Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/9vCvAYWCfE2GDsonveAsGYFHxUw.roa
File: 9vCvAYWCfE2GDsonveAsGYFHxUw.roa (raw, json)
Hash identifier: YXyVH3K6KojAXQb+gsR2s2vufjgzT/75Nf9dZQtIJ/k=
Subject key identifier: F6:F0:AF:01:85:82:7C:4D:86:0E:CA:27:BD:E0:2C:19:81:47:C5:4C
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01891C8C56DC352C442CE50C26F4031525A3
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/9vCvAYWCfE2GDsonveAsGYFHxUw.roa
Signing time: Mon 03 Jul 2023 16:18:26 +0000
ROA not before: Mon 03 Jul 2023 16:18:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397563
IP address blocks: 78.142.241.0/24 maxlen: 24
203.0.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1c:8c:56:dc:35:2c:44:2c:e5:0c:26:f4:03:15:25:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jul 3 16:18:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6f0af0185827c4d860eca27bde02c198147c54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:27:f3:8b:d0:43:a1:96:6c:e6:b7:a7:e2:10:
a4:df:3a:af:aa:90:c5:a9:05:4d:92:c8:b9:be:4f:
35:1c:8d:26:7e:df:8c:91:b9:93:26:83:ff:ab:88:
8f:9c:f4:fe:5a:b3:c2:02:94:25:be:12:65:58:71:
24:3d:22:06:f3:01:e4:18:6f:e8:78:c6:04:46:3d:
c4:8e:07:2f:79:bb:d2:3d:ce:73:b3:86:fc:d8:e1:
e9:c8:91:ea:15:b7:55:33:51:73:c3:94:19:f2:84:
e6:15:99:b1:29:0b:a6:5b:49:f7:d5:13:1f:38:57:
d1:d2:af:39:a9:08:8f:a3:79:8e:05:01:ae:56:d4:
38:e0:9f:00:ab:56:ce:14:14:6b:60:b5:39:df:c8:
30:a6:40:38:ca:cc:d8:34:be:f2:48:7d:9a:de:71:
2d:1a:31:3e:37:ce:69:fb:95:9e:e3:7f:9f:45:09:
ab:02:c6:09:33:db:48:5e:2d:ca:56:9b:1e:b8:f2:
67:e6:36:d5:72:78:ae:1a:6e:5a:12:3d:f8:ea:f5:
a9:77:09:77:0e:e6:0d:29:fb:08:be:db:0f:ca:43:
92:83:50:2b:12:43:37:68:93:4d:37:bd:a0:64:df:
6c:a5:87:24:3f:bf:df:fa:83:fe:ef:56:9d:8f:78:
19:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F0:AF:01:85:82:7C:4D:86:0E:CA:27:BD:E0:2C:19:81:47:C5:4C
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/9vCvAYWCfE2GDsonveAsGYFHxUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.241.0/24
203.0.9.0/24
Signature Algorithm: sha256WithRSAEncryption
80:e9:f6:8e:ff:68:61:a1:88:2d:56:05:b8:8f:19:ff:0c:53:
22:b6:ef:8f:72:51:db:69:08:bc:2e:02:06:2e:88:be:73:0f:
dc:05:2a:ac:da:a6:09:f9:d3:9f:d4:0e:29:bc:05:02:7b:0c:
49:09:d5:3e:49:bf:f0:83:1d:c1:52:20:e1:a0:6b:df:86:c9:
89:ab:6a:dc:98:c5:92:f4:7e:57:fc:a5:20:5c:e1:3c:59:b1:
df:92:fa:3e:e2:f7:db:91:a7:0a:5a:80:12:af:80:1c:89:26:
bc:dc:ec:1d:54:a3:53:67:7c:ba:7d:57:9a:fc:b2:e6:ea:64:
91:14:aa:5d:b2:5e:79:94:c0:72:54:e8:8e:b7:9b:af:01:27:
72:a4:3e:85:3a:85:60:5e:84:c2:f9:2c:95:ac:73:d4:81:47:
67:e2:07:b6:15:6a:1c:74:a9:33:d6:1b:e3:f8:9c:31:02:3e:
02:8a:60:7b:26:bd:57:71:38:72:70:94:ba:6c:78:62:7e:87:
9e:f5:c1:ec:c1:42:22:ad:61:af:b7:67:a9:44:c9:f0:2a:96:
cc:f8:4f:8b:d9:a8:d2:8d:d0:63:14:15:7f:69:75:cc:9e:ea:
e8:9f:46:6b:c9:58:71:55:be:5f:2c:31:4c:1a:77:ee:44:ef:
b3:27:f4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 5 18:31:12 2023 by rpki-client on console-fra.rpki-client.org