Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/cxiOc_rEhHkqQzMAKDqKgQoXHuM.roa
File: cxiOc_rEhHkqQzMAKDqKgQoXHuM.roa (raw, json)
Hash identifier: 76QJbUe0ExUJo5C3WYkx948Oih/XJ+39jqRChBRQdNU=
Subject key identifier: 73:18:8E:73:FA:C4:84:79:2A:43:33:00:28:3A:8A:81:0A:17:1E:E3
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 018C99BF44EEB00BF2E9BD56C48D8C62751B
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/cxiOc_rEhHkqQzMAKDqKgQoXHuM.roa
Signing time: Sun 24 Dec 2023 02:54:58 +0000
ROA not before: Sun 24 Dec 2023 02:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.47.59.0/24 maxlen: 24
14.102.231.0/24 maxlen: 24
14.102.232.0/24 maxlen: 24
14.102.236.0/24 maxlen: 24
14.102.234.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:99:bf:44:ee:b0:0b:f2:e9:bd:56:c4:8d:8c:62:75:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Dec 24 02:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73188e73fac484792a433300283a8a810a171ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c4:16:b5:b9:ef:fe:ae:0c:05:6e:38:c3:5b:
63:d9:8f:5d:db:68:13:61:f3:e8:b6:19:73:df:34:
49:f7:f0:5a:83:03:36:4f:7b:b6:35:6c:b2:4b:d2:
fe:70:3a:44:8d:61:31:06:45:de:67:54:f4:9b:0e:
3e:bd:4c:84:b3:fa:3e:6d:1a:2f:c1:74:14:48:64:
99:36:e7:0e:09:fa:09:01:8b:01:3d:ab:b0:38:91:
5d:16:d4:1b:bf:6f:a1:31:18:92:89:bb:07:65:53:
8a:a3:81:c4:c8:71:02:8b:eb:c4:d4:83:68:b2:1a:
c6:3d:c1:11:d0:cd:91:ab:99:c0:34:2c:5e:87:44:
33:7f:b3:93:0d:57:1c:64:77:61:ec:56:03:c4:d6:
e7:ca:44:2c:b4:e7:9a:99:2b:5d:c7:81:d7:0a:9e:
5c:21:db:a1:4f:a2:d6:ea:e6:bf:39:36:72:b6:c4:
3c:89:84:ac:88:0a:d4:e6:f6:6b:79:99:88:19:a2:
01:bf:84:a9:bf:86:a3:35:e8:2e:0b:25:1c:49:73:
f9:0e:c9:df:e9:da:42:ce:2d:8c:a5:cf:e2:89:67:
e7:f0:3c:5e:13:39:7d:26:9c:b4:0b:b6:c0:0a:6c:
20:80:54:fc:12:0b:bd:b9:c6:d9:7a:80:fb:d1:f3:
eb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:18:8E:73:FA:C4:84:79:2A:43:33:00:28:3A:8A:81:0A:17:1E:E3
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/cxiOc_rEhHkqQzMAKDqKgQoXHuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.231.0-14.102.232.255
14.102.234.0/24
14.102.236.0/24
103.47.59.0/24
Signature Algorithm: sha256WithRSAEncryption
36:2f:a7:07:57:61:bd:53:b1:7b:0a:84:37:48:42:d2:56:5e:
99:fe:57:f2:a7:ea:2c:20:48:09:43:47:ed:6e:60:13:28:cf:
67:8b:0c:f5:7b:a8:26:14:36:0c:37:44:66:9b:67:d6:2d:75:
38:a4:bf:bf:eb:60:e8:67:4d:ff:4b:3b:5a:01:a7:5d:4f:d2:
78:e0:0d:92:a5:2f:e6:06:54:b5:ff:44:95:25:ef:fb:0b:03:
5a:b2:e0:c6:d1:18:a1:d9:09:ed:22:12:52:73:6d:f7:a8:dc:
7e:d2:3b:11:9f:b9:97:b2:3f:a9:c5:1f:ed:08:b6:ed:cb:ac:
0d:78:22:5a:93:0f:06:e5:97:75:04:6e:1c:7c:0d:93:f2:f4:
17:4e:dc:4a:d6:2f:72:b3:52:50:5b:99:23:bb:f7:09:04:cf:
ab:a5:8a:37:f6:61:bf:a0:6d:a0:3c:75:38:81:5b:a7:3e:a7:
4a:70:ce:7b:5e:7d:82:1f:1b:fb:42:ee:27:57:79:88:37:e7:
f7:bf:83:36:25:5a:d5:1a:43:ad:43:b7:be:4b:dc:71:eb:e2:
5a:9b:f6:9e:4d:2d:27:9e:ee:41:57:c9:31:c9:94:76:57:8e:
3c:f2:ca:5c:95:c5:16:a3:0c:8a:f2:f5:8e:95:c0:05:26:6b:
57:33:35:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:50 2024 by rpki-client on console-fra.rpki-client.org