Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3230382e302f32312d3234203d3e20383334.roa
File: 39312e3132342e3230382e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: 4H7yfuDDteyxd8ymcUmFYhZX/scznNt4sUlM4d6uVwI=
Subject key identifier: E1:51:1B:49:9B:E6:8B:BF:21:7D:18:1A:54:F4:6E:44:D0:6C:3A:CC
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 6526FC98CB86C704916604BC8314E6EAB4DB8506
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3230382e302f32312d3234203d3e20383334.roa
Signing time: Thu 22 Feb 2024 06:40:38 +0000
ROA not before: Thu 22 Feb 2024 06:35:38 +0000
ROA not after: Thu 20 Feb 2025 06:40:38 +0000
asID: 834
IP address blocks: 91.124.208.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:26:fc:98:cb:86:c7:04:91:66:04:bc:83:14:e6:ea:b4:db:85:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 22 06:35:38 2024 GMT
Not After : Feb 20 06:40:38 2025 GMT
Subject: CN=E1511B499BE68BBF217D181A54F46E44D06C3ACC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:15:3d:b2:4c:cc:6d:eb:49:5f:2c:d2:fb:5b:
61:c1:47:1a:7c:20:3c:61:42:98:5c:08:7e:07:24:
cc:6d:c8:61:0a:dd:fd:2a:b2:3f:c0:ad:27:0f:09:
02:44:e8:4b:bf:5d:e3:a2:d0:96:1e:f0:31:d2:da:
35:f8:1a:ca:ff:2c:5e:12:ff:ed:1c:b6:9c:f1:fd:
40:b7:da:d8:82:57:1c:c9:ae:4d:f4:12:a2:79:32:
1b:1b:5d:75:26:bc:da:a9:f6:28:3c:9b:c0:37:cc:
72:ee:74:c3:7a:1c:14:81:16:07:c4:0e:7e:11:0c:
e6:65:d6:c7:0c:08:3d:08:27:59:98:d6:a4:77:0b:
2d:62:53:6e:77:1a:43:0a:27:51:3f:48:b6:3e:cf:
a9:c3:5c:36:2e:51:7e:ca:9e:86:69:29:fa:b0:93:
0b:4a:ce:e9:11:70:a7:1f:fd:e1:45:e0:d8:08:a8:
e0:3c:68:67:8e:f3:f8:96:26:f1:1d:d8:05:6a:b7:
13:83:ee:1d:16:33:cc:fc:8f:ef:5b:f6:19:9c:0d:
4e:26:69:0c:49:07:6a:24:6e:ae:2e:0b:2d:09:1f:
77:a2:b9:3f:f7:7f:74:1b:9b:7f:c5:9e:c7:7b:a5:
6a:e7:22:5a:b0:a7:ee:14:6b:41:a9:9e:2b:4a:f9:
11:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:51:1B:49:9B:E6:8B:BF:21:7D:18:1A:54:F4:6E:44:D0:6C:3A:CC
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3230382e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.208.0/21
Signature Algorithm: sha256WithRSAEncryption
03:3a:b3:cf:5c:7f:cc:e6:ab:6c:24:8c:1a:c1:b4:54:e7:7a:
e2:ab:2d:1f:55:60:b4:9a:56:b2:8e:12:e0:b8:42:09:c5:6d:
cc:dc:47:85:3b:b4:0a:68:3d:09:c4:bf:70:36:1b:78:e8:c1:
37:89:e7:20:99:e3:a7:14:f8:74:56:3f:cf:35:5f:6c:72:4b:
72:bb:bc:4d:03:2d:0f:99:80:bb:dd:16:0f:c4:2b:16:1b:08:
1d:35:3f:4d:48:44:96:4e:c1:0b:f5:1c:48:68:07:bf:5f:e8:
b6:41:14:f3:44:50:0e:51:b0:1a:21:6d:f6:56:45:3a:d7:2c:
87:60:6c:34:e0:c0:cc:b5:cd:a7:c1:18:d9:12:2b:81:a7:03:
53:d1:fc:de:89:c4:35:c9:47:30:47:0b:1b:6b:d8:3c:e7:8d:
17:0f:25:d1:23:e2:20:5b:e9:d8:e7:22:34:b0:10:fb:97:ee:
37:85:3d:bf:f6:27:70:60:07:a0:1a:3d:50:64:89:5d:8f:7c:
dc:36:8b:4f:31:40:63:4c:be:6b:40:5e:19:3d:39:d1:53:11:
0e:3a:94:7e:b6:2f:d2:6c:6d:31:3d:4e:dc:b7:ef:81:29:f6:
75:c2:88:cb:f2:6a:dc:85:20:a6:b0:7a:47:a6:66:97:db:4d:
26:87:de:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 13:38:39 2024 by rpki-client on console-ams.rpki-client.org