Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/fE9masciQSZM5mwRix6r3w0oNDU.roa
File: fE9masciQSZM5mwRix6r3w0oNDU.roa (raw, json)
Hash identifier: eE91fwiSpfmZs/DZ93wTlZY9u7VBwbg2NnBd27Puhcs=
Subject key identifier: 7C:4F:66:6A:C7:22:41:26:4C:E6:6C:11:8B:1E:AB:DF:0D:28:34:35
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 0189816E73294735B01E815B4C10F4D3772F
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/fE9masciQSZM5mwRix6r3w0oNDU.roa
Signing time: Sun 23 Jul 2023 06:27:26 +0000
ROA not before: Sun 23 Jul 2023 06:27:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42708
IP address blocks: 157.97.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:81:6e:73:29:47:35:b0:1e:81:5b:4c:10:f4:d3:77:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jul 23 06:27:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c4f666ac72241264ce66c118b1eabdf0d283435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3a:a2:5d:64:3b:d0:62:29:2a:66:4e:cb:57:
64:95:6d:f2:49:d9:7e:8c:50:0f:ef:8e:69:2b:5d:
f3:12:72:9c:7a:96:a3:49:c6:72:b8:5a:42:76:1c:
1d:11:a2:98:72:33:f9:98:cf:20:b1:d8:49:e4:f4:
e8:24:78:f6:e6:e1:51:7e:a4:77:4f:4b:2b:6f:a8:
90:dc:d6:0f:3c:16:bb:26:2c:ea:76:4b:81:7a:10:
5e:8b:b6:29:9e:15:a4:4f:46:10:b9:eb:99:bc:87:
66:30:63:f8:c8:ee:ea:19:bb:41:20:ab:76:5a:13:
b4:8d:61:1d:f2:c8:d0:71:ad:9d:08:ce:74:5e:31:
bb:51:e8:1a:86:28:76:e3:44:b4:11:da:69:24:c4:
ee:cd:30:67:61:09:95:f4:45:11:bc:4f:3a:3a:df:
30:23:0e:66:31:e9:64:04:47:8d:a3:90:4f:f4:ca:
a8:15:4d:e9:03:74:60:45:98:a6:e0:b5:ba:c2:a0:
57:85:11:5a:5d:72:33:fc:b3:0c:4d:9a:b9:54:92:
cd:7d:a7:5d:82:e9:70:38:1c:e3:1c:65:49:6c:ef:
8e:90:a6:04:6e:f2:cf:9f:68:ea:dc:93:0d:d9:49:
30:b3:b8:06:c0:e6:bd:dd:cf:70:97:bb:b1:41:ee:
20:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4F:66:6A:C7:22:41:26:4C:E6:6C:11:8B:1E:AB:DF:0D:28:34:35
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/fE9masciQSZM5mwRix6r3w0oNDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.97.120.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:34:22:75:d8:c2:03:4f:69:ce:f6:9d:33:60:cb:bc:3e:15:
4d:b6:ca:56:6e:b3:b8:20:bc:84:3c:51:ab:ed:c2:45:18:97:
34:08:d3:63:17:b0:71:98:ee:4a:cc:8b:94:b5:51:e2:0f:02:
9c:71:ef:3a:80:37:e1:cb:52:06:07:6f:b5:23:d9:9b:97:fb:
0c:a5:0b:4c:ad:e1:6c:b1:44:b6:2a:38:5d:a1:c9:22:07:d2:
c5:d3:37:ce:6d:33:c9:ea:e6:84:f8:16:13:67:7f:fa:64:ec:
43:a9:8b:c0:34:38:46:0e:34:e8:3f:94:ca:51:9a:b9:2e:68:
b8:a2:ce:ce:44:a7:ed:68:6f:5d:f2:26:79:89:a3:39:12:f4:
1e:c9:f9:48:8d:9f:f1:e0:43:f6:19:f0:ea:2d:23:d3:d2:96:
1b:b5:bd:7e:ca:0a:23:b2:c7:12:d0:2e:82:91:e3:c2:70:94:
96:dd:e2:c0:69:fd:72:13:14:fe:5b:b2:bf:1c:53:0d:d7:2d:
6a:72:4f:b2:8f:66:a5:ae:05:d9:cb:c5:e9:7b:25:a3:d5:33:
da:c8:4d:4a:6f:bc:56:b5:92:c4:3c:af:00:19:13:0e:01:9b:
28:ea:b7:05:63:bf:63:6f:2c:4a:2f:82:04:a5:2d:96:7a:e8:
6d:c2:c0:34
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYmBbnMpRzWwHoFbTBD003cvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMDc0MzQ5NmM3ZmYzZWZmYjg3MDYwMTEzOWNhZDlkMmYy
NzFlMTAwHhcNMjMwNzIzMDYyNzI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzRmNjY2YWM3MjI0MTI2NGNlNjZjMTE4YjFlYWJkZjBkMjgzNDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zqiXWQ70GIpKmZOy1dklW3ySdl+
jFAP745pK13zEnKcepajScZyuFpCdhwdEaKYcjP5mM8gsdhJ5PToJHj25uFRfqR3
T0srb6iQ3NYPPBa7JizqdkuBehBei7YpnhWkT0YQueuZvIdmMGP4yO7qGbtBIKt2
WhO0jWEd8sjQca2dCM50XjG7Uegahih240S0EdppJMTuzTBnYQmV9EURvE86Ot8w
Iw5mMelkBEeNo5BP9MqoFU3pA3RgRZim4LW6wqBXhRFaXXIz/LMMTZq5VJLNfadd
gulwOBzjHGVJbO+OkKYEbvLPn2jq3JMN2Ukws7gGwOa93c9wl7uxQe4gpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHxPZmrHIkEmTOZsEYseq98NKDQ1MB8GA1UdIwQY
MBaAFJ8HQ0lsf/Pv+4cGAROcrZ0vJx4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2Mt
NjM0MTEzNjdkOTBhLzEvZkU5bWFzY2lRU1pNNW13Uml4NnIzdzBvTkRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2MtNjM0MTEzNjdkOTBh
LzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnWF4MA0G
CSqGSIb3DQEBCwUAA4IBAQBuNCJ12MIDT2nO9p0zYMu8PhVNtspWbrO4ILyEPFGr
7cJFGJc0CNNjF7BxmO5KzIuUtVHiDwKcce86gDfhy1IGB2+1I9mbl/sMpQtMreFs
sUS2KjhdockiB9LF0zfObTPJ6uaE+BYTZ3/6ZOxDqYvANDhGDjToP5TKUZq5Lmi4
os7ORKftaG9d8iZ5iaM5EvQeyflIjZ/x4EP2GfDqLSPT0pYbtb1+ygojsscS0C6C
kePCcJSW3eLAaf1yExT+W7K/HFMN1y1qck+yj2alrgXZy8XpeyWj1TPayE1Kb7xW
tZLEPK8AGRMOAZso6rcFY79jbyxKL4IEpS2WeuhtwsA0
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:31 2024 by rpki-client on console-fra.rpki-client.org