Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3133382e302f32342d3234203d3e203233363739.roa
File: 39312e3132342e3133382e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier: pNAI5eiNKR6iPW6YFSzsS35OGvHU93skWpSF9x2kY+E=
Subject key identifier: 29:25:30:6E:9F:3D:5E:18:F3:6C:CB:41:86:4C:3C:6A:D5:AF:BB:DB
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 6E7B58C1C7ABDCAC745E63B2F18B0F3ECDDBF279
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3133382e302f32342d3234203d3e203233363739.roa
Signing time: Tue 20 Feb 2024 14:51:55 +0000
ROA not before: Tue 20 Feb 2024 14:46:55 +0000
ROA not after: Tue 18 Feb 2025 14:51:55 +0000
asID: 23679
IP address blocks: 91.124.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:7b:58:c1:c7:ab:dc:ac:74:5e:63:b2:f1:8b:0f:3e:cd:db:f2:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 20 14:46:55 2024 GMT
Not After : Feb 18 14:51:55 2025 GMT
Subject: CN=2925306E9F3D5E18F36CCB41864C3C6AD5AFBBDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d0:0d:26:07:53:52:a1:eb:11:c5:f2:30:b8:
85:04:76:b6:fb:dc:6e:16:5c:6f:fb:a3:2b:90:fd:
5d:5a:6a:ad:35:72:8b:38:55:9c:bb:a5:02:aa:0f:
e6:eb:fd:dd:bb:5a:23:40:d9:1b:f8:02:2d:27:a0:
d8:4e:3e:ed:3e:1a:91:fd:e5:a1:d3:0d:64:03:3c:
bc:dd:82:bc:bf:e9:0b:93:f0:81:c8:23:3f:ab:56:
5b:5c:f4:d5:9f:f1:83:5a:2f:54:eb:4a:51:dc:76:
39:86:a7:67:d5:f9:20:ae:24:00:a8:68:c0:dc:7f:
e5:63:2a:d3:1f:d7:50:e9:00:94:55:71:c3:aa:fb:
4c:c6:b2:78:cf:ff:b9:a9:86:91:70:ab:fc:bd:cc:
be:80:fd:cc:20:69:50:29:63:85:60:25:31:c4:dd:
c0:94:0b:6d:7a:0d:4c:2c:54:63:30:82:ec:d8:c1:
28:54:e2:ef:45:d3:2f:af:d6:3d:95:76:f3:48:f4:
54:98:79:97:6a:70:79:39:de:47:d5:93:44:15:44:
0a:d0:e7:80:1e:d8:35:fa:4f:22:ee:da:74:d9:82:
0e:30:f4:c5:1c:63:db:81:28:36:c2:5c:d5:a4:01:
82:8b:6a:5f:df:4b:d8:54:52:98:f4:f4:04:7f:b2:
0e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:25:30:6E:9F:3D:5E:18:F3:6C:CB:41:86:4C:3C:6A:D5:AF:BB:DB
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3133382e302f32342d3234203d3e203233363739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.138.0/24
Signature Algorithm: sha256WithRSAEncryption
37:35:a6:64:9e:6e:21:ed:2a:e9:0a:fc:ea:ba:1e:dd:d7:1c:
b9:11:cc:30:03:85:9b:49:ee:12:66:79:9d:d9:58:7b:b2:3b:
34:03:07:de:48:31:df:d3:3a:a2:61:8f:a0:14:22:b8:9f:27:
7b:7e:1b:93:cc:6e:2d:c3:de:60:6f:30:62:22:c2:26:7a:30:
f9:27:d3:0c:58:6e:8b:57:09:8a:e9:2c:f8:68:b1:2f:61:86:
c4:16:c9:ec:0b:cc:1e:77:ac:f4:b5:33:0b:95:57:6f:9f:4f:
ab:4e:78:7d:d6:af:77:a9:00:5c:0c:2d:b5:b1:a0:ac:27:be:
49:36:6d:58:44:93:f7:86:18:cd:d5:66:dc:fb:1c:62:10:23:
df:9d:84:28:ce:aa:80:86:e8:f4:7c:eb:56:54:35:5f:15:14:
d8:01:7c:32:ee:f8:d4:9c:c2:a9:76:cb:bc:50:06:1e:45:e2:
bf:4d:ef:61:9b:fc:a0:cd:b0:d1:ce:5a:e0:68:00:eb:20:4e:
3b:a4:67:5d:5f:a6:80:78:a7:df:fb:9d:e0:43:4f:fe:6c:5e:
c4:03:c5:a4:9b:af:f2:0b:be:29:96:c7:e5:b5:65:15:f2:b5:
a3:48:34:db:24:34:a9:6b:3d:d2:a3:4e:43:76:15:a2:0f:66:
08:cb:d7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 13:38:38 2024 by rpki-client on console-ams.rpki-client.org