Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/w6JWeoJIF-UwTjDip_1UJhkjLgg.roa
File: w6JWeoJIF-UwTjDip_1UJhkjLgg.roa (raw, json)
Hash identifier: WDrn3NTTsD6a/q8AkBhAYL5ceNMJmOD9d008NrpFSCU=
Subject key identifier: C3:A2:56:7A:82:48:17:E5:30:4E:30:E2:A7:FD:54:26:19:23:2E:08
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 0195F5F99705D0D9977CC0845A447D16C510
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/w6JWeoJIF-UwTjDip_1UJhkjLgg.roa
Signing time: Wed 02 Apr 2025 10:08:49 +0000
ROA not before: Wed 02 Apr 2025 10:08:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 86.110.42.0/24 maxlen: 24
86.110.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Apr 2025 13:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f5:f9:97:05:d0:d9:97:7c:c0:84:5a:44:7d:16:c5:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Apr 2 10:08:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3a2567a824817e5304e30e2a7fd542619232e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d7:7e:5b:5c:62:fc:39:99:1c:25:c7:ea:7f:
d6:63:f3:af:6c:4c:4e:31:89:b9:7d:5d:8f:18:c8:
da:a0:bb:ed:ef:dc:4c:a1:d5:f1:ac:1a:c0:2c:77:
68:9f:d0:f2:15:5d:46:22:b8:f4:a1:77:ca:69:6a:
b9:60:fe:b1:40:6f:a1:d2:a3:ee:b8:59:0a:19:1c:
83:bd:05:a2:d0:db:f7:99:94:ae:a8:d5:f8:40:05:
68:7c:da:54:11:b6:6e:27:27:3b:70:90:ea:c9:1e:
43:cb:bb:ff:3a:6c:bc:16:4c:a6:7f:2e:e4:ac:b7:
5d:2a:ba:25:23:50:83:4b:74:61:a8:ef:ba:e6:ec:
f5:d4:91:8b:fa:80:3f:13:fb:ac:52:05:57:d6:82:
f5:b9:db:fc:9a:fd:74:22:42:93:57:9e:22:5c:d4:
26:75:1d:5f:29:95:44:76:b8:54:70:1f:79:45:4f:
db:42:1b:6a:0e:59:75:88:47:f2:b4:00:50:a0:fc:
07:95:d2:25:89:ef:d6:fc:09:e4:a1:59:c9:bc:15:
84:6b:b0:3a:fc:95:f2:10:a5:65:00:01:44:e3:95:
b4:be:cf:00:7b:e3:a6:f2:d6:45:06:19:63:8d:c4:
a1:0a:bd:f7:32:e3:09:37:6a:b5:f7:3f:e3:4b:6a:
97:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A2:56:7A:82:48:17:E5:30:4E:30:E2:A7:FD:54:26:19:23:2E:08
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/w6JWeoJIF-UwTjDip_1UJhkjLgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.42.0/24
86.110.49.0/24
Signature Algorithm: sha256WithRSAEncryption
52:41:6a:96:ba:54:3b:89:78:02:e5:0a:3c:26:1e:93:04:4a:
52:4f:db:43:a3:2a:05:64:99:71:ce:01:0b:f6:e4:29:c9:e2:
01:42:c1:7b:34:8d:b6:40:3f:db:20:9f:2b:39:a2:e9:cb:d3:
2d:91:aa:20:6e:73:6a:d2:07:86:98:18:1a:0f:7a:bd:25:e4:
9a:fc:e6:43:65:49:36:09:df:e3:f3:ac:f5:ba:39:ce:b4:d9:
9f:6b:4b:08:4a:8f:05:2d:5a:ef:e0:55:3d:e5:83:4a:eb:db:
df:9b:6a:3a:33:d2:42:d3:48:21:b6:fe:79:09:d8:97:47:86:
d0:4a:d5:23:8c:46:07:43:24:6b:70:ce:54:d6:c5:db:73:a0:
e3:d9:5a:69:54:d9:c3:ee:dc:e0:e8:ba:f2:fe:61:f8:0f:6f:
67:6c:2e:78:c8:9e:f7:21:00:aa:d3:74:4f:3b:66:63:cb:07:
26:04:20:4a:c9:81:80:ca:65:fd:8c:e9:92:18:f4:3c:74:4c:
cd:9d:cc:37:fc:3f:8c:bb:10:a0:36:c8:c1:35:9e:ae:fd:15:
3b:43:da:d2:83:84:22:6f:e1:de:eb:62:b6:66:22:4c:59:1b:
0d:83:96:65:69:26:54:5f:93:f9:3c:bb:a6:e7:50:1e:88:78:
95:16:a2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:50:52 2025 by rpki-client