Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/LhWLAy5HdDP7Xnos3B_2HLj8NLM.roa
File: LhWLAy5HdDP7Xnos3B_2HLj8NLM.roa (raw, json)
Hash identifier: o4HNAXmdPFAW/wrQzg9seaNA7FwFEtn/mp4OXJ9NENA=
Subject key identifier: 2E:15:8B:03:2E:47:74:33:FB:5E:7A:2C:DC:1F:F6:1C:B8:FC:34:B3
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018CD2EABC8C096D0037BC587828A1710D19
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/LhWLAy5HdDP7Xnos3B_2HLj8NLM.roa
Signing time: Thu 04 Jan 2024 05:20:48 +0000
ROA not before: Thu 04 Jan 2024 05:20:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212027
IP address blocks: 185.212.119.0/24 maxlen: 24
37.140.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Feb 2024 04:55:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d2:ea:bc:8c:09:6d:00:37:bc:58:78:28:a1:71:0d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 4 05:20:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e158b032e477433fb5e7a2cdc1ff61cb8fc34b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:99:89:d9:a7:72:41:0a:43:51:d5:63:29:f9:
95:cf:cc:8f:62:ba:84:48:82:e4:5f:ac:b2:b0:fb:
56:8e:e5:98:db:29:b2:bd:8b:f3:98:27:c3:a1:c5:
17:f9:76:75:52:2e:5a:70:16:f7:5c:93:1a:2f:4f:
24:76:14:71:a0:31:6e:5c:14:ba:19:6b:83:42:56:
f9:25:96:52:24:a9:11:2b:d6:7b:19:56:db:be:a9:
cd:d8:74:8e:1a:55:3d:2c:db:75:6f:32:98:0f:4b:
47:86:60:4b:13:d9:eb:71:1c:9f:64:47:c1:a8:fb:
f3:b5:a1:5e:5f:03:11:2b:4f:cc:7d:93:4a:d3:56:
5f:80:61:3c:3a:68:ac:2e:9f:42:d5:90:8f:d6:c1:
32:de:2a:7b:c5:24:f3:26:cf:a0:c2:73:67:f2:85:
35:1f:da:c1:ab:fb:0c:50:3c:28:06:e6:70:06:c5:
5d:9d:56:0d:fa:ba:21:fd:8a:91:af:54:d1:ef:aa:
1a:33:49:93:7f:f2:bf:87:19:8a:7f:27:57:60:5f:
bc:38:84:ab:ba:6b:20:99:29:38:ce:bc:25:2b:11:
c3:e4:48:4b:c0:cd:66:93:06:a3:a3:f2:45:7a:ec:
51:c3:31:52:46:94:bd:75:92:b4:ab:29:1d:80:ba:
c4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:15:8B:03:2E:47:74:33:FB:5E:7A:2C:DC:1F:F6:1C:B8:FC:34:B3
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/LhWLAy5HdDP7Xnos3B_2HLj8NLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.247.0/24
185.212.119.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:31:82:6f:7b:4f:31:8b:92:8b:e2:13:d7:a1:5b:13:91:61:
f9:8c:7d:9d:6a:36:65:25:32:29:cc:67:0e:9a:6c:f4:87:de:
5b:da:53:7c:a1:10:b4:ff:c5:71:6b:4b:16:c7:e7:94:cc:1c:
fa:b9:96:30:c0:76:e4:01:aa:e4:59:5d:b7:a6:cb:f2:5d:0b:
41:7c:39:1c:f6:da:1e:04:93:a0:11:a7:ff:a0:87:b9:8a:fc:
65:b1:77:f6:a7:6d:81:ca:62:40:58:70:2d:7b:c2:9b:29:b8:
31:b1:13:9b:9f:f0:20:94:26:27:25:d7:86:97:2d:54:71:84:
c9:23:4c:96:7d:ad:09:4f:b8:4c:89:96:c9:d9:b1:d7:e1:83:
91:62:0b:b0:f4:13:93:e3:73:f7:31:e9:39:9b:8c:4a:91:52:
ad:62:59:5c:c6:e9:5c:e9:05:f3:24:f3:33:7b:d7:7d:ba:8f:
52:7b:9e:e5:17:17:e7:53:40:05:07:3a:eb:e2:38:a7:af:03:
4d:ee:ca:d2:33:d8:9d:d4:89:c0:16:fe:96:f7:b4:7d:9b:1a:
15:17:5e:ee:cf:09:89:b3:6f:52:bb:7a:4b:1b:3f:6a:0d:1e:
ca:86:00:d6:22:fc:00:7c:c2:57:4b:21:90:44:cf:5e:5d:7d:
31:27:c4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org