkmqb/gWJwAIK80w
eCmX6Bvof+SFsHawUrAz6qIrfZzh8U/PfWkBQoYN9Z6KRM3uFhDQzq8jxNsD7JWV
7xt7yz1oX89FdDOLSvqvacAwhy8KbUvZd0tUN1Rs7gOWZGGLfsQ1tUpf1g48g9h/
RAAuuiRB3uf1KxKB8MPodo/pTC/Xbn2rQCu+mbjrOe+1GEHxJkbWNvwahfb4wV1d
fOLZFt8wCnm2o6dBFeJ66rlrgtuLvLeW7yIZ3sSE6XkA97L9CQzkJSaBiwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPIbTPzrU8i8MEMrWF03x1YS7hCnMB8GA1UdIwQY
MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt
ZDFhNzc3MmRiMDc2LzEvOGh0TV9PdFR5THd3UXl0WVhUZkhWaEx1RUtjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2
LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVm4kAwQA
Vm42AwQAVm4+MA0GCSqGSIb3DQEBCwUAA4IBAQAagW9bGFllGkaeqeQKjY/jxqrx
sBAFnJ/DiAtXwBQbWk1UeHdkSXfrQ5FLYgpzD4vnIX5aJqPaZibbiRlKsPgM+LU4
2G558Fz3RXv8dTdCg5vAGHi3WZdYmem6hIh/wCEZjXzPU5TM69whCadvN0DzJ+hr
xaASYxY8ubyBMITvIZQGblUWxvvKWc33ohUzGy6YUeNfGrmW33BOvUlpwSkTll3x
vWebkTp8LkQNMIEjMl9x6dQolJhlYmmStUYfCOh/qccOJznvkJ/PoV+N6uvt7jU2
GhHVxVAgpQy5xmTsfiJVoiJqn+dZTqE/0GjpgWZ8H8KjzDGas8m/rbj+5wgY
-----END CERTIFICATE-----
Generated at Mon Nov 4 08:26:38 2024 by rpki-client on console-fra.rpki-client.org