Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/XnCjy-wvQP33nNfSokzajJ14c9U.roa
File: XnCjy-wvQP33nNfSokzajJ14c9U.roa (raw, json)
Hash identifier: SxWzufnmaJ+P1Yun9SCsF96opTZDv5Wq9HyACHgc/rQ=
Subject key identifier: 5E:70:A3:CB:EC:2F:40:FD:F7:9C:D7:D2:A2:4C:DA:8C:9D:78:73:D5
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 019695ABDC85821795C678A2FDA67D2C4304
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/XnCjy-wvQP33nNfSokzajJ14c9U.roa
Signing time: Sat 03 May 2025 10:23:10 +0000
ROA not before: Sat 03 May 2025 10:23:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 86.110.34.0/24 maxlen: 24
86.110.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 May 2025 22:49:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:ab:dc:85:82:17:95:c6:78:a2:fd:a6:7d:2c:43:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: May 3 10:23:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e70a3cbec2f40fdf79cd7d2a24cda8c9d7873d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c5:35:4f:35:c9:c6:76:3c:d6:85:6d:19:6f:
2c:9b:d0:69:c7:6f:1a:0d:03:f5:5c:c7:57:94:37:
ba:a1:92:03:98:a9:79:35:cb:b1:c8:3e:9f:38:bc:
e2:f3:f5:65:46:b1:2e:18:80:c7:d2:eb:6f:aa:81:
ab:34:f3:c7:eb:52:c7:f1:2d:45:4e:14:28:90:2c:
27:6c:65:4a:14:86:c1:bf:b4:35:84:81:4e:97:16:
2a:60:2a:ff:a3:c1:c4:24:7c:51:3d:c6:5c:68:d0:
2e:b5:20:43:3f:81:d3:2f:0a:c6:63:d7:fa:93:87:
7d:de:85:cc:00:b4:fa:5e:01:ee:16:34:24:90:75:
3e:04:92:6c:fc:e7:92:93:b6:d6:c3:a9:bf:2d:d1:
43:a9:bb:e0:d4:1e:5a:fd:a7:7c:5a:84:4f:66:49:
5e:f5:06:36:2f:18:5b:94:7d:38:52:c2:80:f7:fc:
9a:26:b2:b2:37:82:ad:fb:82:c9:23:99:1e:39:c8:
18:43:dc:2d:f7:06:ba:e0:ee:aa:94:fa:93:99:f6:
28:31:04:19:16:5e:b4:6d:47:93:ee:b3:6c:f2:32:
72:18:01:d0:bb:5e:41:10:d2:7a:0e:87:60:75:c6:
08:7e:3e:1f:75:93:76:64:f1:53:7b:3c:5c:d2:f3:
4c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:70:A3:CB:EC:2F:40:FD:F7:9C:D7:D2:A2:4C:DA:8C:9D:78:73:D5
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/XnCjy-wvQP33nNfSokzajJ14c9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.34.0/24
86.110.54.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:08:05:e6:c1:2c:a4:be:2c:7a:f7:92:36:ca:41:3a:2e:7d:
2c:dc:12:aa:2c:a3:ad:b3:bc:1b:07:81:ed:ff:35:b0:3a:72:
20:87:ee:a2:1c:3e:d2:f3:47:70:d7:4a:2b:30:27:54:34:7e:
35:b3:54:5c:d5:62:2a:d7:2e:48:7e:57:2c:54:62:a0:77:91:
b9:5a:29:15:70:7d:58:4c:38:e3:78:9f:ee:2f:67:5c:6a:2f:
1c:fa:e0:65:fa:53:de:d4:ff:51:ac:41:2c:d5:8c:f4:c4:c3:
21:0b:d1:64:3a:d3:88:9d:a2:ed:97:9b:2c:69:aa:f0:12:79:
33:8b:33:c6:57:73:a8:6d:a0:14:5b:e1:bf:2b:55:f3:6b:07:
a9:54:3d:60:d2:a8:68:1f:81:df:12:1f:e1:61:3c:58:91:03:
47:98:de:b0:65:85:81:25:66:94:e9:18:75:6e:f1:aa:dc:1c:
06:2e:73:ce:77:08:5b:2c:79:ec:4e:9a:5f:91:44:49:09:cf:
95:49:bf:82:b7:01:dd:cd:65:53:8a:48:1b:cb:d6:5a:56:a7:
c6:55:bf:07:61:81:c4:a3:be:9e:b5:8e:56:5a:d9:d6:c3:da:
0f:82:7e:59:69:92:4e:d4:93:20:51:d6:f0:37:3b:c2:0f:36:
76:9e:84:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:51:32 2025 by rpki-client