Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/fWFIUBOlRsR3WfjTAR6bhp_veRQ.roa
File: fWFIUBOlRsR3WfjTAR6bhp_veRQ.roa (raw, json)
Hash identifier: BPhRr3juc4dhu4oIst+Ccc9AhrBnwLtapdNbdxokT+E=
Subject key identifier: 7D:61:48:50:13:A5:46:C4:77:59:F8:D3:01:1E:9B:86:9F:EF:79:14
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 01928C336818EFE466A44B5CFC556355A28A
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/fWFIUBOlRsR3WfjTAR6bhp_veRQ.roa
Signing time: Mon 14 Oct 2024 18:03:52 +0000
ROA not before: Mon 14 Oct 2024 18:03:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 86.110.52.0/24 maxlen: 24
86.110.53.0/24 maxlen: 24
86.110.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Oct 2024 12:28:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8c:33:68:18:ef:e4:66:a4:4b:5c:fc:55:63:55:a2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Oct 14 18:03:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d61485013a546c47759f8d3011e9b869fef7914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0c:91:73:ed:21:e7:6c:4f:e7:9b:3e:02:78:
22:8a:75:3f:23:5f:48:c8:c1:17:c5:41:0b:4b:fc:
74:a6:8a:bc:47:af:cb:d3:db:0a:e2:2d:6a:c7:ce:
51:6a:66:60:0a:49:46:33:dd:f2:b0:69:4f:8b:8d:
64:74:93:10:39:74:68:8a:14:3a:2b:a7:f3:45:84:
d9:76:e0:ac:2c:af:52:75:68:fd:6a:e1:7c:6a:55:
cf:b2:82:f2:75:5d:0c:c8:9d:df:5f:ce:35:fb:90:
26:4e:e5:2a:30:8e:4c:26:49:d1:62:67:90:49:f7:
8a:d2:18:18:71:3b:de:79:80:2e:53:5f:9f:1d:78:
63:a9:b3:b6:00:5b:54:e0:23:4c:f2:8b:9d:9b:7e:
77:c2:e3:ac:db:00:d5:75:a5:81:44:59:30:63:3f:
67:77:3e:5c:94:7a:5f:63:7a:73:51:43:60:9f:fe:
5d:9d:50:c4:84:78:8f:6e:14:ae:ea:85:db:ca:4d:
ff:97:ed:65:3b:46:4f:8e:bf:ba:82:40:d9:97:cd:
39:0f:cf:9d:43:8b:5c:55:01:0a:ed:c4:fc:b6:ca:
69:c6:d2:f9:a4:f5:be:7c:99:ef:f8:d6:2a:f8:26:
15:11:63:7b:05:db:d1:ba:c3:d8:a6:35:44:58:ac:
69:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:61:48:50:13:A5:46:C4:77:59:F8:D3:01:1E:9B:86:9F:EF:79:14
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/fWFIUBOlRsR3WfjTAR6bhp_veRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.52.0/23
86.110.59.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:13:e7:19:a0:d5:5e:e6:ca:32:bb:1d:4b:fe:33:81:ee:07:
b0:a4:f8:10:58:ad:50:5d:da:02:30:8b:21:39:27:59:c0:f3:
f8:98:2b:63:e3:6d:f7:65:83:dd:5a:0f:f3:34:a2:e2:48:7d:
79:fa:05:03:66:53:7b:70:13:da:38:09:88:31:90:e4:1c:d3:
de:88:aa:f1:c1:c4:8b:bb:f6:e7:50:29:70:a9:7a:2f:a5:87:
1f:5e:6c:02:3e:1a:ed:3f:c2:36:1f:9f:fc:cb:db:e7:bb:9b:
f0:21:58:7d:e8:dc:87:d8:6b:68:ee:71:eb:e3:cc:59:a4:d0:
86:22:3e:0a:a4:cb:5b:52:b2:0b:f6:05:21:ac:8c:d0:5b:54:
93:4a:89:0b:0c:c0:f8:ad:b0:0c:3f:a2:fc:6e:15:6f:01:29:
19:d0:63:03:1f:4c:c7:6e:47:2a:e0:c3:4f:d9:49:16:e1:e0:
0d:64:d4:10:d8:8c:61:b9:80:bd:cd:eb:3a:89:46:be:ad:df:
1c:84:64:a2:30:71:d3:cf:60:b7:1c:f9:ae:b1:34:0d:4c:5e:
06:ce:79:e0:04:18:88:1b:4a:a3:fb:ef:c7:e0:2e:85:65:df:
db:04:02:0b:ad:a4:56:5c:71:a4:00:b3:aa:c7:61:4f:cc:9b:
6c:9e:fd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 15:00:20 2024 by rpki-client on console-ams.rpki-client.org