Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Hs3WfREdqMBDWM4BSohl9NPPGUg.roa
File: Hs3WfREdqMBDWM4BSohl9NPPGUg.roa (raw, json)
Hash identifier: heviMZx2CcWXUa32/W8DF9l8fDHyYuM4CCwAB12EtMc=
Subject key identifier: 1E:CD:D6:7D:11:1D:A8:C0:43:58:CE:01:4A:88:65:F4:D3:CF:19:48
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 018D6056C78C96528FB571D03C57C29F65BC
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Hs3WfREdqMBDWM4BSohl9NPPGUg.roa
Signing time: Wed 31 Jan 2024 16:25:16 +0000
ROA not before: Wed 31 Jan 2024 16:25:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201575
IP address blocks: 14.102.231.0/24 maxlen: 24
14.102.234.0/24 maxlen: 24
14.102.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 16:38:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:60:56:c7:8c:96:52:8f:b5:71:d0:3c:57:c2:9f:65:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jan 31 16:25:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ecdd67d111da8c04358ce014a8865f4d3cf1948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4b:70:5c:3b:78:85:6a:ae:90:68:9e:ba:fb:
e7:f1:25:64:6e:16:9a:f1:1d:ca:c9:58:34:68:5e:
a3:fd:ec:d0:d3:54:bd:49:29:95:dd:72:24:7d:aa:
3f:a3:e1:7d:6c:d2:f7:1d:06:b9:7a:88:7c:2e:f4:
77:b4:a3:ba:09:a3:6a:d1:92:a4:3e:9c:03:ee:35:
60:00:65:7a:43:0c:ae:3e:6d:36:86:31:c9:f9:cb:
21:46:63:80:ee:47:b2:e2:9a:18:a5:27:77:87:b0:
3f:bd:d4:19:68:18:48:f2:8b:32:1d:42:7a:4b:26:
f6:61:90:7c:a1:d6:a5:e1:dd:f8:10:4e:47:9d:0f:
ce:06:80:2a:d3:4c:1a:f3:0a:55:9f:3e:aa:25:22:
0d:d8:7e:de:b5:24:81:3b:0c:a0:76:fb:c7:aa:29:
33:7d:95:2c:c4:be:78:47:72:81:4d:b7:4c:39:44:
89:24:9f:b5:2f:a3:b5:b7:a6:ec:f1:e8:9e:99:54:
f8:f2:8b:94:e3:71:10:1f:53:8b:be:3b:b4:f9:71:
1e:87:3d:47:84:08:f7:13:1e:57:0e:83:a5:24:c4:
12:dc:83:b6:4e:54:b3:d7:6a:38:28:53:22:4c:ac:
64:99:a1:3d:24:57:89:58:e3:8f:7d:5f:0d:b8:93:
cc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CD:D6:7D:11:1D:A8:C0:43:58:CE:01:4A:88:65:F4:D3:CF:19:48
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Hs3WfREdqMBDWM4BSohl9NPPGUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.231.0/24
14.102.234.0/24
14.102.236.0/24
Signature Algorithm: sha256WithRSAEncryption
02:a9:23:d4:65:8c:11:07:4b:10:50:73:15:42:b3:8d:08:f3:
1c:61:15:e2:31:10:5d:72:db:8f:11:49:a0:74:fd:c8:d2:9b:
5a:68:46:e6:7c:da:5d:86:0c:5f:7c:c9:4e:fb:b2:d9:68:6f:
e6:a1:71:79:a7:92:ee:bb:f5:8a:7c:a7:b1:fd:59:19:ad:c2:
06:06:a0:4d:91:73:6a:19:c3:21:d7:04:56:4d:a0:db:0e:ec:
a1:7b:ef:41:36:09:dd:67:30:d9:7e:f6:48:b8:23:cb:db:cf:
e3:49:80:d7:e1:37:e7:15:98:d5:05:17:8f:15:40:d5:e2:e4:
4a:75:1a:bb:2f:c1:4f:4c:df:9f:44:cf:16:20:b0:26:40:e2:
95:98:82:a7:c5:eb:12:70:cc:a6:6b:9f:64:5a:b3:20:c0:79:
90:0a:fc:d0:0e:b3:63:3b:21:71:d4:04:47:f7:57:96:6a:f5:
a2:b3:f9:46:4e:57:36:e9:96:d7:ae:4f:1f:bc:13:24:f0:9e:
9b:65:c4:39:a8:0f:18:af:be:9e:c8:b7:9e:86:c2:35:89:35:
45:73:98:f7:eb:ec:60:0e:2e:c2:a5:23:00:89:81:d6:fc:00:
e3:25:b2:cc:9a:12:e4:5e:7e:0b:12:83:dc:ec:08:75:cb:40:
a8:31:24:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:25 2025 by rpki-client