Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/epLzamL3o64AX5Pj5uJipIhlrI4.roa
File: epLzamL3o64AX5Pj5uJipIhlrI4.roa (raw, json)
Hash identifier: 10hgy8rxJuarrSXysDnrib7rOUd8wUFzwlZ2j4VzNVE=
Subject key identifier: 7A:92:F3:6A:62:F7:A3:AE:00:5F:93:E3:E6:E2:62:A4:88:65:AC:8E
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 0195AD28897582D4F2488CD1AA4E03EEE296
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/epLzamL3o64AX5Pj5uJipIhlrI4.roa
Signing time: Wed 19 Mar 2025 06:47:49 +0000
ROA not before: Wed 19 Mar 2025 06:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 86.110.33.0/24 maxlen: 24
86.110.36.0/24 maxlen: 24
86.110.42.0/24 maxlen: 24
86.110.49.0/24 maxlen: 24
86.110.51.0/24 maxlen: 24
86.110.53.0/24 maxlen: 24
86.110.54.0/24 maxlen: 24
86.110.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Mar 2025 09:16:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ad:28:89:75:82:d4:f2:48:8c:d1:aa:4e:03:ee:e2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Mar 19 06:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a92f36a62f7a3ae005f93e3e6e262a48865ac8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:de:db:67:5e:a0:65:4e:38:f2:22:47:51:de:
76:0b:36:39:39:dd:4d:67:4c:f7:1b:41:46:f1:34:
c5:ff:2d:a4:ba:7e:e1:b2:41:4a:ab:29:6e:95:8c:
72:38:8a:29:a8:94:7a:d9:0b:38:e7:b9:43:7b:6c:
62:7e:66:87:14:4e:35:25:45:5c:2c:f3:b5:82:61:
74:36:d0:2e:5c:fb:b1:02:a6:49:b0:3e:8d:64:c9:
d0:bc:ad:fe:ac:f0:f8:5e:ba:79:74:7a:f5:d5:d3:
2f:dc:1b:4b:ea:fb:8e:32:16:cc:27:b0:2a:a8:65:
23:95:22:6e:c5:ce:4e:0c:fc:d9:05:ff:bb:55:74:
a3:9a:2b:12:83:a8:b2:c6:f3:2b:04:f3:a0:76:f5:
bb:d1:d4:2e:29:a1:56:dc:52:4d:1e:45:21:e0:14:
4f:e8:2a:15:e6:36:2f:56:12:91:0f:08:e1:06:a0:
99:76:3f:d4:49:50:ae:0c:22:40:74:16:b5:af:f5:
d0:b2:87:c1:74:74:5a:9d:a8:95:cc:de:b4:ab:4a:
98:46:f4:8b:a6:9f:12:b3:b6:7f:0e:75:5a:d5:46:
ac:34:e9:41:8a:6e:8a:7d:b2:70:c6:e0:ae:6e:01:
72:82:3a:9c:5d:ae:04:42:5a:ca:5f:1b:71:15:b6:
b3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:92:F3:6A:62:F7:A3:AE:00:5F:93:E3:E6:E2:62:A4:88:65:AC:8E
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/epLzamL3o64AX5Pj5uJipIhlrI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.33.0/24
86.110.36.0/24
86.110.42.0/24
86.110.49.0/24
86.110.51.0/24
86.110.53.0-86.110.54.255
86.110.58.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:c3:f1:1a:87:4d:3f:a8:8b:bc:20:f7:25:06:a1:65:17:90:
39:53:ba:ef:ad:e0:da:03:e0:83:ae:6c:b3:ad:06:ec:a7:52:
b2:bb:aa:8a:a6:d9:d5:83:ac:5d:d8:d9:b7:f2:14:23:de:2f:
9d:21:4f:12:0b:a0:0d:ca:51:3f:c9:46:ad:b5:3c:44:53:18:
76:9c:0a:68:50:f7:e7:37:c3:28:46:f5:d4:23:53:af:fb:60:
f4:32:1b:00:d8:72:bb:97:bc:92:7e:45:b4:5c:bc:39:a0:e0:
ff:bf:bd:e8:83:9e:bd:7f:b8:d4:8a:78:c0:04:af:70:ec:cc:
e6:d3:0b:06:94:f1:a7:3b:c2:6c:05:8f:ad:49:30:81:c9:7d:
54:b9:fb:a1:a3:23:dd:22:b8:cb:f3:e1:1d:9c:a9:a4:26:55:
49:69:f6:1e:fe:c7:68:eb:7c:d9:c4:87:7a:8e:80:7d:c8:8e:
44:55:a7:ea:a7:a5:11:84:7a:76:3b:ca:e3:5e:c2:03:06:bc:
03:16:33:7a:fe:ca:76:68:17:71:da:84:02:c7:93:c1:1c:24:
58:1e:e2:23:d1:f7:cc:41:91:cd:73:cd:0c:58:24:89:35:dd:
d7:62:37:8e:3c:62:3c:50:16:16:b7:8b:55:c2:e8:a8:b1:89:
fb:c3:be:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:51:10 2025 by rpki-client