Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/Q-TsmcxETSu1wcZMhTXu1md7T00.roa
File: Q-TsmcxETSu1wcZMhTXu1md7T00.roa (raw, json)
Hash identifier: 9A3/+71nhZK/9zC0wFGGU705QagYQthmpAKLUKQKiJE=
Subject key identifier: 43:E4:EC:99:CC:44:4D:2B:B5:C1:C6:4C:85:35:EE:D6:67:7B:4F:4D
Certificate issuer: /CN=eb554c44046c36439a919738942f31fa756b6911
Certificate serial: 018CAFB70D309CF669400F3EA95330C243A8
Authority key identifier: EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/Q-TsmcxETSu1wcZMhTXu1md7T00.roa
Signing time: Thu 28 Dec 2023 09:17:38 +0000
ROA not before: Thu 28 Dec 2023 09:17:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15682
IP address blocks: 212.74.224.0/21 maxlen: 21
212.74.224.0/19 maxlen: 19
212.74.232.0/21 maxlen: 21
212.74.240.0/21 maxlen: 21
212.74.248.0/21 maxlen: 21
2a01:5f40::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:af:b7:0d:30:9c:f6:69:40:0f:3e:a9:53:30:c2:43:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb554c44046c36439a919738942f31fa756b6911
Validity
Not Before: Dec 28 09:17:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43e4ec99cc444d2bb5c1c64c8535eed6677b4f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d6:dd:0e:c9:57:f9:f4:4c:bf:8b:a7:54:a1:
1f:e4:12:f0:7f:c2:34:09:4d:d2:59:05:a8:87:dc:
b6:a5:5f:bb:9d:85:ce:63:9e:8a:2d:10:25:8d:e2:
5a:09:7b:ab:52:80:40:e8:7e:5c:43:20:4c:a8:bf:
d2:24:81:b5:f6:02:ce:ea:43:6a:a4:e3:67:c4:e3:
b9:50:c1:fb:22:e0:4d:0e:f8:d7:4b:32:f9:da:93:
a8:40:ce:a7:b7:4c:1e:da:98:1f:6b:d5:f5:1f:77:
89:e2:ab:9b:58:f5:b0:d4:22:2f:8b:cc:b9:26:ad:
19:8e:e2:b8:23:a8:41:5a:fa:49:9a:d4:ba:f4:4d:
9d:d1:29:55:2e:06:d9:e9:11:cb:aa:65:e3:e1:9c:
d2:47:f1:81:69:7f:c7:aa:27:80:38:2b:86:53:06:
cc:a4:1f:7d:e1:41:46:1d:c8:a2:1c:96:f1:d0:3b:
57:86:4d:c9:0f:76:6f:01:a8:0f:1f:2a:5c:a3:d6:
92:03:30:09:20:be:a9:80:9f:74:a8:05:4d:16:82:
68:94:46:36:fa:ef:f2:ca:3d:37:43:29:ad:da:9e:
e1:35:c3:d5:ff:d1:ec:8a:1b:5c:fa:c6:ac:4a:be:
be:2c:2a:ac:64:e7:c7:bd:14:1c:2d:06:1d:4d:3b:
a5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E4:EC:99:CC:44:4D:2B:B5:C1:C6:4C:85:35:EE:D6:67:7B:4F:4D
X509v3 Authority Key Identifier:
keyid:EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/Q-TsmcxETSu1wcZMhTXu1md7T00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.74.224.0/19
IPv6:
2a01:5f40::/32
Signature Algorithm: sha256WithRSAEncryption
52:55:66:1d:c6:04:16:1f:58:02:df:37:ba:23:df:c3:f9:39:
94:03:5f:a8:50:ef:7b:de:83:32:9a:99:14:6f:74:86:22:75:
2e:cb:e0:66:fe:75:13:e8:e8:1a:bd:ad:ba:72:c7:3b:36:a9:
7b:f0:5f:c9:32:23:6d:da:82:ac:5c:df:e7:c5:25:ee:1d:5a:
73:46:41:87:7a:94:90:da:ce:56:90:1b:00:6a:e4:4d:9b:d1:
47:0f:ce:9a:b3:ac:76:58:40:de:8f:c4:2a:1c:39:54:2d:03:
d9:f2:90:08:9b:5b:af:82:87:2c:6c:ac:2e:04:71:44:09:00:
92:cd:10:29:16:3a:89:ba:e2:d0:e8:9a:fa:b4:96:4b:70:13:
a5:a3:7e:c6:4c:bd:56:c5:18:e7:0a:2a:ee:d0:0f:0e:b5:57:
f0:8f:6c:a3:72:3a:c2:a1:3b:11:20:62:2a:65:7e:f8:5d:59:
f7:dd:59:a2:e9:ba:df:c5:f5:ee:a3:ee:ac:47:9b:05:fc:ab:
57:53:9d:6c:be:d5:4b:22:9e:3c:76:e3:d4:c7:21:e3:bf:db:
3e:e1:12:62:34:cd:73:bc:7d:3e:40:da:3d:60:bc:dc:14:1d:
1e:e0:8a:68:db:84:32:37:aa:ce:4e:c5:a2:55:16:1c:88:1f:
1a:1e:9b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 07:05:04 2024 by rpki-client on console.sobornost.net