Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/8VgW5Ab6r2nmXSZb5UIfNtOraBE.roa
File: 8VgW5Ab6r2nmXSZb5UIfNtOraBE.roa (raw, json)
Hash identifier: dG9+oMicl4r+N7FBWX9Qit6pZLXT35RHxXqe8UvmY5U=
Subject key identifier: F1:58:16:E4:06:FA:AF:69:E6:5D:26:5B:E5:42:1F:36:D3:AB:68:11
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 0195F5F996BACA81BBEC750822A1E2176B8A
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/8VgW5Ab6r2nmXSZb5UIfNtOraBE.roa
Signing time: Wed 02 Apr 2025 10:08:49 +0000
ROA not before: Wed 02 Apr 2025 10:08:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 86.110.33.0/24 maxlen: 24
86.110.36.0/24 maxlen: 24
86.110.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Apr 2025 08:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f5:f9:96:ba:ca:81:bb:ec:75:08:22:a1:e2:17:6b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Apr 2 10:08:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f15816e406faaf69e65d265be5421f36d3ab6811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:76:d6:df:4a:7f:c8:71:76:b7:f6:9d:b1:4d:
ae:11:9c:ca:07:ce:37:f6:9d:8d:92:f9:f1:2e:c1:
c5:9d:0d:4b:ad:4d:f7:07:94:74:3e:25:f7:af:8b:
c7:da:95:a1:33:24:1d:83:88:f9:b3:16:39:77:60:
3d:d6:ad:62:0b:b1:21:74:6c:f8:39:9d:75:f8:4a:
a2:ab:63:58:75:c2:28:28:04:f6:e2:a4:d7:57:56:
a9:f6:90:ee:2e:3f:d8:96:c4:d7:82:f8:ff:b9:5d:
f1:db:5a:11:15:cb:a1:b8:7e:a0:25:70:af:5f:26:
17:28:1c:67:53:1a:38:4d:19:59:a9:54:1d:4b:e2:
90:cc:76:48:1a:2c:41:ee:ce:68:7e:98:6d:45:60:
59:11:71:0c:a8:29:00:cf:4f:df:6a:fc:75:7e:7e:
e1:35:59:ef:7c:47:24:bf:cf:82:0c:3d:17:c1:fd:
3b:63:f1:08:aa:2f:63:51:f7:eb:e6:4a:26:fc:14:
51:ad:ab:7c:e9:87:a5:c6:20:83:93:6f:7e:05:39:
1d:4e:90:32:c6:02:db:31:9f:39:bb:66:02:6a:d6:
28:19:33:ad:b8:ce:eb:0f:d1:ba:26:93:94:c2:83:
bc:dd:c2:9c:b5:39:2c:a1:8e:15:da:d1:67:f7:86:
9f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:58:16:E4:06:FA:AF:69:E6:5D:26:5B:E5:42:1F:36:D3:AB:68:11
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/8VgW5Ab6r2nmXSZb5UIfNtOraBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.33.0/24
86.110.36.0/24
86.110.54.0/24
Signature Algorithm: sha256WithRSAEncryption
21:54:89:7f:03:93:70:cf:72:da:b9:4e:d7:41:7e:a6:88:c7:
78:65:d2:a1:00:19:53:1e:53:8e:8f:6f:bd:be:42:dc:43:46:
e6:c1:20:73:6f:69:41:a9:09:07:10:40:e9:9e:7e:76:3c:ad:
73:63:4e:1a:a5:04:62:f9:06:56:92:d9:a2:cf:c5:41:06:a7:
0a:8c:03:2d:8b:b9:d7:d4:99:5d:62:24:6b:0b:70:61:7a:c1:
38:9d:f2:fa:7a:b1:ea:5c:20:db:87:55:58:e3:4c:9f:de:25:
53:3a:b1:d7:3c:d7:e2:62:22:5c:3e:be:46:9d:a9:dd:82:66:
c7:32:92:58:6a:82:99:c1:2d:78:ea:27:95:f3:40:19:8d:34:
d5:a1:df:b9:5f:10:7f:77:3f:0b:a6:e5:eb:14:c8:52:81:96:
f7:d5:bf:9b:1a:f4:de:12:2e:eb:94:6c:1d:17:64:42:e4:90:
59:6a:c0:be:1f:92:49:54:a8:82:a7:70:49:d4:c0:18:b7:ef:
69:ef:3d:88:d1:f5:03:48:36:fe:24:f9:23:30:06:fd:67:37:
42:5c:55:77:60:82:5a:7b:df:bf:12:08:07:b2:b5:90:0e:89:
a5:56:77:4d:06:e9:f3:f9:e0:5f:ec:7d:3c:fa:f9:59:13:e4:
ea:73:68:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:38:24 2025 by rpki-client