Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3138302e302f32322d3234203d3e20383334.roa
File: 39312e3132342e3138302e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: K0gp5d/cEg3f/B3RAr1qQTvyfF5+NuoLvMaWQYUBqGw=
Subject key identifier: B6:1A:D9:41:13:CE:E4:84:C4:E2:E1:0F:28:36:02:DC:C7:66:01:3B
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 462699F4CEC9857E395A5D2ACAA2A5190EA35D54
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3138302e302f32322d3234203d3e20383334.roa
Signing time: Thu 22 Feb 2024 06:40:38 +0000
ROA not before: Thu 22 Feb 2024 06:35:38 +0000
ROA not after: Thu 20 Feb 2025 06:40:38 +0000
asID: 834
IP address blocks: 91.124.180.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:26:99:f4:ce:c9:85:7e:39:5a:5d:2a:ca:a2:a5:19:0e:a3:5d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 22 06:35:38 2024 GMT
Not After : Feb 20 06:40:38 2025 GMT
Subject: CN=B61AD94113CEE484C4E2E10F283602DCC766013B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a6:fc:d5:81:df:df:d2:76:a0:08:89:a3:8f:
a8:f9:56:74:24:e2:ab:8b:bc:f9:fa:43:c0:ac:2c:
ad:03:14:39:d6:e7:46:0d:ae:80:a8:1b:8a:98:0f:
b3:0e:47:fa:73:85:88:e9:35:9a:9f:67:c3:76:4a:
eb:f5:96:78:64:71:12:9a:73:3b:34:70:99:ba:3f:
cb:b5:5b:e7:38:33:b4:a0:6a:4a:88:4f:c7:a2:58:
3c:3a:be:2a:97:ab:ce:32:e6:c7:52:e1:15:12:71:
4e:3b:fb:6e:72:dc:58:6a:5b:5f:c9:8f:d6:c7:cb:
fe:68:39:a9:fa:8e:3d:1a:a4:75:4e:e4:e3:23:cd:
bf:5c:b8:3d:35:12:d6:f5:04:9a:82:8f:20:2f:05:
d5:60:a0:52:83:ea:99:ca:c1:3b:91:55:d4:1e:f4:
9c:be:cc:05:4e:fc:2f:e2:8c:50:91:f7:ec:d7:72:
10:07:ed:96:9a:fa:34:63:7a:c4:53:8e:39:0f:88:
d2:10:65:f7:34:da:10:66:e7:b5:4d:a7:5d:26:ef:
57:51:de:3c:f3:6c:ad:d1:51:46:62:fa:18:1a:72:
60:aa:02:86:db:44:66:b3:70:b9:ee:27:3c:12:22:
53:4d:38:13:68:21:3e:ea:e8:e6:6f:5f:fd:88:aa:
ac:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1A:D9:41:13:CE:E4:84:C4:E2:E1:0F:28:36:02:DC:C7:66:01:3B
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3138302e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.180.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:4b:70:00:75:67:51:8e:84:82:4b:d0:c0:eb:64:4c:3d:43:
01:66:80:33:32:da:42:b8:38:a1:65:77:cc:43:64:5b:09:25:
e8:c3:2d:c1:60:bf:e7:80:ac:e8:b0:5c:d9:10:1e:ec:41:a7:
c3:d0:a9:a6:c4:9a:47:63:53:d6:5c:42:e4:1b:a1:0c:ef:e7:
9a:88:3f:b9:6d:4f:2c:3e:ee:08:ed:4c:86:0a:8b:71:c8:c3:
88:3a:72:59:73:fb:26:80:dd:2e:3e:77:df:17:f5:89:a9:14:
0c:41:88:7d:09:c6:f7:a5:b0:a8:3a:f4:54:13:cb:55:de:fe:
91:ba:08:99:78:18:ce:05:7c:86:6d:60:51:3d:12:da:16:1f:
55:3b:bf:8d:d3:af:0e:54:1b:00:37:c0:c5:22:6d:79:b2:80:
16:95:fb:81:15:53:92:2a:74:64:40:db:d1:3a:fc:9a:af:c1:
45:63:b0:20:ac:6d:2c:ad:e0:38:04:50:e9:69:51:b1:96:89:
c6:79:83:90:e2:ee:eb:42:99:24:1d:31:c8:31:aa:f0:ce:0b:
59:f4:cc:9d:52:62:40:07:11:1d:7c:0a:23:0d:fb:60:b0:86:
9d:9b:bd:eb:0a:91:16:a7:2f:f4:29:7e:59:da:0c:ca:41:97:
bf:b3:10:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:19 2024 by rpki-client on console-fra.rpki-client.org