Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3134382e302f32342d3234203d3e203538303631.roa
File: 39312e3132342e3134382e302f32342d3234203d3e203538303631.roa (raw, json)
Hash identifier: Zljum80J87rjqh/pYCpnKbjjKQgXcf1TmwxoSfpYlmk=
Subject key identifier: 1E:42:32:A7:7D:B4:E0:5A:57:92:BD:41:EF:3B:A0:B6:C2:A3:8B:D6
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0546947BCAE181F9A2A93D2457757F3CE4EA0C55
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3134382e302f32342d3234203d3e203538303631.roa
Signing time: Tue 20 Feb 2024 15:04:42 +0000
ROA not before: Tue 20 Feb 2024 14:59:42 +0000
ROA not after: Tue 18 Feb 2025 15:04:42 +0000
asID: 58061
IP address blocks: 91.124.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:46:94:7b:ca:e1:81:f9:a2:a9:3d:24:57:75:7f:3c:e4:ea:0c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 20 14:59:42 2024 GMT
Not After : Feb 18 15:04:42 2025 GMT
Subject: CN=1E4232A77DB4E05A5792BD41EF3BA0B6C2A38BD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:16:b0:5a:17:43:87:63:80:15:8f:28:03:af:
0a:21:7f:18:ac:d3:7b:ae:18:c9:11:be:3e:1a:a5:
e6:e9:20:0d:dd:63:20:15:a3:9c:c3:da:09:1a:20:
10:3b:e3:37:31:10:67:27:f7:bf:30:dc:d6:e2:10:
3f:29:fe:73:76:55:9a:3b:e3:22:de:0d:41:bf:c5:
ff:c2:d8:4f:40:8a:3e:5d:4f:bb:a1:22:e7:50:b7:
47:15:60:58:6e:01:1e:0c:c1:19:ca:5a:7c:6c:b1:
ee:73:a6:6a:c0:fb:61:73:6d:06:f8:f2:5b:14:6e:
a0:f7:1d:3e:01:98:4d:73:f0:62:a1:2f:68:43:a5:
10:42:67:30:1a:42:a7:96:7e:38:55:33:59:21:fc:
1b:ea:cd:df:86:86:f8:0c:cf:21:e6:b9:4b:19:b4:
6b:de:c3:9a:62:83:ab:29:19:d3:74:dc:2e:76:64:
e4:96:30:7e:2b:bb:5d:fd:24:0c:e8:9f:61:93:80:
bd:00:ae:c2:0b:a0:5f:8d:fd:bd:e2:69:e4:83:c0:
79:82:45:59:26:eb:5b:19:7b:72:4c:24:dc:0d:ac:
c7:32:49:99:0d:b2:84:b9:72:32:c5:61:14:85:0d:
32:6a:71:98:3c:8d:42:47:3a:5f:64:5c:47:20:1e:
4a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:42:32:A7:7D:B4:E0:5A:57:92:BD:41:EF:3B:A0:B6:C2:A3:8B:D6
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3134382e302f32342d3234203d3e203538303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.148.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:56:38:b5:da:8d:37:e3:a4:0f:b6:b2:04:6f:39:1a:18:93:
dc:60:69:ea:4b:e4:81:20:ec:c6:e3:5a:a2:f5:25:05:a4:fe:
15:ce:50:af:2f:06:f2:20:12:e2:07:9e:88:d5:64:ed:d8:98:
fb:b2:bb:a7:9e:22:d7:b7:76:3b:93:3d:08:22:a6:7e:00:bc:
2a:c9:49:da:b0:2b:fb:52:e5:8c:3f:f9:83:c0:20:4b:63:7d:
b1:96:33:61:5c:d8:65:9f:cb:4a:a7:1c:63:7c:ab:90:05:81:
ee:c8:9e:8d:ed:4a:75:f1:2b:04:da:84:07:f3:74:97:29:4f:
20:33:18:73:c4:7c:57:2e:09:30:6f:c7:ad:33:0e:3e:62:2f:
dd:58:1b:c2:07:da:35:73:32:f1:89:37:75:88:7d:be:6d:f1:
c9:f5:f7:5f:e6:26:e9:13:65:f1:fc:89:21:19:03:7c:52:4b:
6a:3c:17:5c:60:b1:36:b8:f6:3e:46:ac:f0:04:e6:8b:b2:f8:
80:67:98:d6:3e:62:f2:43:3b:c9:71:1b:40:02:ee:30:b3:fe:
72:cb:1b:97:e1:7a:62:38:62:cc:f5:73:a6:f3:a1:a7:0f:4a:
09:f7:30:a1:21:e8:a0:1b:ff:2e:50:85:b1:a3:9a:30:0b:a3:
1a:64:b8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:18 2024 by rpki-client on console-fra.rpki-client.org