Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/HFi_zaQmFiTEDaI54cfb1FuZjwc.roa
File: HFi_zaQmFiTEDaI54cfb1FuZjwc.roa (raw, json)
Hash identifier: 087lVdGuu1weE1VZDnqaB7e8ObumaS3fnM6RtQVISnU=
Subject key identifier: 1C:58:BF:CD:A4:26:16:24:C4:0D:A2:39:E1:C7:DB:D4:5B:99:8F:07
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 0193BB55CC49312EAAB2C51B4982C8B8F4D7
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/HFi_zaQmFiTEDaI54cfb1FuZjwc.roa
Signing time: Thu 12 Dec 2024 14:46:22 +0000
ROA not before: Thu 12 Dec 2024 14:46:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 86.110.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bb:55:cc:49:31:2e:aa:b2:c5:1b:49:82:c8:b8:f4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Dec 12 14:46:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c58bfcda4261624c40da239e1c7dbd45b998f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e9:41:9a:54:62:23:b1:85:87:e7:a3:9c:c5:
5b:b4:e7:64:da:3e:a0:31:aa:25:4e:ff:36:02:8b:
64:ca:85:d1:e6:0e:55:ad:ca:d7:ed:a4:da:ec:e1:
f7:33:12:b9:56:c6:56:50:af:d5:47:9b:98:7f:41:
a3:a5:1a:99:72:51:a3:f5:48:53:5d:64:cc:11:27:
29:e4:bb:e4:73:43:fa:42:26:09:84:eb:1b:ef:85:
44:30:8f:f9:b7:68:fc:13:8a:08:7c:e3:ec:11:7b:
32:f0:17:16:e3:f5:91:bf:7e:e2:6f:ce:93:9b:78:
4b:81:b0:66:57:4b:b6:67:1a:27:2b:c1:4e:44:78:
9b:82:21:11:4d:03:f9:d8:32:42:54:ce:a3:08:25:
a7:26:32:76:b4:c7:74:e7:a0:72:9a:bc:de:89:5f:
52:2f:89:d9:19:53:2e:42:de:97:69:ae:3c:f9:ea:
a3:2e:2b:b6:a2:97:f6:37:28:8c:04:13:94:72:a4:
87:25:ec:0d:99:f2:76:1c:a0:f5:c1:9f:0f:5e:77:
80:71:99:78:16:3b:09:37:3d:ea:9c:0d:06:72:39:
42:da:c6:06:a7:f9:19:a9:64:04:25:c8:2c:e4:0e:
1a:80:41:17:e8:2f:fe:73:8b:d7:0f:7a:c6:40:4a:
d6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:58:BF:CD:A4:26:16:24:C4:0D:A2:39:E1:C7:DB:D4:5B:99:8F:07
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/HFi_zaQmFiTEDaI54cfb1FuZjwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.57.0/24
Signature Algorithm: sha256WithRSAEncryption
58:1e:36:1b:12:36:ee:b7:9d:5f:6b:f8:aa:b0:05:35:ef:cc:
54:a1:97:f6:07:b5:94:74:6c:a9:e4:84:18:79:53:b2:40:27:
75:bf:11:22:d3:0c:48:a4:80:0f:40:0f:aa:75:c7:f4:e0:f3:
af:49:88:d9:87:fd:c1:52:e2:c9:0b:6a:e3:60:f6:dc:5f:bc:
2f:5f:a2:67:0e:08:82:3e:e7:01:d7:8b:ff:7d:98:5c:1e:02:
26:5e:2e:dc:03:95:c0:8c:a0:22:5f:04:a2:db:8f:52:09:34:
67:04:68:97:20:bd:19:a5:f0:1e:b8:73:2b:57:1c:38:bb:51:
e1:9d:4a:4c:dd:24:19:09:fc:89:72:93:49:8b:1a:55:59:fa:
ae:1c:ba:01:7b:20:3e:30:2d:10:aa:1f:3a:36:55:38:03:f2:
ca:f9:3a:a4:f0:6c:7d:a2:63:29:3d:1d:0e:f0:6d:97:31:73:
11:22:35:d5:3a:76:01:68:c7:d5:ac:54:06:fb:c8:e2:03:71:
21:20:0a:6c:49:cc:84:09:0e:cb:2e:69:ba:04:36:31:0d:f9:
1b:90:46:87:0d:be:d3:89:35:b0:f3:ea:31:eb:d9:47:ab:88:
2b:7b:71:5a:60:bb:78:7e:a0:6d:ac:59:58:35:37:6c:13:b1:
a2:03:32:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:51:10 2025 by rpki-client