Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/vSb3V_8fZboCpoKMj81K845t4Us.roa
File: vSb3V_8fZboCpoKMj81K845t4Us.roa (raw, json)
Hash identifier: nD37St0/ZSTql6Ie5tZA9HQK5RkxHo41WwvkzbKe1M4=
Subject key identifier: BD:26:F7:57:FF:1F:65:BA:02:A6:82:8C:8F:CD:4A:F3:8E:6D:E1:4B
Certificate issuer: /CN=eb554c44046c36439a919738942f31fa756b6911
Certificate serial: 018D948AB7E819290B58B1921122EAAA7640
Authority key identifier: EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/vSb3V_8fZboCpoKMj81K845t4Us.roa
Signing time: Sat 10 Feb 2024 19:42:15 +0000
ROA not before: Sat 10 Feb 2024 19:42:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15682
IP address blocks: 212.74.224.0/19 maxlen: 19
212.74.224.0/21 maxlen: 21
212.74.232.0/21 maxlen: 21
212.74.233.0/24 maxlen: 24
212.74.240.0/21 maxlen: 21
212.74.248.0/21 maxlen: 21
2a01:5f40::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 14 Feb 2024 06:10:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:94:8a:b7:e8:19:29:0b:58:b1:92:11:22:ea:aa:76:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb554c44046c36439a919738942f31fa756b6911
Validity
Not Before: Feb 10 19:42:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd26f757ff1f65ba02a6828c8fcd4af38e6de14b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f0:19:f4:6d:7d:a7:69:20:92:cf:ee:6b:01:
58:53:96:5b:44:3c:c8:1c:3c:f6:78:d8:de:9d:07:
24:d6:07:14:42:31:4e:b9:c7:70:a8:bc:09:fc:81:
65:12:fc:45:94:15:5a:37:9a:f0:03:04:fe:e3:7c:
d1:d2:e4:86:26:c5:22:07:a5:c7:34:13:8c:f4:81:
43:32:03:de:44:0d:07:56:07:dc:e1:85:dc:c4:54:
e4:db:08:56:3f:ab:3a:b8:7d:c5:86:df:50:94:6e:
2f:3f:bd:7e:42:40:b8:86:6a:99:86:ff:48:8f:08:
93:7a:9f:72:aa:59:c6:4c:b9:fe:f3:b2:f9:7c:2a:
82:e2:dc:96:51:7c:c5:80:6c:df:50:51:2d:a9:be:
19:8e:ea:7e:f3:45:b1:51:4a:e7:73:c1:3d:45:94:
85:37:4b:d6:92:3b:63:50:00:5a:b9:43:24:7f:1b:
ac:36:fb:27:14:91:bf:de:6a:b3:f0:dc:c9:d3:c7:
6f:5a:85:01:b3:85:b3:70:54:05:24:b3:8b:b5:18:
0d:ef:4c:f5:90:c9:df:9e:81:2f:ab:fb:7e:92:af:
3e:1a:7e:1f:ee:df:b2:a0:56:03:5f:57:21:7a:b6:
91:d6:24:94:e1:02:96:2a:cc:ba:a0:36:79:d2:73:
5f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:26:F7:57:FF:1F:65:BA:02:A6:82:8C:8F:CD:4A:F3:8E:6D:E1:4B
X509v3 Authority Key Identifier:
keyid:EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/vSb3V_8fZboCpoKMj81K845t4Us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.74.224.0/19
IPv6:
2a01:5f40::/32
Signature Algorithm: sha256WithRSAEncryption
48:a9:1b:6f:1a:cb:4e:d1:65:84:d7:f8:bc:80:e1:5a:ee:a7:
96:8f:56:88:e4:2d:e9:fc:08:e2:43:5b:d3:f6:1f:43:2c:e2:
9d:c6:73:36:d4:8a:68:ac:8b:b9:e5:10:46:80:dc:2e:62:08:
ca:01:bd:53:a6:37:74:33:c6:4f:00:56:3f:e8:d8:09:d5:fe:
27:24:67:92:d1:f4:98:11:e6:7e:c8:76:bf:f0:2f:b7:d2:02:
cd:59:4b:2e:69:bc:05:6b:f1:a4:7f:82:df:4e:42:21:29:1a:
25:97:90:27:aa:2d:d0:a1:d9:9f:36:a9:86:d6:80:dc:f4:cc:
82:2d:5c:44:bd:2d:78:3e:16:cf:59:37:20:7b:bd:1c:81:cc:
0b:4e:32:d9:28:44:a0:d7:00:75:12:dc:b7:95:ad:44:b1:d2:
d1:f4:6b:e6:14:94:5f:91:af:a9:22:ba:ea:22:20:a3:25:d6:
d2:96:23:b5:93:83:89:d5:7a:6a:2b:00:fb:09:1c:62:94:85:
bd:b8:87:87:a9:e7:df:9f:21:ac:d8:17:74:6f:67:49:5e:3c:
94:64:18:2f:fc:e0:41:8b:d9:25:51:d6:3e:a7:fa:d8:c9:7d:
29:32:45:3d:91:1b:8f:64:f6:72:ff:13:cf:8d:18:2c:6e:fc:
7a:67:2a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 09:29:52 2024 by rpki-client on console-ams.rpki-client.org