Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3135302e302f32332d3234203d3e20383334.roa
File: 39312e3132342e3135302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: mn1w5WwF8S0ToWzaA+IxPMFKsU6zEe8Myqab96mu6Mc=
Subject key identifier: A2:1F:78:B4:DE:F6:3D:26:6C:17:A3:29:F0:DC:48:39:D7:0E:AD:55
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 307A54AA6C6CFA23AD5056994EB1291F0D8FB9D8
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3135302e302f32332d3234203d3e20383334.roa
Signing time: Thu 22 Feb 2024 06:40:40 +0000
ROA not before: Thu 22 Feb 2024 06:35:40 +0000
ROA not after: Thu 20 Feb 2025 06:40:40 +0000
asID: 834
IP address blocks: 91.124.150.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:7a:54:aa:6c:6c:fa:23:ad:50:56:99:4e:b1:29:1f:0d:8f:b9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 22 06:35:40 2024 GMT
Not After : Feb 20 06:40:40 2025 GMT
Subject: CN=A21F78B4DEF63D266C17A329F0DC4839D70EAD55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:23:98:c3:b5:e6:33:94:f7:68:45:d9:b9:fb:
91:39:a8:6b:08:af:9f:7f:6a:08:13:df:6c:1e:b0:
e2:76:f1:a7:3e:b9:73:66:4a:7d:70:f4:d5:4d:cc:
83:62:d9:df:51:fe:44:2d:21:72:a4:85:2e:a0:30:
ec:32:91:39:6a:b3:56:61:f0:29:e7:be:d4:d0:36:
4e:1c:b8:f8:0e:82:07:2e:8a:8c:da:58:89:f2:60:
a1:dc:34:24:1d:68:7d:4e:e4:1c:18:1e:2a:1e:87:
00:8a:ab:b4:dd:57:9c:b0:3a:ab:32:d0:85:86:53:
90:32:b0:56:7d:e0:27:1a:48:f6:4e:f2:2d:d0:df:
0b:58:b1:cf:a1:15:22:be:4b:14:5b:b9:e8:4d:d9:
cb:f9:19:7d:a8:65:f6:6d:f7:c9:95:ff:2f:fb:ea:
7f:0f:61:7b:ac:69:e9:3f:9a:3d:0f:7d:25:34:1c:
a1:f5:80:83:37:a6:34:52:fe:1a:25:e0:2f:1d:7b:
cd:02:3e:b2:4c:81:ac:c4:f8:36:dc:c5:05:76:c7:
7f:88:0f:68:f0:8b:a4:75:a5:3c:49:98:ab:6a:d7:
0a:60:ff:16:b2:38:08:da:d0:f0:42:bd:06:26:f1:
c3:38:e6:3d:b5:43:44:30:3e:37:82:d7:2c:ae:3e:
78:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1F:78:B4:DE:F6:3D:26:6C:17:A3:29:F0:DC:48:39:D7:0E:AD:55
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3135302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.150.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:ed:e5:1f:35:9f:63:d7:6b:fd:19:e8:aa:30:5a:b5:a9:62:
1e:16:9a:30:40:18:7b:96:34:a0:0e:31:e4:20:80:95:fc:9e:
f8:40:47:f0:b8:c9:79:eb:0a:ca:b0:d0:dd:45:f2:56:24:75:
10:22:e2:18:c1:4d:6f:56:74:98:94:48:9f:a1:6b:5d:d2:ec:
6e:dc:a9:c3:fb:42:b6:34:03:bd:12:03:1d:ae:3e:2c:f6:3a:
88:85:fd:18:cb:2e:85:db:d1:60:65:fa:1b:fc:6f:b3:a3:66:
3f:6b:9b:72:85:88:6b:bb:1f:8b:d5:d2:d6:21:b4:dd:e0:3d:
e2:13:13:93:3d:69:fa:8e:de:df:08:e6:77:ab:04:94:7e:3f:
cb:35:33:50:f0:fb:58:6e:6a:76:55:30:19:47:08:0f:19:8f:
77:a9:59:99:04:20:6c:45:19:c3:74:d7:08:9d:38:88:19:a1:
b0:b3:e6:aa:02:30:4e:49:6a:22:d1:3b:09:c2:4c:80:3a:81:
dc:6a:12:99:20:37:c1:7c:bf:07:bf:ec:15:66:9f:ff:a2:2d:
fe:13:6b:cb:c5:55:ba:e9:5a:ee:14:a2:1f:4b:f5:78:6e:06:
91:f3:ec:80:74:35:e3:93:9c:2b:35:12:c4:de:5b:95:63:aa:
c9:5e:ed:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:18 2024 by rpki-client on console-fra.rpki-client.org