Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/NwJB7E_FwM-iDm7okLYW9YQBFHY.roa
File: NwJB7E_FwM-iDm7okLYW9YQBFHY.roa (raw, json)
Hash identifier: cON+5bcw5XKVvrp3k0aY4xHrIbdVGyuzgqQQqWf/2+M=
Subject key identifier: 37:02:41:EC:4F:C5:C0:CF:A2:0E:6E:E8:90:B6:16:F5:84:01:14:76
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 0191D7B59AFFC72B91FA553496190943DF38
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/NwJB7E_FwM-iDm7okLYW9YQBFHY.roa
Signing time: Mon 09 Sep 2024 16:54:48 +0000
ROA not before: Mon 09 Sep 2024 16:54:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215590
IP address blocks: 89.23.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:49:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d7:b5:9a:ff:c7:2b:91:fa:55:34:96:19:09:43:df:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Sep 9 16:54:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=370241ec4fc5c0cfa20e6ee890b616f584011476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:87:b9:df:51:28:ea:87:bf:d3:b5:af:ef:e7:
fb:d3:56:fb:12:14:58:66:7a:21:38:9a:f7:fd:32:
bb:e4:d5:cf:b7:c2:a8:47:da:50:8b:e6:5f:8f:e5:
3a:1f:25:45:ff:81:2d:87:f6:1d:9a:1a:3e:3e:53:
53:b3:fb:29:cf:6b:14:f2:7c:8c:75:71:b2:0b:34:
fc:21:73:b1:68:58:5c:78:ec:79:21:c4:f0:95:a9:
d5:6d:57:bd:26:d4:e5:78:99:e3:d8:56:6f:c7:bf:
fd:6b:93:6b:45:53:cf:04:10:8b:30:54:de:72:95:
55:32:f4:c8:37:d5:0f:e1:00:b9:2f:69:d0:c7:8b:
1a:2f:05:48:77:76:5e:06:8f:c5:cf:86:4d:62:3a:
df:4b:e4:bc:38:b8:1b:58:37:b0:14:44:d6:2f:ed:
b7:a9:9e:59:0f:5e:f7:88:68:52:4f:dc:05:97:f8:
1f:02:73:b7:6e:fe:86:c3:b3:a2:20:a5:d4:36:bc:
da:d1:14:ca:78:f5:20:75:c9:a7:0f:ea:1d:c1:67:
6d:d0:56:01:05:5e:f5:8b:44:0c:c1:55:88:24:2a:
36:e2:89:7e:6a:8a:eb:42:67:44:7e:e9:01:f4:d6:
a3:57:e0:2d:5c:5e:ba:4e:47:71:e6:dc:fb:c2:19:
86:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:02:41:EC:4F:C5:C0:CF:A2:0E:6E:E8:90:B6:16:F5:84:01:14:76
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/NwJB7E_FwM-iDm7okLYW9YQBFHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.123.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:5f:6f:2d:28:4b:42:09:bb:66:3b:16:f9:d0:75:9b:d0:2a:
a4:50:be:be:7b:9e:76:74:15:ac:ea:6d:f3:e5:3e:19:02:52:
38:d8:8f:b7:01:10:0d:3d:17:94:7e:3c:f4:db:b2:0d:78:16:
e7:37:f7:b0:0b:10:6d:10:78:3f:86:b3:82:63:12:8d:c3:03:
7e:3b:58:86:2f:c5:0c:a5:43:3d:88:67:b4:c5:c6:bb:73:0f:
4d:c3:62:8f:44:c7:db:e4:b3:94:48:42:c4:01:3a:9a:13:94:
51:0b:ae:6f:1d:b5:0a:51:32:be:4b:ea:bc:46:bd:01:be:9e:
eb:21:f8:5e:19:df:2b:d8:f1:6e:cb:e9:90:95:6f:00:2a:56:
67:a0:b8:09:01:13:38:70:95:72:4b:13:67:f1:1a:63:97:97:
1e:31:32:7c:b6:fa:8f:09:dc:f0:c1:b6:c9:df:67:06:af:76:
db:72:fc:54:20:d5:34:fb:29:93:aa:ae:56:69:bd:39:d7:f5:
dd:4c:87:22:58:e0:b3:33:db:12:76:67:d7:7b:f9:9e:e1:bd:
55:f9:1c:60:4a:7a:3d:f8:f2:e5:59:55:5e:cf:d3:a0:49:3a:
fc:63:ba:3d:d3:20:63:07:b4:39:be:ee:5c:4a:d2:53:39:ca:
cf:8e:6a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:40 2025 by rpki-client