Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/YVGjHQxAaS3Er3aeASjJ-Q13uT8.roa
File: YVGjHQxAaS3Er3aeASjJ-Q13uT8.roa (raw, json)
Hash identifier: p72EaKbOD/S11TuIMwKBLvIpb+aeP4pwEUSIiQXcqj0=
Subject key identifier: 61:51:A3:1D:0C:40:69:2D:C4:AF:76:9E:01:28:C9:F9:0D:77:B9:3F
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0188259675AED15545CFA0126A2F47C3074B
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/YVGjHQxAaS3Er3aeASjJ-Q13uT8.roa
Signing time: Tue 16 May 2023 17:23:17 +0000
ROA not before: Tue 16 May 2023 17:23:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.47.57.0/24 maxlen: 24
14.102.236.0/24 maxlen: 24
14.102.238.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:25:96:75:ae:d1:55:45:cf:a0:12:6a:2f:47:c3:07:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: May 16 17:23:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6151a31d0c40692dc4af769e0128c9f90d77b93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b6:79:bd:99:c6:c1:f9:8e:98:bd:94:48:56:
2a:00:f4:48:b6:43:b7:69:71:d3:81:41:24:0b:c8:
d7:26:5e:ad:f8:38:f2:dd:46:7d:5a:74:45:0a:07:
b5:a5:fc:78:93:5f:c2:02:b9:b3:fb:54:e1:b3:c9:
ab:cc:42:6f:60:c1:84:3b:0d:b6:43:9d:9f:06:ba:
2f:21:f2:ba:98:27:42:cb:61:6c:58:08:a6:25:9f:
5b:6c:84:60:ca:9e:2e:02:61:99:52:62:b8:6b:d4:
f7:a6:91:b1:c1:c1:c3:6e:d3:f1:01:ec:cf:9c:09:
95:40:b5:a8:36:ad:45:24:d7:f7:17:54:06:0e:ee:
a6:a5:5c:d4:ff:44:0b:a0:76:d0:4b:04:b9:d5:26:
81:82:82:ac:06:83:5d:fb:66:6d:d0:6c:03:cc:2d:
8c:dc:67:82:e2:47:a8:13:80:d7:3b:dc:7b:73:21:
e6:1a:76:ea:be:9b:31:85:31:3a:a9:d4:6a:da:61:
91:a9:f6:c5:a4:af:fa:c9:47:f8:3c:1c:63:11:14:
e3:ff:02:05:74:8a:06:01:09:39:00:4c:08:59:e8:
19:ca:0a:e3:f0:4c:8b:10:a2:a5:ba:db:03:92:bb:
9c:20:06:d7:02:49:f8:9a:21:09:dd:ad:06:7d:b1:
b3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:51:A3:1D:0C:40:69:2D:C4:AF:76:9E:01:28:C9:F9:0D:77:B9:3F
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/YVGjHQxAaS3Er3aeASjJ-Q13uT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.236.0/24
14.102.238.0/24
103.47.57.0/24
Signature Algorithm: sha256WithRSAEncryption
74:0b:55:1c:74:64:7a:6a:c9:90:bc:1f:c0:88:4b:b1:9e:a5:
ff:27:24:ee:6a:6d:50:37:f1:1e:d6:ab:aa:5d:14:15:2c:b8:
7f:e9:44:82:52:06:f9:28:81:fd:b2:c3:94:ce:b5:34:bb:c6:
8d:54:d1:67:ed:04:db:dc:23:ef:b4:7d:2b:97:cb:ff:33:da:
1f:a9:68:31:29:96:65:87:7a:9a:74:3d:64:1b:a6:24:32:3a:
26:e6:50:f8:51:62:34:79:39:ff:41:1b:56:9b:15:25:d8:eb:
ff:8d:4d:3b:a4:b8:01:fa:5e:3c:ce:3d:66:a9:30:db:31:db:
2d:c6:d2:8d:42:8a:bd:00:d2:10:cf:a3:77:50:69:e6:51:1a:
2c:38:b5:0b:40:7a:92:d2:94:b5:9b:66:49:5c:4c:0b:d3:a1:
67:0a:72:aa:83:22:0e:7b:78:01:51:ca:eb:dd:b2:8b:84:02:
ea:40:5b:bd:f4:cf:ab:fa:bb:8a:25:88:79:75:be:7f:75:eb:
62:e3:4d:39:b8:6e:e1:41:f5:ab:50:c1:10:f6:9e:ac:5c:20:
fd:0f:cb:50:05:49:2b:45:98:61:03:db:47:fd:9d:a0:d6:ed:
89:b6:54:02:2f:14:d3:20:7c:9a:ed:1a:cc:70:14:e3:48:41:
83:f3:a0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:47 2023 by rpki-client on console.sobornost.net