Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/dWgmLTZtencBE-7RRx04WCGILT4.roa
File: dWgmLTZtencBE-7RRx04WCGILT4.roa (raw, json)
Hash identifier: LLoT4rpyVKJ7kcmW1F0v2ioiFvmE1JzM23z583acPGo=
Subject key identifier: 75:68:26:2D:36:6D:7A:77:01:13:EE:D1:47:1D:38:58:21:88:2D:3E
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 019543AD41CF691C83CCAB74EC263C66F44F
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/dWgmLTZtencBE-7RRx04WCGILT4.roa
Signing time: Wed 26 Feb 2025 19:13:02 +0000
ROA not before: Wed 26 Feb 2025 19:13:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 86.110.33.0/24 maxlen: 24
86.110.36.0/24 maxlen: 24
86.110.49.0/24 maxlen: 24
86.110.51.0/24 maxlen: 24
86.110.53.0/24 maxlen: 24
86.110.54.0/24 maxlen: 24
86.110.58.0/24 maxlen: 24
86.110.59.0/24 maxlen: 24
86.110.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Mar 2025 03:43:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:43:ad:41:cf:69:1c:83:cc:ab:74:ec:26:3c:66:f4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Feb 26 19:13:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7568262d366d7a770113eed1471d385821882d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6c:b6:2c:3c:9d:c0:38:ad:46:ea:75:c9:c3:
78:6d:e5:a6:49:e0:84:74:57:b1:2b:84:91:5e:0a:
f5:e9:1f:02:4b:13:da:7d:6a:d9:55:bf:03:2f:92:
b5:23:f0:61:d2:1c:fa:f3:b8:46:73:95:0f:93:69:
66:27:65:fe:48:ce:08:1c:d1:91:64:7c:26:bb:4f:
fa:b0:92:1a:cd:9e:03:17:58:11:6e:a9:86:93:4d:
43:ac:34:69:df:a5:7d:7c:cc:b1:6c:f9:b7:1c:05:
6f:f3:a2:29:4f:01:ab:9c:2c:f4:57:83:a7:a3:6a:
34:41:6c:b2:c4:62:e5:1c:ce:13:14:61:f2:f0:30:
0f:03:9c:d4:08:af:a7:00:ed:c3:ec:1d:9b:8e:12:
88:e4:8d:bc:e5:41:0c:9b:4e:77:06:f1:ed:0d:e7:
17:dc:cd:44:8b:8b:38:47:16:56:d3:ae:72:10:5b:
a0:7a:61:3a:f4:a4:69:7c:04:e2:f9:f8:83:5c:d5:
55:b5:9c:19:fa:f8:9c:21:03:87:20:98:e5:4d:db:
0f:3b:46:83:6c:ec:42:cf:a9:d6:9e:22:23:db:9e:
e7:52:d9:b1:bf:34:81:83:f7:30:21:0f:a6:91:4d:
80:4b:2e:a4:d6:a6:f4:6c:d5:5f:fb:0c:1c:71:ff:
a4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:68:26:2D:36:6D:7A:77:01:13:EE:D1:47:1D:38:58:21:88:2D:3E
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/dWgmLTZtencBE-7RRx04WCGILT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.33.0/24
86.110.36.0/24
86.110.49.0/24
86.110.51.0/24
86.110.53.0-86.110.54.255
86.110.58.0/23
86.110.63.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:f3:7a:b5:ce:45:0e:b1:11:8a:76:aa:38:29:51:ab:b9:0a:
b1:2a:93:9f:63:53:b9:a3:0d:da:3f:63:4b:b1:56:d3:54:0d:
77:d9:a2:d7:39:eb:37:13:aa:69:15:44:c2:e1:bc:f7:9b:56:
11:f2:ac:6b:a7:5f:17:c8:fe:79:5e:e3:36:24:aa:62:f0:cf:
b4:9c:b8:a8:81:22:81:5d:66:d4:f6:84:5c:af:eb:2d:01:5d:
d3:c2:a4:39:31:74:30:aa:79:3c:92:dd:64:93:c2:a4:ed:25:
61:05:fb:eb:d2:9f:9a:be:74:9d:88:30:5f:a5:ce:04:b4:2f:
97:14:00:3e:8e:f8:aa:f6:21:71:01:90:f9:37:82:9b:97:36:
00:36:52:19:45:e5:f0:c5:30:69:90:56:04:12:0a:08:9c:1f:
36:4d:cc:0f:04:c1:01:6d:71:74:60:f4:11:c5:40:49:ab:25:
32:c0:c0:ff:3f:a6:ab:16:ca:a2:60:8f:b1:e0:da:7d:b6:22:
4e:33:09:e9:1a:f3:21:4f:02:82:e3:fd:58:66:36:98:ef:3b:
52:50:4f:33:4e:e5:e8:95:ce:23:53:a9:ae:50:7b:05:27:30:
7c:9c:b5:6a:e2:c8:a3:45:ba:59:58:ac:b8:67:8c:52:53:25:
c5:06:51:66
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAZVDrUHPaRyDzKt07CY8ZvRPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi
YjAxODQwHhcNMjUwMjI2MTkxMzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTY4MjYyZDM2NmQ3YTc3MDExM2VlZDE0NzFkMzg1ODIxODgyZDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmy2LDydwDitRup1ycN4beWmSeCE
dFexK4SRXgr16R8CSxPafWrZVb8DL5K1I/Bh0hz687hGc5UPk2lmJ2X+SM4IHNGR
ZHwmu0/6sJIazZ4DF1gRbqmGk01DrDRp36V9fMyxbPm3HAVv86IpTwGrnCz0V4On
o2o0QWyyxGLlHM4TFGHy8DAPA5zUCK+nAO3D7B2bjhKI5I285UEMm053BvHtDecX
3M1Ei4s4RxZW065yEFugemE69KRpfATi+fiDXNVVtZwZ+vicIQOHIJjlTdsPO0aD
bOxCz6nWniIj257nUtmxvzSBg/cwIQ+mkU2ASy6k1qb0bNVf+wwccf+kZQIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFHVoJi02bXp3ARPu0UcdOFghiC0+MB8GA1UdIwQY
MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt
ZDFhNzc3MmRiMDc2LzEvZFdnbUxUWnRlbmNCRS03UlJ4MDRXQ0dJTFQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2
LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAVm4hAwQA
Vm4kAwQAVm4xAwQAVm4zMAwDBABWbjUDBABWbjYDBAFWbjoDBABWbj8wDQYJKoZI
hvcNAQELBQADggEBAG7zerXORQ6xEYp2qjgpUau5CrEqk59jU7mjDdo/Y0uxVtNU
DXfZotc56zcTqmkVRMLhvPebVhHyrGunXxfI/nle4zYkqmLwz7ScuKiBIoFdZtT2
hFyv6y0BXdPCpDkxdDCqeTyS3WSTwqTtJWEF++vSn5q+dJ2IMF+lzgS0L5cUAD6O
+Kr2IXEBkPk3gpuXNgA2UhlF5fDFMGmQVgQSCgicHzZNzA8EwQFtcXRg9BHFQEmr
JTLAwP8/pqsWyqJgj7Hg2n22Ik4zCeka8yFPAoLj/VhmNpjvO1JQTzNO5eiVziNT
qa5QewUnMHyctWriyKNFullYrLhnjFJTJcUGUWY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:46 2025 by rpki-client