Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3231372e302f32342d3234203d3e203538303631.roa
File: 39312e3132342e3231372e302f32342d3234203d3e203538303631.roa (raw, json)
Hash identifier: d+Bpqc18ACTgdfqz+MIt2gU4nRTqHz34etcFIFMXK88=
Subject key identifier: C9:85:3C:F4:36:4D:DE:05:A0:13:AB:10:D0:92:6E:FC:56:48:5E:F6
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 09B270282606443CA981E6A9A10BBBD21E226FCC
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3231372e302f32342d3234203d3e203538303631.roa
Signing time: Tue 20 Feb 2024 14:53:05 +0000
ROA not before: Tue 20 Feb 2024 14:48:05 +0000
ROA not after: Tue 18 Feb 2025 14:53:05 +0000
asID: 58061
IP address blocks: 91.124.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:b2:70:28:26:06:44:3c:a9:81:e6:a9:a1:0b:bb:d2:1e:22:6f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 20 14:48:05 2024 GMT
Not After : Feb 18 14:53:05 2025 GMT
Subject: CN=C9853CF4364DDE05A013AB10D0926EFC56485EF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:20:0e:31:4d:62:f2:19:b4:fb:86:3a:5c:1e:
80:1d:7f:c8:14:7d:5b:9b:69:b1:d3:a4:17:85:93:
62:7e:88:93:58:19:95:fa:f4:30:ed:c3:4d:77:46:
2f:86:d1:6a:74:2d:f4:75:a6:c5:ce:79:c8:2b:34:
0a:5f:14:0f:66:17:76:dc:11:53:fd:63:15:92:4f:
e0:80:8e:b5:0b:30:d6:bc:be:de:3c:16:7b:e5:f6:
7f:00:0e:51:f8:4c:cf:e5:21:d5:9d:39:29:79:53:
0c:a0:af:22:7d:a7:3a:3b:bf:59:e5:95:a4:a5:46:
e5:53:4f:a6:3c:56:b0:72:18:f2:67:59:86:01:50:
39:59:bf:a4:7a:49:da:88:c6:17:32:20:51:dc:8f:
dc:06:67:1c:a5:f5:3f:1b:97:e7:0b:71:92:30:58:
34:21:62:e0:8b:85:74:7b:a7:80:36:ea:7e:af:3a:
b8:af:41:69:8b:2f:91:9c:40:8a:5c:ff:9f:5c:04:
75:a2:c8:92:49:66:d7:73:6e:97:35:2c:04:9b:f4:
69:5f:06:69:cf:1e:28:5c:8e:03:b0:b1:5e:c3:a4:
be:99:d0:2d:15:01:92:f7:97:24:e1:96:e2:bb:33:
a9:96:43:8d:56:03:a0:a4:59:6b:96:cb:5d:51:43:
47:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:85:3C:F4:36:4D:DE:05:A0:13:AB:10:D0:92:6E:FC:56:48:5E:F6
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3231372e302f32342d3234203d3e203538303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.217.0/24
Signature Algorithm: sha256WithRSAEncryption
58:60:e2:59:ad:e2:62:16:80:5f:b6:52:eb:a1:85:47:cf:5d:
18:2c:5d:29:3b:0e:69:d3:24:5d:75:b6:e4:35:af:5f:65:c3:
3e:fc:1b:ab:9d:b3:b0:cf:61:ac:4f:52:44:6c:de:46:34:07:
4f:f2:09:91:1a:18:58:19:62:c6:1b:5d:a8:71:3f:92:a6:79:
8d:60:0d:06:c7:19:3b:1d:4b:88:b0:55:b2:cb:2f:09:3c:80:
bd:12:eb:b2:66:56:87:cb:de:ac:c0:a4:d1:20:ed:fe:d4:75:
a8:df:1a:ec:b9:6b:36:d8:9f:99:17:99:cd:0c:aa:54:5d:ca:
64:66:fd:32:75:ca:88:87:3d:af:7b:bd:81:5e:c0:9f:41:47:
75:c2:f3:a4:e1:f5:44:c6:57:99:21:d3:c7:5f:f5:05:8e:51:
d6:b4:4f:87:e0:69:77:9c:c6:20:12:52:ad:a0:42:8b:26:c9:
f9:8c:c0:21:24:e2:d2:4a:1e:6a:bb:40:7d:21:cb:0c:ea:9e:
23:11:3e:3d:62:0a:b6:a4:11:0a:e7:29:2c:a1:52:4c:ec:10:
a9:82:62:c1:d0:45:34:c2:4f:8e:93:f6:10:7c:62:dc:78:f0:
2e:a2:04:3d:08:99:48:c0:89:64:39:25:8f:e4:f7:5b:e9:f6:
1c:9f:85:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:37 2025 by rpki-client