Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3135322e302f32312d3234203d3e20383334.roa
File: 39312e3132342e3135322e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: SdZt/K92ecFkgtp0KIgmDvUFmgNemB6OBB2eq5tE+kQ=
Subject key identifier: 33:DB:FC:4F:E5:8D:53:32:64:AB:A3:86:44:81:5B:84:A6:E4:F1:E1
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7E4C12DAF8E0D96CC59DB0E35C0C07FDA7D8B6BE
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3135322e302f32312d3234203d3e20383334.roa
Signing time: Thu 22 Feb 2024 06:40:38 +0000
ROA not before: Thu 22 Feb 2024 06:35:38 +0000
ROA not after: Thu 20 Feb 2025 06:40:38 +0000
asID: 834
IP address blocks: 91.124.152.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:4c:12:da:f8:e0:d9:6c:c5:9d:b0:e3:5c:0c:07:fd:a7:d8:b6:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 22 06:35:38 2024 GMT
Not After : Feb 20 06:40:38 2025 GMT
Subject: CN=33DBFC4FE58D533264ABA38644815B84A6E4F1E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:77:f4:61:f6:b0:c3:48:f4:6f:78:50:52:38:
c2:a2:bd:7e:3c:5a:31:54:bb:24:ef:37:c1:13:86:
28:1c:50:8f:20:9b:4c:e9:c7:01:d7:52:6e:b1:13:
04:8d:64:e6:62:ac:ab:59:bf:af:42:23:1a:e5:5a:
8f:9e:2f:16:b5:89:0a:e3:64:c3:56:2a:00:7f:0e:
3b:ce:0b:81:3c:46:de:d3:80:f5:11:67:91:e4:d4:
36:05:21:af:8b:29:95:ef:26:a0:a1:8f:ec:3e:4b:
d0:a1:42:e7:c1:4b:70:b1:ed:2f:53:9e:bb:61:42:
14:0d:ed:3c:be:bf:89:e6:d0:5b:82:e1:f5:53:85:
a7:56:81:85:95:4b:b0:68:65:82:40:e3:a2:b0:30:
dd:e6:a8:30:03:fc:35:0f:c4:97:dd:bf:cc:b4:fe:
db:1a:96:ea:47:f9:85:c2:36:1f:08:85:f5:ae:97:
24:cf:fb:58:3e:25:95:7e:e5:fb:5d:5b:4d:ed:8d:
6d:c4:65:96:b9:6e:08:22:7b:5a:81:f5:e2:7c:b2:
09:79:1a:56:82:e9:bc:f0:a5:40:ec:a0:e0:1d:18:
69:6b:ab:b9:a1:e5:b8:6b:86:17:ee:e7:7f:bf:b9:
e6:2f:b7:0d:16:f9:78:a7:f0:7b:88:47:17:51:70:
1c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DB:FC:4F:E5:8D:53:32:64:AB:A3:86:44:81:5B:84:A6:E4:F1:E1
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3135322e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.152.0/21
Signature Algorithm: sha256WithRSAEncryption
a4:99:6e:1e:35:a7:d5:00:15:bd:e7:3e:b6:5d:e2:c9:95:e4:
9a:85:76:81:95:77:23:9a:24:fb:b7:16:1f:07:78:bb:78:a4:
b5:cc:ae:5b:27:a5:4f:85:f3:8a:39:43:f9:1c:bb:01:19:4b:
79:db:91:14:a1:7f:64:b5:57:e0:05:f0:af:c4:27:81:32:89:
85:12:3e:e4:85:70:c4:3d:a4:c1:14:7a:75:64:30:63:35:b9:
b0:63:32:8f:5e:12:f7:5d:9e:b3:31:45:e2:5c:ad:b2:f3:0f:
5d:3b:96:50:82:a7:fb:70:e5:81:81:18:7b:57:8f:11:99:53:
62:bd:e4:2f:9b:2f:c7:3e:a0:5a:6e:12:b5:81:1d:81:72:b2:
98:e5:c0:38:df:e8:87:9e:5e:91:1f:70:a6:6a:60:26:66:72:
8f:ef:0b:c0:b6:25:b0:00:81:c4:78:29:48:2c:00:93:be:97:
c1:fb:15:7c:a8:92:15:c9:57:eb:63:4c:0a:84:c0:85:9c:e4:
bf:88:ae:b1:07:77:e1:14:c0:f8:b3:cf:14:48:5a:64:eb:3b:
c0:d9:99:f5:9f:12:10:6d:94:85:e8:09:c1:02:48:7c:7f:fe:
12:b6:c9:2e:c1:5a:8e:9e:e7:d0:8e:8f:6d:fa:38:92:f4:30:
e3:99:9e:cb
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUfkwS2vjg2WzFnbDjXAwH/afYtr4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNDAyMjIwNjM1MzhaFw0yNTAyMjAwNjQwMzhaMDMxMTAvBgNV
BAMTKDMzREJGQzRGRTU4RDUzMzI2NEFCQTM4NjQ0ODE1Qjg0QTZFNEYxRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCld/Rh9rDDSPRveFBSOMKivX48
WjFUuyTvN8EThigcUI8gm0zpxwHXUm6xEwSNZOZirKtZv69CIxrlWo+eLxa1iQrj
ZMNWKgB/DjvOC4E8Rt7TgPURZ5Hk1DYFIa+LKZXvJqChj+w+S9ChQufBS3Cx7S9T
nrthQhQN7Ty+v4nm0FuC4fVThadWgYWVS7BoZYJA46KwMN3mqDAD/DUPxJfdv8y0
/tsalupH+YXCNh8IhfWulyTP+1g+JZV+5ftdW03tjW3EZZa5bggie1qB9eJ8sgl5
GlaC6bzwpUDsoOAdGGlrq7mh5bhrhhfu53+/ueYvtw0W+Xin8HuIRxdRcBwnAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUM9v8T+WNUzJkq6OGRIFbhKbk8eEwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUt
NDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThmNmI0LzAvMzkzMTJlMzEzMjM0MmUzMTM1
MzIyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANbfJgw
DQYJKoZIhvcNAQELBQADggEBAKSZbh41p9UAFb3nPrZd4smV5JqFdoGVdyOaJPu3
Fh8HeLt4pLXMrlsnpU+F84o5Q/kcuwEZS3nbkRShf2S1V+AF8K/EJ4EyiYUSPuSF
cMQ9pMEUenVkMGM1ubBjMo9eEvddnrMxReJcrbLzD107llCCp/tw5YGBGHtXjxGZ
U2K95C+bL8c+oFpuErWBHYFyspjlwDjf6IeeXpEfcKZqYCZmco/vC8C2JbAAgcR4
KUgsAJO+l8H7FXyokhXJV+tjTAqEwIWc5L+IrrEHd+EUwPizzxRIWmTrO8DZmfWf
EhBtlIXoCcECSHx//hK2yS7BWo6e59COj236OJL0MOOZnss=
-----END CERTIFICATE-----
Generated at Fri Feb 23 13:38:38 2024 by rpki-client on console-ams.rpki-client.org