Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3136302e302f32302d3234203d3e20383334.roa
File: 39312e3132342e3136302e302f32302d3234203d3e20383334.roa (raw, json)
Hash identifier: TEqDZU+UC+IDwRRDDFKrfPKdqK/rk5ElrsTmeBQR1B4=
Subject key identifier: F7:2A:61:61:BF:8D:2F:3F:2A:C3:D6:66:DB:A5:DD:4C:6C:56:4C:34
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 59A637B2BA472DA232C1D47634AC9484666DA5B1
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3136302e302f32302d3234203d3e20383334.roa
Signing time: Thu 22 Feb 2024 06:40:39 +0000
ROA not before: Thu 22 Feb 2024 06:35:39 +0000
ROA not after: Thu 20 Feb 2025 06:40:39 +0000
asID: 834
IP address blocks: 91.124.160.0/20 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:a6:37:b2:ba:47:2d:a2:32:c1:d4:76:34:ac:94:84:66:6d:a5:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 22 06:35:39 2024 GMT
Not After : Feb 20 06:40:39 2025 GMT
Subject: CN=F72A6161BF8D2F3F2AC3D666DBA5DD4C6C564C34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:31:4b:c7:a6:e5:59:4f:71:6b:42:d7:40:71:
90:6c:2b:e1:63:fe:a4:2a:ae:2c:f4:7f:a5:c1:72:
ea:d6:c8:e7:7d:79:7c:00:f4:54:90:88:18:93:91:
04:de:d9:4a:84:f0:e2:51:ed:a7:7d:3a:cd:ee:bb:
a3:28:21:77:07:99:88:c7:37:a8:a0:51:1b:ef:4c:
90:c8:42:ee:a0:53:57:f6:94:95:85:d4:4c:a4:3d:
4a:fd:f4:b5:06:b0:76:40:8a:2c:8d:a0:31:dd:f3:
83:d9:27:bc:8a:b3:4a:3c:78:fa:fb:41:02:72:6b:
4c:77:8d:59:d9:d1:eb:d3:26:27:2b:b3:10:98:07:
38:a6:1a:c8:56:c5:61:dd:72:02:7d:45:c9:e2:bd:
8d:43:ad:5e:12:ac:8e:fb:8a:c9:56:21:01:35:fb:
78:b7:0d:36:af:a5:84:93:d8:73:cd:fd:df:aa:9f:
bb:23:4e:ef:90:44:4a:25:65:92:20:11:b7:7c:dc:
e6:38:38:20:f0:7a:6f:f5:c5:e4:a9:63:6b:d7:43:
69:c7:b6:bd:a4:24:d0:b7:54:37:59:cd:db:d8:7c:
33:5e:42:47:fa:a2:6f:71:e5:30:2c:9b:f4:a8:64:
df:af:00:8c:6c:68:ed:66:e0:ef:bd:ce:26:fa:64:
18:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2A:61:61:BF:8D:2F:3F:2A:C3:D6:66:DB:A5:DD:4C:6C:56:4C:34
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3136302e302f32302d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.160.0/20
Signature Algorithm: sha256WithRSAEncryption
09:08:52:5a:23:2d:4c:19:84:f1:06:6f:2b:73:a0:60:34:cd:
b4:9a:ba:fa:56:14:65:aa:b5:14:8e:1f:06:1a:45:db:56:bd:
1e:9b:78:2e:24:aa:89:84:a9:20:66:78:04:24:c8:92:bb:d7:
31:fe:7e:bf:f1:85:9a:ea:1e:4b:af:37:02:51:d0:03:e6:4f:
43:f4:eb:e6:48:80:70:d2:85:fc:fe:99:4c:4e:20:ef:a0:f9:
47:c7:f8:97:22:8a:19:21:32:ca:11:e5:ac:1f:1f:99:e2:d3:
a1:c7:2b:aa:29:c6:c5:9b:4d:2f:ed:27:fd:b9:49:94:bd:6e:
7c:e0:4c:7e:0b:e5:26:1c:b7:40:40:27:6a:d6:92:79:cb:84:
d3:2a:7e:e6:8f:81:44:7a:36:71:ee:9a:c9:31:3a:c4:c1:3f:
7a:94:80:f8:59:61:e2:28:63:64:7d:52:9d:99:07:42:ad:d9:
d9:55:44:63:d5:2b:20:03:18:a3:13:c1:4b:9d:c6:39:86:37:
e4:53:10:df:1f:8b:d4:74:19:43:bc:4f:4c:c5:61:e0:39:f6:
26:6a:35:d8:e3:40:ed:6a:8f:4e:39:99:a6:cc:22:6d:d5:d3:
30:01:13:34:04:2e:ac:8e:27:f6:6a:78:4e:50:f3:6c:03:f2:
b2:8f:2d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:18 2024 by rpki-client on console-fra.rpki-client.org