Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/NPRLHbrZhzSHesMzjs9bZ0eMvs4.roa
File: NPRLHbrZhzSHesMzjs9bZ0eMvs4.roa (raw, json)
Hash identifier: 0JHDLp6vov3iaMcB4E1/tgZgXUl9E6IpKYIDcCc7KGo=
Subject key identifier: 34:F4:4B:1D:BA:D9:87:34:87:7A:C3:33:8E:CF:5B:67:47:8C:BE:CE
Certificate issuer: /CN=eb7bbbfef59509e7263986f780589ab1e7998423
Certificate serial: 018CC794A1BED63943F29DAC2C64AA33E6A5
Authority key identifier: EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/NPRLHbrZhzSHesMzjs9bZ0eMvs4.roa
Signing time: Tue 02 Jan 2024 00:30:55 +0000
ROA not before: Tue 02 Jan 2024 00:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12831
IP address blocks: 213.192.64.0/20 maxlen: 20
213.192.80.0/20 maxlen: 20
213.192.96.0/20 maxlen: 20
213.192.112.0/20 maxlen: 20
89.191.176.0/20 maxlen: 20
2001:4070:8000::/33 maxlen: 33
Validation: Failed, certificate revoked on Wed 14 Feb 2024 11:17:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:a1:be:d6:39:43:f2:9d:ac:2c:64:aa:33:e6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7bbbfef59509e7263986f780589ab1e7998423
Validity
Not Before: Jan 2 00:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34f44b1dbad98734877ac3338ecf5b67478cbece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ce:33:6d:b8:e2:d5:7b:c2:e3:80:d5:bd:ca:
23:08:c6:ef:88:35:fc:1a:21:66:0d:ef:d1:63:3b:
7d:9f:d4:00:95:f9:4d:b1:9b:fa:71:18:67:c9:4c:
20:18:80:3f:df:80:e7:25:2f:ad:74:b4:bd:5c:1c:
4c:e4:af:f2:e1:b0:e3:fa:fc:fd:f3:e3:27:9f:d5:
74:08:4b:34:a3:d7:b6:ec:ef:dd:90:1e:da:99:60:
70:c6:a2:cf:18:ec:de:7e:27:64:32:80:3e:75:86:
cd:2f:ed:c0:b3:1f:86:a8:49:35:89:30:cd:fc:20:
e9:2b:6e:2c:66:ae:08:94:31:f5:a6:9a:40:c2:98:
f5:24:99:62:7d:5f:00:96:12:78:14:16:7d:80:ce:
56:d2:d9:b7:c6:c7:c7:e6:51:4d:3b:44:15:55:de:
60:ad:76:61:f2:92:e9:e5:b6:1b:7e:99:f1:b1:f7:
00:6e:cb:30:78:33:c5:95:71:4f:7a:d7:27:b2:24:
76:ba:25:b3:60:77:86:e4:27:f3:4b:1b:e4:83:7f:
c4:3a:55:21:64:f0:8c:60:42:b5:36:92:41:2a:47:
82:f8:2f:71:84:a7:87:ef:76:5e:2d:51:03:d9:d9:
21:12:e0:a7:e3:d4:fd:13:ed:52:db:89:01:4d:f0:
77:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F4:4B:1D:BA:D9:87:34:87:7A:C3:33:8E:CF:5B:67:47:8C:BE:CE
X509v3 Authority Key Identifier:
keyid:EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/NPRLHbrZhzSHesMzjs9bZ0eMvs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.191.176.0/20
213.192.64.0/18
IPv6:
2001:4070:8000::/33
Signature Algorithm: sha256WithRSAEncryption
2d:3e:c1:7d:ed:cb:00:1a:61:ed:2f:85:8f:d0:d0:b4:aa:05:
