Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/A_OFTrGgj-tUIo17wxB8BqW53ZM.roa
File: A_OFTrGgj-tUIo17wxB8BqW53ZM.roa (raw, json)
Hash identifier: zBY/8JbzK/D7uwLjKEjANSkjZH2HQnsgAmJJ82M213Q=
Subject key identifier: 03:F3:85:4E:B1:A0:8F:EB:54:22:8D:7B:C3:10:7C:06:A5:B9:DD:93
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 0192F612D1CAA828B47F0D7A1D06F13575DB
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/A_OFTrGgj-tUIo17wxB8BqW53ZM.roa
Signing time: Mon 04 Nov 2024 07:28:01 +0000
ROA not before: Mon 04 Nov 2024 07:28:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 86.110.36.0/24 maxlen: 24
86.110.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Nov 2024 13:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f6:12:d1:ca:a8:28:b4:7f:0d:7a:1d:06:f1:35:75:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Nov 4 07:28:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03f3854eb1a08feb54228d7bc3107c06a5b9dd93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f4:f2:06:d2:1b:2d:b6:d8:40:7c:a5:91:c3:
69:5d:2a:62:33:28:c1:ad:4c:eb:8a:d9:8c:1d:1d:
3e:de:bf:54:53:4f:a2:e5:10:ad:00:18:40:1c:af:
7a:3e:1c:68:bc:4f:a6:d1:45:98:1e:50:a9:c0:48:
26:33:80:ce:53:3d:c6:99:eb:5c:86:d6:0c:18:8d:
53:97:63:5a:80:e3:2e:82:9c:fe:97:f2:01:be:ee:
04:b4:75:16:cb:52:93:5d:4b:0e:e9:3d:86:bc:a0:
64:f7:1c:5f:18:0d:c6:85:f9:14:2d:c3:e7:59:6c:
4c:cd:70:7e:6c:91:03:c7:16:29:47:30:29:67:73:
de:26:14:63:ad:3f:82:21:9b:76:98:a1:27:0d:7c:
ab:da:8e:fc:fb:ea:88:c0:39:40:25:70:31:f7:c5:
e5:4e:d5:df:6c:2f:90:08:d8:e9:e2:2b:07:fb:50:
d0:90:07:bb:67:81:46:51:ca:b7:a6:75:8b:a1:75:
9e:3b:53:04:4d:56:13:72:7b:e6:61:8c:0f:3c:04:
36:a4:c3:98:dd:b9:1c:1c:29:7d:43:59:b0:d7:f1:
17:ce:7d:14:f2:42:61:c0:ae:31:0d:55:26:c7:0c:
51:1c:1e:71:a8:6c:f6:2f:5e:0c:8e:ea:d4:85:c5:
c1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F3:85:4E:B1:A0:8F:EB:54:22:8D:7B:C3:10:7C:06:A5:B9:DD:93
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/A_OFTrGgj-tUIo17wxB8BqW53ZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.36.0/24
86.110.53.0/24
Signature Algorithm: sha256WithRSAEncryption
99:75:79:7a:ee:b4:c0:2f:20:78:46:e2:69:06:e8:2f:eb:87:
61:80:dd:a3:b6:7a:a1:c7:5e:a4:35:20:ad:64:7a:33:a0:1a:
f6:90:0e:9d:8c:ab:51:a0:60:39:ee:51:e1:b9:e4:2e:39:23:
fb:75:fa:d4:c2:42:2e:c3:77:3c:c2:32:5a:6e:ec:5e:2f:88:
64:ac:07:4f:33:ab:b2:71:dd:6b:86:a9:ba:33:1f:f1:56:7d:
64:4d:c5:0e:38:a1:41:40:84:33:33:bb:05:01:64:9c:33:87:
7d:90:3e:29:4d:3e:dd:25:6a:c7:73:71:bc:e2:51:9a:69:63:
db:68:1e:a1:1f:d2:cf:71:3a:9c:55:4d:26:e3:f7:80:e1:95:
c2:e2:af:9e:b4:02:6e:c5:6d:3a:48:66:6e:86:b0:13:00:c7:
fe:ba:40:61:69:87:4c:03:18:5b:cf:f9:d7:33:85:1f:00:55:
f1:69:dc:6a:a5:74:93:96:1c:c8:fb:34:de:bd:e7:9d:6c:c2:
1c:6a:fe:bf:30:8a:45:98:19:11:8e:01:41:f6:f5:2b:ba:6f:
8d:f6:a4:86:ed:8c:a5:3b:3b:84:36:e6:9c:e0:03:90:52:0c:
6c:96:47:e1:ca:22:09:ea:9c:f9:47:22:c6:37:5f:83:3f:0e:
36:11:d3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 10 17:09:35 2024 by rpki-client on console-fra.rpki-client.org