Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/0EULOm2vkrSw67idlNIRt-6oV4s.roa
File: 0EULOm2vkrSw67idlNIRt-6oV4s.roa (raw, json)
Hash identifier: blESETWlrJ/VjUbrHaQw/DcYFVNEN+/fm2C0M8CdTyQ=
Subject key identifier: D0:45:0B:3A:6D:AF:92:B4:B0:EB:B8:9D:94:D2:11:B7:EE:A8:57:8B
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 018DF2E2D4C1ADB12088CE8911F71814B939
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/0EULOm2vkrSw67idlNIRt-6oV4s.roa
Signing time: Thu 29 Feb 2024 03:22:48 +0000
ROA not before: Thu 29 Feb 2024 03:22:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 14.102.231.0/24 maxlen: 24
14.102.234.0/24 maxlen: 24
103.47.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Mar 2024 17:09:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f2:e2:d4:c1:ad:b1:20:88:ce:89:11:f7:18:14:b9:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Feb 29 03:22:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0450b3a6daf92b4b0ebb89d94d211b7eea8578b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:94:46:26:24:98:c6:46:34:d7:a3:3d:d0:00:
58:7f:4d:e2:9d:d1:4e:1c:3f:96:f7:c0:9f:d2:db:
97:c3:47:19:e3:53:0c:89:1f:cd:f1:89:d0:cb:88:
3d:8a:83:28:48:64:f1:15:1f:61:d4:ab:64:d2:27:
84:de:ad:7e:aa:b4:e1:7b:bc:35:0f:f4:37:e2:59:
f9:24:66:31:b3:88:1c:9b:61:f8:2d:a0:f6:02:d7:
64:40:ea:10:12:8d:b7:d2:9b:c0:48:4a:e9:28:68:
61:b7:64:54:7e:90:6e:6e:2b:0b:41:01:a8:ae:79:
30:d2:93:c0:91:90:e0:82:54:2a:36:0a:46:4c:3e:
49:a6:cb:65:1d:de:f8:3e:bb:9f:d1:3d:8d:de:bd:
23:e4:0e:10:a0:49:f0:50:ff:e1:d6:c6:22:1d:e5:
85:ab:20:52:bd:dc:5b:b7:13:bf:19:75:35:04:f0:
92:c7:bf:86:82:97:ff:cf:dd:d8:17:33:1b:af:51:
af:67:72:e5:49:0a:18:29:5d:0d:8a:74:7f:20:d3:
20:bd:e7:82:d8:b9:e6:9d:88:58:0a:51:2c:38:d9:
c0:1c:e9:0f:b3:72:e1:eb:60:d4:18:45:d6:ec:54:
59:6d:00:5e:2c:92:9e:2e:ea:af:16:93:9f:ff:58:
1d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:45:0B:3A:6D:AF:92:B4:B0:EB:B8:9D:94:D2:11:B7:EE:A8:57:8B
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/0EULOm2vkrSw67idlNIRt-6oV4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.231.0/24
14.102.234.0/24
103.47.56.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:4c:db:80:87:e1:7a:5d:ca:74:3e:92:08:ea:e7:31:1c:52:
2d:05:67:65:52:44:ad:53:4a:53:99:d1:02:f7:79:06:04:df:
77:b3:a9:d8:dc:46:7e:07:9e:92:82:f1:0f:ec:9c:6d:7e:49:
b2:7d:64:01:8e:ea:3a:06:d2:71:e2:22:3c:eb:53:ef:db:44:
2f:b2:14:2c:48:fb:8e:0f:3f:da:41:e6:d2:85:58:04:e5:8b:
96:bd:d5:94:6b:2d:aa:7b:a2:da:d4:f7:6d:44:15:39:dd:4f:
f8:4f:62:0c:ff:68:0a:39:17:55:0c:52:a4:72:9c:d3:61:4f:
0d:23:4f:53:d9:2e:75:c3:92:6c:8e:7b:99:5d:78:bc:bd:40:
96:28:ff:28:79:2d:5a:e4:d4:10:57:c1:68:82:f1:02:9c:24:
68:e2:c4:72:27:0d:0e:da:7e:2d:ab:f4:f3:40:32:38:22:29:
e3:a2:5c:a4:0d:ac:04:17:83:9f:b9:5a:54:50:2e:c3:c2:cd:
ff:30:15:36:13:d1:8b:51:c8:3a:f2:d7:81:2e:1d:5c:d9:38:
fb:16:1d:c6:40:d7:e9:ae:f1:1f:10:4c:54:96:a7:e6:54:d2:
5e:d9:73:ff:3c:f7:33:86:a9:a7:e0:b1:48:c0:ce:c3:65:df:
b1:fb:99:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 8 19:42:19 2024 by rpki-client on console-ams.rpki-client.org