Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/RbqJYCEfPAnh6okdd30GhuBfVJQ.roa
File: RbqJYCEfPAnh6okdd30GhuBfVJQ.roa (raw, json)
Hash identifier: GeKbiM1UPuesdVlnP6BKPmMhPYVtraBoP7J6NO8xhWM=
Subject key identifier: 45:BA:89:60:21:1F:3C:09:E1:EA:89:1D:77:7D:06:86:E0:5F:54:94
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 018C408FCBC7FFBDBEC019A5D1AFEC119E58
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/RbqJYCEfPAnh6okdd30GhuBfVJQ.roa
Signing time: Wed 06 Dec 2023 19:16:54 +0000
ROA not before: Wed 06 Dec 2023 19:16:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.47.59.0/24 maxlen: 24
14.102.231.0/24 maxlen: 24
14.102.236.0/24 maxlen: 24
14.102.234.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:40:8f:cb:c7:ff:bd:be:c0:19:a5:d1:af:ec:11:9e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Dec 6 19:16:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45ba8960211f3c09e1ea891d777d0686e05f5494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5b:ae:1c:2f:c3:58:ac:ee:a1:28:5f:65:96:
6c:82:19:51:21:4a:45:18:d6:3a:a0:a1:06:18:a1:
59:88:b3:f5:a5:1d:86:a7:10:dc:3a:68:61:d9:94:
af:47:0d:48:3e:75:3e:7f:f8:ec:1c:a3:36:c2:80:
7f:88:ca:10:d6:be:2b:8e:ac:40:38:6d:c0:0e:4e:
7b:c3:34:ef:de:a1:fb:ea:54:f8:bc:5a:79:59:82:
0a:1d:71:99:17:76:2e:46:ec:ee:72:92:e5:f1:e3:
59:0c:86:9d:86:54:40:d2:51:c7:e8:55:07:d2:28:
a2:ca:df:4b:6a:ca:a4:8b:0a:f1:24:4e:eb:f2:17:
62:ca:32:be:12:d4:7c:56:3e:2f:48:ed:d4:8a:07:
32:65:aa:2a:f7:30:da:3d:94:a4:e2:76:f2:2a:13:
50:c8:96:b9:3d:66:b6:eb:d1:b1:2b:4b:a4:59:c2:
70:09:f2:e4:f8:00:05:e6:98:43:4d:a4:3d:4b:2c:
62:bc:d7:69:9f:ce:35:19:42:2b:77:4d:4e:00:a5:
eb:28:03:0f:39:54:12:57:9f:fd:54:c4:fb:76:ee:
4c:2d:3f:0b:1a:00:d5:80:7c:0a:95:2f:f5:2d:50:
db:72:f1:80:fd:c1:f5:f8:8b:79:ed:0c:a8:fc:47:
e8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BA:89:60:21:1F:3C:09:E1:EA:89:1D:77:7D:06:86:E0:5F:54:94
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/RbqJYCEfPAnh6okdd30GhuBfVJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.231.0/24
14.102.234.0/24
14.102.236.0/24
103.47.59.0/24
Signature Algorithm: sha256WithRSAEncryption
34:51:81:4d:4d:ba:59:cd:8c:36:9c:3d:f6:08:94:1b:26:c5:
66:4f:e2:11:d5:9f:4b:d9:dc:6e:ec:84:e6:ee:fa:80:9c:9e:
6a:7a:2d:e0:c3:65:34:f4:0f:34:b5:81:04:9b:bb:fd:35:51:
a4:d2:d5:12:a6:ac:c1:b8:17:f0:5c:fb:6b:66:b6:3f:6c:6a:
17:50:c2:c2:a5:11:c1:2f:e3:c2:c6:98:37:3a:a2:18:8a:4a:
de:61:5d:93:4c:e1:c6:71:90:53:e9:f4:87:28:c7:ef:3f:73:
81:9d:c4:74:03:0f:8c:67:96:9d:5a:c7:8f:d8:ae:b3:8a:1e:
56:13:bf:5c:c3:4e:c3:43:00:26:91:94:58:e0:44:09:78:61:
8c:3f:f3:7e:06:bd:7f:f2:7b:85:df:66:cb:3c:63:43:46:5f:
a5:a5:54:3f:3d:d8:d2:96:85:bd:69:ba:cd:58:42:10:d0:b7:
f8:f1:df:39:f4:7f:97:5b:06:81:c3:91:b8:fc:0a:dc:14:cd:
11:0b:f2:ab:77:4b:76:12:49:8c:f9:e5:c9:00:5b:80:51:b7:
22:20:1a:bd:42:9d:6c:45:4d:54:c5:79:8f:d3:b2:8b:ee:bf:
aa:6a:2c:c3:a6:65:3f:b3:36:2c:4e:6e:d8:8a:68:d1:6c:69:
63:46:b6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:47 2023 by rpki-client on console.sobornost.net