Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3134342e302f32322d3234203d3e20383334.roa
File: 39312e3132342e3134342e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: 68gvoXzKpr+joa41XFutuY8WsW75nCdgAbcaHI7KXHI=
Subject key identifier: 8E:29:56:94:D1:BE:D8:0C:3C:5D:7A:C8:57:D4:08:76:0F:86:9E:8C
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 359423FCA87CA4187E61902E8EAD77AFD4E0A05F
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3134342e302f32322d3234203d3e20383334.roa
Signing time: Thu 22 Feb 2024 06:40:39 +0000
ROA not before: Thu 22 Feb 2024 06:35:39 +0000
ROA not after: Thu 20 Feb 2025 06:40:39 +0000
asID: 834
IP address blocks: 91.124.144.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:94:23:fc:a8:7c:a4:18:7e:61:90:2e:8e:ad:77:af:d4:e0:a0:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 22 06:35:39 2024 GMT
Not After : Feb 20 06:40:39 2025 GMT
Subject: CN=8E295694D1BED80C3C5D7AC857D408760F869E8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:39:5f:10:23:83:da:8b:d5:f6:0b:fb:fb:3c:
08:b0:d7:44:33:ee:79:af:b1:6a:60:98:04:52:1a:
6a:07:58:09:75:3a:4f:66:ed:c6:a9:ed:7a:0d:75:
0f:64:da:af:07:03:3e:43:ca:be:05:50:40:0c:2a:
ec:80:f1:7f:43:f6:c2:ac:9e:38:81:f7:58:f6:cb:
2b:70:65:04:55:0f:02:11:dd:0c:0b:44:b6:0c:80:
5b:73:34:3d:14:a8:f9:04:dd:ec:4c:03:04:a9:51:
33:5f:65:3b:eb:1b:37:7b:85:4e:1a:0f:fe:0c:0a:
66:00:f9:ce:a2:62:48:ca:1c:21:e8:85:51:48:6f:
32:0d:42:16:91:93:32:8e:80:5d:2a:6c:5a:9d:7d:
99:ce:b5:06:fd:0e:2e:ae:34:fc:d9:06:0f:94:67:
98:5b:4f:da:96:c2:83:3f:2e:58:c1:55:52:09:d6:
fc:7a:ff:4c:73:51:a4:b5:a3:42:62:06:b3:83:66:
c7:1f:de:7f:c1:dc:bf:a8:30:53:2d:e1:00:0d:82:
c6:f6:fa:38:20:8a:f3:83:66:dc:83:d3:f1:aa:30:
8a:74:65:90:01:74:92:d8:29:7d:5b:80:c2:c2:c2:
7f:1f:39:1f:bd:b3:5c:73:da:4e:db:ca:3d:42:c3:
94:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:29:56:94:D1:BE:D8:0C:3C:5D:7A:C8:57:D4:08:76:0F:86:9E:8C
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3134342e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.144.0/22
Signature Algorithm: sha256WithRSAEncryption
35:69:50:2e:38:73:e4:cd:a5:36:99:01:e6:0f:95:b5:50:87:
c1:6b:cd:53:04:dc:12:6e:2d:dd:4c:f4:f2:b9:1d:e9:ff:a0:
da:e5:34:52:09:51:6a:c8:9e:14:58:c7:bb:7b:29:62:13:cc:
a9:2a:b9:fe:9a:1a:d6:7e:9c:b7:71:d6:8c:33:68:68:15:78:
54:1b:d1:26:29:98:08:24:e1:20:7c:80:26:84:ed:3f:2a:8d:
7d:fd:6f:39:17:ad:e5:a3:88:08:95:5a:3e:9d:52:fc:54:47:
e8:f6:fd:42:a9:5b:84:df:cc:d2:da:6a:a9:22:c1:bf:20:a0:
92:b5:43:7c:82:ed:dd:19:0e:7c:57:80:e4:10:b8:db:cb:00:
d3:75:57:71:69:51:ff:4d:56:a7:68:04:b2:17:44:f2:52:94:
88:45:99:7a:b5:80:a1:27:94:03:50:d4:3c:96:a7:c5:a0:53:
b1:95:49:f7:ea:2d:ae:6d:ec:aa:eb:4b:bf:37:f6:ed:d1:a9:
75:17:de:6d:e7:d6:5b:45:69:9e:44:9a:0a:86:d7:1b:6e:1f:
ea:f1:aa:71:2b:6c:b3:c5:a3:fe:0b:0b:cf:2f:a3:67:a8:05:
d5:34:91:98:8b:3d:1d:7d:ba:1f:7b:6f:87:d7:7a:1d:24:f9:
ce:2e:83:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:18 2024 by rpki-client on console-fra.rpki-client.org