Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/k8rO4HXgPNwOBjdT-fnirNo156Q.roa
File: k8rO4HXgPNwOBjdT-fnirNo156Q.roa (raw, json)
Hash identifier: tvZbrIuMOiG7sFvCX8OjDBdXIxgD6a9NHCZz0QNaUkY=
Subject key identifier: 93:CA:CE:E0:75:E0:3C:DC:0E:06:37:53:F9:F9:E2:AC:DA:35:E7:A4
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 018CC500DCF99C5C298048FD8E576C0D62D7
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/k8rO4HXgPNwOBjdT-fnirNo156Q.roa
Signing time: Mon 01 Jan 2024 12:30:17 +0000
ROA not before: Mon 01 Jan 2024 12:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8038
IP address blocks: 157.97.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 13:38:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:dc:f9:9c:5c:29:80:48:fd:8e:57:6c:0d:62:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jan 1 12:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93cacee075e03cdc0e063753f9f9e2acda35e7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:bd:7a:db:75:9f:60:23:12:2b:14:18:63:ff:
53:da:f1:f8:05:38:65:68:2d:83:27:cc:2d:5d:ee:
5e:b1:e5:a7:ea:a5:c3:ce:ed:44:7c:a6:2f:bc:23:
0a:82:09:2d:d8:5e:8c:2f:3c:2d:79:10:26:78:81:
c0:15:a9:9f:a9:7f:e1:80:ce:49:2d:aa:fd:27:d5:
ec:eb:b9:94:3e:b4:9f:a0:96:5f:1e:c5:77:5a:c4:
79:93:3f:a2:8a:22:30:20:5b:3c:2b:88:89:c2:a1:
b2:d4:27:d8:b3:62:6d:95:cc:9c:6e:68:6b:2f:ba:
b3:ca:8c:b6:b2:03:47:d3:d8:6a:7c:88:1d:d5:9a:
4f:a3:21:14:37:7e:3f:a4:b4:75:16:d2:07:f8:01:
bb:48:37:1b:4b:f8:26:d2:7d:e3:9d:44:70:d7:1b:
b9:28:2f:6e:03:2b:5b:a0:93:4a:f4:d6:69:57:15:
c8:03:89:1b:3f:0a:e5:74:d9:7f:d3:c6:14:0f:ef:
f3:e3:8f:3d:6c:4e:78:e9:75:ef:20:67:21:23:14:
48:97:32:c9:64:b6:53:34:4d:72:57:24:1d:c0:e6:
6d:be:8c:5f:9b:83:b8:f6:fa:32:26:0a:15:5b:a5:
3e:5c:d1:c2:8a:a4:fe:72:52:97:02:b5:39:60:15:
d2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CA:CE:E0:75:E0:3C:DC:0E:06:37:53:F9:F9:E2:AC:DA:35:E7:A4
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/k8rO4HXgPNwOBjdT-fnirNo156Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.97.123.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:e9:93:fb:bc:74:f9:b4:29:93:b3:de:76:48:b2:fa:5f:38:
d2:e5:80:33:b3:2c:4a:10:9d:45:9c:74:f9:6b:24:a3:ee:19:
34:a0:2c:00:cb:d8:9f:72:ef:1e:ae:0c:2f:07:d7:e3:af:8d:
6b:57:69:d7:70:77:39:80:a8:3c:ef:1e:64:bc:3b:73:11:34:
cc:03:e7:3e:77:b7:95:d3:9d:9e:ed:08:cd:92:60:e2:8e:71:
9d:b3:33:e8:b5:36:e1:5f:b6:bb:86:04:5c:bd:3b:b0:ab:d2:
53:b8:3c:a6:6d:0b:47:01:ac:b5:38:6b:85:b0:5b:66:ab:ea:
e4:81:c0:ec:e6:04:7b:be:b2:0a:2d:7c:97:93:d9:4d:88:bd:
e0:8c:0c:bb:84:57:74:df:d8:3f:6f:8d:d0:82:19:e3:2c:de:
f6:e7:c4:73:f5:e2:3b:08:ba:eb:b6:41:8c:c4:fb:37:f0:00:
7b:11:9f:be:fd:87:59:56:c6:8e:95:b2:6d:f6:dd:18:35:37:
06:9d:92:16:c9:43:eb:5b:2f:6d:86:e1:dc:f9:ab:25:47:8d:
17:d1:ba:3a:14:65:f7:db:d0:00:25:aa:9d:26:7c:28:5f:d7:
40:f0:af:92:e5:c7:bd:4d:b2:cd:0a:91:12:99:16:5f:be:0c:
b8:0c:7d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 10 16:13:23 2024 by rpki-client on console-fra.rpki-client.org