Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3133332e302f32342d3234203d3e20383334.roa
File: 39312e3132342e3133332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: g6POlopd75pasoELDlCybcLzBTVsF590qY5//9dRuts=
Subject key identifier: BA:BD:01:7E:90:0B:BD:E8:FE:F2:6B:68:71:C4:46:F0:8B:76:11:29
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2D2888433299E598E9AAFE047E79335212DD14E1
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3133332e302f32342d3234203d3e20383334.roa
Signing time: Thu 22 Feb 2024 06:40:39 +0000
ROA not before: Thu 22 Feb 2024 06:35:39 +0000
ROA not after: Thu 20 Feb 2025 06:40:39 +0000
asID: 834
IP address blocks: 91.124.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:28:88:43:32:99:e5:98:e9:aa:fe:04:7e:79:33:52:12:dd:14:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 22 06:35:39 2024 GMT
Not After : Feb 20 06:40:39 2025 GMT
Subject: CN=BABD017E900BBDE8FEF26B6871C446F08B761129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:35:a1:e1:75:1b:63:09:f8:94:e4:b7:b7:a3:
9e:6e:03:05:68:ab:ef:0b:c9:05:ff:d1:3e:d5:83:
08:73:1e:ef:97:be:e5:d9:83:9d:f3:cf:9f:fc:63:
10:9c:00:c4:b0:c3:6c:da:1d:1d:df:b3:99:9e:58:
c4:4f:49:fa:a7:91:a0:cc:83:57:4c:21:98:82:4b:
52:ab:bb:35:62:c8:6f:a1:b4:e9:53:dc:62:cf:09:
84:b1:0a:05:fb:36:9c:c1:59:bf:e9:23:66:92:23:
dc:5b:4f:81:fe:de:62:01:6e:b4:4b:d6:37:96:dc:
00:5d:a6:45:2f:45:21:51:5d:92:b5:4f:d3:67:12:
8d:2c:b4:74:eb:85:04:0a:ce:e4:81:57:d0:d6:92:
ba:4d:6e:7a:0e:33:fd:52:e1:54:9d:f4:d8:e5:42:
c1:74:d4:de:b3:e5:4f:7a:0c:41:5f:76:6a:0f:28:
ba:d3:4d:16:aa:c3:e8:7b:fc:b5:eb:a3:00:1a:09:
1d:8e:bf:82:3c:46:c2:c8:ed:f3:3e:a2:c0:9e:06:
52:10:5e:f0:30:60:34:88:91:92:a9:20:3a:62:68:
ad:c3:d6:34:42:71:00:69:38:bf:1b:c7:2e:98:d7:
e7:d3:eb:09:64:4f:67:00:34:62:e0:62:2f:69:ea:
f5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BD:01:7E:90:0B:BD:E8:FE:F2:6B:68:71:C4:46:F0:8B:76:11:29
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3133332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.133.0/24
Signature Algorithm: sha256WithRSAEncryption
75:18:62:c8:83:8e:75:9b:3d:60:1f:5c:cb:f4:a7:19:eb:71:
d0:7f:05:3b:d2:61:28:04:c6:7c:e8:1a:a0:13:0d:e5:6d:8a:
95:88:62:24:07:97:74:4d:ea:9e:a1:ae:85:b2:91:86:3f:6f:
52:70:e2:91:77:22:33:84:20:3c:34:9b:c6:58:82:0f:10:5c:
c8:0d:2e:77:27:62:25:c8:31:53:1e:66:cf:10:e5:26:96:9f:
fd:95:27:f2:be:0f:28:e9:93:27:d6:57:55:17:9d:b4:ad:00:
ef:fa:fe:38:40:d3:3a:fd:79:50:2a:8c:07:ab:65:b5:c7:8b:
74:a0:dd:91:41:dc:0d:7f:1b:53:4c:e0:cf:aa:5f:b9:e2:1a:
1e:67:fb:50:28:a9:2b:ec:e2:f3:1a:9d:a6:ae:ff:d1:de:dd:
93:e9:04:50:21:ef:7f:fa:0f:40:2e:22:0b:ac:54:63:af:03:
6f:2f:c6:cc:b3:89:27:9b:27:25:6f:76:92:52:85:fe:9f:39:
fe:56:6e:18:ef:e7:97:57:9f:01:c6:b9:c0:9f:5a:aa:62:24:
d2:b7:14:31:a6:0a:86:f1:71:3b:a9:32:5f:ad:98:97:f7:4a:
18:5e:31:e4:40:56:b5:72:c9:be:25:6c:0d:72:7e:ad:ff:c9:
1e:b9:0b:8a
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIULSiIQzKZ5Zjpqv4EfnkzUhLdFOEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNDAyMjIwNjM1MzlaFw0yNTAyMjAwNjQwMzlaMDMxMTAvBgNV
BAMTKEJBQkQwMTdFOTAwQkJERThGRUYyNkI2ODcxQzQ0NkYwOEI3NjExMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeNaHhdRtjCfiU5Le3o55uAwVo
q+8LyQX/0T7VgwhzHu+XvuXZg53zz5/8YxCcAMSww2zaHR3fs5meWMRPSfqnkaDM
g1dMIZiCS1KruzViyG+htOlT3GLPCYSxCgX7NpzBWb/pI2aSI9xbT4H+3mIBbrRL
1jeW3ABdpkUvRSFRXZK1T9NnEo0stHTrhQQKzuSBV9DWkrpNbnoOM/1S4VSd9Njl
QsF01N6z5U96DEFfdmoPKLrTTRaqw+h7/LXrowAaCR2Ov4I8RsLI7fM+osCeBlIQ
XvAwYDSIkZKpIDpiaK3D1jRCcQBpOL8bxy6Y1+fT6wlkT2cANGLgYi9p6vWhAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUur0BfpALvej+8mtoccRG8It2ESkwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUt
NDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThmNmI0LzAvMzkzMTJlMzEzMjM0MmUzMTMz
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABbfIUw
DQYJKoZIhvcNAQELBQADggEBAHUYYsiDjnWbPWAfXMv0pxnrcdB/BTvSYSgExnzo
GqATDeVtipWIYiQHl3RN6p6hroWykYY/b1Jw4pF3IjOEIDw0m8ZYgg8QXMgNLncn
YiXIMVMeZs8Q5SaWn/2VJ/K+DyjpkyfWV1UXnbStAO/6/jhA0zr9eVAqjAerZbXH
i3Sg3ZFB3A1/G1NM4M+qX7niGh5n+1AoqSvs4vManaau/9He3ZPpBFAh73/6D0Au
IgusVGOvA28vxsyziSebJyVvdpJShf6fOf5Wbhjv55dXnwHGucCfWqpiJNK3FDGm
CobxcTupMl+tmJf3ShheMeRAVrVyyb4lbA1yfq3/yR65C4o=
-----END CERTIFICATE-----
Generated at Fri Feb 23 13:38:38 2024 by rpki-client on console-ams.rpki-client.org