Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/DTegaR5v_HYflnkmLYxc1dUgFno.roa
File: DTegaR5v_HYflnkmLYxc1dUgFno.roa (raw, json)
Hash identifier: zKPzA61wh1MBXdhgfufCF5VUzOCSKFfa3ZIMTUrfkFg=
Subject key identifier: 0D:37:A0:69:1E:6F:FC:76:1F:96:79:26:2D:8C:5C:D5:D5:20:16:7A
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 018E1F0A432C9EAFFE93F577EA761D4EFEF5
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/DTegaR5v_HYflnkmLYxc1dUgFno.roa
Signing time: Fri 08 Mar 2024 17:09:10 +0000
ROA not before: Fri 08 Mar 2024 17:09:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 14.102.231.0/24 maxlen: 24
14.102.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Apr 2024 17:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1f:0a:43:2c:9e:af:fe:93:f5:77:ea:76:1d:4e:fe:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Mar 8 17:09:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d37a0691e6ffc761f9679262d8c5cd5d520167a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1e:84:45:71:0b:07:d1:d4:0d:e0:76:7d:a0:
dc:c1:5a:92:8a:6d:f7:64:87:dc:31:fd:74:a7:17:
e0:48:b0:37:01:f9:4d:37:8c:79:ab:b4:4c:64:52:
d9:50:39:87:48:4e:24:89:bb:66:a1:dc:5a:3c:b6:
3a:84:12:79:9f:53:51:31:8d:5c:6d:57:a3:ed:52:
e0:dd:cc:3a:b2:7f:50:65:29:fa:57:36:dc:73:61:
40:03:66:f8:ee:63:95:b9:30:3d:72:62:bf:29:66:
11:cd:14:46:fe:1f:a6:d3:a3:d2:69:41:20:68:21:
10:1a:a2:02:c9:f2:fc:94:ff:3d:b3:db:df:ed:78:
d8:58:8d:8a:42:26:77:7e:68:80:1a:38:82:86:a6:
9a:e1:f7:0b:f9:29:bc:29:72:2f:ec:7e:76:f0:1d:
49:5c:be:bc:ed:54:68:5e:4b:b9:04:89:d6:7c:71:
b2:08:a1:5a:c2:fe:e2:2b:e8:53:41:26:de:55:63:
f1:03:50:3a:38:4a:42:32:75:1a:8e:a7:b1:59:ea:
ad:1f:fb:54:aa:1d:96:42:d9:c7:10:08:8b:93:31:
55:69:c2:90:9a:5f:f3:53:f5:48:9c:39:97:78:4b:
29:f4:af:79:4c:e5:76:c2:64:e1:7b:16:07:f8:44:
c6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:37:A0:69:1E:6F:FC:76:1F:96:79:26:2D:8C:5C:D5:D5:20:16:7A
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/DTegaR5v_HYflnkmLYxc1dUgFno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.231.0/24
14.102.234.0/24
Signature Algorithm: sha256WithRSAEncryption
19:13:ba:1c:a6:93:19:8f:6c:99:cf:37:c3:6c:2d:80:bc:95:
7d:72:b8:d8:0a:5f:19:7e:4a:a8:52:69:b7:3d:c7:45:3f:a7:
55:5f:7c:ec:08:8a:2c:d5:67:fe:bb:7d:17:3d:50:e0:b0:3d:
d0:8f:6e:10:2d:04:bd:5a:96:fc:97:78:ef:d2:43:c2:e8:a7:
46:54:96:11:ed:29:e8:d9:3d:b7:8d:03:3c:c4:28:d8:42:21:
d6:48:b3:58:6c:c2:79:98:db:9f:90:93:23:ba:68:b9:dd:9d:
e1:31:a8:2c:7a:02:10:18:11:d6:73:77:37:53:4b:ea:3d:0c:
26:27:71:27:c0:01:2c:50:c1:3f:92:6a:6a:22:e2:84:a0:6a:
01:50:8e:50:ab:5a:f6:4d:cf:02:44:5d:a4:0c:fe:cb:1b:ad:
be:6e:f4:36:d6:89:90:30:f9:07:3d:4e:5d:56:5a:b0:42:4e:
75:a0:55:7f:6d:55:71:8b:9b:7c:8e:52:a2:42:28:74:b0:76:
e9:de:80:c8:c6:3c:4f:db:fb:cf:0d:3f:d0:00:10:68:fd:f9:
00:78:97:2e:d8:ca:a8:9b:3f:11:0a:73:79:37:20:29:5a:58:
72:9d:c0:8a:1b:6b:cc:b6:d8:df:94:8c:b5:dc:89:cf:03:b0:
1b:ab:f9:12
-----BEGIN CERTIFICATE-----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Generated at Mon Apr 15 20:08:17 2024 by rpki-client on console-ams.rpki-client.org