Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/3fJJfRUq-p-vz1qOJxlh6XXxV3E.roa
File: 3fJJfRUq-p-vz1qOJxlh6XXxV3E.roa (raw, json)
Hash identifier: uU00uzoaPOcEt5RykEcFWNMPnQnC/UlzWDerw9On9Yk=
Subject key identifier: DD:F2:49:7D:15:2A:FA:9F:AF:CF:5A:8E:27:19:61:E9:75:F1:57:71
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 018853A95114A73B4D600EC8D01449467AE9
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/3fJJfRUq-p-vz1qOJxlh6XXxV3E.roa
Signing time: Thu 25 May 2023 16:06:25 +0000
ROA not before: Thu 25 May 2023 16:06:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 14.102.227.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:53:a9:51:14:a7:3b:4d:60:0e:c8:d0:14:49:46:7a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: May 25 16:06:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddf2497d152afa9fafcf5a8e271961e975f15771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7e:27:27:42:87:68:58:7a:1e:45:b5:c3:6c:
38:a8:45:0f:4e:96:d9:6f:85:51:17:27:3c:bf:15:
95:b9:bc:71:89:75:17:3e:fb:49:c1:80:91:db:e5:
e8:22:80:35:28:19:d6:e7:e0:d6:70:28:6f:fe:21:
4b:82:78:0b:3b:f8:8d:40:02:bf:c7:a4:b0:4a:4d:
0c:3b:70:0e:10:3c:2d:19:82:b4:9c:c2:35:a4:37:
c6:fd:b0:e6:45:96:3f:30:4b:26:0e:f1:93:69:54:
5c:29:6d:13:5e:cd:5e:0a:eb:c8:a8:d5:f1:bb:70:
ba:0c:0d:41:24:96:de:cd:c0:7d:46:c8:52:9d:12:
55:86:b2:04:42:b8:7e:bb:0f:d1:36:74:3e:0d:77:
81:4c:ba:76:b0:cb:76:f3:f4:d4:08:8b:01:9e:21:
fd:d6:67:9c:9f:81:ae:ba:38:6b:bf:8a:8b:6d:e3:
ee:a0:27:54:92:e8:8b:7d:44:71:2d:2f:7c:b7:48:
ad:1f:39:a1:65:90:c0:11:c2:40:5d:d8:3b:32:b2:
f6:fa:8f:42:af:10:6a:4b:04:39:cd:f8:f8:78:f4:
0b:14:3a:d1:c4:22:da:1d:e2:9f:9e:8a:69:12:54:
cc:f3:6d:3d:e6:43:a5:20:df:0a:4b:c8:ee:09:69:
54:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F2:49:7D:15:2A:FA:9F:AF:CF:5A:8E:27:19:61:E9:75:F1:57:71
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/3fJJfRUq-p-vz1qOJxlh6XXxV3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.227.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:e1:49:3e:47:16:51:2a:40:24:c2:ea:8e:cb:60:40:fa:cc:
a2:ce:c1:58:cf:49:b1:09:7c:74:53:46:a0:51:3a:e2:b9:34:
18:1b:54:f5:b4:1e:e9:b3:91:93:e6:36:6f:65:87:18:ff:31:
a8:a0:23:6f:ea:2e:ec:57:67:8b:75:2e:30:16:6e:58:ec:72:
ca:af:d3:a2:9e:b1:e3:57:1b:54:da:2f:de:9c:c8:49:28:5b:
7c:45:d0:b7:be:71:38:94:02:7e:ee:23:3f:5e:90:98:d4:4b:
ce:89:af:8f:30:fb:1a:12:fb:a0:3c:9d:ab:ce:03:39:fc:23:
ba:fa:0d:c8:0b:09:50:91:63:3d:5c:a5:7b:91:94:8c:f9:f9:
03:06:2c:e4:25:8b:c3:f6:ab:1e:b6:b5:86:d4:d2:12:b7:d4:
8c:f3:8a:3e:f5:a8:94:81:75:0b:90:4e:59:28:03:89:07:39:
2f:7a:e8:0e:c5:25:b0:bf:22:0b:3d:63:11:78:ec:c1:98:9a:
5e:a3:40:53:28:c1:c6:b7:2e:db:2e:33:09:a7:fa:e7:10:4b:
60:0a:e0:a6:24:b0:c8:60:44:a2:4c:48:50:b7:20:5b:b5:22:
a1:04:95:03:09:ea:ec:6a:5b:5b:30:08:0e:5b:16:4c:88:f1:
65:ae:ba:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:44 2023 by rpki-client on console-ams.rpki-client.org