Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/faPzTVPHqzMCfTWCC9UdyBuRaCY.roa
File: faPzTVPHqzMCfTWCC9UdyBuRaCY.roa (raw, json)
Hash identifier: 91vn/9BK8hG2UxaL0JL+Zaytmm39PMxc9XnxJLWNr2Q=
Subject key identifier: 7D:A3:F3:4D:53:C7:AB:33:02:7D:35:82:0B:D5:1D:C8:1B:91:68:26
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0189617E44A132617C54CD04BB098BAA3709
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/faPzTVPHqzMCfTWCC9UdyBuRaCY.roa
Signing time: Mon 17 Jul 2023 01:36:52 +0000
ROA not before: Mon 17 Jul 2023 01:36:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.47.56.0/24 maxlen: 24
103.47.59.0/24 maxlen: 24
14.102.228.0/22 maxlen: 24
14.102.237.0/24 maxlen: 24
14.102.238.0/24 maxlen: 24
14.102.234.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:61:7e:44:a1:32:61:7c:54:cd:04:bb:09:8b:aa:37:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 17 01:36:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7da3f34d53c7ab33027d35820bd51dc81b916826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:48:73:43:e3:bf:b0:2d:f7:fe:b9:ec:dc:96:
14:84:62:67:e9:66:51:c2:42:7a:f5:90:14:ab:f9:
45:ab:00:af:41:d8:08:b1:b3:46:02:82:ef:66:f5:
ac:11:69:f9:65:84:2e:9b:3f:22:22:15:86:42:f0:
24:87:2e:98:46:eb:46:82:19:01:06:b6:6a:f5:42:
05:35:bc:52:d3:38:db:f5:7c:8b:a4:49:fd:4f:0d:
cf:bf:65:4b:14:4c:38:62:9e:90:48:4d:45:10:32:
76:40:d4:98:76:64:2b:04:6b:1f:b0:f2:ed:71:1e:
9e:cf:e7:ff:d1:14:a1:b6:0b:da:7a:f5:57:ea:01:
34:c0:b2:40:c1:36:01:f9:d4:99:50:ac:f4:ff:51:
6a:c3:f7:fa:52:f0:3a:c8:b5:71:34:8e:76:f9:41:
65:c3:8d:48:ed:30:38:f9:7c:c1:60:9b:8f:c2:03:
3a:2b:f2:4c:99:8a:18:10:c3:e8:d5:eb:39:b9:d0:
b9:b8:e0:42:cf:91:10:df:1e:99:7a:7f:0a:16:bd:
da:b0:b7:a1:78:52:ba:4f:4b:8b:62:9b:9c:28:ee:
f3:b3:5a:9a:6d:7c:78:11:5a:0e:84:c1:97:db:f9:
d1:89:4a:fc:7b:d3:cc:f4:2a:56:23:c5:cd:cd:84:
31:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A3:F3:4D:53:C7:AB:33:02:7D:35:82:0B:D5:1D:C8:1B:91:68:26
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/faPzTVPHqzMCfTWCC9UdyBuRaCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.228.0/22
14.102.234.0/24
14.102.237.0-14.102.238.255
103.47.56.0/24
103.47.59.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:8b:4f:2d:e7:86:5e:2d:df:ed:b2:9d:74:35:f5:d5:7f:c7:
a2:ad:20:be:19:bd:17:f8:7c:c3:f2:3e:21:53:3d:69:fe:2d:
f9:c0:5f:18:0c:24:ad:fb:2f:20:6b:75:c3:e9:78:dc:39:eb:
b7:d5:f9:46:70:c3:84:fa:29:6d:78:be:0e:04:28:b9:89:1e:
7b:81:e9:0a:b7:e4:96:65:77:67:2a:fb:8d:62:c0:7e:f9:1e:
75:14:a7:dc:84:8b:d2:c1:cf:d0:60:ba:51:10:1b:86:e3:da:
01:e6:b6:44:18:7f:45:78:fc:89:cb:76:5b:f6:02:ee:65:b1:
87:a2:69:06:41:71:7c:e8:71:76:73:d7:72:c1:d0:ca:86:4d:
24:99:1e:48:46:e7:61:0d:c1:9c:77:fa:18:9b:b3:f4:05:f7:
bf:2a:43:10:9b:c3:f0:eb:84:7f:a2:aa:ef:72:66:dc:4a:88:
fa:f5:3f:7b:81:bd:3b:98:6e:08:84:84:9e:92:14:ab:c8:44:
b8:c0:cb:a1:ed:7e:fe:ac:39:5c:7c:7d:3f:0b:7d:ce:64:23:
1b:13:17:f8:13:0a:c2:9f:6a:aa:08:a2:f2:f7:16:59:bd:fe:
f1:16:1d:30:3a:a3:03:84:f2:1a:b2:04:c1:b3:10:d4:ad:59:
2d:1a:07:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 21 19:14:18 2023 by rpki-client on console-ams.rpki-client.org