Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3232302e302f32322d3234203d3e20383334.roa
File: 39312e3132342e3232302e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: KvaCDHYVOXDqXN37271zDqXhgltdSWL3tD1czaumacU=
Subject key identifier: 78:71:4E:32:95:24:3E:88:1C:B8:A7:04:95:BA:B7:03:C8:54:52:1C
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 200D5DC327C2519C7ABE793E66E85A61DED28BDF
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3232302e302f32322d3234203d3e20383334.roa
Signing time: Thu 22 Feb 2024 06:40:40 +0000
ROA not before: Thu 22 Feb 2024 06:35:40 +0000
ROA not after: Thu 20 Feb 2025 06:40:40 +0000
asID: 834
IP address blocks: 91.124.220.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:0d:5d:c3:27:c2:51:9c:7a:be:79:3e:66:e8:5a:61:de:d2:8b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 22 06:35:40 2024 GMT
Not After : Feb 20 06:40:40 2025 GMT
Subject: CN=78714E3295243E881CB8A70495BAB703C854521C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bf:82:83:cf:c7:f9:90:72:61:36:6d:48:6b:
70:de:55:bc:db:d4:7d:9a:8e:b4:c1:ce:75:6d:19:
f3:3e:11:17:12:fc:de:59:f8:88:fb:1f:67:3d:f3:
73:23:2f:7a:78:1c:66:ae:34:7c:aa:f9:c3:f8:dc:
36:69:74:dd:08:fd:0e:8c:05:c8:f9:ea:3c:bf:01:
ce:64:37:09:fd:2e:fa:b6:a7:b9:52:cf:fa:07:10:
15:09:11:6f:d8:ed:8b:87:4a:d4:ec:96:21:ba:a5:
d2:bc:e6:98:bc:35:3f:82:24:09:7a:40:78:26:bc:
f6:c3:18:80:8a:1f:26:fa:91:d7:e8:56:4e:3f:bc:
32:9f:cb:d1:63:cb:dc:6f:c2:b7:3d:7a:02:67:7c:
ac:77:07:d5:55:f8:9d:7f:7f:d3:ab:9f:9a:16:2d:
cb:c6:9f:51:6f:3d:73:e0:b2:ee:78:88:7b:dd:a4:
41:7a:c6:02:45:74:56:7f:87:57:db:7c:bd:3e:1f:
53:9c:a7:c2:ea:1a:59:9e:d6:36:18:e9:f9:b3:b3:
1d:9a:12:ab:b6:eb:60:8c:0a:dc:d7:d8:1e:b6:7c:
6d:90:6a:68:58:a1:5e:13:c0:e3:51:05:2b:e7:ac:
58:b2:2d:9b:b5:60:8d:2e:19:20:c8:8d:7b:d8:fd:
64:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:71:4E:32:95:24:3E:88:1C:B8:A7:04:95:BA:B7:03:C8:54:52:1C
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3232302e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.220.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:32:c1:23:11:4a:72:ed:a1:bb:55:d9:03:5e:0b:d6:58:d5:
03:f7:84:73:2f:be:73:c0:5b:98:28:08:9f:3c:7c:d1:af:db:
c2:f1:4f:2c:bc:65:c3:e5:e5:db:c9:ed:36:72:41:1e:54:d9:
da:c4:e7:41:3a:26:38:d0:83:97:a3:ec:f5:58:bd:26:cd:e4:
22:d9:91:d2:6f:fd:2c:f9:dc:c0:fe:1b:f3:22:0d:20:b4:07:
d8:4f:a2:b2:5e:57:e0:a2:1e:aa:35:51:0d:b7:4a:d3:a4:d9:
8c:6c:29:bc:31:3f:83:99:8a:50:ee:45:b8:53:8e:83:21:27:
4f:15:34:7f:e3:77:ce:33:66:00:63:03:3c:0d:b6:1a:96:4c:
ab:39:e3:50:85:25:2c:9f:7a:41:b5:e1:c7:b7:e7:d1:a1:fb:
b7:80:16:79:a1:9f:64:4a:01:f5:20:b6:a1:93:35:b0:ec:a2:
89:3e:4c:dc:1a:96:61:cd:8e:7e:f1:af:93:1d:46:c3:4c:c6:
99:3a:93:79:70:96:d1:c2:59:f0:8d:c8:37:5f:2a:23:ac:05:
9f:13:fc:a2:d6:33:d6:a1:9c:86:fb:f6:61:f4:4d:85:00:af:
df:c1:58:65:06:c3:26:fe:ce:e2:f5:7d:06:5b:67:a7:48:42:
43:60:4c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:19 2024 by rpki-client on console-fra.rpki-client.org