Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/_2CNr5ObzNA09IJCddhPhvlL_8Q.roa
File: _2CNr5ObzNA09IJCddhPhvlL_8Q.roa (raw, json)
Hash identifier: XdfVZaKUO1xWN7TZDFkPJMKaiI4R7NrqQe4ZLaKoWYs=
Subject key identifier: FF:60:8D:AF:93:9B:CC:D0:34:F4:82:42:75:D8:4F:86:F9:4B:FF:C4
Certificate issuer: /CN=eb7bbbfef59509e7263986f780589ab1e7998423
Certificate serial: 018CC794A2F476F99EEC2A834CA0E3FD8A52
Authority key identifier: EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/_2CNr5ObzNA09IJCddhPhvlL_8Q.roa
Signing time: Tue 02 Jan 2024 00:30:56 +0000
ROA not before: Tue 02 Jan 2024 00:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212887
IP address blocks: 213.192.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Feb 2024 11:17:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:a2:f4:76:f9:9e:ec:2a:83:4c:a0:e3:fd:8a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7bbbfef59509e7263986f780589ab1e7998423
Validity
Not Before: Jan 2 00:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff608daf939bccd034f4824275d84f86f94bffc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9e:31:9e:9a:3b:f0:7f:f6:db:b4:85:ea:3a:
c7:47:d7:02:fe:ff:77:d8:34:48:54:a2:5c:9b:ed:
2e:e3:7b:d3:1d:ff:7e:b4:c9:0d:43:d5:be:1f:8a:
32:8c:83:e0:2c:cb:1f:00:f2:ad:61:50:25:e7:aa:
50:09:99:33:7e:18:63:ec:6a:14:fb:13:0f:e4:ee:
d4:d1:7f:ba:5e:0a:0f:ca:66:c3:eb:6a:0a:68:bb:
64:46:8d:ca:76:82:14:ee:6d:bf:9b:31:37:dc:5e:
8b:42:05:6d:c6:c1:64:16:87:0a:a7:98:21:d3:7f:
d2:ef:3b:b0:f7:ff:56:5f:c2:af:b3:1e:d1:6d:5e:
2b:9a:b0:92:8a:63:07:b4:c7:5e:b2:16:6e:75:38:
c5:4a:ab:a9:16:35:29:5a:55:5b:ec:4c:3c:31:af:
f6:94:55:67:0a:82:ed:13:fa:9b:cb:f4:1e:ea:a8:
17:d1:7b:8d:ca:f5:5b:58:96:e8:a5:91:1b:2c:25:
1e:df:78:9e:62:ef:ce:e5:da:03:b8:82:9c:8b:e3:
86:df:1e:3f:a2:4c:5e:43:de:5b:66:eb:c4:d1:16:
9d:7e:3a:1b:d3:ce:88:0a:5e:c2:c7:92:ae:63:b7:
bb:44:b3:52:d4:51:dc:06:4b:b6:74:73:00:e4:ef:
61:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:60:8D:AF:93:9B:CC:D0:34:F4:82:42:75:D8:4F:86:F9:4B:FF:C4
X509v3 Authority Key Identifier:
keyid:EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/_2CNr5ObzNA09IJCddhPhvlL_8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.192.113.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:ad:06:aa:6e:26:43:94:6f:4b:33:82:98:9b:0b:50:a5:df:
f1:0a:82:16:5c:4d:ab:7f:48:fa:88:63:1f:63:4d:76:a8:04:
ff:54:28:10:ce:a0:86:a4:e5:1a:13:00:6e:80:b4:19:fa:80:
59:9f:b5:40:73:47:88:e9:24:d5:33:c6:8e:b1:31:63:7d:8a:
7b:cf:5d:d7:b3:ce:5d:65:f8:ad:8c:19:6e:e3:2d:5f:e4:59:
b1:e2:9d:83:ac:11:e2:ea:79:72:0f:29:08:3a:a5:59:be:09:
fb:73:e2:14:8f:cd:37:71:45:40:6a:8d:6f:2b:27:1d:a3:1d:
a3:ff:39:9a:7a:34:de:ee:0b:60:f3:17:a1:e6:90:03:34:e3:
d2:bc:52:5c:02:90:a6:36:e2:d2:ab:b7:44:d6:1b:8a:54:11:
9d:34:6f:45:2f:94:37:f4:b6:d3:2b:b6:ec:ca:27:9d:c2:cd:
74:83:97:ad:fa:1a:64:b7:98:8c:c8:f3:be:18:8c:8c:02:58:
a0:99:f2:4f:53:01:e5:0c:f9:97:61:ad:f8:b1:f0:95:fe:bd:
43:13:0b:98:26:b6:ed:f0:23:0e:1e:f2:0a:66:be:2c:e9:74:
9a:7d:d5:40:b0:39:02:a9:d2:ae:c8:6f:f9:2d:18:8d:14:5b:
51:ba:b2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 15:10:46 2024 by rpki-client on console-ams.rpki-client.org