Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/F7jqvnw_57xNimZz0fEEzcOBFyw.roa
File: F7jqvnw_57xNimZz0fEEzcOBFyw.roa (raw, json)
Hash identifier: KbyKzWMNaSKO/5vyHb50kj6jOAW959D3ic0DVISZROE=
Subject key identifier: 17:B8:EA:BE:7C:3F:E7:BC:4D:8A:66:73:D1:F1:04:CD:C3:81:17:2C
Certificate issuer: /CN=eb7bbbfef59509e7263986f780589ab1e7998423
Certificate serial: 01856BD38DB060B126321F593ADECD3F2426
Authority key identifier: EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/F7jqvnw_57xNimZz0fEEzcOBFyw.roa
Signing time: Sun 01 Jan 2023 05:35:04 +0000
ROA not before: Sun 01 Jan 2023 05:35:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50828
IP address blocks: 213.192.112.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d3:8d:b0:60:b1:26:32:1f:59:3a:de:cd:3f:24:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7bbbfef59509e7263986f780589ab1e7998423
Validity
Not Before: Jan 1 05:35:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17b8eabe7c3fe7bc4d8a6673d1f104cdc381172c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e1:68:56:a7:b3:d4:37:10:e7:4f:92:fe:29:
73:07:f8:e3:38:14:b3:37:5d:7b:12:38:2a:16:27:
a9:46:5d:6f:34:c5:ae:dd:f8:d5:fd:bc:46:28:89:
2f:97:fa:97:35:ed:44:5c:ed:43:fa:b9:61:fd:3e:
8f:6d:bb:fb:74:b3:37:98:f9:65:15:a5:d1:b8:e8:
72:d2:86:9e:ad:a5:f5:a2:ed:3e:39:7b:cb:85:85:
05:fa:22:3f:67:c9:9b:b8:5b:85:bc:f2:5e:7d:99:
d2:1d:08:84:da:1a:b5:e3:40:a5:93:6d:9d:f5:db:
61:95:d5:37:16:7d:0c:78:68:a9:e8:82:0b:6e:1c:
a9:6c:2d:55:9a:ca:63:cb:4f:86:b0:0e:1e:dc:ac:
78:f2:88:90:9a:63:34:4d:c3:53:b6:a7:48:7d:3e:
41:c4:da:0c:08:b1:ff:cb:c4:ca:80:51:73:2b:ca:
46:1b:a9:46:f6:f7:4b:dc:2d:47:9c:47:95:8c:4c:
f5:73:a2:c9:1f:cf:a3:2c:94:a6:68:15:21:da:99:
b6:5b:5c:48:e6:c2:aa:ec:96:68:f3:e7:6d:55:e8:
1b:d9:d7:5c:60:79:f5:11:eb:8b:86:27:73:fd:23:
7f:65:58:0a:59:65:1c:b1:f7:75:3f:ff:c9:69:63:
12:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B8:EA:BE:7C:3F:E7:BC:4D:8A:66:73:D1:F1:04:CD:C3:81:17:2C
X509v3 Authority Key Identifier:
keyid:EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/F7jqvnw_57xNimZz0fEEzcOBFyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.192.112.0/24
Signature Algorithm: sha256WithRSAEncryption
42:fd:32:7b:4d:97:ae:28:1a:e7:89:a8:5d:b0:39:bc:1a:af:
7e:dd:c9:67:69:19:64:b4:15:2b:d5:e5:30:f8:2d:ef:00:f6:
5d:7c:1e:17:17:bb:f5:bd:18:55:f1:19:1e:8e:bb:48:58:f2:
7c:15:36:cc:d0:70:73:69:fd:d0:bb:bf:df:6e:97:72:93:67:
75:98:41:b8:c1:40:2b:0c:72:f0:df:18:68:67:64:6d:15:88:
38:28:95:b5:69:e1:54:dc:65:d5:d8:b1:3a:62:0e:5e:93:43:
9a:76:c4:9f:2d:a6:53:3d:f8:72:bc:7b:48:52:12:5b:b3:0c:
39:df:0e:69:38:2d:d6:9a:39:fe:99:13:01:ca:96:e1:2e:20:
be:61:02:ea:31:d4:9e:fe:b3:78:01:0a:48:c7:a1:54:37:18:
aa:b4:3f:6e:c8:3b:99:ca:43:f8:4f:fd:94:83:2c:89:cb:f1:
47:bb:9e:d8:c6:82:6b:04:31:c6:cd:15:e1:94:ff:19:7e:12:
43:89:3a:e3:80:dc:98:8c:6e:69:41:05:75:58:f8:2e:61:61:
0a:1d:be:d0:0b:b5:c2:38:1e:91:c2:cd:63:03:ee:08:f8:2a:
66:2d:2b:24:23:2a:ad:df:1f:c3:4e:f8:f0:f3:e1:b3:86:54:
c8:ba:f9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:42 2024 by rpki-client on console-fra.rpki-client.org