Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3137372e302f32342d3234203d3e203538303631.roa
File: 39312e3132342e3137372e302f32342d3234203d3e203538303631.roa (raw, json)
Hash identifier: 0huJxz1UVFwwj+FTI++3k55mC4Db6JcpO20ZGsEwK6o=
Subject key identifier: 10:AC:3C:8A:EC:8A:93:A8:81:F3:BF:C0:81:C6:B4:59:3D:15:C3:8B
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0BE9B2DF52DC3C3D93899BCB603774E909A8A122
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3137372e302f32342d3234203d3e203538303631.roa
Signing time: Tue 20 Feb 2024 14:52:38 +0000
ROA not before: Tue 20 Feb 2024 14:47:38 +0000
ROA not after: Tue 18 Feb 2025 14:52:38 +0000
asID: 58061
IP address blocks: 91.124.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:e9:b2:df:52:dc:3c:3d:93:89:9b:cb:60:37:74:e9:09:a8:a1:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 20 14:47:38 2024 GMT
Not After : Feb 18 14:52:38 2025 GMT
Subject: CN=10AC3C8AEC8A93A881F3BFC081C6B4593D15C38B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e1:3c:75:96:97:b5:1c:0c:28:30:86:d7:ea:
76:fd:f3:30:54:dd:1b:78:86:c0:6d:15:74:47:81:
84:49:7d:b2:de:02:56:27:a5:54:a4:77:28:25:b9:
8c:47:90:39:1f:de:58:e3:b8:86:32:ad:26:59:a8:
6d:00:0c:22:9b:a0:59:35:20:f9:f8:8c:dd:28:f2:
29:75:ab:40:1c:3b:b8:3e:58:6d:b6:9e:2a:3b:f2:
3a:d2:78:4f:ca:e7:24:f2:12:57:01:e0:22:44:c8:
d6:27:12:d6:f5:23:bf:d0:a3:32:c3:b4:d7:b9:7f:
7b:bc:a1:8d:8a:19:36:9c:88:29:27:7e:a3:e0:61:
0e:e8:a9:57:1b:04:12:fb:1d:8d:04:67:34:0d:ef:
f0:75:b3:d9:12:92:3a:8d:cf:3b:eb:8b:7b:ea:06:
e0:66:bf:e1:3c:11:cc:b2:59:ca:3a:24:d9:58:2d:
38:03:d6:24:c0:b7:d2:eb:b3:0b:a8:4e:4b:1d:20:
1a:2e:ac:ff:a2:1c:69:6f:f5:72:65:8d:97:ce:2c:
7b:a3:82:2f:8a:a2:18:02:f5:3f:aa:93:6c:df:ea:
ce:16:10:4a:c9:85:09:4a:ed:0a:59:90:e1:ee:e4:
d6:6e:c0:bb:6c:e8:af:4c:df:c3:8f:3d:2d:c2:7a:
d9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AC:3C:8A:EC:8A:93:A8:81:F3:BF:C0:81:C6:B4:59:3D:15:C3:8B
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3137372e302f32342d3234203d3e203538303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.177.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:74:c6:85:3c:1a:76:0c:b4:5a:17:70:36:30:34:a4:e8:74:
a9:9f:8a:8d:f8:c7:e4:2b:84:9e:08:26:ea:99:0a:fa:fa:7a:
0a:1b:e2:fb:44:15:92:61:43:ef:05:06:a3:d9:7e:7c:40:7d:
0c:5f:ac:48:9e:7a:6f:1f:cf:99:8f:2f:3a:5a:5b:02:f8:f1:
4d:c7:54:02:8a:f9:7f:b5:2e:e0:dd:84:7d:f8:c3:80:31:c1:
ed:69:19:3b:8d:3e:2d:43:00:aa:9e:28:b5:b6:c8:cb:2d:85:
3e:d1:19:c0:b0:5e:5d:78:32:24:9f:c9:6e:f5:88:65:68:83:
58:fb:d2:57:1a:d8:77:52:1a:ff:a8:43:b3:28:98:da:43:b6:
82:e1:ab:ec:cd:6d:48:1b:7e:48:7b:58:77:d1:8b:2a:8f:1d:
68:cd:86:99:36:d3:e3:eb:72:88:09:d8:3e:cf:1e:ba:d4:24:
22:00:76:47:c0:ff:ad:f2:a4:7a:a1:ad:fd:34:26:06:93:1a:
20:86:34:7b:77:0e:2e:16:8c:eb:fb:50:d6:5c:97:b4:8d:80:
85:19:d9:d2:10:eb:55:69:aa:18:20:c1:ab:6b:d0:dc:a7:50:
ba:b6:8c:0d:6d:0f:66:08:bd:3b:70:93:85:d7:9a:87:be:95:
70:92:3d:0a
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUC+my31LcPD2TiZvLYDd06QmooSIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNDAyMjAxNDQ3MzhaFw0yNTAyMTgxNDUyMzhaMDMxMTAvBgNV
BAMTKDEwQUMzQzhBRUM4QTkzQTg4MUYzQkZDMDgxQzZCNDU5M0QxNUMzOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO4Tx1lpe1HAwoMIbX6nb98zBU
3Rt4hsBtFXRHgYRJfbLeAlYnpVSkdygluYxHkDkf3ljjuIYyrSZZqG0ADCKboFk1
IPn4jN0o8il1q0AcO7g+WG22nio78jrSeE/K5yTyElcB4CJEyNYnEtb1I7/QozLD
tNe5f3u8oY2KGTaciCknfqPgYQ7oqVcbBBL7HY0EZzQN7/B1s9kSkjqNzzvri3vq
BuBmv+E8EcyyWco6JNlYLTgD1iTAt9LrswuoTksdIBourP+iHGlv9XJljZfOLHuj
gi+KohgC9T+qk2zf6s4WEErJhQlK7QpZkOHu5NZuwLts6K9M38OPPS3CetlnAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUEKw8iuyKk6iB87/Agca0WT0Vw4swHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUt
NDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThmNmI0LzAvMzkzMTJlMzEzMjM0MmUzMTM3
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTM4MzAzNjMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
W3yxMA0GCSqGSIb3DQEBCwUAA4IBAQB/dMaFPBp2DLRaF3A2MDSk6HSpn4qN+Mfk
K4SeCCbqmQr6+noKG+L7RBWSYUPvBQaj2X58QH0MX6xInnpvH8+Zjy86WlsC+PFN
x1QCivl/tS7g3YR9+MOAMcHtaRk7jT4tQwCqnii1tsjLLYU+0RnAsF5deDIkn8lu
9YhlaINY+9JXGth3Uhr/qEOzKJjaQ7aC4avszW1IG35Ie1h30Ysqjx1ozYaZNtPj
63KICdg+zx661CQiAHZHwP+t8qR6oa39NCYGkxoghjR7dw4uFozr+1DWXJe0jYCF
GdnSEOtVaaoYIMGra9Dcp1C6towNbQ9mCL07cJOF15qHvpVwkj0K
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:19 2024 by rpki-client on console-fra.rpki-client.org