Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3134302e302f32322d3234203d3e20383334.roa
File: 39312e3132342e3134302e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: hI00S271KXgFBipIC4dqYAtunBPBXiyUEhD9IeQ8Pzg=
Subject key identifier: 99:4E:39:59:4D:06:AC:AC:DB:CC:52:84:B9:5E:7C:59:31:C4:2C:7B
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 44202EC9463D5A3CE83BCE7AEF46D6962A785785
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3134302e302f32322d3234203d3e20383334.roa
Signing time: Thu 22 Feb 2024 06:40:38 +0000
ROA not before: Thu 22 Feb 2024 06:35:38 +0000
ROA not after: Thu 20 Feb 2025 06:40:38 +0000
asID: 834
IP address blocks: 91.124.140.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:20:2e:c9:46:3d:5a:3c:e8:3b:ce:7a:ef:46:d6:96:2a:78:57:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 22 06:35:38 2024 GMT
Not After : Feb 20 06:40:38 2025 GMT
Subject: CN=994E39594D06ACACDBCC5284B95E7C5931C42C7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:80:68:56:ca:fc:fc:4d:45:71:90:9b:18:ff:
3c:08:9d:9b:40:dc:3e:eb:68:0c:b8:1e:c5:1d:45:
8a:ea:3c:ca:99:92:3e:ca:26:57:8f:d3:83:f7:3f:
39:50:84:51:aa:95:00:b2:98:31:39:5a:b0:8f:1e:
3f:fd:aa:a2:5d:28:ba:cb:c6:76:ae:86:8b:ee:22:
45:67:6b:8c:a1:b6:1c:20:11:f4:fb:f7:63:08:81:
f4:61:cd:75:10:7e:e7:ae:49:72:80:d4:6c:58:35:
5a:61:d5:42:cb:e1:17:e0:6a:6a:0a:e6:d6:27:0c:
2b:d5:3c:cd:a4:57:26:30:ef:8f:a4:9a:19:73:32:
2b:e8:df:eb:a7:6f:7f:d1:7e:79:30:85:97:d1:39:
9b:bb:7b:b9:00:f8:fd:0a:de:84:27:1f:5b:af:b9:
2c:0e:fb:e5:5a:f7:da:f3:40:f6:dc:1f:00:70:64:
66:cf:8c:33:e3:d2:b4:3b:04:18:0d:d0:60:c8:7c:
be:e7:a4:71:0f:d0:1e:af:10:90:bb:f1:0a:52:f1:
09:43:d6:da:c5:53:17:a1:77:2f:a0:be:cc:df:01:
a1:4b:8e:77:36:e0:33:0c:0d:ef:43:b4:e7:27:f3:
cd:28:10:9f:48:87:be:f3:b0:96:9c:6f:a2:62:e9:
9d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:4E:39:59:4D:06:AC:AC:DB:CC:52:84:B9:5E:7C:59:31:C4:2C:7B
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3134302e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.140.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:13:6c:af:68:84:e0:b0:4f:00:b8:e5:e5:5c:1a:c4:1c:80:
8b:96:f4:80:da:d9:8f:f3:80:cf:12:ce:f2:67:b5:02:5e:21:
a1:16:d8:9d:87:21:11:9c:a8:dd:9c:cb:6c:19:1c:df:bf:1f:
6a:06:71:95:c3:f0:cf:23:20:09:d6:ba:0a:97:6a:65:83:13:
c8:e0:bb:21:77:43:ca:3c:ed:dc:ef:d5:e7:e6:cb:55:bd:f5:
c0:ef:53:c0:7e:85:e2:1d:0a:a1:94:fb:06:6d:23:6f:0b:6d:
ad:b0:4b:44:03:3c:f0:19:33:34:56:35:ad:8e:8b:d1:2c:ae:
68:ea:87:a3:45:e0:71:8f:cd:09:60:f9:ef:28:f6:ad:5d:58:
a2:06:c6:1e:c0:3b:66:d9:23:d3:5f:00:c8:09:9a:aa:59:50:
0d:d9:17:35:f9:b8:17:10:16:e3:06:fd:aa:17:c4:3a:8a:75:
65:b1:d1:7c:15:66:2b:00:25:ca:c5:34:42:89:07:74:0d:df:
02:02:06:23:47:c8:fc:14:fc:70:bf:f6:e0:f1:2a:7a:3e:c4:
eb:4f:4c:66:a9:8f:07:82:41:a1:18:62:dc:a0:03:74:a6:ca:
89:a6:84:e5:e5:c9:aa:f5:b6:63:ce:93:6d:18:ca:5f:8c:4c:
bb:37:20:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:18 2024 by rpki-client on console-fra.rpki-client.org