Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/LwHQ9oPxUrGkz0BGOrb0PR8AB7o.roa
File: LwHQ9oPxUrGkz0BGOrb0PR8AB7o.roa (raw, json)
Hash identifier: 7+765kDbt+1q77OPaxwf2CPmjhm4M/4ESuZGM+M7wUY=
Subject key identifier: 2F:01:D0:F6:83:F1:52:B1:A4:CF:40:46:3A:B6:F4:3D:1F:00:07:BA
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 0193B00E39388FEECFE47992165B90A6BB36
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/LwHQ9oPxUrGkz0BGOrb0PR8AB7o.roa
Signing time: Tue 10 Dec 2024 10:12:22 +0000
ROA not before: Tue 10 Dec 2024 10:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202656
IP address blocks: 86.110.33.0/24 maxlen: 24
86.110.40.0/24 maxlen: 24
86.110.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b0:0e:39:38:8f:ee:cf:e4:79:92:16:5b:90:a6:bb:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Dec 10 10:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f01d0f683f152b1a4cf40463ab6f43d1f0007ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a7:68:ff:c4:7b:30:72:26:1f:e8:91:a8:9e:
63:03:f1:37:e0:30:91:8c:74:43:d5:14:73:24:98:
52:78:f0:20:ca:bc:f2:19:45:74:5c:ea:b8:b6:8e:
a1:62:1a:3b:ca:d1:87:ec:12:d0:d4:32:bd:e0:d0:
d4:31:4b:ba:03:ea:fe:b1:9a:ed:44:c5:0d:b5:29:
36:39:a8:a6:7f:86:e8:a8:e4:a3:54:e9:cc:72:d2:
9c:ed:92:f1:7a:11:30:68:9b:c8:7e:7a:0e:51:07:
89:f5:c1:70:1a:9e:f7:b7:fe:a5:3d:f1:58:bf:c6:
8a:0d:9e:b9:1e:95:f8:c8:d0:da:0f:13:36:49:2d:
3e:42:72:93:cb:a4:53:2d:79:ee:d5:f9:cd:ea:34:
dc:53:d9:37:f0:aa:43:d2:9e:93:6d:99:a2:a1:3e:
8a:97:ed:be:77:f7:0c:cc:ee:44:e2:6d:83:c8:8b:
7c:75:14:a5:83:27:5e:2f:58:58:86:76:b2:55:8d:
7e:6f:39:08:e4:ab:8f:7a:eb:e7:de:a1:bb:9d:8a:
5a:05:e6:af:f3:2c:69:c4:82:e6:65:2b:9d:c6:96:
11:bf:18:6f:68:7b:e2:87:6d:81:79:48:a3:f1:dc:
c1:34:ef:97:83:03:0a:00:da:54:56:3f:5b:df:32:
b5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:01:D0:F6:83:F1:52:B1:A4:CF:40:46:3A:B6:F4:3D:1F:00:07:BA
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/LwHQ9oPxUrGkz0BGOrb0PR8AB7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.33.0/24
86.110.40.0/23
Signature Algorithm: sha256WithRSAEncryption
65:37:7d:06:e4:b5:08:7d:73:33:7f:f3:7d:b9:60:40:1c:ab:
98:4e:e3:69:fd:90:84:1d:a8:8a:b2:59:b5:88:2b:0b:31:8a:
d6:41:b6:8b:51:29:75:ae:c5:c8:9a:f9:e1:9a:95:df:a9:02:
fe:50:87:3d:dd:01:93:f3:d3:43:79:cd:91:0b:8a:29:ed:0e:
07:5d:c4:e1:fa:49:d2:52:db:8b:45:8d:e1:14:24:7e:48:9d:
09:ed:36:10:d4:4b:f9:cc:ff:0f:91:e6:67:6b:90:b0:e1:9e:
b4:63:fe:b5:59:f0:3b:02:21:ac:ec:75:3a:ba:cc:26:8f:e3:
35:37:0b:06:78:0b:9f:ab:ca:eb:aa:a6:74:85:15:cd:fe:34:
4c:23:75:15:79:04:44:50:b7:3a:54:ba:26:93:63:cd:a6:24:
fa:22:cd:f0:0a:ce:c1:d0:82:d0:02:d1:13:ec:b4:3c:eb:25:
9c:7a:e9:b1:8e:04:4e:a8:7b:2b:e5:ec:88:02:f1:97:26:be:
62:ad:8d:ea:5e:bc:aa:62:92:27:35:8b:c0:69:0f:73:8d:9c:
dc:b0:25:5a:6f:0f:16:cd:9c:eb:59:86:34:e7:3c:ce:08:f0:
d5:9d:02:3b:71:0e:82:87:87:7c:56:a5:bc:8e:db:d1:1b:43:
ce:ff:cc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:16:13 2025 by rpki-client