Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/0lJRzQrA8g1eG4USnuH47KBGKKo.roa
File: 0lJRzQrA8g1eG4USnuH47KBGKKo.roa (raw, json)
Hash identifier: HOG2j1D7zFMsA0FgT+fyxqXheKuCoICDQpn9xiSB+oc=
Subject key identifier: D2:52:51:CD:0A:C0:F2:0D:5E:1B:85:12:9E:E1:F8:EC:A0:46:28:AA
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01890AE6289E1808B6AF0E64245656C953FB
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/0lJRzQrA8g1eG4USnuH47KBGKKo.roa
Signing time: Fri 30 Jun 2023 06:03:22 +0000
ROA not before: Fri 30 Jun 2023 06:03:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 14.102.228.0/22 maxlen: 24
14.102.238.0/24 maxlen: 24
14.102.234.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0a:e6:28:9e:18:08:b6:af:0e:64:24:56:56:c9:53:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 30 06:03:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d25251cd0ac0f20d5e1b85129ee1f8eca04628aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e7:95:3f:7b:6a:79:0a:e6:63:26:c0:70:5d:
ea:4a:6b:ba:ef:df:a8:31:bc:8c:30:5f:0b:0e:92:
27:bd:a8:3b:ee:a8:8f:d7:f5:f9:de:ff:42:39:b5:
d4:33:0a:25:6e:9b:68:4a:b6:2a:26:0c:f3:92:de:
b2:d6:98:73:53:ff:2b:02:47:83:a8:ad:be:c2:c1:
28:e2:3a:76:87:c9:ef:1d:16:8a:e5:14:bc:fa:43:
40:8c:76:d4:3d:09:58:47:3d:37:07:72:92:c5:bf:
fc:41:08:e4:d8:69:eb:b2:a4:fb:8e:41:6e:6f:c7:
23:cc:86:23:cc:68:d2:25:75:37:9e:52:01:da:83:
05:60:f1:7c:09:59:80:16:49:97:34:40:92:4f:d9:
71:ff:02:16:b2:3c:eb:ca:ec:9f:87:7f:31:bc:07:
c8:04:86:fa:50:9c:d9:11:15:35:53:af:20:ee:a4:
7d:fd:26:8b:a0:5b:e7:b2:b3:a3:59:a9:00:f0:52:
8a:e0:46:86:8f:8f:d3:07:2f:42:37:9e:c7:f1:84:
0e:29:84:29:c5:f6:52:a5:24:00:5c:5d:be:d6:ef:
26:c2:ec:a8:7e:e3:ea:5a:3b:8a:80:c3:20:a9:d9:
b7:2f:95:83:09:16:d4:12:2b:07:df:d2:c0:2c:b7:
e0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:52:51:CD:0A:C0:F2:0D:5E:1B:85:12:9E:E1:F8:EC:A0:46:28:AA
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/0lJRzQrA8g1eG4USnuH47KBGKKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.228.0/22
14.102.234.0/24
14.102.238.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:7d:77:dc:c3:50:12:85:58:d1:9a:e6:bb:6e:6f:b3:a3:30:
31:4e:7b:74:03:b2:fd:42:31:88:81:7e:fe:ad:76:95:91:49:
3e:db:35:fe:0d:04:07:60:ff:01:f2:13:2d:fe:b2:f1:ec:79:
d6:ca:e1:47:df:3b:5d:5d:db:2f:27:ac:f0:d9:b1:ac:5a:71:
d9:15:6a:88:09:84:51:57:d5:31:40:40:f4:9c:25:4c:f5:1d:
a8:24:6c:e1:c3:69:ec:34:30:46:22:b9:4f:35:9f:a2:75:91:
7a:64:d9:c5:da:12:29:42:8e:6d:f2:20:bd:d9:d7:ed:16:b6:
e2:9d:a5:7b:e8:1a:49:d6:32:39:d2:c4:d5:e9:ca:2b:5d:a3:
48:b1:79:6b:8f:6d:77:49:c6:26:d8:ae:4e:4d:bd:7b:60:8f:
ac:d1:a2:19:33:65:da:2f:48:6a:e4:74:44:81:7c:7d:f1:4b:
70:7c:13:b4:49:86:38:42:0b:06:6c:59:88:d1:2e:4c:dd:5d:
d4:f0:83:10:b1:95:96:75:c3:04:7c:36:48:87:59:d3:6c:49:
d1:a6:60:9a:86:69:4c:d3:72:de:8c:d8:57:6d:24:78:79:bc:
73:f3:65:88:94:50:41:66:78:e9:2e:78:5b:ad:38:7c:1e:67:
f2:cd:fe:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:47 2023 by rpki-client on console.sobornost.net