e9:79:e0:90:5e:f3:07:35:3b:7f:da:3e:a9:64:14:f5:4c:37:
d3:18:f0:c4:ab:14:1a:57:83:0b:c9:ac:08:d7:7b:c9:4f:77:
4b:0b:22:cd:99:83:2a:5e:a9:3a:aa:4b:20:e8:77:ab:11:6d:
e9:33:9a:b2:04:9d:d0:9a:ef:f0:d5:07:55:ee:51:8d:5f:28:
e6:36:2b:77:40:04:dc:93:23:29:73:f4:90:c2:5d:83:63:16:
89:d1:db:7e:4b:ca:5a:55:ee:80:f6:0b:f0:49:83:1e:58:02:
fc:f1:65:ce:6d:30:ff:f6:23:ec:e2:a5:5d:e0:2f:30:2e:76:
26:67:5e:bb:de:c2:d6:f7:91:61:46:f0:f2:29:c0:aa:61:17:
42:79:9f:13:ab:2e:6c:77:dc:5c:65:d3:64:64:dc:75:fa:7d:
ea:8c:6c:7a:51:bd:f8:41:a7:bf:38:dc:7a:52:17:91:33:58:
50:38:94:4d:89:87:b3:53:fc:0d:bf:62:e2:cd:53:9e:53:ba:
c3:8b:73:67:52:ac:d7:0c:fa:d0:6d:d6:b0:b9:77:93:4f:9c:
ea:a9:fd:fd:12:07:f2:a3:51:3e:4a:4f:13:1a:fe:de:50:a0:
71:19:d4:ee
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAYzHlKG+1jlD8p2sLGSqM+alMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViN2JiYmZlZjU5NTA5ZTcyNjM5ODZmNzgwNTg5YWIxZTc5
OTg0MjMwHhcNMjQwMTAyMDAzMDU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGY0NGIxZGJhZDk4NzM0ODc3YWMzMzM4ZWNmNWI2NzQ3OGNiZWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0M4zbbji1XvC44DVvcojCMbviDX8
GiFmDe/RYzt9n9QAlflNsZv6cRhnyUwgGIA/34DnJS+tdLS9XBxM5K/y4bDj+vz9
8+Mnn9V0CEs0o9e27O/dkB7amWBwxqLPGOzefidkMoA+dYbNL+3Asx+GqEk1iTDN
/CDpK24sZq4IlDH1pppAwpj1JJlifV8AlhJ4FBZ9gM5W0tm3xsfH5lFNO0QVVd5g
rXZh8pLp5bYbfpnxsfcAbssweDPFlXFPetcnsiR2uiWzYHeG5CfzSxvkg3/EOlUh
ZPCMYEK1NpJBKkeC+C9xhKeH73ZeLVED2dkhEuCn49T9E+1S24kBTfB3vwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFDT0Sx262Yc0h3rDM47PW2dHjL7OMB8GA1UdIwQY
MBaAFOt7u/71lQnnJjmG94BYmrHnmYQjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjN1N192V1ZDZWNtT1liM2dGaWFzZWVaaENNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzI5NWYtMThjYi00YmZlLTkyZTMt
NGFiNTMzMWNkOTM1LzEvTlBSTEhiclpoelNIZXNNempzOWJaMGVNdnM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82MzI5NWYtMThjYi00YmZlLTkyZTMtNGFiNTMzMWNkOTM1
LzEvNjN1N192V1ZDZWNtT1liM2dGaWFzZWVaaENNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQEWb+wAwQG
1cBAMA4EAgACMAgDBgcgAUBwgDANBgkqhkiG9w0BAQsFAAOCAQEALT7Bfe3LABph
7S+Fj9DQtKoF6XngkF7zBzU7f9o+qWQU9Uw30xjwxKsUGleDC8msCNd7yU93Swsi
zZmDKl6pOqpLIOh3qxFt6TOasgSd0Jrv8NUHVe5RjV8o5jYrd0AE3JMjKXP0kMJd
g2MWidHbfkvKWlXugPYL8EmDHlgC/PFlzm0w//Yj7OKlXeAvMC52Jmdeu97C1veR
YUbw8inAqmEXQnmfE6subHfcXGXTZGTcdfp96oxselG9+EGnvzjcelIXkTNYUDiU
TYmHs1P8Db9i4s1TnlO6w4tzZ1Ks1wz60G3WsLl3k0+c6qn9/RIH8qNRPkpPExr+
3lCgcRnU7g==
-----END CERTIFICATE-----
Generated at Wed Feb 14 15:10:46 2024 by rpki-client on console-ams.rpki-client.org