Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/T8XugEBo7m7ZveG9Pwy5IzlrG8c.roa
File: T8XugEBo7m7ZveG9Pwy5IzlrG8c.roa (raw, json)
Hash identifier: DrTSVp5gyztpbNCVO1/dQXKz7wZcPHixme/NyB+qwUc=
Subject key identifier: 4F:C5:EE:80:40:68:EE:6E:D9:BD:E1:BD:3F:0C:B9:23:39:6B:1B:C7
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0188FDC13186D12C8C8DD89305AE3D4EE6D5
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/T8XugEBo7m7ZveG9Pwy5IzlrG8c.roa
Signing time: Tue 27 Jun 2023 16:47:56 +0000
ROA not before: Tue 27 Jun 2023 16:47:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 14.102.227.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fd:c1:31:86:d1:2c:8c:8d:d8:93:05:ae:3d:4e:e6:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 27 16:47:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fc5ee804068ee6ed9bde1bd3f0cb923396b1bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a7:01:2c:90:37:e2:58:7b:f6:52:6c:75:45:
ff:4a:60:ec:1c:4d:45:b6:93:fc:c2:25:1b:5e:c2:
50:74:85:a1:5c:e4:80:2b:0f:2c:a8:bc:99:54:6e:
7b:25:ac:27:ed:eb:6f:51:01:e9:65:8d:24:4b:0c:
3d:ab:96:fa:01:fd:64:78:3c:89:ac:c2:4f:47:86:
16:4c:df:0d:07:78:de:2e:ca:98:17:10:af:1a:d8:
3b:49:93:b9:6e:ba:2b:91:8c:25:51:56:6a:9e:23:
31:0f:a0:cc:39:8c:8b:a9:cc:b3:85:ed:c1:c3:9b:
14:cd:6f:58:e6:57:c6:c4:b6:f0:a9:56:1f:6f:27:
89:c9:1f:70:f8:03:40:81:3e:68:6b:39:2c:0b:34:
6a:fc:61:e5:30:36:4b:f8:06:43:c1:e7:ab:19:07:
d4:8b:00:35:65:64:42:8c:40:03:c7:4e:b8:1c:67:
75:fa:f7:34:94:33:d6:4b:14:68:31:01:4a:c5:0f:
89:e5:cd:0c:3b:a5:05:f6:87:3e:b7:46:2a:6d:7d:
12:24:16:e9:54:d6:39:cf:12:75:86:2d:46:c7:fb:
ca:7e:1d:74:e9:37:5c:f5:c3:ca:65:fd:60:bc:19:
cc:be:e0:85:c1:04:ff:86:07:ca:c6:16:d2:17:35:
9f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C5:EE:80:40:68:EE:6E:D9:BD:E1:BD:3F:0C:B9:23:39:6B:1B:C7
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/T8XugEBo7m7ZveG9Pwy5IzlrG8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.227.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:e1:08:37:82:cf:79:2e:a6:af:fa:0d:0d:8b:34:fb:11:69:
e4:d6:3e:d8:f0:6a:d7:aa:b6:7b:34:c6:d0:ea:8b:dc:a7:dc:
42:ec:99:6c:c1:aa:4a:65:02:ed:9e:4c:13:98:90:18:cd:4f:
f6:10:eb:c5:1d:ea:b7:d4:d1:e2:6e:6e:65:2d:eb:cc:0b:06:
59:62:42:04:67:fe:89:63:1c:59:c6:4c:51:40:e4:92:37:fe:
df:ac:5d:c2:50:47:6d:77:e2:30:30:8d:0a:2d:64:ee:9e:15:
2d:6e:8c:52:79:74:0d:38:30:15:53:83:d3:b3:8c:12:ea:6b:
e9:9e:e8:86:33:6a:d3:bf:3f:fd:fd:6e:20:70:d3:67:41:57:
a4:f7:c8:b9:f2:5a:1f:f2:b1:23:07:df:96:25:79:b5:d0:99:
1e:a2:f9:04:b1:a9:87:17:67:bf:b3:63:97:32:c0:b4:eb:ed:
1e:f5:3c:fc:7f:0a:db:75:1a:83:90:9f:fb:d0:06:d1:ad:05:
24:0e:a3:e4:21:d1:3b:23:a0:fd:eb:4a:56:56:98:9e:e1:93:
e3:b3:ea:c7:8c:5d:51:29:33:19:df:44:da:7a:e6:7f:02:1e:
50:77:7c:75:c9:3a:41:48:31:d3:30:11:b8:47:44:a9:7e:25:
fc:3c:9d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 28 17:43:27 2023 by rpki-client on console-ams.rpki-client.org