Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/dgsxImxldd7goHlgoaUiF-jBx5c.roa
File: dgsxImxldd7goHlgoaUiF-jBx5c.roa (raw, json)
Hash identifier: Gi8okVfmrE88a/dbcPo0qeA6RWvgFkIu5dzg0UwNxm4=
Subject key identifier: 76:0B:31:22:6C:65:75:DE:E0:A0:79:60:A1:A5:22:17:E8:C1:C7:97
Certificate issuer: /CN=eb7bbbfef59509e7263986f780589ab1e7998423
Certificate serial: 018F4CF2E0D56DBF4A6D9B40921E9F0A3F4C
Authority key identifier: EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/dgsxImxldd7goHlgoaUiF-jBx5c.roa
Signing time: Mon 06 May 2024 08:08:56 +0000
ROA not before: Mon 06 May 2024 08:08:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197502
IP address blocks: 213.192.116.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4c:f2:e0:d5:6d:bf:4a:6d:9b:40:92:1e:9f:0a:3f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7bbbfef59509e7263986f780589ab1e7998423
Validity
Not Before: May 6 08:08:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=760b31226c6575dee0a07960a1a52217e8c1c797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:95:0a:26:39:cd:82:20:30:35:d0:f1:fb:05:
dd:4e:d3:dd:7d:2f:cf:84:5b:a3:14:9f:31:e6:e0:
c4:d4:3e:ff:1d:15:6b:30:61:09:c7:c4:ab:86:3e:
72:1d:ea:da:7c:3c:1f:ad:77:3a:fc:ff:4b:c4:fa:
0f:41:82:ab:93:7e:01:b4:b3:bc:4e:9f:d7:34:0e:
2d:2f:ff:63:28:b5:1c:f8:7a:64:d8:e8:e2:e0:79:
4c:f0:e9:cc:a3:0f:bd:19:9b:5e:d4:b5:1a:a2:7b:
7c:fb:23:0a:7b:38:43:db:38:04:4c:f4:55:0f:66:
c5:84:22:bf:0a:c3:19:65:b3:91:9e:83:a4:62:2c:
9f:39:cd:8f:e9:e8:21:ba:ec:1e:84:93:c4:12:50:
06:cf:51:ea:50:10:57:1d:16:ad:3a:66:16:e0:23:
ca:46:f4:12:73:ac:1a:68:db:d3:a9:63:40:6e:f5:
56:01:a5:ea:70:ba:41:d3:bc:f1:50:0c:f4:b8:a9:
79:3e:3e:9f:ad:fb:7a:a2:2a:1a:9b:d9:f6:32:92:
d9:20:cf:89:d4:06:00:c2:eb:9f:a3:ec:17:0d:fe:
f1:7a:75:87:39:32:6e:35:e8:55:01:96:b9:fe:a2:
b3:fc:7f:c1:ff:45:95:bc:9f:43:37:5e:3f:10:fc:
44:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0B:31:22:6C:65:75:DE:E0:A0:79:60:A1:A5:22:17:E8:C1:C7:97
X509v3 Authority Key Identifier:
keyid:EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/dgsxImxldd7goHlgoaUiF-jBx5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.192.116.0/23
Signature Algorithm: sha256WithRSAEncryption
34:b4:2b:83:cd:a1:d5:72:dc:8b:63:6f:77:f7:02:91:c6:6c:
1a:80:40:d8:33:35:81:9e:a9:f1:ab:01:95:16:b3:94:eb:21:
0b:43:5a:1f:3e:7c:b0:65:f0:96:16:11:13:37:d9:bb:a8:77:
a7:56:61:76:97:a4:95:a6:a3:d9:b9:c9:4c:3e:88:49:31:ba:
eb:89:55:db:ae:32:48:e2:fc:0c:3d:c9:86:25:65:07:ae:26:
ec:98:2a:bd:61:d4:79:03:a6:a2:a6:c3:84:fb:00:73:af:af:
12:da:9d:81:fd:0d:b5:0d:ae:fc:42:3a:69:de:97:7a:23:54:
20:ea:c6:e1:86:de:7d:6a:ba:4b:81:a5:f1:b1:9c:4a:f8:44:
76:35:04:54:17:95:0f:8f:f8:15:fa:5b:c2:dc:ba:b8:1e:6f:
67:e5:17:6a:f4:47:4b:57:f3:08:65:27:0d:4b:9f:af:a7:90:
fc:58:64:c8:9c:ca:58:9b:57:a5:f7:9d:4d:4d:9c:17:9f:90:
c4:3e:20:7b:95:74:74:3e:63:c2:b8:af:38:89:16:e9:f8:9d:
74:35:48:2b:21:08:c6:63:3a:d5:3c:07:62:2c:d3:aa:41:19:
dd:8c:10:8d:5b:1c:e0:6d:47:41:8e:f6:48:c9:df:14:b3:22:
86:3d:06:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY9M8uDVbb9KbZtAkh6fCj9MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViN2JiYmZlZjU5NTA5ZTcyNjM5ODZmNzgwNTg5YWIxZTc5
OTg0MjMwHhcNMjQwNTA2MDgwODU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjBiMzEyMjZjNjU3NWRlZTBhMDc5NjBhMWE1MjIxN2U4YzFjNzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5UKJjnNgiAwNdDx+wXdTtPdfS/P
hFujFJ8x5uDE1D7/HRVrMGEJx8Srhj5yHerafDwfrXc6/P9LxPoPQYKrk34BtLO8
Tp/XNA4tL/9jKLUc+Hpk2Oji4HlM8OnMow+9GZte1LUaont8+yMKezhD2zgETPRV
D2bFhCK/CsMZZbORnoOkYiyfOc2P6eghuuwehJPEElAGz1HqUBBXHRatOmYW4CPK
RvQSc6waaNvTqWNAbvVWAaXqcLpB07zxUAz0uKl5Pj6frft6oioam9n2MpLZIM+J
1AYAwuufo+wXDf7xenWHOTJuNehVAZa5/qKz/H/B/0WVvJ9DN14/EPxEPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHYLMSJsZXXe4KB5YKGlIhfowceXMB8GA1UdIwQY
MBaAFOt7u/71lQnnJjmG94BYmrHnmYQjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjN1N192V1ZDZWNtT1liM2dGaWFzZWVaaENNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzI5NWYtMThjYi00YmZlLTkyZTMt
NGFiNTMzMWNkOTM1LzEvZGdzeElteGxkZDdnb0hsZ29hVWlGLWpCeDVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82MzI5NWYtMThjYi00YmZlLTkyZTMtNGFiNTMzMWNkOTM1
LzEvNjN1N192V1ZDZWNtT1liM2dGaWFzZWVaaENNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1cB0MA0G
CSqGSIb3DQEBCwUAA4IBAQA0tCuDzaHVctyLY2939wKRxmwagEDYMzWBnqnxqwGV
FrOU6yELQ1ofPnywZfCWFhETN9m7qHenVmF2l6SVpqPZuclMPohJMbrriVXbrjJI
4vwMPcmGJWUHribsmCq9YdR5A6aipsOE+wBzr68S2p2B/Q21Da78Qjpp3pd6I1Qg
6sbhht59arpLgaXxsZxK+ER2NQRUF5UPj/gV+lvC3Lq4Hm9n5Rdq9EdLV/MIZScN
S5+vp5D8WGTInMpYm1el951NTZwXn5DEPiB7lXR0PmPCuK84iRbp+J10NUgrIQjG
YzrVPAdiLNOqQRndjBCNWxzgbUdBjvZIyd8UsyKGPQZ6
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:52 2025 by rpki-client