Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/P_fi_C1QURKkQWzNrXxL9CK_VO4.roa
File: P_fi_C1QURKkQWzNrXxL9CK_VO4.roa (raw, json)
Hash identifier: Bw5egwAFvX9K2vEpRUq79wcgjl9OXQhslQKA+3s08+E=
Subject key identifier: 3F:F7:E2:FC:2D:50:51:12:A4:41:6C:CD:AD:7C:4B:F4:22:BF:54:EE
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01914C7C4A7DC545F416E5BE14481B521C62
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/P_fi_C1QURKkQWzNrXxL9CK_VO4.roa
Signing time: Tue 13 Aug 2024 16:04:59 +0000
ROA not before: Tue 13 Aug 2024 16:04:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 14.102.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Aug 2024 23:31:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4c:7c:4a:7d:c5:45:f4:16:e5:be:14:48:1b:52:1c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Aug 13 16:04:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ff7e2fc2d505112a4416ccdad7c4bf422bf54ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fd:7c:8e:23:93:b5:c4:d1:32:de:47:50:ea:
bd:25:b5:8e:f8:73:14:6c:27:45:48:0d:05:25:01:
f1:99:82:5f:39:91:b1:f7:5b:fd:da:b1:da:dc:15:
2d:a6:0a:29:22:53:f2:40:d8:23:fa:23:1d:3a:2a:
7d:eb:a4:3a:8d:0c:6f:21:fb:80:1b:95:50:62:9b:
38:5d:4b:dd:18:80:6a:be:9f:82:a1:81:a1:30:8c:
c3:f6:36:7f:eb:81:e6:70:14:03:26:44:b4:bc:5e:
e4:df:69:73:b8:16:a0:8d:15:1d:a6:45:c7:c6:81:
5c:bd:64:b9:26:b8:0e:0e:09:f4:ea:70:2d:95:18:
f5:5b:75:3c:70:06:db:68:9e:bc:87:ee:01:2c:fc:
22:5e:ac:a0:42:d0:61:e3:f9:46:97:36:a5:5e:2c:
08:56:ab:69:1e:31:2c:f8:b2:0b:b7:12:e7:68:40:
2e:cb:96:04:5c:22:c4:de:58:62:88:7e:ae:b7:27:
9d:0e:31:13:78:d7:0c:ae:1c:5b:e6:51:1a:2f:c4:
a5:56:02:1d:63:61:69:24:db:cc:50:cf:b8:8d:ba:
e9:1a:db:fe:50:0e:5b:77:53:44:d3:45:36:89:3f:
49:55:d0:95:e7:e7:11:bb:a3:da:42:e1:11:aa:28:
d9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F7:E2:FC:2D:50:51:12:A4:41:6C:CD:AD:7C:4B:F4:22:BF:54:EE
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/P_fi_C1QURKkQWzNrXxL9CK_VO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.231.0/24
Signature Algorithm: sha256WithRSAEncryption
72:7b:f8:8f:4b:bd:d3:4e:8b:7e:17:d7:58:52:0e:92:8a:04:
cb:23:33:60:03:ad:4c:ae:12:dc:7c:24:d4:da:8b:8a:d5:0f:
c2:a9:95:a7:67:5f:40:27:8d:34:39:7a:fb:8c:a4:f0:cd:1c:
74:5e:53:e9:eb:ad:bb:7e:fe:18:d0:d0:be:ee:47:a0:45:8e:
cd:0d:38:9b:e4:51:94:3a:fa:c1:82:7e:41:b6:ad:e2:e8:ea:
35:1c:78:11:36:43:63:88:be:b5:33:26:6e:0e:2a:fb:85:16:
4a:81:71:84:77:0c:8c:99:59:ff:47:bd:e0:db:9d:e1:83:9c:
30:c1:46:aa:77:c3:03:7a:cf:fa:2e:63:4f:be:61:95:63:a6:
29:61:bf:32:9f:bd:96:96:c4:9d:ea:fd:fd:24:b8:11:ca:dd:
bd:8f:5f:c1:17:34:83:16:67:78:55:52:37:8b:7e:eb:5d:bd:
62:9a:f0:1c:12:41:d9:ca:03:53:b6:31:6a:73:06:dc:cf:a7:
2a:22:3d:bb:40:13:d8:d4:81:3f:57:4e:a1:6c:95:52:6d:76:
b1:fa:1e:66:88:93:0a:1c:f8:50:35:c0:b6:c1:65:ea:fb:e0:
17:af:2a:57:d6:c5:41:77:9a:d6:7a:fc:53:02:7f:93:b6:9e:
da:43:a6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:53 2025 by rpki-client