Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/kKZsIV_r7sFUaq6QyeSlgUBbSE8.roa
File: kKZsIV_r7sFUaq6QyeSlgUBbSE8.roa (raw, json)
Hash identifier: 5uZ5QFw5G/EmvAnx/lgCEBT4GYI/BZDqxN7egzfN7+s=
Subject key identifier: 90:A6:6C:21:5F:EB:EE:C1:54:6A:AE:90:C9:E4:A5:81:40:5B:48:4F
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019206572ADF5B4686153FDB9997C12306C1
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/kKZsIV_r7sFUaq6QyeSlgUBbSE8.roa
Signing time: Wed 18 Sep 2024 18:13:48 +0000
ROA not before: Wed 18 Sep 2024 18:13:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 14.102.231.0/24 maxlen: 24
85.208.10.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 19 Sep 2024 15:56:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:06:57:2a:df:5b:46:86:15:3f:db:99:97:c1:23:06:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 18 18:13:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=90a66c215febeec1546aae90c9e4a581405b484f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e6:8f:c8:d7:da:d8:d8:1f:1d:cf:ef:5c:bd:
6a:b9:33:d0:30:99:40:c4:d8:5f:c0:23:5b:9d:ec:
21:58:b1:7a:9f:e9:88:60:02:bb:24:b4:63:8f:9d:
f8:d0:b1:df:7b:f7:7e:7b:65:23:a6:a0:6d:3d:c6:
e5:7d:eb:12:0d:15:4f:18:c1:61:20:f8:15:ef:5b:
91:9a:d6:7a:9c:42:77:82:4b:9a:24:5b:60:06:83:
65:cc:18:1c:28:b2:73:88:ef:d2:8b:09:e5:3f:26:
e9:e1:e8:0e:3a:fd:ed:79:9d:e7:5e:f6:42:bd:31:
86:9d:30:e6:86:2e:7a:13:58:c3:ae:77:b3:c7:87:
b4:3f:b2:a9:26:08:5f:63:bf:61:cf:18:f3:96:64:
7b:33:32:17:09:98:d0:f5:29:85:50:4d:70:ec:8d:
8f:bf:f7:92:8c:6f:fc:21:7b:ca:68:c0:44:9e:eb:
9e:ad:8d:3f:57:15:05:80:c8:5c:a4:9f:66:68:d2:
fb:72:17:33:5d:cf:4d:0b:13:a7:5f:57:15:53:6b:
f6:8c:63:4b:18:03:df:cd:f3:be:c7:fb:2d:0d:b6:
8c:01:94:36:e0:f9:e4:f3:1f:b9:b5:39:99:ab:c2:
8a:6c:b6:14:42:d5:1d:35:dd:14:3a:2c:ae:da:c2:
d8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A6:6C:21:5F:EB:EE:C1:54:6A:AE:90:C9:E4:A5:81:40:5B:48:4F
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/kKZsIV_r7sFUaq6QyeSlgUBbSE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.231.0/24
85.208.10.0/23
Signature Algorithm: sha256WithRSAEncryption
58:33:29:cf:aa:02:b4:ce:fb:ff:a0:36:61:cc:b4:51:8f:7c:
5c:77:92:95:f0:7a:ea:68:e5:53:16:8e:b5:c4:ac:d0:32:30:
e8:94:db:b9:b0:bf:74:2f:c7:63:a5:c7:f2:fa:3a:9b:36:78:
91:ed:3b:df:0b:be:9e:03:56:ac:eb:5a:58:2c:25:78:4c:f3:
c5:8f:47:14:c5:f0:f7:b9:f1:84:7e:04:bf:eb:31:44:c5:6b:
bf:1c:7e:a7:cd:8b:98:dc:c9:dd:7b:0e:cb:b3:39:fe:88:33:
dc:ce:a5:48:ed:30:24:59:9e:73:8e:24:b4:8b:9e:d4:47:0b:
a7:d7:16:b7:dd:d8:48:76:2d:e9:45:ae:0c:a3:cc:0b:25:3d:
06:fb:20:3e:c6:5c:ac:93:e0:fb:44:46:45:ff:75:0d:f7:aa:
2c:b8:90:40:c2:bb:20:2c:94:7c:03:3e:e8:3c:0b:a5:88:69:
ae:cf:1a:cb:11:ec:26:e3:17:c7:25:71:07:75:3a:47:fc:40:
7e:9a:ed:9f:88:da:72:74:d9:01:7c:75:9f:ae:c9:80:3b:a4:
02:c6:f1:d9:0d:b1:47:94:9d:b2:bb:1f:88:c4:2a:50:20:b1:
24:d8:a6:ff:7f:46:54:2b:d1:b7:6b:c2:e0:2f:99:17:09:e5:
a2:62:d9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:03:59 2025 by rpki-client