Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3235342e302f32342d3234203d3e20383334.roa
File: 39312e3132342e3235342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: mKvtSQAqHY2qu0Iuu+VajwnRk7WO8nVfFxhyMbe9rQ8=
Subject key identifier: 8D:00:88:C8:9C:D3:7B:8F:F6:A1:7E:D0:F4:00:6B:95:67:29:58:75
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 19EFD027C54A70CE5C98C68045D9279A4D4880F3
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3235342e302f32342d3234203d3e20383334.roa
Signing time: Thu 22 Feb 2024 06:40:39 +0000
ROA not before: Thu 22 Feb 2024 06:35:39 +0000
ROA not after: Thu 20 Feb 2025 06:40:39 +0000
asID: 834
IP address blocks: 91.124.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:ef:d0:27:c5:4a:70:ce:5c:98:c6:80:45:d9:27:9a:4d:48:80:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 22 06:35:39 2024 GMT
Not After : Feb 20 06:40:39 2025 GMT
Subject: CN=8D0088C89CD37B8FF6A17ED0F4006B9567295875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1a:6e:cc:96:b1:48:d8:ea:7b:d0:8b:5c:0d:
a8:a8:46:49:03:8f:b8:3f:68:51:af:3f:23:c4:2f:
7c:f2:c7:b0:1e:c1:1f:8f:bc:a8:62:ea:2c:ee:1a:
ae:9a:41:54:30:da:f6:8f:56:7d:87:7e:6c:68:d7:
2b:17:3c:20:ee:ad:5f:fb:66:25:4a:a8:81:45:50:
17:b2:18:87:05:30:dc:67:6a:ac:98:b4:07:9d:cd:
11:f3:3f:b3:87:34:57:b5:1d:98:38:1c:3c:01:a4:
79:80:30:29:97:5b:05:7f:9d:27:b9:64:4c:1d:ce:
10:ff:d6:b3:fe:d3:fa:2f:d0:e2:6e:6d:a4:91:0e:
29:f6:47:d3:c8:4e:b3:68:19:b0:c7:bc:2d:9f:fb:
2b:4d:96:c1:74:5a:90:63:50:0b:7a:c0:1a:2c:07:
78:3f:4c:0c:42:00:dc:43:b6:59:1f:0a:83:12:35:
71:0e:89:c1:ac:6e:df:1c:56:01:d4:5d:b3:1d:45:
fb:e6:ec:80:65:f2:7f:3d:54:83:e3:5f:87:80:9c:
da:c4:57:82:ef:45:c8:c4:cd:fe:d2:92:02:b9:ae:
49:f4:3a:1f:d8:af:95:7e:03:d9:0f:2a:f7:d5:bd:
ba:33:92:61:d3:64:22:8e:6b:f6:5a:d4:cb:e4:aa:
f7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:00:88:C8:9C:D3:7B:8F:F6:A1:7E:D0:F4:00:6B:95:67:29:58:75
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3235342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.254.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:d8:b5:7a:16:bb:b1:cb:20:40:0c:7c:b4:5c:ff:9b:69:a9:
eb:f7:2a:d9:e8:9c:5a:b4:ed:c3:e1:30:1b:04:59:42:45:27:
d8:84:1f:bb:2c:f2:8e:ab:52:66:8d:e6:e4:9e:9e:0c:a6:ba:
86:a1:ef:08:f4:46:19:0c:80:bd:45:03:85:95:1b:6a:0b:da:
1b:15:53:5d:09:b4:a6:a9:62:75:9b:30:32:d9:28:fb:0d:fb:
fa:a1:9b:89:c3:b3:48:4c:2f:15:ad:12:86:95:22:2a:20:5e:
16:f3:3d:18:02:f9:a1:fc:dc:97:8b:af:c8:1d:97:b8:b9:a8:
48:93:46:6b:41:6f:52:d9:05:90:46:38:64:9f:3d:b0:c3:22:
50:29:87:8a:50:83:3f:99:09:22:39:b1:56:ed:d0:3d:8e:a5:
0c:62:06:41:c6:a6:4d:80:35:60:f6:a8:c9:7c:27:44:14:ee:
52:68:e8:25:0b:53:a6:08:5a:76:44:f6:60:1f:5f:7f:9b:1f:
42:9a:39:19:60:36:79:d0:a2:ee:05:02:f1:6f:12:ea:56:d9:
29:8e:f7:a4:97:41:7e:a6:f3:e7:fc:57:d1:76:cb:36:21:85:
05:3f:55:10:c3:4a:80:12:55:35:6e:b2:b5:5a:6d:02:f6:5b:
12:5b:da:0e
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUGe/QJ8VKcM5cmMaARdknmk1IgPMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNDAyMjIwNjM1MzlaFw0yNTAyMjAwNjQwMzlaMDMxMTAvBgNV
BAMTKDhEMDA4OEM4OUNEMzdCOEZGNkExN0VEMEY0MDA2Qjk1NjcyOTU4NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYGm7MlrFI2Op70ItcDaioRkkD
j7g/aFGvPyPEL3zyx7AewR+PvKhi6izuGq6aQVQw2vaPVn2Hfmxo1ysXPCDurV/7
ZiVKqIFFUBeyGIcFMNxnaqyYtAedzRHzP7OHNFe1HZg4HDwBpHmAMCmXWwV/nSe5
ZEwdzhD/1rP+0/ov0OJubaSRDin2R9PITrNoGbDHvC2f+ytNlsF0WpBjUAt6wBos
B3g/TAxCANxDtlkfCoMSNXEOicGsbt8cVgHUXbMdRfvm7IBl8n89VIPjX4eAnNrE
V4LvRcjEzf7SkgK5rkn0Oh/Yr5V+A9kPKvfVvbozkmHTZCKOa/Za1MvkqvffAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUjQCIyJzTe4/2oX7Q9ABrlWcpWHUwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUt
NDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThmNmI0LzAvMzkzMTJlMzEzMjM0MmUzMjM1
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABbfP4w
DQYJKoZIhvcNAQELBQADggEBADrYtXoWu7HLIEAMfLRc/5tpqev3KtnonFq07cPh
MBsEWUJFJ9iEH7ss8o6rUmaN5uSengymuoah7wj0RhkMgL1FA4WVG2oL2hsVU10J
tKapYnWbMDLZKPsN+/qhm4nDs0hMLxWtEoaVIiogXhbzPRgC+aH83JeLr8gdl7i5
qEiTRmtBb1LZBZBGOGSfPbDDIlAph4pQgz+ZCSI5sVbt0D2OpQxiBkHGpk2ANWD2
qMl8J0QU7lJo6CULU6YIWnZE9mAfX3+bH0KaORlgNnnQou4FAvFvEupW2SmO96SX
QX6m8+f8V9F2yzYhhQU/VRDDSoASVTVusrVabQL2WxJb2g4=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:51 2025 by rpki-client