Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/AiJcuvmiHjyev0_pqgyMquFbdKw.roa
File: AiJcuvmiHjyev0_pqgyMquFbdKw.roa (raw, json)
Hash identifier: iiQhw3i/xHfdyOE1RsbSik6nV+4H6aW30C+P1ALi9jE=
Subject key identifier: 02:22:5C:BA:F9:A2:1E:3C:9E:BF:4F:E9:AA:0C:8C:AA:E1:5B:74:AC
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 01960FA53E5CED588D6F7D73F7972C8D7DD9
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/AiJcuvmiHjyev0_pqgyMquFbdKw.roa
Signing time: Mon 07 Apr 2025 09:46:49 +0000
ROA not before: Mon 07 Apr 2025 09:46:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 86.110.33.0/24 maxlen: 24
86.110.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Apr 2025 13:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:a5:3e:5c:ed:58:8d:6f:7d:73:f7:97:2c:8d:7d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Apr 7 09:46:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02225cbaf9a21e3c9ebf4fe9aa0c8caae15b74ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5f:19:dd:6d:c6:55:bd:14:bd:b0:3b:cb:78:
e3:9e:f1:e1:d1:c7:95:61:9d:82:ca:17:46:87:ba:
ff:f8:9a:fd:e5:6f:e1:91:da:3a:22:30:82:7b:31:
45:7f:65:9d:2a:b9:2b:29:b6:9e:e0:b1:f1:d3:68:
ae:07:3f:2c:03:c4:c9:40:85:28:18:58:b7:5f:13:
35:0d:d0:cf:bb:bb:27:a8:e6:c3:b2:55:c9:ec:57:
32:b8:c2:90:37:0b:5c:00:7d:77:40:c0:71:d0:51:
f7:f2:d7:6f:7c:3b:aa:de:d7:89:a0:9d:56:ac:7a:
14:0e:45:a7:4d:75:a0:7b:e8:e0:c7:ee:3c:7f:91:
3e:de:8a:74:b4:01:52:8a:1b:b6:47:e3:ea:df:37:
e7:30:9b:d4:7a:00:ae:10:90:26:d9:92:80:18:ab:
be:f2:7d:da:b5:3e:2f:02:60:22:ec:c1:a4:ff:7d:
ae:96:d1:46:be:58:79:3d:dc:d0:9b:88:7c:ec:f0:
05:8d:a9:e7:34:0e:57:2a:bb:10:95:d9:71:06:0f:
cb:30:76:45:73:80:ed:8a:37:e1:d2:34:33:14:d4:
ba:38:eb:a1:bd:ca:5f:5a:d9:ca:95:5a:55:26:a3:
d1:2d:c2:2a:45:46:12:9b:dc:e6:8c:9f:65:5f:d9:
82:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:22:5C:BA:F9:A2:1E:3C:9E:BF:4F:E9:AA:0C:8C:AA:E1:5B:74:AC
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/AiJcuvmiHjyev0_pqgyMquFbdKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.33.0-86.110.34.255
Signature Algorithm: sha256WithRSAEncryption
6b:b1:15:4c:3d:9b:1f:3d:10:ce:07:ae:f9:1d:37:72:2a:5d:
58:1d:71:13:d8:32:94:05:07:fe:24:d0:b4:0e:46:b4:ab:82:
eb:86:f9:d1:c9:41:cd:8e:a3:09:19:98:1a:c5:57:7f:99:5b:
e9:dc:8c:5b:7a:10:31:a6:4e:59:1d:d1:58:49:9c:c3:18:a8:
1f:20:29:23:0b:47:a1:ce:76:0f:89:0a:6b:88:63:4b:13:de:
4b:7a:cd:b4:34:2a:32:d2:ef:77:a1:a7:4a:a1:19:d6:4b:1b:
b2:ae:51:2f:51:78:6b:81:ee:64:62:41:01:42:c3:61:34:db:
5d:a8:c5:c1:91:83:44:35:3d:ec:86:04:1d:41:d2:41:cc:76:
f8:15:1f:72:a4:d8:ee:e5:ff:e3:e2:d1:90:01:01:3c:a5:65:
98:3a:cf:59:c3:a6:78:d8:0f:4d:2c:8c:a5:f7:b8:a1:a3:74:
1b:28:8e:22:79:2b:66:9c:18:58:08:f0:73:b3:d4:e5:a8:0a:
8f:52:5c:c1:bb:07:64:71:cb:92:9d:f3:d1:97:03:1f:6b:28:
95:9b:da:d5:bd:1b:e3:8c:97:31:7b:4f:8c:19:97:45:f6:9c:
58:a5:f1:4f:78:63:7a:33:2b:00:ef:71:e0:cb:50:15:47:5e:
70:e7:7d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:06:42 2025 by rpki-client