Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/DegpLpnHWjexTQmUxT1a2kGC3n0.roa
File: DegpLpnHWjexTQmUxT1a2kGC3n0.roa (raw, json)
Hash identifier: MZ7bOZvpeD5EWxWI50oO8iDaELEGMmil9aozjiEyKFs=
Subject key identifier: 0D:E8:29:2E:99:C7:5A:37:B1:4D:09:94:C5:3D:5A:DA:41:82:DE:7D
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0188684DBC9E5D1AC0E947A5E52DB2889B8A
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/DegpLpnHWjexTQmUxT1a2kGC3n0.roa
Signing time: Mon 29 May 2023 16:18:24 +0000
ROA not before: Mon 29 May 2023 16:18:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 14.102.234.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:68:4d:bc:9e:5d:1a:c0:e9:47:a5:e5:2d:b2:88:9b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: May 29 16:18:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0de8292e99c75a37b14d0994c53d5ada4182de7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2d:24:c3:bf:f7:c9:57:5f:3e:03:e4:35:9e:
f5:96:de:a5:31:1a:c2:6e:56:b9:ac:1f:59:41:1c:
20:a0:8f:fc:9f:66:90:bc:f7:aa:a9:e9:ff:42:f6:
7b:80:9f:c2:a9:73:94:33:35:81:4b:1b:63:a8:12:
96:22:da:6e:b6:67:09:5c:d6:38:d6:8b:3c:17:14:
5e:3b:00:b2:b6:c2:7b:bf:6a:25:6c:0a:fc:80:84:
c2:80:9b:62:0c:d6:61:62:b4:89:38:75:f6:9a:22:
20:92:73:24:f0:5f:0e:13:21:06:33:d8:c1:ae:4a:
02:51:5b:0e:32:e0:17:22:ce:79:70:eb:d1:98:9c:
99:fc:83:93:52:f4:5d:de:71:42:4a:a9:99:2b:c7:
1c:26:65:4c:8f:e2:77:ee:51:da:da:91:99:bd:5a:
1b:14:83:f7:31:35:ab:90:d5:7b:2f:05:75:8e:a1:
d8:64:a8:a5:40:df:4f:71:64:a0:51:1a:4f:dc:68:
8d:63:2f:99:99:a9:14:28:4e:9e:1f:de:fd:65:ca:
57:99:0d:7b:42:2a:98:ca:7f:e3:c3:66:c2:53:2f:
8d:8c:2c:8c:ce:84:26:b7:3c:a1:5f:7a:32:3a:d6:
5e:39:ee:2e:b8:bb:ab:3e:9e:6c:b6:91:25:d9:93:
99:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E8:29:2E:99:C7:5A:37:B1:4D:09:94:C5:3D:5A:DA:41:82:DE:7D
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/DegpLpnHWjexTQmUxT1a2kGC3n0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.234.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:0f:6f:f8:fc:a9:44:cb:8e:69:63:47:b3:0c:6c:e8:31:7e:
82:f0:b5:05:ae:c0:54:4e:ba:90:a9:72:9e:a6:1f:cd:2f:2e:
f4:6f:01:71:44:4f:0f:a6:22:84:97:f5:27:c2:1c:f1:10:61:
2c:ed:79:f1:ce:22:fe:90:50:da:93:a1:1b:79:ac:13:af:5e:
ad:41:27:12:7d:2e:88:09:d2:1f:29:f1:ff:06:b8:93:8a:4a:
ec:1c:dd:2f:12:64:f1:fb:2c:b1:a1:d3:c6:6d:5c:d2:11:bf:
58:9c:ae:60:e5:f2:5f:8b:4f:3f:27:16:b7:24:ba:bb:d6:68:
92:e3:cf:74:5c:63:4e:fa:4a:44:97:b1:58:56:d2:cc:0d:50:
1d:35:57:57:26:a5:aa:dd:1b:bf:67:f7:04:52:0a:13:8b:62:
26:34:25:13:ee:6d:76:5b:97:e6:85:8f:77:08:6d:94:73:17:
a6:ad:55:5d:f5:56:b4:2e:20:22:96:ef:d4:a6:57:46:28:99:
78:11:3a:05:74:2b:f5:54:2c:1a:7d:1c:4e:91:4d:a3:a9:fa:
e9:08:85:02:9a:f3:c5:13:d6:6a:1b:59:67:51:0d:8b:33:e2:
5d:93:7a:a9:2f:36:9e:30:de:03:94:d7:dc:fe:60:f1:26:b5:
f8:3f:9d:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYhoTbyeXRrA6Uel5S2yiJuKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjMwNTI5MTYxODI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGU4MjkyZTk5Yzc1YTM3YjE0ZDA5OTRjNTNkNWFkYTQxODJkZTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC0kw7/3yVdfPgPkNZ71lt6lMRrC
bla5rB9ZQRwgoI/8n2aQvPeqqen/QvZ7gJ/CqXOUMzWBSxtjqBKWItputmcJXNY4
1os8FxReOwCytsJ7v2olbAr8gITCgJtiDNZhYrSJOHX2miIgknMk8F8OEyEGM9jB
rkoCUVsOMuAXIs55cOvRmJyZ/IOTUvRd3nFCSqmZK8ccJmVMj+J37lHa2pGZvVob
FIP3MTWrkNV7LwV1jqHYZKilQN9PcWSgURpP3GiNYy+ZmakUKE6eH979ZcpXmQ17
QiqYyn/jw2bCUy+NjCyMzoQmtzyhX3oyOtZeOe4uuLurPp5stpEl2ZOZbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA3oKS6Zx1o3sU0JlMU9WtpBgt59MB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvRGVncExwbkhXamV4VFFtVXhUMWEya0dDM24wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQADmbqMA0G
CSqGSIb3DQEBCwUAA4IBAQAtD2/4/KlEy45pY0ezDGzoMX6C8LUFrsBUTrqQqXKe
ph/NLy70bwFxRE8PpiKEl/UnwhzxEGEs7XnxziL+kFDak6EbeawTr16tQScSfS6I
CdIfKfH/BriTikrsHN0vEmTx+yyxodPGbVzSEb9YnK5g5fJfi08/Jxa3JLq71miS
4890XGNO+kpEl7FYVtLMDVAdNVdXJqWq3Ru/Z/cEUgoTi2ImNCUT7m12W5fmhY93
CG2UcxemrVVd9Va0LiAilu/UpldGKJl4EToFdCv1VCwafRxOkU2jqfrpCIUCmvPF
E9ZqG1lnUQ2LM+Jdk3qpLzaeMN4DlNfc/mDxJrX4P51Y
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:44 2023 by rpki-client on console-ams.rpki-client.org