Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1-5HQWhzypk0nzRtSy5xtOBRYlm0.roa
File: 1-5HQWhzypk0nzRtSy5xtOBRYlm0.roa (raw, json)
Hash identifier: c06zL0YtkBon7PhnuZ0gqmrHEJBIlyCmpB7Q2NzQjec=
Subject key identifier: FB:91:D0:5A:1C:F2:A6:4D:27:CD:1B:52:CB:9C:6D:38:14:58:96:6D
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 018D762CFD652E197F3E5B580CA8EC2DFDEB
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1-5HQWhzypk0nzRtSy5xtOBRYlm0.roa
Signing time: Sun 04 Feb 2024 22:11:16 +0000
ROA not before: Sun 04 Feb 2024 22:11:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210164
IP address blocks: 14.102.234.0/24 maxlen: 24
14.102.236.0/24 maxlen: 24
103.47.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 03:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:76:2c:fd:65:2e:19:7f:3e:5b:58:0c:a8:ec:2d:fd:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Feb 4 22:11:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb91d05a1cf2a64d27cd1b52cb9c6d381458966d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e9:e6:81:e3:87:aa:7d:e7:19:21:b2:b2:56:
37:55:f6:00:d5:f3:4f:a5:ac:8b:d2:d1:40:82:45:
98:4c:e8:7d:30:66:dc:13:88:b6:19:2a:d9:91:be:
7e:ff:d2:ee:c3:21:8b:a3:82:7d:8b:80:2e:e0:39:
59:1c:b4:4f:fa:67:95:8e:30:1f:76:15:f7:c9:d7:
9e:65:4f:b3:99:7d:e5:84:5c:b7:f0:2e:75:7d:ab:
08:41:45:3d:cc:8a:85:16:f1:cc:4e:9c:32:8b:82:
29:be:ce:98:7b:fe:ed:84:6a:53:ee:b2:cc:38:59:
4b:94:f7:7c:1a:53:80:8a:6c:6b:9e:5f:61:78:f6:
11:47:fb:b2:34:f1:90:28:27:98:0a:b5:46:56:48:
fe:fa:61:2c:b7:17:65:22:d7:e6:0e:a4:21:19:4c:
ff:5e:e5:fc:d1:9e:ad:e4:ad:eb:92:9d:7a:e7:83:
5d:05:d8:56:f8:d4:28:87:4a:46:9a:23:22:e3:46:
1b:3b:a8:37:c6:29:46:46:59:e8:b8:af:3f:ca:34:
bb:ec:47:3c:fc:2e:50:b8:01:1e:45:ab:55:fe:44:
68:18:b0:f1:85:38:a8:57:f8:a4:3e:b7:58:6d:8d:
7e:0c:08:67:ae:75:9f:e3:d3:d9:89:50:d8:bd:16:
32:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:91:D0:5A:1C:F2:A6:4D:27:CD:1B:52:CB:9C:6D:38:14:58:96:6D
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1-5HQWhzypk0nzRtSy5xtOBRYlm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.234.0/24
14.102.236.0/24
103.47.59.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:70:8f:fb:96:67:0d:06:21:95:4d:6e:69:05:4d:2f:04:41:
9f:51:03:41:73:bd:c5:d7:72:5d:92:78:30:fd:68:fd:e3:47:
a2:ab:9f:80:1f:3b:b9:2f:61:ae:fa:43:69:2c:17:6a:19:fb:
d7:3a:1e:99:fa:99:cc:82:75:14:c3:3c:78:bc:67:26:85:af:
39:4b:8f:77:e3:9f:4e:6a:81:a6:66:62:b7:b4:7b:bc:bf:fc:
43:06:0d:62:5d:5b:ab:22:4c:3d:d5:10:45:76:73:f4:46:3c:
77:cd:62:f6:ea:6e:c3:ae:ad:8f:81:78:51:60:96:fa:0e:98:
cb:f9:2a:fd:f4:78:d5:74:3f:28:6b:6d:d2:44:cc:87:9c:6d:
da:de:94:39:a8:af:8d:fd:13:c5:64:0a:e0:49:24:8d:3a:2f:
dc:18:11:c3:47:d2:4e:5c:bb:41:4d:7b:2d:9a:04:6a:16:7f:
66:7e:16:eb:28:18:5f:a0:65:01:a4:2e:74:18:e0:99:a4:56:
e2:c9:b3:e4:d0:92:cc:2a:8e:a9:2e:9c:7e:2f:a2:b9:4d:27:
99:32:07:b1:bc:e2:5c:d8:48:34:ad:53:7e:0d:b7:d3:52:f2:
49:fe:1b:e6:ef:90:a2:f6:96:39:28:86:87:d1:3b:34:44:ce:
80:7e:4d:4b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:54 2025 by rpki-client