Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/poqvMOn5VUTK-Hk62VVbS4swiYM.roa
File: poqvMOn5VUTK-Hk62VVbS4swiYM.roa (raw, json)
Hash identifier: gStRJeaagAZk5l/AYsEhMG0uHFKl8jRN6D9IdIN4d/U=
Subject key identifier: A6:8A:AF:30:E9:F9:55:44:CA:F8:79:3A:D9:55:5B:4B:8B:30:89:83
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 0196770138120BD59330092CA0D4C78436EC
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/poqvMOn5VUTK-Hk62VVbS4swiYM.roa
Signing time: Sun 27 Apr 2025 11:28:10 +0000
ROA not before: Sun 27 Apr 2025 11:28:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 86.110.34.0/24 maxlen: 24
86.110.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Apr 2025 11:07:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:01:38:12:0b:d5:93:30:09:2c:a0:d4:c7:84:36:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Apr 27 11:28:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a68aaf30e9f95544caf8793ad9555b4b8b308983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:41:70:75:d7:e1:d4:05:ea:9b:fc:71:6d:a3:
7d:01:f0:ac:a3:b0:dc:3b:5e:8c:cf:36:5b:90:b6:
b3:6e:6b:e3:16:5a:3b:ef:85:5a:c3:5c:db:21:43:
63:7c:d3:8c:0f:7a:88:54:8e:57:5f:6f:55:de:5e:
ee:41:d8:49:28:da:d3:01:7a:24:f2:d1:17:a6:de:
60:9e:87:25:e3:f8:3c:c5:f1:22:f0:c0:05:63:fa:
1c:cc:81:56:7e:b5:5e:7b:ea:7d:89:99:31:cb:86:
79:37:35:9b:66:b3:55:a5:29:2f:4c:03:c1:ef:15:
d8:a1:88:35:62:46:67:6c:74:1e:7f:af:bf:79:71:
52:30:e0:26:fa:19:44:b7:45:ec:64:83:33:d4:ed:
85:1c:da:25:f7:f1:42:4a:52:63:2d:d7:cd:d7:11:
ac:c9:6d:af:43:40:33:d5:e3:e6:16:01:42:1b:1e:
90:81:d7:cb:35:2c:ae:e8:96:74:a4:2c:8e:33:84:
95:c4:f5:94:aa:f9:37:f4:6f:96:69:45:18:59:06:
03:1e:14:e7:1d:5f:b1:03:73:35:b9:ba:20:5d:ed:
bc:76:d6:68:39:42:10:06:f2:24:b2:3f:3a:0f:8b:
93:ea:79:b9:71:89:e1:31:35:90:7e:ac:1e:55:c8:
86:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8A:AF:30:E9:F9:55:44:CA:F8:79:3A:D9:55:5B:4B:8B:30:89:83
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/poqvMOn5VUTK-Hk62VVbS4swiYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.34.0/24
86.110.53.0/24
Signature Algorithm: sha256WithRSAEncryption
46:e4:8f:c1:10:44:6c:12:99:a4:2d:97:1b:26:59:d1:1d:c8:
a6:f6:5f:04:f2:17:dc:ef:0e:d5:8a:7d:83:03:3a:e4:70:50:
a2:5d:8a:7f:00:17:df:df:60:09:9b:48:9d:87:78:c9:cc:8d:
45:66:d6:17:e9:0e:1f:fb:98:84:c6:f7:a1:d1:8c:a7:e8:56:
98:b2:8b:5c:43:8a:70:26:25:a6:43:1b:84:df:d8:4b:17:59:
ce:03:e2:d3:b8:22:71:e4:63:f8:ab:43:2c:69:02:ff:20:1c:
5d:54:9b:30:b3:53:a7:e8:1b:ca:cb:32:a9:63:2a:ca:79:50:
6f:9f:78:88:52:4f:38:af:73:bc:8e:7d:48:94:17:e1:f3:db:
bf:e3:de:19:58:bb:e9:03:3a:e5:88:30:7f:5a:68:0f:98:51:
6f:46:6e:6c:c5:70:21:60:72:a2:cc:18:16:47:5b:40:e4:95:
cb:b8:78:83:76:26:b3:3a:4b:78:92:37:6c:62:2a:e6:59:1c:
36:6f:cf:9f:03:12:cd:ba:08:da:d9:31:f1:e3:e7:65:62:4f:
5a:16:ce:5a:96:77:ca:1c:77:d9:c2:91:90:09:d2:87:e8:3a:
18:07:a6:dc:e8:ab:9b:e6:f9:0a:c3:57:3c:c8:cc:74:71:48:
ce:06:b5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:31:43 2025 by rpki-client