Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/ICCW0rxBLa77rjKmY-4Rkx9c5lM.roa
File: ICCW0rxBLa77rjKmY-4Rkx9c5lM.roa (raw, json)
Hash identifier: PU1pwYByUoabxDupqj8ULAEKmmtuj2cMcYTCYpKmnLg=
Subject key identifier: 20:20:96:D2:BC:41:2D:AE:FB:AE:32:A6:63:EE:11:93:1F:5C:E6:53
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 0192D1FE4E116737B451F2C294FEEC3ED26F
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/ICCW0rxBLa77rjKmY-4Rkx9c5lM.roa
Signing time: Mon 28 Oct 2024 07:19:17 +0000
ROA not before: Mon 28 Oct 2024 07:19:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 14.102.10.0/24 maxlen: 24
114.69.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Nov 2024 08:37:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d1:fe:4e:11:67:37:b4:51:f2:c2:94:fe:ec:3e:d2:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Oct 28 07:19:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=202096d2bc412daefbae32a663ee11931f5ce653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:94:27:e7:e9:f9:2f:eb:b4:83:bc:66:e4:50:
5b:d6:c1:58:08:80:32:85:b1:66:5b:97:c8:5d:41:
86:98:ff:6f:32:dc:f2:c3:3b:a7:23:a6:69:6f:fc:
e5:e7:68:89:f1:5c:1e:ec:6a:86:00:68:6d:2f:b9:
b2:6a:e4:7c:4f:f1:54:e7:fa:6f:95:dc:99:66:02:
6c:21:ea:fd:5a:fb:b6:67:9b:07:06:8f:67:e6:e0:
53:f6:05:77:ee:77:e6:dd:92:a4:03:67:06:5d:e7:
5e:9b:eb:78:de:63:64:b5:02:60:a8:1a:22:6d:7e:
39:b6:eb:8e:7b:5b:3e:5e:36:48:e4:81:6a:6f:8e:
af:46:ea:33:2d:7d:fe:7f:f6:06:04:b8:1e:43:c5:
18:53:4c:fb:64:a7:55:96:df:b7:9d:ae:76:db:48:
70:17:83:3d:e2:b8:c8:99:a6:63:59:a9:38:3b:59:
72:4b:cc:7d:41:50:45:a2:90:81:b8:f5:b9:ed:16:
d3:af:52:02:f3:70:3b:70:d0:09:3e:3d:4e:51:16:
6f:85:6f:ac:1f:8a:2e:ec:d0:0d:64:75:5c:8e:54:
0d:f7:7a:26:e6:43:dc:76:ab:70:b7:f2:fc:31:3a:
36:ae:24:4d:0d:a8:9a:31:7c:b5:36:ab:9b:cc:98:
15:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:20:96:D2:BC:41:2D:AE:FB:AE:32:A6:63:EE:11:93:1F:5C:E6:53
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/ICCW0rxBLa77rjKmY-4Rkx9c5lM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.10.0/24
114.69.245.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:6f:2a:84:d7:bf:e8:bc:92:75:fd:6a:a5:06:e4:e4:d5:b7:
40:e1:c3:25:67:1c:89:32:d2:73:d6:0e:f9:36:0a:e8:df:7b:
f4:a9:9b:d6:38:e0:c4:b4:64:8b:5c:19:09:e9:d9:bd:b1:b4:
7f:a8:7e:33:5a:13:f5:aa:5d:c9:96:0c:42:b8:61:76:85:e1:
c7:e6:24:5a:e6:26:32:4f:42:42:b8:de:1c:20:68:4a:5f:2c:
2a:16:0c:ff:73:95:ff:ef:6b:e7:21:61:18:0d:57:46:36:6c:
b0:c0:db:cd:0e:10:dc:cf:ea:fc:60:36:a4:b5:7a:70:8c:89:
2f:9a:0f:2a:8f:b4:3d:33:63:b1:23:bd:71:73:e5:d5:d3:61:
5a:f2:3d:f7:2f:81:dc:d9:cc:08:fd:9d:05:4c:f0:c4:a0:e1:
81:a0:04:f8:05:84:65:62:3e:1f:02:f2:bd:5e:e4:4f:5f:6a:
fa:ac:a9:28:1d:3e:12:51:7b:2c:f3:77:08:4e:6d:ea:c7:08:
ae:39:66:0a:b1:0d:18:9f:72:e5:05:56:3d:d1:20:11:ae:e6:
f6:0d:38:b7:50:d7:89:c7:1b:f2:4c:c6:fe:ed:c8:08:30:8b:
f0:96:f7:30:e5:3b:05:17:88:76:d1:d6:ab:7b:a0:25:a6:c1:
86:32:0c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 09:51:57 2024 by rpki-client on console-fra.rpki-client.org