Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3133322e302f32342d3234203d3e203233363739.roa
File: 39312e3132342e3133322e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier: gbX/42QJg3Mxg/4bD5bHHjF7/mStyAnSNDEIo33nlv4=
Subject key identifier: E8:DA:1E:33:EB:DC:66:25:EB:33:B8:87:25:D8:46:E2:59:E7:37:7C
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 4DDABAA56B94144A17EDF2301618D03BF80604C3
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3133322e302f32342d3234203d3e203233363739.roa
Signing time: Tue 20 Feb 2024 14:51:26 +0000
ROA not before: Tue 20 Feb 2024 14:46:26 +0000
ROA not after: Tue 18 Feb 2025 14:51:26 +0000
asID: 23679
IP address blocks: 91.124.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:da:ba:a5:6b:94:14:4a:17:ed:f2:30:16:18:d0:3b:f8:06:04:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 20 14:46:26 2024 GMT
Not After : Feb 18 14:51:26 2025 GMT
Subject: CN=E8DA1E33EBDC6625EB33B88725D846E259E7377C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1e:34:e6:5e:70:d3:35:ad:20:b8:45:ca:fa:
e1:9f:4b:a5:0c:d6:18:dd:9a:0f:5b:5a:f7:20:ea:
1f:ce:0b:3c:0b:50:82:ce:f0:41:ca:4b:d6:7b:45:
3b:10:42:eb:2c:20:c5:01:15:64:b9:49:eb:de:2a:
5d:ef:18:93:22:41:95:9b:d5:26:5b:60:d8:d8:c2:
cd:6b:84:39:55:0d:da:71:51:0c:36:b3:c8:58:16:
fb:3b:84:53:54:f2:c6:e0:4b:22:3b:ef:94:e9:b5:
e1:cc:d8:38:3d:ab:34:a1:ef:8a:5f:ab:0e:78:cd:
06:73:70:d7:02:db:30:43:aa:6b:7c:f3:8e:30:63:
6b:10:8e:8a:f8:41:4c:fb:84:e8:24:0d:27:04:25:
c4:32:ca:d5:16:50:8e:0c:8e:c0:37:c4:22:37:f7:
68:57:40:c8:6d:4f:c2:2e:26:fe:6a:ac:3c:76:e4:
39:d7:c4:6a:0d:c6:90:ad:3d:ea:dc:0e:64:24:5a:
36:f0:5b:3c:de:9a:d2:af:f1:22:02:05:8b:cd:32:
b6:a7:a9:35:d8:f9:ce:3d:ec:2f:b4:bb:0d:f2:39:
07:7c:f2:6d:74:10:c0:7b:0c:12:30:ac:76:24:bd:
c7:67:ce:27:a0:c6:72:14:ac:83:83:48:c6:c2:de:
d8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DA:1E:33:EB:DC:66:25:EB:33:B8:87:25:D8:46:E2:59:E7:37:7C
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3133322e302f32342d3234203d3e203233363739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.132.0/24
Signature Algorithm: sha256WithRSAEncryption
89:b4:bb:2b:6a:41:44:61:d4:b2:79:a3:cc:17:29:e4:6e:79:
b2:ec:00:48:73:fb:47:fc:e1:b4:18:e2:d9:6c:0f:00:14:e9:
32:11:19:f3:1e:77:5f:b6:d1:e9:7e:28:3b:67:0d:3a:5d:08:
fc:b6:f9:05:4b:d3:b0:97:e4:b3:bd:7c:dd:12:9a:35:18:f3:
69:e7:07:2a:b4:36:88:ec:ed:13:db:46:43:8a:40:51:e3:d3:
b4:c9:4f:7d:aa:1e:ea:3b:35:cd:45:b0:08:9d:3d:de:5e:fa:
24:81:19:e7:c8:6b:40:b2:4c:8f:d0:59:cc:7d:fb:c9:b7:b9:
f4:2a:6e:72:67:fa:4c:2d:1c:62:09:e7:73:5a:fc:55:b4:45:
1f:2d:03:b5:5c:28:9b:69:de:c8:4e:73:3a:b1:96:93:f9:e1:
6d:66:b9:ba:14:fc:ae:95:6e:04:24:bc:94:e0:aa:88:5b:c9:
ff:ed:24:67:62:eb:81:dc:7a:3e:af:c4:b6:4c:17:63:b3:9c:
53:0f:9a:d2:76:c0:5e:92:2d:76:3b:1d:3b:11:a5:b5:c8:e9:
5d:60:44:5a:32:dd:18:9d:e9:fd:6f:85:39:38:68:4c:e5:52:
3e:37:5d:a2:7e:90:47:01:dc:10:00:ce:bb:b7:cf:5a:f8:0b:
97:68:6d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:18 2024 by rpki-client on console-fra.rpki-client.org