Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/hZqVsoRPyP7vHEiF0EBgegxiKfQ.roa
File: hZqVsoRPyP7vHEiF0EBgegxiKfQ.roa (raw, json)
Hash identifier: BJVTfnXEhVl48rUl2ywV55jpMyxLNr+Eg4Vh6J8fko0=
Subject key identifier: 85:9A:95:B2:84:4F:C8:FE:EF:1C:48:85:D0:40:60:7A:0C:62:29:F4
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 018929C12617CC24D4203519B9553301554C
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/hZqVsoRPyP7vHEiF0EBgegxiKfQ.roa
Signing time: Thu 06 Jul 2023 05:51:11 +0000
ROA not before: Thu 06 Jul 2023 05:51:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.47.59.0/24 maxlen: 24
14.102.228.0/22 maxlen: 24
14.102.237.0/24 maxlen: 24
14.102.238.0/24 maxlen: 24
14.102.234.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:29:c1:26:17:cc:24:d4:20:35:19:b9:55:33:01:55:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 6 05:51:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=859a95b2844fc8feef1c4885d040607a0c6229f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:41:59:4e:be:6d:09:9f:dc:73:00:d4:dd:13:
f9:2a:00:f9:39:2e:db:24:b6:d1:6d:e9:74:ed:f3:
30:b6:8d:23:4f:e2:73:18:62:5c:f4:7d:9d:61:a0:
6c:18:2d:f7:cf:40:a6:a7:39:74:31:37:d3:a5:00:
4f:54:9f:39:0c:1a:02:cf:a9:15:bc:5c:9e:13:65:
ea:29:b5:ca:fe:d8:4d:a9:cc:68:16:19:46:c6:59:
d1:ed:74:df:2c:6c:c7:74:aa:c4:65:c0:6d:ea:e1:
68:05:49:73:ae:5c:66:d0:01:b3:cc:5d:b1:d7:5e:
2c:1b:36:64:bd:60:04:95:2a:bc:10:7f:96:3d:39:
52:35:66:15:5b:25:b3:cc:b2:0e:c6:76:8a:10:81:
46:2b:9f:43:d5:6a:a9:fe:06:49:f4:85:9a:0f:2e:
a9:31:a4:0b:c1:1b:63:7d:8d:5c:23:14:2c:70:1d:
3d:d1:79:b7:93:ed:24:75:ce:46:0c:6c:a4:ce:1e:
09:04:5a:60:55:d7:1e:8e:02:2e:e4:b5:41:c1:84:
e0:0d:0f:3b:80:a1:3e:f7:e9:e3:b1:70:b1:9c:87:
fb:8e:4e:98:b2:ca:e9:cb:84:87:1e:7f:29:8f:ef:
49:89:68:1f:2f:10:cb:8c:b9:e7:9a:d4:ee:45:cd:
72:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9A:95:B2:84:4F:C8:FE:EF:1C:48:85:D0:40:60:7A:0C:62:29:F4
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/hZqVsoRPyP7vHEiF0EBgegxiKfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.228.0/22
14.102.234.0/24
14.102.237.0-14.102.238.255
103.47.59.0/24
Signature Algorithm: sha256WithRSAEncryption
43:3d:20:80:aa:37:57:9f:f6:81:71:07:47:5e:c5:93:13:00:
0b:12:5e:cc:0e:4e:ce:97:c9:70:2c:15:16:8e:1e:87:1f:ed:
04:c3:fe:05:99:3b:a0:e2:98:47:1e:fe:5a:36:91:c7:44:75:
62:e4:29:b7:16:b7:fd:09:c9:2c:45:ce:d2:82:a3:2d:80:69:
5d:0b:d7:a3:10:de:6f:c3:7a:56:c6:7a:f1:27:d4:6c:b2:8b:
2c:b3:06:0a:f1:42:b7:3e:26:4d:3d:1f:1a:84:cf:10:4d:7d:
e5:b6:b1:ad:67:ba:17:24:87:36:73:84:06:37:c3:ad:1b:6a:
6c:1d:a7:60:47:e5:a9:05:3c:82:17:73:89:7e:d1:ad:58:45:
65:0f:f0:10:a3:1c:b4:f5:12:cd:c8:da:86:ed:e0:04:e6:cc:
42:b6:21:f0:8b:9b:60:b9:5f:bb:95:a4:11:6f:8f:16:0e:d6:
db:77:fd:70:da:60:6b:78:66:a7:5b:05:fe:0a:9b:4e:40:49:
2f:00:01:99:24:e1:d0:d7:67:a5:db:e9:01:9c:96:ae:c9:3c:
48:d0:0c:bf:12:52:fd:ab:71:cb:95:df:ae:f4:bd:f5:79:e4:
f2:e8:50:db:dc:f7:8d:f1:58:b6:bc:ca:27:67:0f:82:29:d0:
6b:67:d7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:44 2023 by rpki-client on console-ams.rpki-client.org