Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/i3XW9vEEi4x5_j5qD6aGdFINfiM.roa
File: i3XW9vEEi4x5_j5qD6aGdFINfiM.roa (raw, json)
Hash identifier: ys3iCMY6xe4p9A18Y+fizfGPIDy3f6yaxZhYobKlVSM=
Subject key identifier: 8B:75:D6:F6:F1:04:8B:8C:79:FE:3E:6A:0F:A6:86:74:52:0D:7E:23
Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
Certificate serial: 01857246D3EC21D0EC5E8937F3FCAF4F8176
Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/i3XW9vEEi4x5_j5qD6aGdFINfiM.roa
Signing time: Mon 02 Jan 2023 11:38:42 +0000
ROA not before: Mon 02 Jan 2023 11:38:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22604
IP address blocks: 157.23.224.0/20 maxlen: 24
2a0e:bbc0:8000::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:d3:ec:21:d0:ec:5e:89:37:f3:fc:af:4f:81:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
Validity
Not Before: Jan 2 11:38:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b75d6f6f1048b8c79fe3e6a0fa68674520d7e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:63:4c:c2:b8:a2:45:51:1e:ee:e4:e4:2d:cc:
c8:13:b6:37:33:f3:88:ac:aa:ab:88:ea:45:c5:32:
87:93:15:b6:c6:b9:24:27:62:9f:ba:2b:33:b2:3c:
a8:48:a2:4a:a1:15:32:b0:1e:77:99:fc:9c:65:a3:
c8:c0:2b:dc:1f:34:39:e3:7f:87:4b:7e:80:d7:c5:
91:88:53:13:01:25:bd:fc:63:8e:d3:00:8c:74:16:
77:d1:c1:fd:5b:fb:89:f3:8a:b1:3d:d8:ac:c4:a0:
40:8d:d3:47:aa:f4:e9:b8:06:5a:41:58:84:27:1a:
5a:4c:51:c8:30:60:92:f6:bc:28:66:31:d1:c1:42:
01:ab:7f:ec:24:76:0d:e7:4c:1c:75:d1:43:40:bd:
85:26:20:b5:a5:b5:e6:83:4e:3d:e9:2a:8f:44:a4:
5b:8f:22:00:25:65:57:54:eb:e6:34:3f:d0:80:ed:
c2:a9:c3:0b:5f:fe:bb:af:f1:0d:6e:0e:df:db:bf:
6b:aa:62:82:8f:9a:84:dc:d4:1f:f7:1b:ea:e4:9d:
07:1b:93:cd:cd:68:8c:89:64:5b:03:a7:7a:99:25:
ab:2b:dc:f3:67:94:8a:51:bc:b4:79:b8:f1:d8:ac:
43:66:7b:07:f5:96:a5:ed:af:fe:51:d3:7d:e7:e0:
1c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:75:D6:F6:F1:04:8B:8C:79:FE:3E:6A:0F:A6:86:74:52:0D:7E:23
X509v3 Authority Key Identifier:
keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/i3XW9vEEi4x5_j5qD6aGdFINfiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.23.224.0/20
IPv6:
2a0e:bbc0:8000::/40
Signature Algorithm: sha256WithRSAEncryption
ae:fc:80:2f:34:cc:d9:0b:00:97:5c:85:05:ee:7d:fc:58:bb:
15:aa:b3:5e:ab:2e:42:6b:ef:c2:a7:bd:10:b4:97:62:0d:84:
32:7f:2e:ee:b4:e9:ec:11:37:12:fa:68:03:27:05:42:7a:8b:
fa:3e:e4:90:46:df:ad:36:63:ea:02:86:ea:af:69:17:51:33:
44:6a:80:f3:20:a0:1d:55:de:3c:c2:cf:b1:c5:73:b9:3b:6f:
ed:03:3f:54:df:e7:4e:27:69:ea:c8:78:f0:c1:08:b0:12:8f:
25:71:94:ba:f3:f7:1b:15:97:88:bf:b0:35:33:b8:6e:29:7c:
a3:26:6f:34:f6:87:4a:5b:a9:dc:e6:b3:6b:31:7d:37:6a:3d:
f8:51:48:ca:29:94:0e:62:0f:af:ab:c2:06:8f:e0:c7:e9:bb:
d5:d4:e8:5f:52:32:99:87:50:35:ec:e2:23:57:70:fe:c4:7d:
56:3f:5b:e8:2f:5b:f0:43:9d:d0:a8:89:7e:eb:71:f6:e7:3f:
5b:06:71:d2:5f:96:cc:08:9a:ed:c6:3f:3d:0a:7c:64:3c:33:
e9:bd:a5:8a:d7:4b:ba:f0:39:36:ab:cc:d4:04:80:ed:ce:e6:
64:96:11:a4:a4:c7:80:08:81:65:96:b8:4d:1f:3f:9e:5c:8d:
4e:f4:ff:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:32 2024 by rpki-client on console-fra.rpki-client.org