Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/87xZ3pyP24z22H6IwCg7L5gPoJc.roa
File: 87xZ3pyP24z22H6IwCg7L5gPoJc.roa (raw, json)
Hash identifier: nJoe3nqeHg+PS7gukkaymfZZHQHNR0+9v2jzXwyMDqs=
Subject key identifier: F3:BC:59:DE:9C:8F:DB:8C:F6:D8:7E:88:C0:28:3B:2F:98:0F:A0:97
Certificate issuer: /CN=eb554c44046c36439a919738942f31fa756b6911
Certificate serial: 018DA63CD887DEF25014B9BADCA4631AC538
Authority key identifier: EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/87xZ3pyP24z22H6IwCg7L5gPoJc.roa
Signing time: Wed 14 Feb 2024 06:10:21 +0000
ROA not before: Wed 14 Feb 2024 06:10:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15682
IP address blocks: 212.74.224.0/19 maxlen: 19
212.74.224.0/21 maxlen: 21
212.74.229.0/24 maxlen: 24
212.74.231.0/24 maxlen: 24
212.74.232.0/21 maxlen: 21
212.74.233.0/24 maxlen: 24
212.74.235.0/24 maxlen: 24
212.74.237.0/24 maxlen: 24
212.74.240.0/21 maxlen: 21
212.74.248.0/21 maxlen: 21
212.74.253.0/24 maxlen: 24
212.74.254.0/24 maxlen: 24
2a01:5f40::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 20 Feb 2024 08:35:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a6:3c:d8:87:de:f2:50:14:b9:ba:dc:a4:63:1a:c5:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb554c44046c36439a919738942f31fa756b6911
Validity
Not Before: Feb 14 06:10:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3bc59de9c8fdb8cf6d87e88c0283b2f980fa097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b3:f5:dd:1e:5a:be:54:e8:3a:76:23:c2:9b:
27:03:17:74:ca:95:bd:5a:d6:7c:82:d2:be:a7:e4:
92:6f:73:2f:a8:58:13:38:52:c4:b0:b4:3a:5e:67:
16:ad:0e:b2:4f:a1:13:2a:d1:9c:97:a8:54:f2:28:
87:31:93:46:3a:82:42:38:f5:76:9c:c6:62:26:a2:
89:04:ed:64:5c:9c:00:15:58:84:a5:f9:1a:d8:5a:
14:4b:3a:50:63:93:3c:fa:0a:10:fd:7a:9b:3d:ae:
84:96:56:1d:c9:84:3d:f6:12:d0:d6:5c:1e:b5:83:
44:59:a6:f4:27:85:0f:c0:88:bc:23:44:7a:e1:28:
84:bf:97:f3:a0:4b:dc:4a:83:c4:7b:df:e1:5d:bc:
7d:cc:fd:48:59:89:54:6c:b0:a2:17:29:17:e3:9f:
47:2f:9c:55:cc:c3:b6:7a:e2:32:2b:aa:b3:cd:8c:
9b:68:81:38:26:3b:be:6f:8a:f1:ed:bc:4b:5b:2a:
63:28:06:be:2f:b2:8d:a0:a2:82:82:f6:c0:60:90:
48:d1:17:41:e1:f3:15:34:7b:27:70:07:d8:2b:68:
03:5a:46:9a:0a:6b:db:04:ed:41:ec:22:b2:15:39:
31:40:7c:0b:b1:38:06:d3:97:c9:f1:5f:fd:33:4e:
ae:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BC:59:DE:9C:8F:DB:8C:F6:D8:7E:88:C0:28:3B:2F:98:0F:A0:97
X509v3 Authority Key Identifier:
keyid:EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/87xZ3pyP24z22H6IwCg7L5gPoJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.74.224.0/19
IPv6:
2a01:5f40::/32
Signature Algorithm: sha256WithRSAEncryption
08:cd:07:f9:3d:b0:0a:b2:62:da:34:c8:24:90:66:39:f6:8c:
eb:0e:2f:19:eb:c8:4a:8b:56:58:5d:9a:aa:5d:8c:7d:a6:1b:
ff:3a:bd:5b:17:c3:3a:78:c9:08:9c:c7:4f:08:08:fa:1d:39:
86:4e:27:fe:b1:cb:d7:b2:ec:e9:c6:e1:f4:7f:bf:9b:19:23:
e6:67:ec:a9:3a:5d:d2:12:36:44:da:c0:29:79:31:a6:8a:a3:
4c:a5:f9:8a:eb:7e:ac:e2:93:98:21:78:fd:cc:24:92:19:e5:
8c:34:f8:3a:a5:b5:5c:50:a9:bb:a1:f9:57:0b:47:90:87:af:
cc:5a:78:98:1d:0d:51:55:14:1a:5b:99:cb:1d:cf:c0:74:d6:
53:92:0f:8e:7c:87:8f:fe:c6:e2:18:29:49:95:74:04:c5:13:
db:57:e9:09:49:94:f9:f2:cb:37:d2:5a:03:9a:04:5a:cd:c2:
2f:e3:55:e9:b7:67:d4:6e:c4:f2:6e:10:27:79:fe:4c:b5:ac:
c6:18:43:62:b8:81:33:54:60:b7:84:fe:3a:1a:e9:56:3d:5b:
ac:ae:e9:b8:f4:39:9b:c6:74:5a:c4:ed:3e:51:64:98:e2:88:
58:72:3c:14:ac:da:26:90:ab:b3:20:72:b4:e4:cb:14:29:66:
bf:56:1b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 20 12:04:25 2024 by rpki-client on console-fra.rpki-client.org