Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3137382e302f32332d3234203d3e20383334.roa
File: 39312e3132342e3137382e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: rNPS+NqQ4JTr5SNRAHyizgVshMErAzZ24mcymmtfCmY=
Subject key identifier: 90:4A:52:04:68:60:49:27:CB:87:6B:D8:16:88:9F:05:9E:C3:05:A6
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3DC1AE0A0FE8DED86626ACEF3FBB11588CE55DFD
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3137382e302f32332d3234203d3e20383334.roa
Signing time: Thu 22 Feb 2024 06:40:39 +0000
ROA not before: Thu 22 Feb 2024 06:35:39 +0000
ROA not after: Thu 20 Feb 2025 06:40:39 +0000
asID: 834
IP address blocks: 91.124.178.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:c1:ae:0a:0f:e8:de:d8:66:26:ac:ef:3f:bb:11:58:8c:e5:5d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 22 06:35:39 2024 GMT
Not After : Feb 20 06:40:39 2025 GMT
Subject: CN=904A520468604927CB876BD816889F059EC305A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cb:c6:c7:c4:de:95:de:6f:83:3b:1c:8a:ab:
fb:8a:7d:32:ea:b7:67:48:6b:dc:da:75:30:f9:20:
d4:44:c5:4f:19:d4:a8:da:41:15:77:ef:3a:9c:dc:
58:e8:09:9a:99:93:64:32:7c:32:54:c3:21:e8:b7:
59:bb:48:30:1b:92:fa:21:bc:f0:c8:7d:3f:e4:22:
68:e0:20:53:ab:76:70:e9:81:a9:61:86:92:71:a0:
01:38:e6:e4:95:ca:20:6b:89:29:ec:00:82:39:3e:
86:22:29:5f:f9:ab:db:96:19:99:ef:dc:cd:38:7d:
75:a9:4f:1f:62:b9:72:98:c4:15:49:1b:e3:d2:75:
98:15:01:1a:b5:72:4a:9c:22:f3:00:01:a4:25:c7:
af:0f:af:4b:8a:b1:e4:e0:52:cf:23:8d:93:77:45:
53:64:d2:b1:7f:ac:7c:ae:37:41:d3:aa:22:aa:35:
c9:dd:c0:36:8b:b9:68:7a:5c:49:8f:51:52:36:ef:
1e:57:df:a2:8b:77:02:45:1b:a2:d1:ba:02:1a:9d:
7c:ea:ff:fc:38:c9:47:b2:33:f0:43:f5:5b:5b:b3:
d0:b6:69:81:5d:4d:ac:c5:d9:36:5c:38:05:fb:0f:
3b:4e:d1:ea:bf:bb:d7:58:8d:b3:34:80:f5:37:e5:
66:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4A:52:04:68:60:49:27:CB:87:6B:D8:16:88:9F:05:9E:C3:05:A6
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3137382e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.178.0/23
Signature Algorithm: sha256WithRSAEncryption
41:6b:0d:2d:31:c0:dd:92:d0:46:c4:c2:7f:c5:ea:2b:20:7b:
68:2a:f4:85:07:cc:49:1a:39:40:4f:40:c8:7b:bc:7a:fe:3e:
99:ec:4f:17:4f:55:11:f5:a2:96:4c:cf:f6:0a:91:e6:00:14:
83:31:b3:d1:79:ed:98:d6:28:94:d5:c3:72:e0:12:70:6d:d8:
2d:c3:21:3b:d5:eb:f9:0a:7c:2d:9c:04:cb:32:b8:0f:1e:8c:
5b:18:3c:19:8c:c1:36:cb:9a:6d:8f:36:3b:10:05:bc:36:59:
54:a4:3e:93:8b:fb:dd:d2:fd:ff:d2:9d:75:4b:d9:26:75:1d:
15:18:11:34:e0:9a:ed:a8:48:0d:d7:f4:ef:02:90:8f:26:5d:
ad:87:8f:e4:93:de:dc:97:59:77:2a:f7:99:c2:e4:bb:61:09:
14:90:e1:f7:24:67:55:69:bd:44:97:68:36:d7:5c:21:c5:6a:
9e:a3:51:d3:7b:4a:4a:52:ec:93:93:64:a8:ce:4a:c0:ac:9f:
07:99:b3:57:07:c3:44:45:aa:df:68:e7:60:bc:a6:4f:5a:e7:
be:91:71:5e:09:69:93:aa:27:aa:68:11:4c:b7:d4:03:10:be:
9b:0b:1a:61:f8:87:fa:74:a5:74:03:68:9b:b7:54:79:af:bc:
3c:dd:99:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 13:38:39 2024 by rpki-client on console-ams.rpki-client.org