Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3134392e302f32342d3234203d3e20383334.roa
File: 39312e3132342e3134392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 5jB6D18x0CIBE0ZznM6JFIcVZkBmN3YWX3YWwT+R+Rk=
Subject key identifier: 62:85:B1:81:79:3E:1E:A7:F1:61:46:B6:7F:DE:14:C4:B8:CE:C9:18
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 14CB0F0C94767A888D8DD718CC120482CE3CB37B
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3134392e302f32342d3234203d3e20383334.roa
Signing time: Thu 22 Feb 2024 06:40:39 +0000
ROA not before: Thu 22 Feb 2024 06:35:39 +0000
ROA not after: Thu 20 Feb 2025 06:40:39 +0000
asID: 834
IP address blocks: 91.124.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:cb:0f:0c:94:76:7a:88:8d:8d:d7:18:cc:12:04:82:ce:3c:b3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 22 06:35:39 2024 GMT
Not After : Feb 20 06:40:39 2025 GMT
Subject: CN=6285B181793E1EA7F16146B67FDE14C4B8CEC918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a0:e0:ea:f9:a2:e4:f6:55:45:c5:c4:6e:13:
81:0d:cf:46:32:ca:d2:c7:7a:0c:94:78:c8:9f:2a:
e5:63:59:08:04:50:59:10:2a:89:de:c8:09:b9:92:
0f:9d:57:3b:dd:39:1a:14:45:df:75:8e:22:4b:f6:
3e:c2:80:63:3b:e6:d7:1d:55:f2:75:0a:85:8e:59:
8f:3f:d4:25:45:44:aa:da:a5:db:01:af:17:3d:d2:
52:80:f7:da:00:76:e2:43:81:d2:d9:ae:7f:00:64:
cc:c0:8d:dd:87:02:da:cc:42:9a:65:5f:a4:55:03:
ae:9b:ca:e0:5c:00:50:8d:b5:91:2f:53:fd:67:6b:
bd:6e:5a:bb:06:85:d9:a4:35:2d:ea:6c:98:91:c4:
c1:33:d3:30:64:5e:4b:9f:fa:75:bb:82:fe:52:5d:
61:72:47:2d:a1:67:af:ec:83:44:4a:a7:e5:a8:02:
01:39:4b:fb:7d:8e:d9:45:6d:1e:70:0d:22:54:b6:
a9:f9:3c:00:68:e2:ad:64:0a:fe:c7:35:4f:57:13:
92:d5:b4:3e:ab:83:e5:f8:3b:79:0f:0c:3f:ad:e7:
94:2c:d4:87:d3:d2:4e:d8:47:7e:cd:ce:09:8e:2a:
c3:6f:7b:42:5a:ce:8f:37:49:42:23:3e:b8:f2:16:
f1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:85:B1:81:79:3E:1E:A7:F1:61:46:B6:7F:DE:14:C4:B8:CE:C9:18
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3134392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.149.0/24
Signature Algorithm: sha256WithRSAEncryption
22:d4:ca:2b:7b:b7:1e:c2:1a:24:e9:bc:a0:e8:55:86:84:22:
b9:3b:f5:44:86:61:df:a7:ad:60:10:da:a1:7f:a6:83:99:7e:
73:03:6f:e7:8e:6d:c9:04:6b:5e:3e:42:30:ce:a0:d3:17:1f:
88:14:46:ac:8a:46:58:74:45:2d:2b:9a:bd:e6:39:2f:71:6b:
b9:d9:12:52:f9:9f:40:01:bc:46:1a:7f:4b:b3:28:77:9e:79:
04:58:91:5f:96:3d:7e:5e:6e:8f:ad:08:d0:c8:e0:5d:9b:d9:
90:bc:75:86:78:ee:c4:78:45:c7:e2:53:e2:a0:6b:94:c3:cb:
58:f5:10:c5:58:46:96:d6:fd:5c:d2:ec:02:c7:fd:9b:cd:47:
11:5c:7c:3d:21:cc:2b:72:7b:05:c8:4a:79:43:58:13:d6:ba:
93:d5:a4:c7:61:c9:e2:96:88:12:27:62:b5:5f:02:b2:c2:e5:
bd:9c:5d:1a:81:1c:5c:e8:74:25:53:9f:bb:f5:b5:74:4c:39:
11:a7:dd:71:53:d5:48:29:d7:dd:b8:b1:1d:9a:44:40:8f:74:
0f:32:f3:d3:09:64:40:8e:d8:2c:9a:4e:75:7e:0f:7f:80:a7:
a9:a7:10:a4:58:ef:0a:09:16:d3:f4:21:3b:f3:28:f3:94:2d:
b4:16:94:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 13:38:38 2024 by rpki-client on console-ams.rpki-client.org