Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3132382e302f32342d3234203d3e203538303631.roa
File: 39312e3132342e3132382e302f32342d3234203d3e203538303631.roa (raw, json)
Hash identifier: /hkNQpBTwc19UPzy+UMmnQBIE0EmIHQ0ZhBVsWHpqrs=
Subject key identifier: D4:53:A2:57:36:67:5F:76:F5:12:FB:5E:09:9C:BD:B9:7A:02:9E:CA
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 157F1B314FAA9FB9120DF9B08B48DC372EEC709B
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3132382e302f32342d3234203d3e203538303631.roa
Signing time: Tue 20 Feb 2024 14:45:02 +0000
ROA not before: Tue 20 Feb 2024 14:40:02 +0000
ROA not after: Tue 18 Feb 2025 14:45:02 +0000
asID: 58061
IP address blocks: 91.124.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:7f:1b:31:4f:aa:9f:b9:12:0d:f9:b0:8b:48:dc:37:2e:ec:70:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 20 14:40:02 2024 GMT
Not After : Feb 18 14:45:02 2025 GMT
Subject: CN=D453A25736675F76F512FB5E099CBDB97A029ECA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a5:b8:5b:75:76:4a:02:f0:43:4b:3a:93:3c:
70:57:84:79:a6:7c:03:f1:e5:94:e4:7b:10:b2:78:
a0:f8:bf:14:5f:e7:67:0d:6a:5f:78:05:a5:07:eb:
64:41:e1:8a:c6:b0:67:52:ba:17:03:5e:e2:46:bd:
52:ae:b7:90:37:0b:26:8f:59:99:05:66:97:d2:4d:
2f:3a:31:76:b1:48:f0:68:b8:24:92:b0:8a:54:50:
d0:c5:6e:9e:c7:f4:8a:c9:15:bf:9f:0a:3c:1f:38:
88:1e:41:9e:9a:01:60:d3:31:42:2e:26:34:0d:03:
ec:38:7f:5e:7d:1a:ba:cf:84:08:23:f5:16:7b:4f:
90:5e:1d:b1:b9:5f:fa:66:23:1c:c7:8d:42:33:49:
a0:00:ba:e5:c1:e8:00:8d:61:3e:71:c7:74:0f:35:
fa:19:5d:77:d2:2f:e5:d1:fe:58:f3:db:67:43:0c:
f0:71:50:a0:5a:8b:5c:b6:46:82:0e:75:70:fa:79:
ac:6c:eb:d1:c3:3d:55:b9:91:6d:e2:8d:40:30:52:
53:4c:7f:a1:86:6d:d6:d1:dd:a2:a3:f3:07:2d:b5:
1c:56:e7:3e:47:3b:ea:6e:98:6d:f7:d6:c8:45:07:
24:ea:3c:92:23:99:fe:c6:54:b4:e7:93:23:70:36:
f0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:53:A2:57:36:67:5F:76:F5:12:FB:5E:09:9C:BD:B9:7A:02:9E:CA
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3132382e302f32342d3234203d3e203538303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.128.0/24
Signature Algorithm: sha256WithRSAEncryption
60:c5:54:06:9c:17:dc:91:68:a2:c2:50:67:3a:b5:9f:ec:e1:
e2:d2:1e:ce:44:20:68:67:9a:dd:33:00:8f:6b:1a:55:61:5f:
c5:ad:d4:73:31:82:e2:6a:4a:33:ab:8a:e4:1d:24:13:b4:3b:
2c:6c:7e:19:ee:b8:42:88:74:e3:6a:52:38:bc:80:a1:f0:92:
bf:39:a5:51:be:08:c0:62:02:43:32:48:45:2d:60:46:a9:43:
1d:35:1d:e0:4f:79:c0:f1:bd:ea:76:5f:c2:9c:08:fb:36:f3:
b7:97:0b:e7:b0:f0:11:60:a7:c1:e8:86:f9:b2:e1:15:b1:d8:
0e:36:75:0c:90:a0:3e:e6:26:9e:71:09:f3:eb:78:62:98:bc:
7c:d2:d8:0b:6a:f8:f0:8f:5c:a3:9d:fa:fb:99:10:76:50:d1:
b7:27:51:c6:f8:7b:bc:4e:e3:43:85:40:d4:66:5d:d4:cb:fc:
17:58:e1:6c:a7:77:ca:66:c2:97:3e:f6:32:43:d2:cb:42:12:
20:74:6d:05:ed:d2:31:54:cb:8a:f6:23:fe:75:aa:41:ad:8c:
87:9a:92:54:91:a7:23:64:69:e2:78:7d:d3:0b:20:c6:87:fe:
51:83:89:a4:57:db:87:d5:47:43:86:75:86:fd:2a:63:f4:76:
94:95:b5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:18 2024 by rpki-client on console-fra.rpki-client.org