Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3232342e302f32302d3234203d3e20383334.roa
File: 39312e3132342e3232342e302f32302d3234203d3e20383334.roa (raw, json)
Hash identifier: 3ifaOuXIjlEIELWp/Ie8NOCFpoSlOQ189xRbzWSGrjE=
Subject key identifier: 8D:B0:7F:37:6E:3A:BB:B0:38:8B:F1:AE:A2:35:EF:C3:FC:3B:8E:6C
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 659A6C6E3FFCE0E9EC2E2BB28C2B71C450E8C53C
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3232342e302f32302d3234203d3e20383334.roa
Signing time: Thu 22 Feb 2024 06:40:40 +0000
ROA not before: Thu 22 Feb 2024 06:35:40 +0000
ROA not after: Thu 20 Feb 2025 06:40:40 +0000
asID: 834
IP address blocks: 91.124.224.0/20 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:9a:6c:6e:3f:fc:e0:e9:ec:2e:2b:b2:8c:2b:71:c4:50:e8:c5:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 22 06:35:40 2024 GMT
Not After : Feb 20 06:40:40 2025 GMT
Subject: CN=8DB07F376E3ABBB0388BF1AEA235EFC3FC3B8E6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fc:1d:96:d0:a6:69:3a:ab:77:4a:9b:69:c8:
06:96:ce:78:95:ea:a4:a1:0a:8b:46:96:c3:e0:47:
2c:36:85:44:f2:8f:74:22:79:3e:d1:6f:96:41:95:
d0:fb:87:da:42:14:d8:66:ee:40:46:41:02:47:23:
d1:0d:36:46:07:42:48:dc:8a:00:af:8c:2a:ce:a1:
f8:6f:c8:1a:c3:8f:50:fd:c6:34:60:5e:97:3b:66:
30:cb:8a:51:20:f5:1a:da:62:35:1b:a5:cc:49:99:
20:bf:5b:fb:66:8f:8d:41:3e:4d:0f:a2:b6:38:ce:
0a:91:62:75:cd:56:eb:7f:cb:04:17:f7:a6:5c:a4:
1a:0a:a0:83:4b:c3:54:3b:9b:24:68:1d:dd:65:f8:
ad:88:17:f6:50:c7:28:a8:02:0f:2c:e6:29:ee:28:
e0:6e:46:93:a6:03:eb:c3:fc:c4:fc:69:22:fe:25:
b6:00:f0:b2:a7:10:d4:e6:dc:83:65:1f:e9:28:c3:
ae:ec:e1:f6:18:a3:63:72:27:b9:61:79:5e:b9:7c:
9c:25:69:72:60:8a:1b:c4:d2:f8:ce:c7:49:01:4a:
45:1f:3e:dc:46:a3:2e:84:37:df:41:de:85:30:e1:
08:69:18:27:08:1f:20:b6:1d:c8:5f:c8:40:39:83:
4e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B0:7F:37:6E:3A:BB:B0:38:8B:F1:AE:A2:35:EF:C3:FC:3B:8E:6C
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3232342e302f32302d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.224.0/20
Signature Algorithm: sha256WithRSAEncryption
57:68:22:59:ea:6a:2a:ec:4d:ee:c3:6b:4d:04:fc:8f:68:08:
c6:40:35:fe:4e:bd:a2:26:7a:bb:60:be:ea:0f:e2:ed:4b:7e:
55:52:a3:55:34:ec:c3:83:29:67:a6:d8:03:5b:44:65:51:07:
f8:21:0c:c2:eb:4d:c4:ff:fd:f7:57:1b:4c:b5:78:d2:d9:a5:
01:fd:83:55:b9:11:c3:7f:e0:1c:7d:d4:39:bc:37:93:0d:b8:
93:82:d8:19:be:54:e8:40:66:bb:c8:73:ca:df:ee:f5:59:0c:
3d:be:df:05:ec:f0:eb:70:7b:d3:5a:19:44:f2:e3:c2:8b:74:
6b:1c:b6:13:97:b3:2a:ca:58:40:c3:f9:48:ed:c0:2f:d3:1d:
3f:b7:8a:bb:5a:87:3f:5f:c2:35:4e:4b:2c:05:e8:0e:dd:5e:
89:6c:64:a6:2a:22:1a:42:81:4f:c3:1d:c2:52:e8:60:03:93:
3b:44:d5:3f:2b:23:a3:03:57:ae:0d:c7:ee:3c:1d:f9:e4:35:
94:7f:77:f8:21:59:5a:bc:ef:fa:bb:a8:9f:12:87:ec:1c:a8:
1a:55:e4:ca:10:6e:85:52:29:e0:b4:aa:29:df:66:c4:5b:b1:
8b:2e:5d:cc:4f:06:7d:a8:91:d0:3c:85:fc:1a:c1:40:36:b6:
01:6f:0d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:19 2024 by rpki-client on console-fra.rpki-client.org