Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/eyu5O9878yFBCs7cwc7i5DMuRLA.roa
File: eyu5O9878yFBCs7cwc7i5DMuRLA.roa (raw, json)
Hash identifier: pd22DasE1u12VVyQxXj8Ba3X7m7TBAgD1x8zgDF9ZFs=
Subject key identifier: 7B:2B:B9:3B:DF:3B:F3:21:41:0A:CE:DC:C1:CE:E2:E4:33:2E:44:B0
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 01947FAA2D64849A422ACDA920220E265A8B
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/eyu5O9878yFBCs7cwc7i5DMuRLA.roa
Signing time: Sun 19 Jan 2025 17:44:06 +0000
ROA not before: Sun 19 Jan 2025 17:44:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 86.110.44.0/24 maxlen: 24
86.110.46.0/24 maxlen: 24
86.110.59.0/24 maxlen: 24
86.110.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Jan 2025 04:21:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:7f:aa:2d:64:84:9a:42:2a:cd:a9:20:22:0e:26:5a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Jan 19 17:44:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b2bb93bdf3bf321410acedcc1cee2e4332e44b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e7:fc:38:b6:ba:98:c2:0a:be:93:99:0c:ad:
6c:e2:e5:3b:1b:cb:49:3f:a5:6a:64:a0:3c:e2:76:
96:70:47:3f:09:a8:ef:0d:cd:1f:65:39:e8:d6:0f:
fd:a6:85:20:a1:d2:2d:c8:91:b9:b8:ab:9a:80:99:
b0:8e:aa:13:50:f0:5a:24:ec:7c:c2:ff:ae:ed:43:
9d:3b:0d:60:0e:cf:1d:a9:28:3d:1b:ef:3a:d3:91:
3e:76:19:4c:2e:a5:24:0b:c0:94:cc:f2:c1:ca:48:
ad:09:3c:d5:09:19:b2:ff:a7:1f:7a:f1:71:15:eb:
82:4e:88:82:ab:9d:16:08:ec:6c:5c:7e:d8:0f:6a:
53:5f:ea:fc:1c:f4:51:73:a2:ac:c6:4c:c4:d3:81:
64:89:22:92:38:30:da:db:43:f2:56:38:c4:d3:dd:
2c:f1:45:a8:5a:cb:3f:09:8c:56:c9:c6:ce:ec:b9:
d2:c7:6c:4c:17:32:8c:3b:27:16:1c:f1:5c:d9:e0:
00:6e:ad:2e:88:7c:29:0c:99:01:b8:f3:aa:1e:1c:
a1:44:73:6b:d5:c2:d8:2c:79:f0:90:41:b6:eb:bf:
88:48:07:1f:a1:d9:cc:03:ac:70:8f:50:58:f1:b9:
96:05:97:85:52:0d:f5:bb:69:5e:28:b2:72:a3:61:
3c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2B:B9:3B:DF:3B:F3:21:41:0A:CE:DC:C1:CE:E2:E4:33:2E:44:B0
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/eyu5O9878yFBCs7cwc7i5DMuRLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.44.0/24
86.110.46.0/24
86.110.59.0/24
86.110.63.0/24
Signature Algorithm: sha256WithRSAEncryption
60:25:52:ff:5a:66:fe:bb:5a:7c:d4:b5:f2:78:24:d8:46:b4:
9a:6c:17:2a:4f:67:a9:02:80:80:03:85:ff:04:9d:96:a4:06:
47:fd:10:93:f6:5c:03:bc:28:b2:ab:fe:79:c1:ff:6d:f8:1a:
88:23:07:3c:b2:78:62:8e:80:3f:2f:66:8a:b3:4f:96:5a:62:
10:5a:67:38:b7:86:2d:14:35:48:14:99:68:55:39:45:96:2f:
84:c1:13:e8:49:cb:8b:17:81:57:84:95:87:7d:96:3e:3b:b0:
0d:e4:52:fb:07:c2:b2:8e:cd:23:ba:74:cc:12:59:77:73:9f:
5f:b8:f5:c9:32:4d:48:99:b7:b1:c4:29:35:31:62:87:67:37:
cb:7a:f4:ba:3a:0d:cb:86:36:e0:7f:c8:f1:77:9b:47:36:a8:
cf:95:c5:c0:50:19:bc:e3:98:e2:fe:b7:82:e2:19:3b:bf:0c:
e3:c6:b4:c0:f7:29:30:81:2f:05:01:8e:31:18:14:a7:0d:ed:
1f:15:90:59:34:65:8a:69:cb:09:3d:62:74:5c:cf:0d:a3:73:
66:d2:82:5f:70:83:29:23:bf:e8:3e:aa:17:bb:83:af:1c:24:
a9:cf:99:f1:04:70:d1:55:9a:ee:7f:63:70:9e:b5:ff:6e:7c:
f9:96:78:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:52:08 2025 by rpki-client