Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/Be620U03lD1KDfnKMQiWqzDLGmE.roa
File: Be620U03lD1KDfnKMQiWqzDLGmE.roa (raw, json)
Hash identifier: VLgfwfr87cgl4pePJ9hI/jbE4hRrL/lUK3Zp3Rf+M9k=
Subject key identifier: 05:EE:B6:D1:4D:37:94:3D:4A:0D:F9:CA:31:08:96:AB:30:CB:1A:61
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 0193BB55CC9F7BAC13D0A6D4632917E43F59
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/Be620U03lD1KDfnKMQiWqzDLGmE.roa
Signing time: Thu 12 Dec 2024 14:46:22 +0000
ROA not before: Thu 12 Dec 2024 14:46:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6762
IP address blocks: 86.110.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bb:55:cc:9f:7b:ac:13:d0:a6:d4:63:29:17:e4:3f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Dec 12 14:46:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05eeb6d14d37943d4a0df9ca310896ab30cb1a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9e:b8:ec:af:58:02:1b:a5:f4:9d:a2:b7:92:
bd:b4:07:8f:52:a4:00:73:38:2b:c2:07:a1:bf:7d:
2e:50:64:f2:f1:2d:9b:73:b2:70:f5:2e:6e:09:e9:
43:ef:d8:dc:1b:ca:4b:f7:73:d8:95:fb:c0:8a:54:
b6:43:96:ca:4d:e3:bf:3e:5d:2b:88:98:51:2c:93:
e6:73:e4:7f:60:7f:e9:7d:71:18:08:07:23:a3:12:
9d:63:25:24:21:d3:09:12:82:fa:2f:77:43:f3:8d:
53:59:25:61:fc:00:eb:e5:13:99:1a:45:da:62:c9:
19:8a:b4:48:dd:0c:3f:0e:ac:37:50:0c:b3:68:5c:
17:1a:a1:34:0f:7a:26:00:0d:76:d6:4f:9e:35:b2:
22:6a:70:21:3d:c5:a0:76:40:ac:0c:7d:e0:63:58:
95:fd:58:ce:4c:78:07:69:76:95:5e:25:6e:1d:3f:
ad:c8:ac:03:6c:46:34:3c:3c:63:8f:6d:2c:2b:a2:
00:ac:8f:b4:a5:5e:36:4d:21:8e:89:27:55:e3:e7:
4f:89:f1:1d:9c:aa:99:6d:ad:e6:79:84:8a:dc:aa:
70:18:66:c2:c7:b0:7f:cc:4c:4c:56:7e:2e:8c:a4:
59:ff:92:05:c8:9c:f7:ce:4f:3d:5b:8b:22:fb:b5:
8f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EE:B6:D1:4D:37:94:3D:4A:0D:F9:CA:31:08:96:AB:30:CB:1A:61
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/Be620U03lD1KDfnKMQiWqzDLGmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.57.0/24
Signature Algorithm: sha256WithRSAEncryption
80:11:15:05:d6:18:a4:23:c0:05:ba:e7:38:17:43:92:f2:3f:
6e:04:a8:dd:fb:1e:97:e7:87:ab:d9:af:e0:47:66:98:8a:48:
c8:74:a2:ab:00:c1:ea:d2:3f:af:b1:18:e8:e7:4e:aa:bd:4a:
7e:a1:54:88:fa:14:42:a0:74:fd:39:85:fb:dc:61:d6:64:70:
53:b6:62:42:33:6f:c3:58:ca:6d:bf:74:7b:b6:c0:27:24:b2:
ff:ca:34:db:55:aa:00:b9:fc:c7:60:5e:b2:0a:f5:60:de:3e:
fe:c4:45:73:68:3b:54:13:5b:5f:94:b8:6f:84:55:ef:10:1f:
cf:21:28:07:58:3c:3e:39:12:18:02:82:fd:60:60:74:b0:64:
33:b6:51:46:1b:e8:bc:a7:36:bd:de:b0:aa:4d:a8:8c:ad:a3:
3c:db:d5:e3:9b:a2:4b:6a:b1:f3:85:13:d6:41:1b:9b:e7:9b:
78:ac:66:e1:9c:84:2f:a9:97:cf:ca:f9:bc:a1:4d:de:1e:f9:
ac:c7:6b:71:dd:7e:3c:b9:1a:bf:43:7f:9b:b1:26:c9:3e:9a:
df:38:b3:21:b2:08:a0:b5:fd:83:91:c3:1e:50:87:39:a1:63:
19:59:58:40:aa:e4:13:78:17:a0:5d:dd:b5:79:dd:88:cf:80:
a8:f6:05:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:44:02 2025 by rpki-client