Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/uGGF_9d39_aCwaJce7i-1lpfEgU.roa
File: uGGF_9d39_aCwaJce7i-1lpfEgU.roa (raw, json)
Hash identifier: jBIyGC4umiEx8SDSiKoL4jVJYVgUmWC8TU0m1d8qEJQ=
Subject key identifier: B8:61:85:FF:D7:77:F7:F6:82:C1:A2:5C:7B:B8:BE:D6:5A:5F:12:05
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01941B7461B3259BBDF5499553CCB97CCA8A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/uGGF_9d39_aCwaJce7i-1lpfEgU.roa
Signing time: Tue 31 Dec 2024 06:43:19 +0000
ROA not before: Tue 31 Dec 2024 06:43:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216040
IP address blocks: 185.212.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:54:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1b:74:61:b3:25:9b:bd:f5:49:95:53:cc:b9:7c:ca:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 31 06:43:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b86185ffd777f7f682c1a25c7bb8bed65a5f1205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:da:34:80:ae:b8:77:76:aa:4f:b5:09:bf:2a:
a8:79:6c:94:5b:a7:78:c7:a1:f7:96:94:9c:e4:fc:
72:d3:5b:5b:63:45:30:cb:8d:3f:b6:ba:29:c6:0d:
a8:cc:98:20:ca:9d:72:f8:cc:74:01:90:b5:84:92:
cf:e0:be:c0:5d:23:a6:57:06:3a:b8:38:15:0a:67:
bb:85:9a:59:6d:f0:73:b7:d4:df:44:17:c6:41:9b:
ea:e2:d7:87:91:cb:c2:09:51:7c:65:19:83:ed:30:
ee:62:7a:0b:50:c9:70:cd:f8:43:0b:e1:4a:19:c7:
c1:82:73:e3:11:95:5f:62:05:a2:e1:af:ac:96:75:
5c:84:57:6b:56:de:49:ac:b8:6d:b4:a6:b4:01:b8:
fd:5c:e8:bc:b3:9d:97:cb:eb:7e:b1:8e:3a:2e:ad:
ad:24:0a:fc:e4:00:dc:44:40:f9:c1:23:a2:df:b6:
27:f8:6d:f8:95:ff:f8:87:8d:43:aa:94:d5:d2:1b:
dc:c8:e9:c3:e8:97:44:6d:c6:e6:2f:b5:78:3c:51:
ba:e4:8a:4c:69:64:a9:3e:32:07:b4:1d:a3:01:fd:
91:0a:36:df:0b:60:f5:74:60:e7:ba:e9:4e:ff:c3:
5f:20:6c:ca:e4:fb:6f:71:07:82:19:0a:f4:6f:3d:
47:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:61:85:FF:D7:77:F7:F6:82:C1:A2:5C:7B:B8:BE:D6:5A:5F:12:05
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/uGGF_9d39_aCwaJce7i-1lpfEgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.119.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:81:8f:ea:2e:17:2c:af:22:6f:0c:68:d2:47:52:89:12:72:
c0:f1:bb:1a:53:da:c4:62:d4:cb:1a:ec:54:a5:4a:ba:d3:44:
09:3f:d3:4a:5d:5c:9f:9b:49:bd:57:3d:6f:2c:f4:a1:7b:1d:
9a:a7:2c:c1:e6:39:42:77:9e:b6:29:13:30:ab:f9:18:5b:44:
9e:e9:76:2d:a0:1f:a9:1b:0e:6c:ad:46:33:72:c3:b8:79:13:
60:48:1a:17:18:fa:1f:e3:22:11:c1:0e:9b:e6:72:9b:d6:cd:
dc:d2:b8:01:c5:77:e1:21:6d:59:95:be:ec:26:a8:6d:69:3e:
cd:6a:a5:bd:6f:88:51:8f:1d:00:10:05:13:73:06:6f:f1:10:
60:98:38:e6:20:88:d3:5a:3c:15:04:b1:f4:e2:05:a3:6b:87:
a0:b6:aa:d7:06:31:5d:a2:85:f7:c8:4f:bd:d3:5a:24:3b:26:
f2:65:0c:f0:d2:ab:7d:e4:18:55:3f:86:49:f9:d8:7a:c5:a8:
ec:30:dd:1d:83:ba:a7:b1:fe:57:cc:65:28:55:21:23:ed:4c:
f8:63:51:d6:0a:be:7a:f2:32:e2:28:64:74:90:ce:e8:3c:4a:
64:b1:a7:fe:ed:fb:a4:5d:26:ab:cb:6d:c2:7e:a3:68:b8:63:
60:e1:12:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:19 2025 by rpki-client