Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/tvQdS3np7FKv2W41dprNXFbl_rE.roa
File: tvQdS3np7FKv2W41dprNXFbl_rE.roa (raw, json)
Hash identifier: /2PYXKLJWJ4va9MYROBktug5eCg/sPAAE0RP6ooBqCw=
Subject key identifier: B6:F4:1D:4B:79:E9:EC:52:AF:D9:6E:35:76:9A:CD:5C:56:E5:FE:B1
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 0192404A60C1B3D646C0DADA60DEDD7526B0
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/tvQdS3np7FKv2W41dprNXFbl_rE.roa
Signing time: Mon 30 Sep 2024 00:17:48 +0000
ROA not before: Mon 30 Sep 2024 00:17:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 86.110.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Oct 2024 11:39:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:40:4a:60:c1:b3:d6:46:c0:da:da:60:de:dd:75:26:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Sep 30 00:17:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6f41d4b79e9ec52afd96e35769acd5c56e5feb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:23:86:55:d7:a3:ae:ff:52:cb:ae:a4:44:68:
7f:66:05:6e:69:af:64:93:d7:e9:b7:6a:a9:07:ca:
18:ed:b2:88:34:8d:ec:ad:90:4d:3b:52:d4:f3:9b:
e0:10:6b:44:3a:4f:00:78:c1:13:ad:ae:f9:42:92:
17:7b:ab:da:43:66:b5:7e:bc:12:23:b7:8c:81:ca:
9a:16:41:7b:b0:2a:83:34:e0:b9:40:f5:4f:4b:04:
6b:dc:60:d5:d2:93:a2:9e:e2:51:f0:18:85:3b:63:
c7:e6:fc:7b:58:3d:13:42:0e:08:27:0e:da:4a:27:
ef:7a:7b:13:89:b7:09:d3:78:fd:9e:c7:88:44:f8:
dc:6b:a5:9c:72:f4:cb:80:4d:66:b5:48:b0:4d:90:
9e:e0:54:bd:80:85:bf:76:51:93:8a:a4:8f:12:fe:
79:e4:f0:b7:ea:f2:df:da:9b:86:85:53:96:70:78:
dd:b7:ac:0b:5d:c8:6e:65:b3:1d:cd:80:c1:60:b7:
44:a6:4e:45:2c:c9:be:ce:76:8c:42:4b:64:c6:21:
ff:e1:b3:66:b3:43:07:97:cd:d7:ec:bb:70:1d:81:
31:be:9f:14:f0:90:8a:ea:8d:4a:3c:f0:d4:4b:c2:
48:eb:bd:56:7f:ad:c3:bc:50:9f:d6:5b:07:b2:1e:
ce:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F4:1D:4B:79:E9:EC:52:AF:D9:6E:35:76:9A:CD:5C:56:E5:FE:B1
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/tvQdS3np7FKv2W41dprNXFbl_rE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.54.0/24
Signature Algorithm: sha256WithRSAEncryption
30:0d:a4:54:6d:ee:23:23:e8:5e:f7:ee:30:66:89:4f:f5:fc:
ce:fb:41:1c:8c:30:2e:85:0b:a2:a9:a2:75:6e:78:ac:ea:e9:
20:ab:fa:16:81:19:8e:5d:ee:7e:2d:e7:cb:a3:23:2b:16:1b:
ee:bf:f4:b7:0f:6b:fe:68:5b:27:58:a2:28:c3:81:11:14:88:
73:a0:a1:b3:7a:3e:b1:ec:03:65:36:71:43:cf:19:bd:54:d1:
c1:76:cf:bc:3d:51:f8:f2:77:22:3b:04:3c:58:82:d2:75:9b:
43:ef:dc:da:9d:78:12:aa:c1:10:bb:cd:9e:4a:b2:bc:9e:37:
49:10:c7:1d:f7:0f:f1:74:31:94:e7:fc:b9:6e:ba:68:dd:e7:
68:de:b2:de:6a:bc:7a:02:cb:60:35:13:c2:9f:d1:05:ac:52:
2f:c4:ac:bf:01:e5:ab:82:48:b2:6c:23:ce:f2:81:19:a2:04:
4d:ad:6e:d4:5b:a5:ce:fe:2d:5f:b4:99:bd:c5:4e:7c:2e:ce:
02:ee:8a:e1:64:aa:cd:f2:f1:72:db:df:80:9d:74:63:f7:46:
c9:f8:8b:dd:9a:12:ab:ad:03:05:bf:9e:f3:7c:de:27:8e:52:
07:07:04:42:c0:1e:84:13:28:be:f7:71:08:e1:21:e3:45:95:
c4:24:25:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 17:15:46 2024 by rpki-client on console-fra.rpki-client.org