Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/XoDW60NGC4czCVs5ekeUetnGPdE.roa
File: XoDW60NGC4czCVs5ekeUetnGPdE.roa (raw, json)
Hash identifier: QLDiM7FjLrEo5AcBGPCBr4MZk29sudwcQdB8wHwAJ7o=
Subject key identifier: 5E:80:D6:EB:43:46:0B:87:33:09:5B:39:7A:47:94:7A:D9:C6:3D:D1
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0187D7BB898661B3F9A17FEB8DD70AD8FD2F
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/XoDW60NGC4czCVs5ekeUetnGPdE.roa
Signing time: Mon 01 May 2023 14:33:24 +0000
ROA not before: Mon 01 May 2023 14:33:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396998
IP address blocks: 14.102.233.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d7:bb:89:86:61:b3:f9:a1:7f:eb:8d:d7:0a:d8:fd:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: May 1 14:33:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e80d6eb43460b8733095b397a47947ad9c63dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8c:b7:b2:d2:2d:6f:34:5d:a7:31:b5:b8:32:
ef:e9:00:f4:f4:b3:c3:35:8a:d4:72:e9:a0:4b:81:
5f:29:a4:cf:52:4a:3d:63:57:05:da:ec:9e:77:d7:
be:78:48:ba:17:10:77:73:5b:c8:60:6a:69:7f:71:
f8:2e:5e:0b:0d:12:55:8e:8d:66:d0:93:c5:02:33:
af:12:89:51:4a:11:24:bf:89:c3:17:7e:6d:7e:57:
7c:f9:99:69:a4:3d:bd:2e:e3:cc:05:5a:d3:f2:13:
01:61:be:d4:85:68:24:e7:85:dc:c9:cb:e7:9f:60:
7b:f3:98:fa:8d:b2:a6:ff:e6:78:5e:ed:62:69:9a:
43:17:b0:a0:63:00:8f:93:a0:2b:06:73:b5:9d:6d:
42:97:cf:73:42:61:78:d3:16:2d:39:92:4e:65:57:
e4:94:92:44:cf:fa:0e:1b:ff:32:6b:83:e5:95:75:
d2:eb:a1:3c:51:81:42:a2:91:72:0e:5b:cb:f6:55:
8b:d7:6b:0d:c9:32:45:fc:80:5b:ec:73:92:21:01:
cd:3e:5a:17:56:e4:41:76:cf:29:f9:c9:2f:eb:f2:
70:dc:e7:e7:88:c7:6e:57:a0:86:19:e2:ed:10:3a:
08:65:7e:6e:17:dc:a7:8b:e5:5d:ef:fe:f5:cf:7b:
10:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:80:D6:EB:43:46:0B:87:33:09:5B:39:7A:47:94:7A:D9:C6:3D:D1
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/XoDW60NGC4czCVs5ekeUetnGPdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.233.0/24
Signature Algorithm: sha256WithRSAEncryption
db:a9:b1:b1:74:23:ab:fe:bc:01:87:bb:8c:42:3d:61:a4:d6:
d2:16:b0:7c:4b:21:4d:2a:93:6c:99:9a:eb:f9:38:8f:1e:5d:
4a:e6:c1:e1:a0:2d:6c:41:1c:a7:6e:39:f2:19:f1:e6:a1:c8:
fd:eb:8f:eb:c9:c0:13:01:10:6e:54:48:d2:a4:7a:23:98:77:
01:d7:c0:30:5f:50:73:32:b8:fb:1a:d3:cf:19:5e:bb:f7:ba:
ba:aa:2d:73:3c:43:b8:20:f3:45:78:f4:30:e7:04:9c:ac:1b:
6e:8f:20:47:3b:dd:e6:48:f8:c5:4e:a2:14:7d:e1:c4:fc:b4:
a3:65:4e:8c:df:1c:04:ce:00:0d:9c:9f:d9:91:b5:92:ae:48:
e3:58:9a:85:c2:3b:68:1e:11:82:28:91:e7:3b:3b:81:84:51:
54:c2:b6:20:df:31:54:77:54:37:02:00:35:95:28:b1:c4:9e:
0e:9a:bf:94:98:6b:62:ac:49:8f:17:88:0b:c6:35:59:37:c7:
83:24:08:24:89:8d:64:95:29:1d:15:60:b9:68:04:4b:6c:43:
74:e2:44:29:a3:6a:f4:ae:a1:bb:98:b0:dc:82:c7:9d:c7:c2:
08:cd:23:66:70:d2:50:43:2f:b1:46:d8:68:89:e1:13:df:49:
2f:73:a5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:50 2024 by rpki-client on console-fra.rpki-client.org