Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/NT51OJQcStc7X4XiXyKsjCYONHY.roa
File: NT51OJQcStc7X4XiXyKsjCYONHY.roa (raw, json)
Hash identifier: kHuvzBWVY9ARRlfwJ6pCBTMURPcXirtqcWIllIq6FLg=
Subject key identifier: 35:3E:75:38:94:1C:4A:D7:3B:5F:85:E2:5F:22:AC:8C:26:0E:34:76
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 018B38CB417061CE6DEB05281CCDE1118C1B
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/NT51OJQcStc7X4XiXyKsjCYONHY.roa
Signing time: Mon 16 Oct 2023 14:02:06 +0000
ROA not before: Mon 16 Oct 2023 14:02:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 263522
IP address blocks: 14.102.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:38:cb:41:70:61:ce:6d:eb:05:28:1c:cd:e1:11:8c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 16 14:02:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=353e7538941c4ad73b5f85e25f22ac8c260e3476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:26:e2:e7:b6:53:32:75:96:9b:f3:e1:44:86:
ac:19:4c:ee:a3:3b:59:5f:69:2d:16:e7:f4:e8:4f:
18:72:3d:e6:fb:6f:0f:0a:2d:19:90:0c:82:d0:ce:
67:7e:c8:79:c6:97:ab:f6:a1:ca:a3:16:48:be:d0:
1b:39:f2:da:ae:80:fd:77:f2:85:6c:91:56:2a:ed:
e8:69:a8:cb:88:b8:9b:b5:ce:84:92:94:ac:88:ea:
b3:3d:7a:90:e4:59:e2:04:a5:16:20:52:aa:00:14:
2d:e4:f3:41:4f:bf:e8:af:c9:ee:29:d3:11:85:99:
4f:4f:d8:28:d7:58:bf:75:88:06:2f:34:df:d0:2a:
49:2d:80:b4:64:ae:d8:6d:d2:67:85:f6:00:5d:5e:
a1:0f:28:63:c5:df:b8:9f:d8:7e:09:87:6e:2e:f6:
30:a0:6c:f9:d0:06:c0:9c:3b:13:21:28:9b:22:fe:
7e:3f:98:51:20:a4:ec:7b:9c:13:cb:ae:ba:56:60:
a1:80:88:44:69:51:45:d1:12:05:98:4b:41:2c:97:
52:61:45:18:71:5e:a1:97:d0:4d:28:ca:e7:d4:df:
c2:ec:0b:39:ff:57:3b:b4:44:5b:4a:2b:c5:82:03:
c6:38:e6:17:8e:30:b2:71:3d:61:66:f7:d1:17:8c:
bb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3E:75:38:94:1C:4A:D7:3B:5F:85:E2:5F:22:AC:8C:26:0E:34:76
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/NT51OJQcStc7X4XiXyKsjCYONHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.230.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:9e:91:a8:a8:28:68:f4:46:31:08:f9:65:a0:42:ec:df:c2:
0f:4f:32:fb:6c:ac:fa:f3:e9:4a:61:2a:3c:17:53:d5:44:d6:
8f:52:5c:50:d7:16:d0:0a:94:66:fa:88:42:23:ee:d1:77:02:
e6:13:88:45:18:79:76:42:5d:fa:7f:3d:db:ea:b9:4f:df:95:
b1:53:87:17:e9:9a:aa:6c:13:ee:bd:ce:57:40:4d:91:00:00:
de:5f:e4:27:1f:02:db:61:10:91:33:e1:41:d7:70:f0:6d:c3:
e9:8c:db:6b:1b:b1:a4:e2:e2:a8:ab:4c:fc:af:5d:64:87:c2:
4b:67:c0:29:b9:52:a3:4f:81:e0:57:4c:c0:91:dc:26:36:6b:
03:6c:22:02:30:4e:75:c9:4c:33:8e:9f:7d:f0:d7:83:98:0a:
b5:94:1c:ef:1a:04:15:35:c1:f0:4d:33:da:f1:bc:b4:ec:70:
56:a4:c4:b1:85:b8:0a:a3:2b:f0:a5:49:29:92:44:52:bf:c5:
d6:76:38:b5:03:22:c6:76:63:87:27:57:a2:79:a5:19:5d:87:
8e:d7:fc:3f:53:a3:29:2d:42:6d:bf:de:65:ed:ae:2f:44:d3:
b3:2d:18:d9:36:8c:ed:0b:27:80:86:0b:ae:a5:b7:d1:21:c4:
ea:c3:ff:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:13:27 2024 by rpki-client on console.sobornost.net