Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/R9B_IiE-1kZwHKC64avZEDHChC8.roa
File: R9B_IiE-1kZwHKC64avZEDHChC8.roa (raw, json)
Hash identifier: tBxlpr6pDClnB/27kG6T2YVDBqJO197xGbPVCBXUkKU=
Subject key identifier: 47:D0:7F:22:21:3E:D6:46:70:1C:A0:BA:E1:AB:D9:10:31:C2:84:2F
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018C3F596FEC28EBDC2E40249D3E8CD9864D
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/R9B_IiE-1kZwHKC64avZEDHChC8.roa
Signing time: Wed 06 Dec 2023 13:37:55 +0000
ROA not before: Wed 06 Dec 2023 13:37:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 78.142.242.0/23 maxlen: 24
78.142.241.0/24 maxlen: 24
203.0.9.0/24 maxlen: 24
203.0.8.0/24 maxlen: 24
223.27.114.0/24 maxlen: 24
103.212.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3f:59:6f:ec:28:eb:dc:2e:40:24:9d:3e:8c:d9:86:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Dec 6 13:37:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47d07f22213ed646701ca0bae1abd91031c2842f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b7:61:65:19:d7:e6:26:0b:21:81:b2:f4:01:
ec:e3:e4:2f:a1:6b:85:ee:3c:d1:c7:0f:6e:ea:5f:
e6:38:63:f0:bc:44:7a:0c:b2:cd:f1:44:0c:4a:35:
70:0a:c4:29:2f:a9:8b:1a:bd:83:e7:d4:8b:2d:0c:
8e:4c:53:79:4d:3e:d4:75:76:82:ab:f5:0c:41:0d:
43:cd:0f:48:4f:c3:05:4c:5f:4d:19:db:9e:4a:59:
2c:fe:88:76:10:da:1c:03:b9:50:42:50:b0:8b:b2:
11:48:ef:23:2f:22:db:d9:36:0a:7b:5f:e5:d9:a3:
39:44:fe:dd:9c:1b:3c:71:8e:e2:77:e8:7d:f3:07:
fc:88:16:f5:28:d8:e7:45:81:2f:7d:f1:a3:09:b4:
53:1a:c3:0d:c8:99:ae:71:21:ee:16:db:21:48:75:
80:c8:38:77:a9:92:d8:ce:39:ba:bb:63:e3:1b:8a:
5d:c7:14:1a:28:ef:dc:79:7c:fb:74:5a:84:59:b5:
e2:1c:cf:93:14:13:ca:9c:09:c1:9f:a7:e3:7d:55:
82:ea:31:87:75:cd:4c:87:13:4d:da:a9:d7:c7:5f:
57:78:da:b2:4f:85:a5:39:76:2b:c7:9a:9f:f1:8b:
b2:f2:2d:f6:9e:26:98:50:e9:65:43:79:ac:80:22:
88:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D0:7F:22:21:3E:D6:46:70:1C:A0:BA:E1:AB:D9:10:31:C2:84:2F
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/R9B_IiE-1kZwHKC64avZEDHChC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.241.0-78.142.243.255
103.212.81.0/24
203.0.8.0/23
223.27.114.0/24
Signature Algorithm: sha256WithRSAEncryption
23:cb:fc:47:e2:54:84:d7:04:73:1d:95:64:92:94:0a:13:43:
7c:7b:55:4a:38:3a:d8:bb:54:43:e5:1f:90:26:24:f1:cc:99:
e1:ff:d7:61:8e:66:39:37:37:19:96:a4:26:0a:f9:39:ed:6c:
36:44:89:b3:27:02:1a:5d:87:b4:ca:d0:93:1c:07:d3:d4:47:
56:c6:42:b0:9c:1c:cb:f6:0a:99:9d:e7:cc:81:ba:52:81:3d:
4b:cf:5d:92:1e:c1:35:af:3f:9a:67:65:4c:55:fb:a4:d7:97:
ca:22:66:c5:a5:7e:26:04:c5:d7:fd:9c:a4:bc:36:e6:48:2f:
29:92:8e:56:9e:0b:da:1c:3e:d1:7e:3d:36:72:68:cd:1f:3e:
bb:9a:eb:73:85:bd:27:9a:47:f8:17:f5:04:42:4a:13:c4:d2:
35:b8:be:7f:bd:46:b2:23:6a:e6:39:48:9b:9c:b7:74:28:e5:
44:88:3c:8e:03:26:7d:2b:44:0c:9d:c1:c5:a6:b5:2f:d0:60:
e3:17:fc:37:bc:4f:64:e4:be:f4:1f:e1:89:c1:ac:4b:92:ab:
37:93:3a:e1:e6:39:fd:8b:95:a5:08:de:e8:38:c3:02:63:60:
e4:5a:38:49:9e:47:c2:98:22:97:a8:ae:48:6a:7a:dd:2f:34:
af:7b:4d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 12 19:37:07 2023 by rpki-client on console-fra.rpki-client.org