Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3231362e302f32342d3234203d3e20383334.roa
File: 39312e3132342e3231362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: OZAhxCsrxwn/231L7KGphm4SuUDuKr6pEqtUFwOvswQ=
Subject key identifier: 79:BD:F4:7C:41:0C:1B:AF:39:60:CC:48:19:F9:05:8C:1E:FC:0F:45
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0AD5CEEA678DE238A61F99E4D4954292F2D56382
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3231362e302f32342d3234203d3e20383334.roa
Signing time: Thu 22 Feb 2024 06:40:39 +0000
ROA not before: Thu 22 Feb 2024 06:35:39 +0000
ROA not after: Thu 20 Feb 2025 06:40:39 +0000
asID: 834
IP address blocks: 91.124.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:d5:ce:ea:67:8d:e2:38:a6:1f:99:e4:d4:95:42:92:f2:d5:63:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 22 06:35:39 2024 GMT
Not After : Feb 20 06:40:39 2025 GMT
Subject: CN=79BDF47C410C1BAF3960CC4819F9058C1EFC0F45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dd:21:81:74:06:53:9c:96:fc:9b:46:f8:23:
d4:e5:db:f3:2f:03:28:79:a9:40:56:5e:37:52:7d:
1f:03:3a:03:94:4b:ac:a2:7b:7c:e3:fd:5f:5c:db:
4e:dc:47:25:c4:7d:13:a9:da:6f:0a:18:8d:a4:37:
df:51:92:b7:2a:8d:03:5c:61:a7:90:c0:e9:41:3b:
b4:c5:55:14:b9:b4:d4:da:be:db:63:55:24:f0:13:
7c:58:cf:44:e9:4d:9b:b0:af:6b:c2:ed:5b:a4:1b:
c3:8d:58:61:08:1f:1c:ef:2c:a0:b8:08:ab:af:58:
83:05:57:18:5a:b9:3d:46:01:80:07:2c:c4:8e:d4:
a2:26:33:db:fc:0c:6e:20:4a:0f:2e:5f:d6:fc:7a:
b7:ac:cf:88:82:6b:fd:91:18:f4:f7:40:6c:a4:58:
7b:5a:be:c0:1e:b2:44:87:17:f1:0c:13:25:61:cd:
3b:ff:1d:bf:f6:4c:ed:d7:b7:4e:af:9e:e9:c2:ea:
38:c5:41:96:b4:d1:1b:95:d3:0a:f0:8a:0c:39:1f:
7a:d3:4b:93:7b:12:43:3a:2e:f3:4a:08:55:33:b5:
8c:0a:f5:bb:31:93:c8:78:c6:66:9c:77:b3:a2:70:
f4:ca:ca:8f:fe:38:d2:84:69:ff:bc:cc:6f:01:04:
d2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BD:F4:7C:41:0C:1B:AF:39:60:CC:48:19:F9:05:8C:1E:FC:0F:45
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3231362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.216.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:94:cf:68:8f:07:6c:aa:16:af:fd:fb:77:32:57:88:b2:43:
f4:b6:ed:c7:83:07:d4:e2:ea:ad:ca:24:5a:81:16:6e:d4:42:
1c:c0:5f:86:3c:df:f0:12:3f:61:b7:cc:f4:e1:c5:54:67:f0:
91:94:d2:25:fa:f0:21:88:e1:9f:ee:31:17:e1:55:41:eb:4b:
43:43:ad:25:43:06:ab:a8:d6:e5:22:33:73:31:76:91:77:f1:
a0:87:9f:f6:58:66:c8:95:51:72:1e:9e:bb:08:96:f8:e0:93:
b6:3e:17:07:15:df:df:c9:5d:f3:91:a4:96:0d:81:83:96:9f:
82:f4:c0:44:91:27:8f:b0:3d:ea:f7:0f:f7:ce:99:97:39:6e:
a0:64:0d:75:d9:7b:4a:14:1c:6e:c3:e4:bb:fb:cc:61:06:33:
b7:f4:e7:f5:5d:cd:e7:cd:9f:98:3b:ac:d2:c3:46:f9:94:5e:
ab:cd:6c:06:39:9b:0e:7b:8b:8a:42:94:80:6c:ee:10:b6:0a:
a6:1a:eb:9f:37:63:4c:41:fd:84:7b:6f:dd:58:6d:3a:1e:45:
73:12:28:b3:40:ca:06:df:30:54:8a:83:d6:8d:37:7c:2c:7a:
3c:d5:1b:5d:39:17:aa:8f:3b:f3:36:48:4f:0f:21:b8:68:00:
a5:f4:eb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 13:38:39 2024 by rpki-client on console-ams.rpki-client.org