Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/uRH_73xWhDoD9nULKtlad9L_FrE.roa
File: uRH_73xWhDoD9nULKtlad9L_FrE.roa (raw, json)
Hash identifier: 4jrnzYFr4UeEe4RqyrO/MzG8HBjpKPu8QWbJ96PxmSk=
Subject key identifier: B9:11:FF:EF:7C:56:84:3A:03:F6:75:0B:2A:D9:5A:77:D2:FF:16:B1
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 0192521434D69B81C567F5475FD757D4343C
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/uRH_73xWhDoD9nULKtlad9L_FrE.roa
Signing time: Thu 03 Oct 2024 11:11:48 +0000
ROA not before: Thu 03 Oct 2024 11:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 86.110.44.0/24 maxlen: 24
86.110.46.0/24 maxlen: 24
86.110.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 13 Oct 2024 06:09:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:52:14:34:d6:9b:81:c5:67:f5:47:5f:d7:57:d4:34:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Oct 3 11:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b911ffef7c56843a03f6750b2ad95a77d2ff16b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f9:51:27:9c:8d:0f:78:57:e0:97:4b:48:8b:
2d:1d:cf:a0:59:24:ee:9d:17:11:e8:43:16:34:30:
65:a4:06:14:42:68:35:21:c8:9e:04:fd:e3:f7:21:
c3:0e:92:38:f8:d0:c9:83:26:ec:22:1b:0a:08:12:
62:8e:0b:a7:99:23:fe:91:37:16:31:59:d8:c8:18:
b3:41:02:54:81:13:0e:fb:b0:b7:76:13:1a:4e:77:
62:a0:09:1b:a2:0e:28:a5:6e:4c:79:b8:93:fc:e6:
3e:0a:e0:42:8a:92:ab:9d:ae:90:37:90:a3:b1:a3:
39:ab:71:b1:8d:03:d3:7e:fe:65:79:98:35:08:ba:
3b:c4:c0:3a:60:a1:a6:51:0e:05:0c:b4:7f:5a:60:
dc:8f:61:4c:9a:82:d2:4e:3e:f1:90:ea:a3:3e:e1:
db:04:46:cc:44:c4:cb:c8:8d:16:b1:12:86:9b:ec:
17:7b:5d:bc:25:37:f6:8f:6c:78:3b:85:c6:77:86:
c3:b0:73:be:ae:1a:bf:07:e7:52:2e:e9:a8:34:87:
69:93:9a:eb:22:9b:65:e4:16:75:e9:56:a2:19:2f:
ed:ef:4f:e7:d5:25:14:94:c9:e7:0a:50:d3:9c:84:
47:f2:fe:bd:d4:4a:1c:7e:97:e2:17:d5:71:00:90:
d2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:11:FF:EF:7C:56:84:3A:03:F6:75:0B:2A:D9:5A:77:D2:FF:16:B1
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/uRH_73xWhDoD9nULKtlad9L_FrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.44.0/24
86.110.46.0/24
86.110.63.0/24
Signature Algorithm: sha256WithRSAEncryption
68:02:e1:9e:81:a7:a3:bd:a4:22:40:2e:c6:1d:a6:27:fb:b1:
24:09:9a:f5:19:88:cb:ba:96:07:5a:5a:94:e2:28:58:1b:61:
0d:af:06:cc:5a:d2:f8:3a:98:0c:a1:09:f5:e5:98:be:5f:01:
bd:8b:61:0c:23:6e:b2:36:1a:94:9e:3b:3f:4a:00:93:bc:f1:
a3:7a:32:ce:84:66:43:bc:4f:f1:25:8f:5c:ba:32:fd:6f:50:
82:9f:0e:bb:e3:22:14:52:34:a3:20:cc:ef:32:12:5a:36:09:
e7:e7:ca:80:89:62:ea:05:18:2d:a2:99:eb:79:c7:08:c0:44:
d3:79:9d:c5:bc:b5:24:19:88:9c:04:6c:14:cc:f5:07:13:9e:
ff:7c:bb:45:b8:d2:e5:7d:40:8b:b9:d1:d7:3e:5a:64:11:e8:
3e:4d:1b:fa:15:82:8c:33:54:b7:4f:4d:de:c4:c1:0e:4d:4e:
62:c9:53:fe:6e:f8:c7:25:47:cc:36:be:5c:2c:de:00:66:14:
b7:54:9e:2e:ca:c0:38:46:86:43:48:17:60:39:8d:c9:f6:80:
fd:6b:34:ae:43:8a:e2:b2:d6:0c:b7:20:20:06:fa:77:79:ab:
93:3e:ef:a1:a5:d1:a3:9a:ba:65:34:84:8b:64:c1:c1:19:fb:
ee:b3:65:db
-----BEGIN CERTIFICATE-----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 at Sun Oct 13 08:19:56 2024 by rpki-client on console-fra.rpki-client.org