Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/L6H0pDFV_FA99aXAIQmOFnC58DY.roa
File: L6H0pDFV_FA99aXAIQmOFnC58DY.roa (raw, json)
Hash identifier: oB/JqIu0Se01BSRaCVvKhV1jy3JiOY0Bq7f5d0KNCaM=
Subject key identifier: 2F:A1:F4:A4:31:55:FC:50:3D:F5:A5:C0:21:09:8E:16:70:B9:F0:36
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018D6D5224E3CA9A2F739869696E7A913FD9
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/L6H0pDFV_FA99aXAIQmOFnC58DY.roa
Signing time: Sat 03 Feb 2024 04:55:16 +0000
ROA not before: Sat 03 Feb 2024 04:55:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212027
IP address blocks: 185.212.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Feb 2024 12:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6d:52:24:e3:ca:9a:2f:73:98:69:69:6e:7a:91:3f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 3 04:55:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fa1f4a43155fc503df5a5c021098e1670b9f036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:58:eb:40:77:6a:bc:be:ce:09:78:e3:15:ee:
b2:58:b1:57:db:e9:ab:8b:27:75:01:8e:73:1f:4e:
c3:24:08:fe:ac:a6:33:9a:c1:04:eb:fa:69:ca:7d:
1d:03:ce:d4:17:e5:82:2d:c0:03:56:31:63:ea:cf:
58:bc:fa:cc:ff:5d:8a:8c:a0:a8:98:28:98:98:96:
e6:f5:58:43:f9:ae:36:7b:90:b8:bb:29:93:96:b9:
5f:b6:a8:af:c0:ca:00:45:63:20:68:6a:39:38:ea:
99:34:4b:6d:ce:dd:30:cc:83:c8:74:6b:12:86:0e:
bf:6c:f6:bd:da:00:e1:ec:bc:93:ab:25:e3:62:33:
7b:92:b0:ad:7b:e8:b9:5d:9e:5d:62:00:7b:32:20:
d5:ee:41:c0:cd:84:e0:32:bf:ef:19:f7:07:02:35:
ad:f4:3c:e0:ee:a2:7c:3a:c9:3a:18:b0:0f:7f:3a:
c8:5f:56:67:ee:32:58:3f:9a:ba:be:72:67:23:97:
c3:96:51:fc:f3:ba:b8:3e:93:eb:24:57:aa:2e:8d:
04:9b:47:be:aa:18:d2:32:e9:4d:eb:c7:95:4e:97:
77:5f:0e:db:7f:23:8b:99:78:48:ed:13:ce:cc:32:
18:1b:8e:f8:76:41:e9:a6:05:d8:be:7f:82:b6:6b:
fe:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A1:F4:A4:31:55:FC:50:3D:F5:A5:C0:21:09:8E:16:70:B9:F0:36
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/L6H0pDFV_FA99aXAIQmOFnC58DY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.119.0/24
Signature Algorithm: sha256WithRSAEncryption
18:6f:a3:ff:31:4a:14:00:ef:fa:85:f5:44:47:0c:09:d1:a0:
07:36:44:3b:42:7e:ae:70:9c:c1:c3:e2:60:66:29:12:14:ca:
c2:1e:a6:6c:b7:eb:87:79:ce:a0:fb:f0:75:4b:30:28:cf:55:
36:f9:99:18:0e:54:85:1a:32:23:73:5c:14:55:30:8e:d0:d5:
4f:4e:70:22:83:7c:ab:55:4c:30:bf:8b:ba:45:96:39:40:18:
99:14:0a:f3:bb:59:14:6b:c2:a3:58:26:37:37:c5:a1:3e:cd:
ad:e3:86:07:ac:d5:5d:f5:e3:70:3b:40:3e:15:b9:bd:be:bd:
37:be:b4:71:08:a9:e5:d3:4d:e0:a5:03:61:c3:9d:52:b9:cf:
8a:42:28:e4:ed:a3:8b:92:da:9e:f5:25:f4:53:b3:42:c7:d4:
ba:31:68:e3:76:6a:32:de:62:24:17:a2:30:43:09:64:95:40:
8d:a5:04:b1:ed:51:a9:b1:67:03:69:06:08:fb:94:d8:2f:3e:
fe:3d:a6:d9:61:77:78:ba:7c:09:d7:e1:99:ed:02:09:d8:56:
0a:4b:1c:08:cd:28:8c:b4:13:d0:40:ab:ab:fc:01:ba:02:c8:
e4:cb:b1:41:68:79:84:14:51:c5:db:4c:43:c7:00:1b:47:06:
bf:15:5d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org