Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/gxTsogiAGL-8SAZMltBTo9w6ufE.roa
File: gxTsogiAGL-8SAZMltBTo9w6ufE.roa (raw, json)
Hash identifier: oBl9N1R1+wEhN5otaj8G/HcJ2Q9bLSO2WUDF5JCLSmQ=
Subject key identifier: 83:14:EC:A2:08:80:18:BF:BC:48:06:4C:96:D0:53:A3:DC:3A:B9:F1
Certificate issuer: /CN=eb554c44046c36439a919738942f31fa756b6911
Certificate serial: 018EBCDC3E57BE99F1D42B5424671CEE51B4
Authority key identifier: EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/gxTsogiAGL-8SAZMltBTo9w6ufE.roa
Signing time: Mon 08 Apr 2024 08:38:54 +0000
ROA not before: Mon 08 Apr 2024 08:38:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15682
IP address blocks: 212.74.228.0/22 maxlen: 22
212.74.229.0/24 maxlen: 24
212.74.231.0/24 maxlen: 24
212.74.233.0/24 maxlen: 24
212.74.235.0/24 maxlen: 24
212.74.237.0/24 maxlen: 24
212.74.240.0/21 maxlen: 21
212.74.252.0/22 maxlen: 22
212.74.253.0/24 maxlen: 24
212.74.254.0/24 maxlen: 24
2a01:5f40::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 11 Apr 2024 08:58:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bc:dc:3e:57:be:99:f1:d4:2b:54:24:67:1c:ee:51:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb554c44046c36439a919738942f31fa756b6911
Validity
Not Before: Apr 8 08:38:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8314eca2088018bfbc48064c96d053a3dc3ab9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:13:d6:96:52:d9:de:b0:35:cf:fc:e6:2b:a0:
aa:c8:5b:d2:be:3d:9f:47:8f:8e:d4:74:ec:6a:67:
a0:db:e7:72:f9:fc:e8:18:77:4f:e8:80:16:f8:e9:
df:5f:7b:d2:0e:54:7b:a1:5a:3e:23:18:cf:67:98:
f5:5c:e6:d8:7e:66:d9:47:2d:3d:eb:59:0e:27:28:
9f:e4:2f:73:49:f3:99:d8:ab:5c:35:aa:29:d0:d2:
9c:ff:6a:1c:4b:c6:e5:eb:8e:76:17:fc:1b:98:b0:
0d:97:ef:ab:a1:8f:61:ee:43:f8:7b:6d:ce:71:7a:
a5:43:21:77:07:d6:bc:1e:08:2a:dd:e9:6d:33:f6:
fb:a0:5b:75:02:bd:84:a3:43:f9:e6:70:42:98:fa:
bb:2a:5e:d5:bf:66:92:34:17:99:12:f4:18:36:ee:
f4:5c:39:74:ca:37:c8:59:db:fe:2b:43:01:e9:d6:
c1:c4:83:26:f2:82:a3:58:24:7b:e2:39:60:89:57:
b4:ab:2f:f1:c7:85:76:81:42:f1:8b:cf:83:09:98:
7d:a0:2f:ce:15:21:2b:ba:06:39:3e:f3:03:05:c5:
b9:2d:ca:01:fc:df:69:67:1a:02:81:c8:4e:5f:65:
e3:26:cb:d7:4b:71:3e:5f:a0:63:ab:d8:8e:fa:c6:
2d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:14:EC:A2:08:80:18:BF:BC:48:06:4C:96:D0:53:A3:DC:3A:B9:F1
X509v3 Authority Key Identifier:
keyid:EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/gxTsogiAGL-8SAZMltBTo9w6ufE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.74.228.0/22
212.74.233.0/24
212.74.235.0/24
212.74.237.0/24
212.74.240.0/21
212.74.252.0/22
IPv6:
2a01:5f40::/32
Signature Algorithm: sha256WithRSAEncryption
06:0e:e4:9f:91:0d:25:ae:64:c8:3d:0a:4b:d1:96:fc:06:a4:
fa:c9:d7:ae:5c:24:76:d9:92:79:5d:aa:dc:2b:da:8d:e8:4e:
c5:d3:f0:b7:a0:54:91:39:99:48:07:ba:f4:b4:2b:ce:de:cb:
d0:2f:f7:79:a9:56:31:5c:3e:a8:44:aa:68:c1:65:23:8b:05:
ed:6c:2a:8c:93:a9:c4:c6:56:14:48:d4:b0:82:fa:df:c9:a0:
8a:0e:93:83:2f:23:4b:ee:82:b7:21:8f:9f:e7:47:cd:e7:59:
cb:94:35:28:8b:8d:49:84:ee:06:d2:45:02:66:ea:16:a3:cb:
2b:c5:ba:ed:00:08:da:da:01:80:cf:c2:fa:53:a7:61:1e:78:
db:94:4a:c3:7a:72:b9:b7:a4:86:46:45:54:70:92:e5:7a:d2:
30:88:3c:0a:36:9c:c2:cf:5e:96:51:b7:a6:29:26:b8:64:f2:
cf:e2:9f:d7:b8:ed:2c:67:fb:4a:6b:3c:29:ff:b5:13:21:64:
9d:e4:49:a5:c5:0f:fb:42:a5:00:8a:6d:e7:1c:07:3d:0a:82:
bf:65:0f:11:43:fd:eb:07:ee:05:18:93:8d:08:2f:0d:06:8a:
ef:91:b9:57:5d:ff:c8:5b:69:cc:60:c4:f5:43:fb:22:3e:14:
7f:a9:40:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 11 13:52:07 2024 by rpki-client on console-fra.rpki-client.org