Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/DSoVVXeCL7FFWaXQeYa1HEn_ebk.roa
File: DSoVVXeCL7FFWaXQeYa1HEn_ebk.roa (raw, json)
Hash identifier: 1ZqzFBgNmv3xZr9JtiBsoLyBe7towN+CPRkMWjEHuFw=
Subject key identifier: 0D:2A:15:55:77:82:2F:B1:45:59:A5:D0:79:86:B5:1C:49:FF:79:B9
Certificate issuer: /CN=edfffb3c661e2f78a5785be95916044b06af51d2
Certificate serial: 01958F8CE3A6237391B149CEEA1EC51D5A2C
Authority key identifier: ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/DSoVVXeCL7FFWaXQeYa1HEn_ebk.roa
Signing time: Thu 13 Mar 2025 12:48:49 +0000
ROA not before: Thu 13 Mar 2025 12:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57087
IP address blocks: 5.182.130.0/24 maxlen: 24
5.182.131.0/24 maxlen: 24
193.163.42.0/24 maxlen: 24
193.163.43.0/24 maxlen: 24
193.163.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Apr 2025 06:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:8c:e3:a6:23:73:91:b1:49:ce:ea:1e:c5:1d:5a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edfffb3c661e2f78a5785be95916044b06af51d2
Validity
Not Before: Mar 13 12:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d2a155577822fb14559a5d07986b51c49ff79b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:26:29:a0:3f:46:c9:0a:d6:06:29:95:c5:52:
94:1c:19:7c:f7:e8:14:ca:4b:da:b5:b3:b0:77:41:
d6:d6:78:5a:e5:a0:75:c3:00:74:a7:86:b8:0c:38:
71:2e:cb:00:eb:b9:a6:c6:60:86:cd:b9:87:02:76:
6a:19:f2:d7:1d:20:e7:63:62:f5:03:e0:5a:40:7e:
0a:72:61:55:8c:d5:c1:b6:b0:c7:77:37:eb:d5:6d:
49:b7:5e:86:be:dd:cf:1c:ca:af:10:58:3e:50:3c:
82:bc:b5:dd:a1:ef:8e:77:e2:8d:5e:c3:6a:40:9a:
f0:6b:75:6b:12:0f:66:03:70:95:1d:d9:18:45:b3:
6f:34:98:8a:23:26:de:5d:f6:35:6c:e5:1d:f9:de:
b1:df:22:2e:5a:0c:4a:04:29:a6:4b:59:0d:9a:b0:
26:cd:c1:0e:80:97:af:b7:b3:87:d3:27:9f:02:a7:
d4:70:57:37:53:60:fc:b0:d8:92:60:86:a5:b5:a4:
a5:72:dd:b3:bf:7a:4a:a3:2b:d4:f1:7f:57:9a:1b:
b0:ad:a9:7b:ef:5e:c3:49:3e:6b:25:79:46:9e:de:
ac:fd:e8:4c:49:7f:ad:05:9f:7a:24:2c:66:b9:df:
ae:bb:29:9b:28:96:bf:d2:fd:c6:ec:40:e1:7d:26:
7b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2A:15:55:77:82:2F:B1:45:59:A5:D0:79:86:B5:1C:49:FF:79:B9
X509v3 Authority Key Identifier:
keyid:ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/DSoVVXeCL7FFWaXQeYa1HEn_ebk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.130.0/23
193.163.42.0-193.163.44.255
Signature Algorithm: sha256WithRSAEncryption
3e:e4:ac:7d:85:92:5f:14:99:22:05:10:fa:96:6a:0a:37:03:
3b:4d:7c:d4:12:3e:7e:91:42:26:93:73:51:e1:2a:c4:c4:02:
ed:65:39:2d:e6:5a:89:29:06:3f:80:47:d6:2d:36:e9:12:3b:
7f:0e:05:e1:64:75:c4:07:8e:17:e4:4d:87:65:b1:1f:2c:1a:
9c:91:56:54:96:e3:48:5f:90:4d:ce:aa:5b:e7:7d:ce:f4:e9:
6a:a7:f3:f2:9f:a3:ef:e9:21:ef:3b:e8:f8:4c:8f:5e:2e:2d:
ea:ae:10:ff:de:7d:ec:89:68:17:d5:ed:64:e9:71:6b:34:a1:
da:24:4d:10:4d:8b:db:db:ce:74:90:bc:46:38:91:ff:34:4b:
a2:75:0d:64:9a:27:63:e9:43:c0:c3:3b:94:28:ff:ee:d3:0b:
57:d3:16:0d:65:b1:23:d9:27:2c:48:7a:9a:0f:29:93:5d:5e:
98:07:89:55:e4:d7:c7:6b:55:8d:49:9a:38:45:c4:7e:14:c9:
0b:5d:60:59:c3:2f:90:5d:8f:54:84:f0:33:fa:b5:b2:ed:46:
76:ea:cb:9d:dc:ec:f6:4f:45:69:93:0d:66:b7:06:21:f9:10:
af:d4:9b:67:21:01:56:5e:0c:d7:f0:8b:05:a9:99:f7:17:5a:
4e:d3:c7:62
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 30 00:05:20 2025 by rpki-client