Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/mMqnrlYtUDE-tbBoI3Fn6EniWSw.roa
File: mMqnrlYtUDE-tbBoI3Fn6EniWSw.roa (raw, json)
Hash identifier: hPJ76SVMmpdjNHl416SGNFpe8j+78hMfKEHsNBo8o2U=
Subject key identifier: 98:CA:A7:AE:56:2D:50:31:3E:B5:B0:68:23:71:67:E8:49:E2:59:2C
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 01931D920A8A640B991F5A0E90CD9A3B796B
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/mMqnrlYtUDE-tbBoI3Fn6EniWSw.roa
Signing time: Mon 11 Nov 2024 23:32:10 +0000
ROA not before: Mon 11 Nov 2024 23:32:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 86.110.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 06:59:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1d:92:0a:8a:64:0b:99:1f:5a:0e:90:cd:9a:3b:79:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Nov 11 23:32:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98caa7ae562d50313eb5b068237167e849e2592c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:db:23:49:d7:9e:a1:b6:52:56:4b:3a:06:0e:
bb:b6:e8:69:d6:a4:01:73:cb:f2:fb:9e:e9:af:14:
7a:1a:15:94:36:d9:80:0e:e5:8d:ef:6a:84:44:9c:
85:28:eb:2c:71:80:07:ba:9e:e6:6f:45:99:03:ed:
30:7a:7f:99:ba:46:1d:97:ea:fc:bc:10:71:06:3f:
c3:63:30:0c:b1:5e:a7:65:ed:8b:f5:26:44:cc:2f:
c0:5e:bf:ed:42:b9:85:bf:3d:11:46:1b:3c:51:83:
f1:c3:b5:ff:0a:50:cb:38:60:db:49:ef:7d:aa:2f:
65:0b:21:13:01:20:66:87:25:78:47:d5:63:a6:9e:
f4:ce:ca:d0:fa:67:f5:1f:a9:a4:66:2a:b3:62:8e:
e0:e6:1d:d3:42:c5:33:31:d0:a9:80:25:cd:61:b6:
dd:ce:3b:56:50:cc:72:82:d5:c8:2d:61:3a:40:94:
d7:85:0d:21:47:a9:44:80:1b:2a:ec:47:5a:92:2b:
89:86:30:f4:6a:93:1b:d9:36:22:d6:c7:68:3b:b8:
aa:00:a2:db:55:9e:2d:d0:0e:91:c7:c7:cb:6f:09:
9b:ce:ec:90:7f:d3:b8:b5:8b:33:b1:57:30:cd:29:
3d:f5:c2:18:e5:42:d1:9e:0b:c4:bb:03:41:b5:bf:
9a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CA:A7:AE:56:2D:50:31:3E:B5:B0:68:23:71:67:E8:49:E2:59:2C
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/mMqnrlYtUDE-tbBoI3Fn6EniWSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.37.0/24
Signature Algorithm: sha256WithRSAEncryption
05:47:cc:aa:a4:47:47:68:73:a4:60:67:00:48:b9:01:38:17:
21:88:58:c4:5d:30:fe:d4:ee:1c:97:d4:24:7f:75:a2:e2:9e:
1e:c4:cb:a4:cd:c6:98:44:da:f9:87:d5:6b:da:d8:16:61:3c:
e1:cb:b3:fb:03:1e:34:ed:4f:8d:7d:36:ae:d3:40:2d:10:36:
44:d6:75:35:e7:49:ca:2c:f8:89:c5:d8:ec:78:25:d2:35:ca:
0f:14:d3:64:08:bc:8a:56:31:d1:62:0e:11:1f:6f:29:5d:d3:
54:29:9e:65:af:6d:72:ba:8a:c1:cd:c2:43:17:24:f1:8f:6d:
ad:da:a6:07:3d:76:1d:26:e8:5a:93:7d:09:65:ef:4b:9e:05:
bf:75:66:2e:25:bb:a4:bc:20:f4:e0:40:a7:4e:df:a6:89:dc:
23:8c:4c:34:0c:47:44:a3:2b:51:a2:ae:bc:dd:71:90:5d:94:
2d:59:3c:b7:15:c4:40:19:bf:3c:91:3f:fb:c4:2d:db:69:16:
00:ec:76:37:63:9a:3d:65:9f:4c:4b:92:e1:98:dc:d6:0c:57:
55:7d:19:cd:ba:f3:c6:a6:97:05:96:b1:5c:96:88:a9:69:e6:
c5:e5:d8:08:38:bc:2d:94:da:79:16:08:d7:ad:1f:54:65:46:
74:1b:de:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 08:42:07 2024 by rpki-client on console-ams.rpki-client.org