Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/lzGJJOfGQ_DhycZK96yUhjemD9g.roa
File: lzGJJOfGQ_DhycZK96yUhjemD9g.roa (raw, json)
Hash identifier: D2vnq6ZxlLCm1b0NcOhS1ioe55m0OCqK8If8TtKr8Mo=
Subject key identifier: 97:31:89:24:E7:C6:43:F0:E1:C9:C6:4A:F7:AC:94:86:37:A6:0F:D8
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0188442969796218C4F479B589B61D8ECCF6
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/lzGJJOfGQ_DhycZK96yUhjemD9g.roa
Signing time: Mon 22 May 2023 15:52:24 +0000
ROA not before: Mon 22 May 2023 15:52:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.47.57.0/24 maxlen: 24
14.102.227.0/24 maxlen: 24
14.102.236.0/24 maxlen: 24
14.102.238.0/24 maxlen: 24
14.102.239.0/24 maxlen: 24
14.102.234.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:44:29:69:79:62:18:c4:f4:79:b5:89:b6:1d:8e:cc:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: May 22 15:52:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97318924e7c643f0e1c9c64af7ac948637a60fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d2:5d:24:5f:08:f5:aa:69:4e:e6:da:ce:17:
f2:51:41:8f:16:40:8b:aa:18:19:4e:b8:93:34:bc:
98:76:38:81:69:53:a9:1b:62:20:52:ba:6b:31:50:
fa:72:21:be:2d:eb:0c:43:01:e9:20:b7:7f:dd:dc:
a8:64:20:0b:73:9c:b5:71:03:3e:5e:8b:a8:46:22:
02:b9:6b:98:41:47:df:d3:fa:53:b5:7c:24:c5:0c:
9b:64:33:70:87:f0:31:b1:50:03:11:eb:59:d1:32:
40:c8:6d:83:e7:0c:10:9e:8b:ef:1f:1b:25:af:39:
9b:8f:e0:ef:02:df:9c:56:d5:d5:25:8c:dd:51:32:
0e:99:2c:5b:01:00:cb:63:b1:7a:4f:f6:17:b1:16:
7a:21:5e:ea:64:15:d3:f7:ae:56:b9:ab:c9:5d:57:
f4:57:5f:1a:99:7c:f4:62:1b:99:a7:63:c8:9d:bf:
74:60:d1:9b:ef:06:c5:fd:d7:85:e8:eb:4c:69:42:
dc:e5:c1:41:85:54:23:ca:c2:11:1e:c2:4f:0e:52:
73:d1:d2:a1:80:d1:9c:c2:22:d4:44:1b:43:66:6d:
a7:4f:ff:45:50:e2:dd:7d:2b:34:c9:d1:b6:01:fd:
7a:20:4f:ce:5a:73:de:c6:22:d0:73:a7:d9:3b:6d:
db:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:31:89:24:E7:C6:43:F0:E1:C9:C6:4A:F7:AC:94:86:37:A6:0F:D8
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/lzGJJOfGQ_DhycZK96yUhjemD9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.227.0/24
14.102.234.0/24
14.102.236.0/24
14.102.238.0/23
103.47.57.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:01:be:4e:e4:12:a4:fa:ec:0c:89:ef:6e:24:8a:33:06:85:
0c:7b:ee:b8:0d:4c:36:ae:bc:ad:eb:86:3c:1c:0e:23:93:2c:
cc:02:6e:29:d8:82:a7:a2:b5:ef:5c:34:54:92:4e:7a:c4:3a:
f6:45:9d:09:8c:c9:6d:6f:92:63:48:fa:a1:d3:aa:dd:0f:4e:
8d:aa:b8:93:dd:e0:5f:b8:ac:f9:23:a0:e2:dc:31:e9:06:7b:
17:ae:68:06:93:c3:5a:64:01:e2:24:fa:14:4c:4c:0f:4a:82:
d5:ba:c4:c6:ad:66:57:bb:24:e3:3b:1c:be:6c:73:95:34:6a:
6e:99:8c:cb:7b:0d:81:c9:5d:c2:21:64:59:88:d3:46:f0:f3:
34:8c:71:cb:53:60:49:41:73:34:c0:c8:45:48:4d:f5:d2:16:
cf:52:54:c0:b7:0b:a9:88:d6:ca:e4:44:6f:e0:3c:f2:02:c8:
be:47:5f:63:b1:7c:bd:5d:76:51:63:28:93:f5:e9:e8:0b:00:
28:66:75:4d:33:3b:e3:d5:ae:fe:c1:bb:a7:cf:04:34:66:a1:
7f:d0:39:41:27:a4:79:6c:d9:9e:16:0b:f2:4e:30:4e:a0:bc:
45:1e:a7:57:42:de:14:4b:bb:85:cf:65:37:b2:0e:06:ce:82:
7f:7d:d4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:44 2023 by rpki-client on console-ams.rpki-client.org