Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3234312e302f32342d3234203d3e203538303631.roa
File: 39312e3132342e3234312e302f32342d3234203d3e203538303631.roa (raw, json)
Hash identifier: a5NBUsZOWiEhd/Bz73i2un0qrbGePmqFnKRmlsfy2dQ=
Subject key identifier: 97:F4:95:23:D9:C0:95:DB:80:8A:71:ED:38:0A:2D:B9:CC:B4:57:F5
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 200DE1B0A0826510FF86222E24A196078ADD9D6E
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3234312e302f32342d3234203d3e203538303631.roa
Signing time: Tue 20 Feb 2024 14:53:21 +0000
ROA not before: Tue 20 Feb 2024 14:48:21 +0000
ROA not after: Tue 18 Feb 2025 14:53:21 +0000
asID: 58061
IP address blocks: 91.124.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:0d:e1:b0:a0:82:65:10:ff:86:22:2e:24:a1:96:07:8a:dd:9d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 20 14:48:21 2024 GMT
Not After : Feb 18 14:53:21 2025 GMT
Subject: CN=97F49523D9C095DB808A71ED380A2DB9CCB457F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:01:a5:ca:d1:e8:ca:34:a7:1d:34:94:fc:49:
f0:73:85:6d:6a:22:1e:22:b7:c8:17:a6:e0:0a:d4:
69:67:97:41:ca:19:5d:20:be:99:51:8e:98:9a:7f:
b9:99:e9:94:27:d4:5f:96:73:9b:9a:23:de:b1:b8:
c7:8d:56:a0:be:ae:c9:3e:d7:bb:7b:3f:d9:0d:96:
82:34:23:e6:f4:cb:f4:77:9a:9f:fe:5e:42:a0:a9:
38:a1:97:ad:a3:9d:6d:13:3b:39:fc:9b:3a:31:81:
ff:93:30:7b:9c:53:c2:74:cb:95:4a:9f:5d:97:cb:
0f:e6:ca:78:34:85:ed:a7:f8:98:dc:74:50:0b:b7:
93:dd:f5:6b:e1:bb:e8:ef:c1:ea:2e:44:10:11:5e:
6a:4b:a0:c4:ec:5a:68:4f:3d:10:8a:36:90:c6:2c:
dc:bd:0f:09:5e:c8:52:ad:94:cb:ae:af:c2:6e:c3:
56:58:c2:05:f4:f9:e4:ad:35:84:e4:6e:9c:c4:d7:
ae:ac:b4:44:88:2b:ac:50:3e:66:23:0e:01:5b:9d:
f8:ea:f7:1c:6e:b7:7c:75:b4:ff:04:a9:9e:9a:57:
b1:29:13:d9:df:4d:ef:71:4d:d1:cf:d1:87:a2:42:
5d:c2:93:f5:de:3e:d0:af:07:0c:66:81:41:ca:83:
56:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F4:95:23:D9:C0:95:DB:80:8A:71:ED:38:0A:2D:B9:CC:B4:57:F5
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3234312e302f32342d3234203d3e203538303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.241.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:dc:5a:c2:0c:4c:56:74:ee:21:7a:44:83:5c:8f:74:38:39:
0c:74:cd:3e:e9:f1:96:45:09:77:70:70:d0:28:c6:f2:eb:e2:
f3:e2:33:41:d5:22:00:8b:b5:b1:5b:df:09:6e:05:74:93:04:
36:ba:fe:80:2a:1f:8e:cc:f9:cf:8a:e0:b0:fe:07:35:bb:09:
90:d5:13:3a:0d:a7:20:ae:0d:05:41:cf:83:a3:bb:7b:fc:c9:
68:41:93:a9:79:d8:47:9c:74:84:8b:4e:63:4d:76:61:5b:0a:
1e:c5:09:40:50:ac:69:04:80:8f:0d:72:c0:9e:e1:b1:d9:d5:
cd:3d:26:9a:a8:e7:70:ca:1a:45:a6:a9:13:f0:48:00:f8:47:
32:0f:db:05:82:4a:cc:05:dc:7f:90:a7:c4:20:02:c1:70:3b:
9a:d6:aa:e3:ed:78:04:0c:a6:fb:6e:72:45:7e:1a:46:b4:bc:
e2:8d:e9:75:b1:f9:e8:f3:77:c2:68:30:63:3b:8f:b9:45:f1:
7c:d9:89:1a:8d:46:ff:c7:e8:7b:79:ab:cf:cd:72:23:4c:19:
ef:e1:ac:d1:19:56:4d:9d:8d:e2:d7:c1:f8:f7:df:b7:b9:9d:
80:81:74:74:1c:fb:ef:19:6a:5d:89:0a:70:5f:da:5c:f4:a4:
a9:c2:b4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:10 2025 by rpki-client