Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3234382e302f32322d3234203d3e20383334.roa
File: 39312e3132342e3234382e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: y4+qjdZwJza6kp/w5CaL7ynS9skZWXapYnGBxZmPZgI=
Subject key identifier: C7:27:A4:4E:12:3A:7F:84:EA:EC:80:5A:B3:6E:8C:17:55:3A:B1:3F
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 38DED6BD83A244EA33B786BA3055FAF49309291E
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3234382e302f32322d3234203d3e20383334.roa
Signing time: Thu 22 Feb 2024 06:40:39 +0000
ROA not before: Thu 22 Feb 2024 06:35:39 +0000
ROA not after: Thu 20 Feb 2025 06:40:39 +0000
asID: 834
IP address blocks: 91.124.248.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:de:d6:bd:83:a2:44:ea:33:b7:86:ba:30:55:fa:f4:93:09:29:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 22 06:35:39 2024 GMT
Not After : Feb 20 06:40:39 2025 GMT
Subject: CN=C727A44E123A7F84EAEC805AB36E8C17553AB13F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b6:0e:a4:6a:54:35:7e:8a:80:8a:4a:de:f3:
e4:cf:7c:11:db:17:2a:c4:34:36:78:74:4d:f9:7c:
19:a3:0e:24:37:7a:3f:15:0f:75:f0:59:81:ff:1a:
b1:0d:46:f0:65:68:4f:93:14:83:a5:3a:b5:72:56:
49:32:55:07:49:95:55:d7:ad:a4:f7:38:e0:a1:fc:
e3:d7:13:f1:10:2b:ad:78:bf:97:b6:bc:f2:3d:fe:
fd:09:e7:95:30:df:aa:5d:48:25:0c:35:5f:09:bd:
ae:b1:6a:7f:ee:5f:28:f6:7a:32:0d:63:83:43:d9:
4d:ed:d5:c3:d7:aa:20:b5:c1:ee:bc:bf:46:7e:33:
7e:cd:22:11:65:da:f8:21:c2:b1:af:99:f3:e7:70:
90:df:70:6f:5c:8e:fe:6d:34:6d:ce:e0:cf:84:42:
72:84:88:bd:4c:3c:a6:e4:a7:dd:bb:e3:42:78:54:
b6:a3:4f:d9:fd:89:fd:a5:de:cb:4f:0a:64:7b:da:
34:2c:76:eb:56:69:d8:30:e4:5a:6d:b8:98:30:1a:
60:f4:57:c2:b4:f5:0d:ef:7b:18:fa:e6:b8:36:24:
cd:e7:da:d9:19:86:b1:30:6b:ad:b0:8f:43:3b:f7:
2f:fe:9e:61:37:a8:4a:dc:b1:33:19:19:55:a9:13:
7b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:27:A4:4E:12:3A:7F:84:EA:EC:80:5A:B3:6E:8C:17:55:3A:B1:3F
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3234382e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.248.0/22
Signature Algorithm: sha256WithRSAEncryption
35:df:c7:17:6c:d9:2f:23:dd:dc:6f:8a:bf:b6:1b:42:c3:45:
7b:b9:73:ca:ff:6e:a5:f2:3a:57:57:eb:7a:62:dd:72:be:e9:
88:1e:83:e3:8a:bf:4b:48:b5:04:44:b8:a6:c8:7c:c7:34:ef:
82:52:71:4c:13:33:ab:ea:52:d0:7e:6e:e2:fa:ce:df:5c:b5:
5d:12:d3:9f:7f:69:f3:f3:ea:00:0d:55:bf:4f:6d:69:68:8f:
7b:40:fa:32:64:bb:30:b2:ad:2c:24:67:f4:3c:fc:27:63:88:
f7:02:f2:89:16:a1:c3:d7:67:03:38:00:3a:73:91:05:f6:a1:
a8:44:ef:ab:5a:e0:52:50:10:7f:3c:bc:0e:c8:e2:40:fc:c9:
80:82:28:6a:35:d4:e3:e4:0e:36:c2:56:3b:0d:96:75:7a:15:
3c:18:17:16:8c:e8:a8:08:eb:8d:9f:42:41:86:2d:d9:2b:c9:
b2:33:8a:ba:55:1f:20:9a:9e:a1:8e:32:9e:6e:6c:ba:43:42:
68:48:8d:db:65:bc:2d:dc:fb:bb:96:a1:63:a7:8a:c3:13:d9:
4c:b4:bc:2e:7c:90:4f:c9:aa:e4:02:bf:c0:ff:d8:56:40:70:
a6:d4:45:87:5c:47:a6:83:29:75:b6:c4:05:4a:f5:12:39:db:
65:d4:60:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 13:38:39 2024 by rpki-client on console-ams.rpki-client.org