Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/MRpw8e_ueZ1KmXqsKFoIgkMqd-I.roa
File: MRpw8e_ueZ1KmXqsKFoIgkMqd-I.roa (raw, json)
Hash identifier: hOqaa04pcQM13tgcO0Ie7Rv5dfIh7zblCzAwVoLla5w=
Subject key identifier: 31:1A:70:F1:EF:EE:79:9D:4A:99:7A:AC:28:5A:08:82:43:2A:77:E2
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 01925754330A81FCD7A0EDB1BBE31C601A69
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/MRpw8e_ueZ1KmXqsKFoIgkMqd-I.roa
Signing time: Fri 04 Oct 2024 11:39:48 +0000
ROA not before: Fri 04 Oct 2024 11:39:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 86.110.36.0/24 maxlen: 24
86.110.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Oct 2024 19:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:57:54:33:0a:81:fc:d7:a0:ed:b1:bb:e3:1c:60:1a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Oct 4 11:39:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=311a70f1efee799d4a997aac285a0882432a77e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:73:cb:84:2e:61:25:8f:35:29:83:1e:96:11:
c5:90:6e:c6:6c:eb:e6:c2:16:d1:16:94:bc:91:be:
6a:22:52:00:b0:8a:7d:27:a9:f9:13:b7:0e:f1:4e:
6c:11:6b:20:29:03:c8:0e:57:56:31:16:a8:74:ec:
d8:4a:6d:21:0e:63:4a:18:16:66:dc:6a:e5:eb:59:
0c:76:2c:fa:86:dd:0c:f8:47:b3:33:d2:11:09:3f:
dc:cd:3e:00:58:22:6a:af:65:6b:29:87:1a:4e:36:
6e:eb:39:db:fd:0f:95:47:72:49:90:dc:4c:06:a4:
6e:50:43:00:7c:e7:71:dd:9a:48:6d:32:6f:2c:fa:
fb:8b:15:46:6c:18:fa:84:84:c1:31:17:71:9e:5e:
77:19:0d:42:43:04:4f:36:3c:8b:ad:a3:f9:38:9d:
c4:eb:39:32:ba:cb:69:04:99:e5:36:43:4a:54:5a:
0a:aa:ec:dd:90:ac:5f:a9:7e:2e:6f:20:8e:19:15:
51:01:47:14:61:da:33:5c:1e:a4:94:8f:74:f8:a4:
d4:ad:52:7a:e0:cc:f0:97:f1:ee:34:05:24:85:98:
8c:6d:5a:fc:f0:60:ef:79:fd:53:43:b6:55:75:8f:
d3:f8:86:1d:02:a9:2f:67:4c:10:5b:7e:e2:65:e3:
c9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1A:70:F1:EF:EE:79:9D:4A:99:7A:AC:28:5A:08:82:43:2A:77:E2
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/MRpw8e_ueZ1KmXqsKFoIgkMqd-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.36.0/24
86.110.54.0/24
Signature Algorithm: sha256WithRSAEncryption
66:bd:ef:6d:38:7b:94:74:82:9f:05:d5:a2:65:3d:7a:8e:a1:
dc:8d:12:51:fd:8b:f3:cd:b6:a4:fa:ca:10:7d:70:24:11:fd:
db:98:06:92:47:64:12:c2:b8:88:4a:0e:f9:7a:d1:6c:d6:37:
d8:7c:98:3a:8f:3c:55:3d:04:11:05:94:87:5b:96:69:81:63:
51:21:29:1b:20:7d:d3:83:9d:f5:db:2f:55:b7:00:c4:b2:04:
88:ae:31:e0:64:00:29:f3:a1:d8:9a:41:8a:07:96:c7:a3:94:
6d:93:81:7d:09:da:25:f4:34:db:aa:16:2a:bf:3a:ac:40:3c:
84:7a:59:67:ff:a7:c1:07:66:04:4e:70:0b:a9:3f:e0:44:f7:
d0:6a:93:0c:87:94:ef:45:e6:77:29:eb:a9:3e:e3:c9:a2:25:
7e:e5:9b:4b:0d:c9:16:d7:27:35:9b:95:4f:39:a5:6c:42:99:
ec:ea:31:56:af:81:11:84:0a:03:fc:2a:0e:d2:b5:19:61:eb:
ed:08:32:dc:32:6a:d3:f8:69:e5:c8:93:22:f6:25:7f:cd:4c:
79:75:b6:29:7f:a6:87:79:0d:fa:29:6c:dd:f8:98:0b:82:fb:
01:bd:9f:dc:eb:8c:34:d5:7f:12:81:9a:3b:5f:12:8b:49:99:
16:c7:40:50
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZJXVDMKgfzXoO2xu+McYBppMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi
YjAxODQwHhcNMjQxMDA0MTEzOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTFhNzBmMWVmZWU3OTlkNGE5OTdhYWMyODVhMDg4MjQzMmE3N2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXPLhC5hJY81KYMelhHFkG7GbOvm
whbRFpS8kb5qIlIAsIp9J6n5E7cO8U5sEWsgKQPIDldWMRaodOzYSm0hDmNKGBZm
3Grl61kMdiz6ht0M+EezM9IRCT/czT4AWCJqr2VrKYcaTjZu6znb/Q+VR3JJkNxM
BqRuUEMAfOdx3ZpIbTJvLPr7ixVGbBj6hITBMRdxnl53GQ1CQwRPNjyLraP5OJ3E
6zkyustpBJnlNkNKVFoKquzdkKxfqX4ubyCOGRVRAUcUYdozXB6klI90+KTUrVJ6
4Mzwl/HuNAUkhZiMbVr88GDvef1TQ7ZVdY/T+IYdAqkvZ0wQW37iZePJBQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDEacPHv7nmdSpl6rChaCIJDKnfiMB8GA1UdIwQY
MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt
ZDFhNzc3MmRiMDc2LzEvTVJwdzhlX3VlWjFLbVhxc0tGb0lna01xZC1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2
LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVm4kAwQA
Vm42MA0GCSqGSIb3DQEBCwUAA4IBAQBmve9tOHuUdIKfBdWiZT16jqHcjRJR/Yvz
zbak+soQfXAkEf3bmAaSR2QSwriISg75etFs1jfYfJg6jzxVPQQRBZSHW5ZpgWNR
ISkbIH3Tg5312y9VtwDEsgSIrjHgZAAp86HYmkGKB5bHo5Rtk4F9Cdol9DTbqhYq
vzqsQDyEelln/6fBB2YETnALqT/gRPfQapMMh5TvReZ3KeupPuPJoiV+5ZtLDckW
1yc1m5VPOaVsQpns6jFWr4ERhAoD/CoO0rUZYevtCDLcMmrT+GnlyJMi9iV/zUx5
dbYpf6aHeQ36KWzd+JgLgvsBvZ/c64w01X8SgZo7XxKLSZkWx0BQ
-----END CERTIFICATE-----
Generated at Wed Oct 9 00:34:43 2024 by rpki-client on console-ams.rpki-client.org