Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3234342e302f32322d3234203d3e20383334.roa
File: 39312e3132342e3234342e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: vu3NJ3Q180sHxXN6XCRARlTrXprZN6JqCNoHUujOZQg=
Subject key identifier: 5E:09:E9:D6:E7:8D:FC:22:21:72:F1:8A:6F:25:BC:BC:FC:01:8E:59
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 65D753EF83B1C9E5C127776569808DF1B8077938
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3234342e302f32322d3234203d3e20383334.roa
Signing time: Thu 22 Feb 2024 06:40:38 +0000
ROA not before: Thu 22 Feb 2024 06:35:38 +0000
ROA not after: Thu 20 Feb 2025 06:40:38 +0000
asID: 834
IP address blocks: 91.124.244.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:d7:53:ef:83:b1:c9:e5:c1:27:77:65:69:80:8d:f1:b8:07:79:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 22 06:35:38 2024 GMT
Not After : Feb 20 06:40:38 2025 GMT
Subject: CN=5E09E9D6E78DFC222172F18A6F25BCBCFC018E59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:05:79:0e:39:1c:8e:04:cf:a7:2a:8a:be:3a:
13:e3:a4:07:72:88:fa:9c:e5:30:02:43:df:89:78:
a6:a4:7a:bf:63:85:b4:f3:3f:e8:fb:c6:36:2e:69:
c4:6e:25:81:84:ee:9d:f0:4a:f6:45:2a:5e:67:b6:
5b:9e:5c:11:cf:53:63:79:90:cb:22:18:be:04:d0:
f6:a0:36:f5:16:fa:7f:d4:1f:28:6f:70:2b:3a:eb:
a6:03:01:00:80:1d:b2:92:50:2e:86:3c:58:c0:72:
8d:10:ac:88:ef:8a:ff:50:af:17:2b:eb:fe:8b:87:
be:12:19:b4:13:a3:5d:a6:ef:6f:ff:a7:68:cd:fc:
b5:30:be:7b:a5:33:73:56:a2:46:36:49:88:11:33:
3e:49:d8:57:bb:87:db:36:ab:9b:71:20:11:99:b9:
f0:84:fd:b1:fb:b1:5b:4b:9a:a3:7d:5c:b8:7b:ad:
be:8f:e8:3b:d6:0e:1b:d4:2e:3e:7c:92:6b:88:cd:
e1:4b:54:02:41:5f:d8:0d:2f:9b:32:0b:01:20:11:
65:53:25:aa:9b:d5:80:b7:16:f2:a1:d1:59:36:d4:
07:60:98:a4:59:b7:00:4a:b1:63:7e:ba:51:e2:42:
69:7d:1e:d2:a1:ee:8e:5f:c9:34:d0:a1:35:af:a6:
99:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:09:E9:D6:E7:8D:FC:22:21:72:F1:8A:6F:25:BC:BC:FC:01:8E:59
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3234342e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.244.0/22
Signature Algorithm: sha256WithRSAEncryption
56:77:a2:19:4a:24:78:1e:22:17:25:6d:43:89:a9:a3:da:ab:
11:74:52:bc:7f:9e:1b:5b:d4:d8:2b:f4:b2:7e:36:cd:aa:c8:
bf:50:4a:36:6e:95:45:31:79:44:dc:79:20:c1:14:86:1e:59:
10:08:d3:20:1c:78:36:ee:34:99:18:9d:c0:4e:ac:c7:6d:7f:
c8:9d:d2:09:b2:97:1a:1c:dd:f7:9d:62:03:d5:3b:ad:15:33:
6d:67:0e:7c:c1:3a:af:aa:51:40:fb:ee:e8:18:98:4f:06:22:
23:6e:d2:30:a7:dd:6c:7f:07:b5:25:79:3a:ad:f0:2e:12:3b:
08:1f:dc:99:96:25:8c:e2:1e:57:db:19:a2:e9:5d:84:20:64:
10:09:cb:d1:a1:1e:d0:a5:58:3d:21:4c:d9:c4:6e:0f:70:d7:
c0:57:a4:6a:a7:38:c1:bb:ab:73:8a:c0:7b:b3:5a:6e:e8:6d:
01:6b:bc:53:02:23:ca:68:c8:5a:71:5e:8a:11:cc:40:db:7d:
8f:b0:8c:52:17:07:39:d6:d2:e8:d6:ce:04:7b:42:8b:d7:b6:
1d:9f:62:99:a1:8a:c9:87:f0:69:60:a4:80:5f:f9:e0:df:c7:
dd:64:56:06:47:f0:29:15:95:87:da:8a:e2:d5:b0:22:32:a3:
3f:92:8a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 13:38:39 2024 by rpki-client on console-ams.rpki-client.org