Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/r6L6dew15zKY0bIrZPlI5rZf5Zg.roa
File: r6L6dew15zKY0bIrZPlI5rZf5Zg.roa (raw, json)
Hash identifier: cWgsQJQRHIC9FjnjH3Y2b395jIvE2IQcLK0fmQoPY80=
Subject key identifier: AF:A2:FA:75:EC:35:E7:32:98:D1:B2:2B:64:F9:48:E6:B6:5F:E5:98
Certificate issuer: /CN=50963f0e67f4d893cf3d701a23610e6f38959260
Certificate serial: 018E510A0E47FF599AAEC1963690E1338018
Authority key identifier: 50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/r6L6dew15zKY0bIrZPlI5rZf5Zg.roa
Signing time: Mon 18 Mar 2024 10:09:57 +0000
ROA not before: Mon 18 Mar 2024 10:09:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39405
IP address blocks: 185.118.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:51:0a:0e:47:ff:59:9a:ae:c1:96:36:90:e1:33:80:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50963f0e67f4d893cf3d701a23610e6f38959260
Validity
Not Before: Mar 18 10:09:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=afa2fa75ec35e73298d1b22b64f948e6b65fe598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ed:54:e0:0f:ab:89:f3:31:a8:23:c6:2b:e2:
02:70:51:ec:c9:0c:1b:d0:cb:8d:b9:a3:df:ee:dc:
d7:22:7b:d1:95:df:c5:69:27:31:32:db:a0:f1:e3:
c8:19:7f:1a:c0:ed:3d:bf:85:ce:da:da:bf:c9:bd:
5c:b4:78:16:98:2a:16:55:f4:b5:a9:66:a8:8a:1f:
d5:2b:c6:2e:68:2c:1c:4a:52:ab:75:11:ba:bb:61:
8f:b4:64:fe:ee:d5:c4:20:cd:bd:10:cf:da:2e:db:
52:16:12:35:69:03:2d:7d:1d:09:05:0a:05:68:e3:
d3:5b:37:72:89:8a:e6:dd:12:12:8a:c6:86:d4:e1:
55:40:4e:72:ef:36:29:98:b8:5f:4d:66:ab:6d:b2:
f9:ba:6a:59:3c:74:1d:44:dd:90:ef:f4:35:fc:27:
a9:ea:c1:30:73:a5:ab:88:3c:a4:43:cf:3f:7f:ea:
8f:80:7f:ae:11:68:00:bc:b3:1c:07:da:68:4d:2a:
8a:ff:e7:78:00:1e:c5:f7:3e:fa:3d:02:3a:80:2e:
45:2c:26:89:59:02:7d:e1:e0:62:1f:33:e0:81:79:
97:0d:c9:01:49:89:cc:92:6a:87:fb:55:9f:aa:d7:
c5:2a:ca:d2:62:e6:4b:54:05:a1:25:ee:ba:bc:f2:
a5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A2:FA:75:EC:35:E7:32:98:D1:B2:2B:64:F9:48:E6:B6:5F:E5:98
X509v3 Authority Key Identifier:
keyid:50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/r6L6dew15zKY0bIrZPlI5rZf5Zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.119.0/24
Signature Algorithm: sha256WithRSAEncryption
53:9c:67:d8:f0:eb:c1:ed:61:68:61:91:b6:fd:6b:a5:3d:4f:
94:42:c8:3e:91:4b:e3:0b:d1:28:71:ad:bd:8c:69:ff:43:61:
b0:56:11:a9:08:75:3c:36:62:bb:89:b0:03:e8:5e:37:cf:a6:
0f:4c:a8:26:62:8f:29:2c:18:63:c9:ba:ca:ae:02:5d:1b:95:
bf:56:77:ea:aa:1f:22:70:79:37:ef:c4:10:75:b9:ba:fd:0c:
2d:3b:c3:94:44:ed:c2:a4:2b:d8:f8:4f:a6:0c:72:20:16:e5:
be:15:15:25:78:c5:d4:ae:08:3a:17:54:44:73:9e:38:c9:95:
07:10:7a:c5:92:fc:af:69:a2:f4:65:37:54:83:2d:bb:68:a2:
cf:f9:93:ef:85:21:f5:74:b7:18:fd:45:da:e6:f5:9c:ec:76:
f7:ac:5a:32:e6:72:2f:c1:fa:b8:63:e4:3d:ad:e9:0b:b9:19:
ac:24:ec:ff:18:49:f2:2e:ce:05:5f:dd:53:3d:f8:d9:c4:55:
27:e1:f9:dc:57:c3:6d:45:5d:90:ca:c8:f7:db:eb:17:10:03:
28:34:db:43:cb:7a:5a:18:33:3b:68:5d:03:f6:2b:d9:f8:3c:
19:98:0f:ca:55:8e:4c:db:0b:19:5a:e6:23:b2:62:17:02:f9:
40:80:a3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:05 2025 by rpki-client