Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3234302e302f32342d3234203d3e20383334.roa
File: 39312e3132342e3234302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: t2dyjS3DwDAB/mGn8sIg5s+Q+ukXiji35vKxFuwqAT8=
Subject key identifier: 9B:DB:1C:59:A2:7A:93:44:6F:D8:59:59:89:42:03:B8:D4:1F:66:24
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 04263BBDC0B1F7F45038714445B446E2808A608B
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3234302e302f32342d3234203d3e20383334.roa
Signing time: Thu 22 Feb 2024 06:40:38 +0000
ROA not before: Thu 22 Feb 2024 06:35:38 +0000
ROA not after: Thu 20 Feb 2025 06:40:38 +0000
asID: 834
IP address blocks: 91.124.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:26:3b:bd:c0:b1:f7:f4:50:38:71:44:45:b4:46:e2:80:8a:60:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 22 06:35:38 2024 GMT
Not After : Feb 20 06:40:38 2025 GMT
Subject: CN=9BDB1C59A27A93446FD85959894203B8D41F6624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:38:45:6a:01:53:f1:15:6d:10:d5:7e:c7:51:
c5:32:c6:a6:03:78:ca:11:c6:a7:9a:ca:b2:4f:91:
a2:70:4e:76:7e:9e:b6:45:e4:95:f7:92:b4:d8:8e:
51:cf:43:83:57:50:16:1f:2c:d2:79:a7:38:7b:00:
b3:76:90:6b:d6:76:af:f7:71:f6:0b:4a:0d:dc:27:
cc:c6:b1:45:d4:34:bb:e8:50:f0:74:ad:f7:ce:07:
f6:77:37:f8:ab:f6:17:0b:07:56:c4:82:9e:d6:38:
1c:f8:5d:93:c5:c3:0c:f1:09:6e:05:51:5e:0e:4c:
3d:b1:fb:e4:2e:42:76:81:12:a7:ce:19:1b:96:5d:
09:f6:b6:af:f6:ba:ca:14:c9:c9:7e:26:2d:5a:eb:
6a:91:b6:b2:ec:f0:ee:74:b4:9b:97:48:b4:ff:00:
10:90:c6:00:3b:96:c3:0a:82:e3:3f:40:89:4d:68:
06:50:45:60:29:44:67:8c:24:bd:62:2b:38:10:14:
94:c4:f5:c6:58:97:16:62:46:3e:53:91:dc:49:e5:
6d:48:21:3b:25:36:2c:c6:75:37:fd:ae:5a:df:04:
2a:36:11:b9:a4:74:f3:97:52:8d:2c:ff:64:27:2d:
a8:78:7a:39:6c:e7:08:84:71:4d:ed:f6:fa:f9:03:
78:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DB:1C:59:A2:7A:93:44:6F:D8:59:59:89:42:03:B8:D4:1F:66:24
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3234302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.240.0/24
Signature Algorithm: sha256WithRSAEncryption
47:f3:78:ea:d3:9c:f2:d0:78:e0:45:57:c6:2b:72:53:50:d3:
4b:3d:eb:27:dc:78:c6:7b:f4:5f:cd:98:3f:f1:61:23:3a:37:
7d:5b:25:d4:32:16:b4:f5:46:31:ac:e5:65:b2:ec:3c:5e:ba:
f4:19:01:08:26:33:de:e6:49:66:d5:e1:c5:ed:b4:a3:00:15:
5c:25:7e:82:47:08:ff:e9:49:62:83:9f:08:2a:d9:f1:7a:a1:
44:29:b6:bf:19:96:73:ca:f7:b1:f4:15:2e:fc:28:0b:b3:5c:
bc:a7:86:9a:b2:8d:23:e9:2f:f8:ef:a3:45:17:81:b6:a4:2a:
0b:65:79:84:26:23:01:5f:d1:93:c6:02:9c:41:44:5b:09:d2:
88:9c:30:ea:e0:3b:fe:1d:e7:03:17:1f:e3:c7:ab:1b:fd:c6:
bc:cd:ea:96:b3:a3:d6:6d:b0:7a:59:a9:dc:99:2b:4e:05:b5:
3c:50:a3:78:a5:ed:a6:23:c9:f8:2e:61:d8:e6:d9:31:7d:8e:
23:77:6e:e4:27:e1:c4:a9:9c:40:ed:21:02:c9:32:e3:60:15:
fe:3e:c0:33:01:56:5c:70:45:2f:2d:db:dd:78:23:bf:8d:0a:
87:54:27:5a:fe:60:d5:69:bf:ec:71:23:ec:7b:df:f6:4a:3b:
00:11:5a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 13:38:39 2024 by rpki-client on console-ams.rpki-client.org