Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3139322e302f32302d3234203d3e20383334.roa
File: 39312e3132342e3139322e302f32302d3234203d3e20383334.roa (raw, json)
Hash identifier: j3JHj1pRaaHelaMGlXDZNhHy5wReY8Hu/R3HCmffg80=
Subject key identifier: 36:A8:38:2C:C8:9A:57:5F:BA:43:0F:EC:43:32:76:15:A0:23:D6:BE
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 5EF308134064A8A195C2A57013F5FB302264AFD7
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3139322e302f32302d3234203d3e20383334.roa
Signing time: Thu 22 Feb 2024 06:40:38 +0000
ROA not before: Thu 22 Feb 2024 06:35:38 +0000
ROA not after: Thu 20 Feb 2025 06:40:38 +0000
asID: 834
IP address blocks: 91.124.192.0/20 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:f3:08:13:40:64:a8:a1:95:c2:a5:70:13:f5:fb:30:22:64:af:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 22 06:35:38 2024 GMT
Not After : Feb 20 06:40:38 2025 GMT
Subject: CN=36A8382CC89A575FBA430FEC43327615A023D6BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:68:54:81:3a:aa:a3:57:63:cb:50:0c:e0:4d:
ce:d3:db:80:ac:42:33:52:56:47:5c:be:67:55:b4:
b6:3f:aa:57:d9:bb:d3:92:bf:5a:73:bd:0d:49:4e:
a0:f6:39:9b:eb:26:14:c7:71:55:e7:52:6c:5f:6c:
99:bb:09:36:11:5a:04:8a:f6:64:cb:1c:db:6f:84:
29:d7:3a:be:5c:46:35:fd:4e:55:e2:85:38:9c:e5:
66:2b:be:7f:5d:99:77:b3:a8:b3:51:98:bc:44:01:
81:54:e1:e6:b1:b1:9f:37:9a:ee:57:7d:b5:dc:dc:
64:19:a7:f2:c1:4a:89:df:d1:84:6c:56:00:7e:64:
60:cc:c3:94:a8:65:e2:1e:11:b9:7c:7b:6a:6d:80:
99:e2:c4:55:19:25:e3:49:a6:cf:52:22:31:6f:dd:
4e:a0:9f:e4:8a:3a:00:ec:76:6b:47:c6:1b:a9:3f:
74:e6:b5:87:de:d7:39:d2:0e:30:71:d7:c9:36:ee:
42:5f:7c:07:e3:7e:a1:44:cf:e4:96:4d:71:da:df:
8d:cb:35:db:66:c1:90:4f:2e:8b:f8:2a:1b:31:b6:
c2:07:08:c5:6a:e5:7e:b5:73:c3:6f:53:c7:21:06:
d8:30:13:bb:20:8f:ef:22:be:f3:28:5d:e0:28:ea:
78:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A8:38:2C:C8:9A:57:5F:BA:43:0F:EC:43:32:76:15:A0:23:D6:BE
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3139322e302f32302d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.192.0/20
Signature Algorithm: sha256WithRSAEncryption
87:92:a0:b0:5e:dc:cf:08:58:9f:80:58:12:d3:c1:ee:13:5c:
6d:94:45:94:89:d9:4b:99:ba:17:c6:10:e2:a2:16:8f:66:41:
e3:fa:40:88:b7:e8:28:5b:58:3b:20:fe:e1:c9:5b:76:99:4e:
6c:ad:ba:77:e9:e7:34:cb:fa:86:e0:27:7b:c1:79:0b:46:34:
49:e8:c6:0e:84:78:ca:a2:38:a5:24:2d:2d:90:5b:e7:ec:70:
80:a7:0c:0e:16:3a:e4:7b:dd:09:3b:e6:0a:bc:b3:5c:94:7d:
aa:c1:88:04:74:af:7d:4c:e5:81:ea:ea:22:e3:ed:32:35:0c:
af:c4:6b:b6:21:ef:56:75:40:ee:ee:da:48:93:92:85:4e:aa:
fc:0f:e8:fc:33:51:cb:54:41:ad:fa:02:c3:12:dc:de:27:f0:
bf:b5:69:7b:1e:4d:46:57:f1:17:94:48:06:83:c1:b5:8b:d7:
3a:ff:35:19:2b:a3:90:72:95:46:77:ff:5e:6e:cd:74:5d:46:
38:90:6c:7d:a1:31:f7:21:18:0f:f4:15:3b:37:60:6a:04:45:
55:5f:b4:ff:30:47:b9:81:67:f5:ae:20:2b:06:99:f5:be:e7:
91:67:15:16:71:9f:7b:0f:eb:81:22:4e:a2:15:b0:ac:5c:f7:
45:2f:e5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 13:38:39 2024 by rpki-client on console-ams.rpki-client.org