Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/mnqytCDL3m5tTCfHVeZ2ldKQIjE.roa
File: mnqytCDL3m5tTCfHVeZ2ldKQIjE.roa (raw, json)
Hash identifier: 7zjM9SgtQdQIkyFrZen0FsdxvAkrZML4yfqQjRk+fSM=
Subject key identifier: 9A:7A:B2:B4:20:CB:DE:6E:6D:4C:27:C7:55:E6:76:95:D2:90:22:31
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 0192C3A664A3B2358166716218018FE5C231
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/mnqytCDL3m5tTCfHVeZ2ldKQIjE.roa
Signing time: Fri 25 Oct 2024 12:28:34 +0000
ROA not before: Fri 25 Oct 2024 12:28:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 86.110.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c3:a6:64:a3:b2:35:81:66:71:62:18:01:8f:e5:c2:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Oct 25 12:28:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a7ab2b420cbde6e6d4c27c755e67695d2902231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:15:81:95:09:67:75:32:2e:b4:39:96:d2:d7:
50:23:e4:58:6f:ea:b7:2f:34:26:3b:cd:05:f8:80:
c3:8c:07:a1:61:5f:52:ca:69:9e:bb:48:f0:8e:62:
72:9f:ca:57:d4:60:ac:ac:4e:33:18:61:f8:b0:09:
fa:d6:ed:79:40:12:12:d3:8c:0f:87:c5:50:14:f8:
ab:62:d4:5e:b4:0e:fe:30:64:c8:a0:4b:da:53:d3:
9b:76:97:87:70:4c:20:e6:e5:28:08:78:22:d8:13:
7f:9c:bf:54:45:9c:12:e6:da:47:e1:f5:a6:1f:a4:
44:b6:59:b8:8d:a4:06:fb:31:06:9e:34:3b:c8:7a:
f4:cb:6f:b2:9e:ce:c8:5a:ee:41:62:62:f3:9a:d6:
41:84:a4:7f:ec:49:b5:a5:61:40:76:70:34:bb:7c:
59:97:3d:5e:28:67:e1:35:ad:84:da:de:39:33:91:
eb:d0:e0:89:1e:e9:71:2d:e0:83:f6:6b:1e:d4:f0:
e4:31:98:bc:f2:05:9a:aa:98:74:b9:4c:08:b1:02:
30:15:12:05:c7:89:c4:ba:05:0e:0e:80:d1:7d:8d:
fd:bf:bd:24:ad:a9:10:b1:4a:22:02:ce:33:ad:d5:
16:bf:2f:de:52:da:2d:d5:85:1f:dc:e2:dc:56:b1:
19:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7A:B2:B4:20:CB:DE:6E:6D:4C:27:C7:55:E6:76:95:D2:90:22:31
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/mnqytCDL3m5tTCfHVeZ2ldKQIjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.59.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:93:e3:32:03:5f:65:cc:7d:9b:02:be:5e:89:76:13:a1:ae:
a0:7f:52:b1:18:07:ba:e6:d8:0f:e4:65:90:7a:dd:b0:e0:36:
e1:e6:d4:9c:9f:d8:1b:ed:88:1c:07:cb:54:88:d8:c8:64:be:
2e:37:a2:06:5b:ad:64:fc:5f:69:d6:73:af:ee:75:7c:63:9a:
65:88:72:62:a1:17:1d:4e:5d:8a:28:68:d9:04:1c:81:c9:18:
19:30:9f:29:0b:66:5e:59:5b:62:08:60:fb:4e:fd:b9:a4:d1:
8a:0c:d5:5a:c6:7e:b8:6f:e3:11:b2:23:0f:ad:09:2c:53:4b:
29:fc:2c:a2:06:66:b5:7f:09:2f:ce:cb:2c:0a:af:7b:79:66:
77:b4:8e:ab:94:c4:ed:f8:51:f1:12:cb:56:96:6b:53:76:27:
ce:97:f1:43:57:bb:0d:22:71:e3:15:db:49:22:9d:49:0e:b8:
a2:7d:4e:7d:be:2e:3a:7a:68:9c:3e:f4:3c:71:04:53:80:bf:
02:0a:cb:4b:07:bf:fd:10:fd:f6:98:c7:9d:a0:a4:3a:5e:2d:
f5:6a:fd:8a:db:4e:fc:0d:d5:46:f1:12:45:fb:6b:13:61:47:
2c:95:61:6c:bb:0f:18:0a:39:c2:98:a5:28:3d:d2:e8:d2:96:
a0:62:6e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 08:42:07 2024 by rpki-client on console-ams.rpki-client.org