Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/EBD1OC1CLNdPwqicqqzZrnFqTZY.roa
File: EBD1OC1CLNdPwqicqqzZrnFqTZY.roa (raw, json)
Hash identifier: nureoulboLMxPiUrUfW0N3ceXlPczqA1lyc6DRiSiRA=
Subject key identifier: 10:10:F5:38:2D:42:2C:D7:4F:C2:A8:9C:AA:AC:D9:AE:71:6A:4D:96
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 018BB4693B7CCDF54D49B935879D7897F5AC
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/EBD1OC1CLNdPwqicqqzZrnFqTZY.roa
Signing time: Thu 09 Nov 2023 14:07:57 +0000
ROA not before: Thu 09 Nov 2023 14:07:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142036
IP address blocks: 14.102.237.0/24 maxlen: 24
14.102.238.0/24 maxlen: 24
14.102.239.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b4:69:3b:7c:cd:f5:4d:49:b9:35:87:9d:78:97:f5:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Nov 9 14:07:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1010f5382d422cd74fc2a89caaacd9ae716a4d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fe:06:c2:c6:8b:6e:69:8b:64:39:e0:06:78:
4d:f8:2e:d5:2d:ab:e1:e4:8b:af:52:7d:2f:e0:2e:
3e:48:ba:15:25:7c:d5:f5:f1:e9:28:5e:22:c6:29:
b6:07:85:4e:79:a2:47:d6:0b:f0:5d:8c:c1:a7:6e:
4b:00:32:9e:a5:3c:ff:2f:7c:9e:00:9d:43:5a:0c:
b2:e4:24:28:8a:e9:97:fd:85:0b:13:99:e0:bc:be:
f0:5c:aa:77:1a:19:0b:50:eb:22:7f:13:59:c9:91:
a0:4d:38:b8:b6:f8:a8:83:f7:50:92:c6:12:bd:70:
6e:65:65:06:87:f5:74:76:e9:9b:ed:43:43:0f:83:
38:f1:50:87:06:3d:f3:ca:9c:e2:a2:1d:bd:67:ad:
5b:89:d3:53:73:82:e5:9c:8e:87:35:4b:91:81:1a:
3d:4a:41:93:22:55:21:0a:f7:46:a3:54:02:fd:54:
04:68:ef:4b:87:61:f4:6c:48:2b:0a:fb:41:85:18:
da:79:b9:78:b7:af:43:7b:17:e4:69:3f:40:10:7a:
ba:11:3a:85:08:66:97:09:10:da:0c:2f:91:ad:81:
32:fd:2e:e1:a9:91:f4:3b:9a:c6:dc:41:7e:16:af:
f3:39:d8:5c:c6:20:dc:c2:3d:71:95:2f:c8:fc:9d:
69:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:10:F5:38:2D:42:2C:D7:4F:C2:A8:9C:AA:AC:D9:AE:71:6A:4D:96
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/EBD1OC1CLNdPwqicqqzZrnFqTZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.237.0-14.102.239.255
Signature Algorithm: sha256WithRSAEncryption
82:4e:ed:71:ea:48:97:1a:70:ee:58:50:d4:a6:6b:ac:e8:fc:
1c:da:2d:31:e0:ec:0e:09:36:21:1e:ab:06:d8:ac:9b:6e:e3:
e4:d1:cb:79:5a:1f:36:53:7c:25:67:40:e4:16:e8:3f:73:43:
03:a8:54:67:44:75:1e:46:ae:93:78:1f:2c:cd:7e:98:49:95:
86:4f:a1:f1:7c:5d:f8:1f:17:b9:b6:87:61:a0:53:73:23:bd:
e8:e9:9d:05:94:a5:e5:1b:5c:b9:b1:a4:d8:cf:c7:6b:16:b9:
07:8d:f7:a7:e9:78:d6:17:85:99:b8:40:e7:cd:eb:98:e8:07:
50:6c:c2:28:32:df:6a:92:62:5f:14:30:01:de:01:37:36:79:
df:d7:30:a7:3a:db:25:62:96:68:42:8f:96:71:02:38:f1:37:
d9:6c:8c:85:69:a1:ca:be:11:3f:0a:a6:8d:e2:e5:9f:51:38:
c5:52:35:82:e7:ae:c4:14:55:2f:2e:9c:02:9f:72:73:3d:d2:
c4:d9:5c:a6:af:76:e1:2b:b3:fe:35:fd:2d:c0:96:1d:86:37:
d6:69:ba:cb:4a:0f:4e:58:3c:7b:59:da:94:5c:6a:52:89:8a:
2f:67:40:2c:69:42:a2:ef:b9:b7:f1:f6:a1:02:d0:c0:a2:67:
da:cf:52:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:13:27 2024 by rpki-client on console.sobornost.net