Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3133342e302f32342d3234203d3e2037303138.roa
File: 39312e3132342e3133342e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier: YaYixI9c2w/wJeJl4Kn52KThbPhUZejcvwAAkG32m0s=
Subject key identifier: 1E:87:D5:F6:A8:3C:CF:08:77:AA:CE:C3:D2:EF:1A:1B:C3:95:64:49
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3BA2401EC6250F8884A1940C9720175E7BFB6432
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3133342e302f32342d3234203d3e2037303138.roa
Signing time: Thu 22 Feb 2024 06:37:43 +0000
ROA not before: Thu 22 Feb 2024 06:32:43 +0000
ROA not after: Thu 20 Feb 2025 06:37:43 +0000
asID: 7018
IP address blocks: 91.124.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:a2:40:1e:c6:25:0f:88:84:a1:94:0c:97:20:17:5e:7b:fb:64:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 22 06:32:43 2024 GMT
Not After : Feb 20 06:37:43 2025 GMT
Subject: CN=1E87D5F6A83CCF0877AACEC3D2EF1A1BC3956449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:55:df:4e:47:3c:f5:b6:f5:a6:6f:3a:52:b9:
9a:3c:f1:34:a4:b2:c1:9e:43:d2:17:a3:c1:eb:75:
c5:63:82:04:db:4e:58:84:84:77:79:79:60:ee:83:
ad:6a:bf:87:ba:06:8b:7e:22:14:b9:8c:a3:87:38:
6c:6a:6b:f9:bf:53:ee:89:f5:f1:03:d5:41:b0:20:
99:2f:30:4b:06:c0:16:f2:e3:f1:29:8a:c3:62:d9:
88:5c:1f:b6:ae:0c:82:9e:70:70:96:c4:ed:88:53:
1e:6c:99:61:f6:2e:3c:e7:eb:f3:0b:7b:e0:4e:51:
5f:e2:59:9d:59:4a:2e:dd:5e:9e:2a:51:70:6a:71:
eb:41:b8:98:35:84:8f:03:d6:b3:31:ee:e8:a5:6b:
67:f0:85:13:92:49:da:9c:36:1a:60:09:6d:0f:b4:
70:ed:cb:a0:bc:53:7b:28:ca:c2:da:aa:12:b4:e2:
69:d2:ce:61:d8:21:63:dc:7f:f4:18:ba:65:b4:9c:
6f:ac:3a:7a:f4:a2:33:eb:8d:05:ba:47:6a:e7:46:
06:44:b6:21:f5:5b:fc:16:07:a3:44:93:4b:e4:d5:
f6:68:2c:a3:21:bb:d6:b0:b8:3c:bf:a8:b2:f5:e4:
ab:8c:89:20:c1:7e:8f:51:7a:e9:a2:95:76:a4:89:
cc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:87:D5:F6:A8:3C:CF:08:77:AA:CE:C3:D2:EF:1A:1B:C3:95:64:49
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3133342e302f32342d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.134.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:e3:96:41:79:74:9d:fa:f7:c1:40:a5:69:7b:80:ae:da:0f:
21:25:f9:48:b1:bf:06:0d:2b:e2:8e:f9:d1:b4:54:25:3d:b8:
77:f0:c9:85:81:28:a7:21:00:72:56:91:72:0e:f5:80:28:de:
3c:3b:28:e4:a9:dd:ef:d5:33:82:9b:89:53:ab:4b:02:13:22:
96:a7:76:54:f2:87:3a:1f:ac:89:eb:b9:4b:3b:7c:ad:45:41:
ea:40:67:e7:a2:56:f1:b4:0c:1e:97:ce:3f:47:3c:19:47:12:
b1:e7:b1:27:ee:71:bf:98:e8:08:ce:58:4b:b4:13:27:4f:ea:
f6:c6:39:89:83:b6:c1:c1:46:d2:c7:12:09:46:ba:63:b1:de:
ab:34:1d:61:52:b2:29:ed:f6:17:ed:5a:4a:a3:70:0f:00:27:
6b:30:c0:1e:e0:85:31:25:16:64:81:be:6d:a9:49:90:25:f4:
23:ac:66:cc:28:fc:1e:ff:2b:f8:c3:be:50:e7:70:93:dd:dc:
f2:c8:bc:5b:57:ca:65:be:63:b2:bd:13:e2:ad:20:8c:de:23:
74:26:d9:e3:b7:4b:b0:e6:f4:36:b9:42:fa:dc:63:12:b4:28:
1e:15:f3:39:fa:7c:6b:56:c2:aa:1d:39:9b:62:72:da:f0:74:
ef:24:a5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:37 2025 by rpki-client