Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Lo22lYKpyeW7OGA9oievoEok1JA.roa
File: Lo22lYKpyeW7OGA9oievoEok1JA.roa (raw, json)
Hash identifier: 2A3bBJjKofFqLETuDMs2dLfKVTf747YidP4gAf8XCaM=
Subject key identifier: 2E:8D:B6:95:82:A9:C9:E5:BB:38:60:3D:A2:27:AF:A0:4A:24:D4:90
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01879003BAC63F3ABAED26D2579BD3C35D88
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Lo22lYKpyeW7OGA9oievoEok1JA.roa
Signing time: Mon 17 Apr 2023 16:19:36 +0000
ROA not before: Mon 17 Apr 2023 16:19:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142111
IP address blocks: 14.102.225.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:90:03:ba:c6:3f:3a:ba:ed:26:d2:57:9b:d3:c3:5d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Apr 17 16:19:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e8db69582a9c9e5bb38603da227afa04a24d490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:05:aa:d9:01:55:89:0d:e1:fa:4f:36:05:7b:
59:1d:f9:db:fc:0a:db:a1:a2:06:a1:90:84:8d:28:
51:c1:c9:06:d8:15:9e:99:3f:8f:8f:b7:f9:b7:20:
4a:31:1e:ad:dc:53:32:c2:8a:1d:f3:85:f6:51:b2:
a1:b6:48:15:0f:14:ca:3f:cb:19:da:95:f2:2e:30:
37:f1:28:1a:be:e7:59:78:c9:f7:97:fe:7c:86:b6:
16:0c:5b:e4:33:55:61:76:51:eb:e1:22:95:f2:f6:
5c:47:84:c7:43:cb:1c:75:83:b1:08:ae:ed:af:15:
8b:f8:61:9a:39:3f:1e:8a:eb:fa:cb:bf:d8:f3:93:
c4:3e:16:37:9d:3b:a6:a0:63:35:3f:e6:cc:a6:4e:
b7:52:af:c9:7f:f6:40:36:2a:c0:62:98:76:72:4a:
04:b0:1d:55:73:f5:12:76:3b:5b:0f:71:9d:0d:66:
7d:1c:da:c4:7b:7b:9c:95:62:4c:70:f6:40:9f:2d:
bc:90:b6:7b:b4:4d:0e:21:50:34:48:8f:b4:69:1c:
69:03:be:0e:7d:79:9b:55:b1:3e:89:d2:97:a8:98:
d5:10:bf:ef:33:e1:6b:16:ff:45:06:b1:7a:11:d3:
ff:c7:ec:a1:8e:54:ca:5d:e3:cb:6d:74:d4:d8:59:
0c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8D:B6:95:82:A9:C9:E5:BB:38:60:3D:A2:27:AF:A0:4A:24:D4:90
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Lo22lYKpyeW7OGA9oievoEok1JA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.225.0/24
Signature Algorithm: sha256WithRSAEncryption
83:89:65:eb:86:bf:56:72:81:28:23:af:06:ec:6d:f0:25:ea:
34:79:aa:5d:72:fa:55:c8:24:3b:e4:91:b5:4f:6d:ff:2e:bb:
f1:28:05:15:6e:7e:a9:ca:49:28:8e:a6:97:14:c1:b3:9b:69:
5a:9b:e6:65:56:fd:6d:0d:ff:a8:50:05:99:d4:20:f3:93:c7:
4a:b3:c9:8b:bb:be:20:73:f5:4c:f8:56:e6:b0:e5:e8:90:76:
fb:a8:d7:b6:c6:a8:a6:b4:33:4e:89:13:21:25:8a:2a:e8:32:
c9:ad:81:dd:f8:4b:63:86:e0:92:a3:8d:2e:3d:5b:0e:e3:5d:
72:d6:81:6d:61:7a:b3:ae:d0:bb:35:c0:2e:ce:e5:ca:fd:19:
5f:2d:ed:fe:fe:b2:6a:c8:14:d9:fb:5c:b7:4e:fd:d9:10:25:
c0:c4:31:d0:2e:d6:15:d9:53:74:8b:b5:ae:39:c9:dc:fc:fb:
0d:7f:b1:80:ea:c6:23:e1:53:2a:ea:00:5e:6e:fd:08:09:60:
bd:92:6f:67:f3:54:b7:73:2c:4e:82:c2:59:18:d7:65:4b:38:
cc:a7:80:74:bc:89:03:e1:bf:6b:d2:66:f8:8d:96:c5:1a:55:
42:5e:82:9d:36:2e:c6:04:67:2d:3f:ad:8f:bf:49:a3:b4:85:
33:d4:ce:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYeQA7rGPzq67SbSV5vTw12IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjMwNDE3MTYxOTM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZThkYjY5NTgyYTljOWU1YmIzODYwM2RhMjI3YWZhMDRhMjRkNDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgWq2QFViQ3h+k82BXtZHfnb/Arb
oaIGoZCEjShRwckG2BWemT+Pj7f5tyBKMR6t3FMywood84X2UbKhtkgVDxTKP8sZ
2pXyLjA38SgavudZeMn3l/58hrYWDFvkM1VhdlHr4SKV8vZcR4THQ8scdYOxCK7t
rxWL+GGaOT8eiuv6y7/Y85PEPhY3nTumoGM1P+bMpk63Uq/Jf/ZANirAYph2ckoE
sB1Vc/USdjtbD3GdDWZ9HNrEe3uclWJMcPZAny28kLZ7tE0OIVA0SI+0aRxpA74O
fXmbVbE+idKXqJjVEL/vM+FrFv9FBrF6EdP/x+yhjlTKXePLbXTU2FkMjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC6NtpWCqcnluzhgPaInr6BKJNSQMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvTG8yMmxZS3B5ZVc3T0dBOW9pZXZvRW9rMUpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQADmbhMA0G
CSqGSIb3DQEBCwUAA4IBAQCDiWXrhr9WcoEoI68G7G3wJeo0eapdcvpVyCQ75JG1
T23/LrvxKAUVbn6pykkojqaXFMGzm2lam+ZlVv1tDf+oUAWZ1CDzk8dKs8mLu74g
c/VM+FbmsOXokHb7qNe2xqimtDNOiRMhJYoq6DLJrYHd+EtjhuCSo40uPVsO411y
1oFtYXqzrtC7NcAuzuXK/RlfLe3+/rJqyBTZ+1y3Tv3ZECXAxDHQLtYV2VN0i7Wu
Ocnc/PsNf7GA6sYj4VMq6gBebv0ICWC9km9n81S3cyxOgsJZGNdlSzjMp4B0vIkD
4b9r0mb4jZbFGlVCXoKdNi7GBGctP62Pv0mjtIUz1M4V
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:54 2023 by rpki-client on console-fra.rpki-client.org