Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3235352e302f32342d3234203d3e203538303631.roa
File: 39312e3132342e3235352e302f32342d3234203d3e203538303631.roa (raw, json)
Hash identifier: QDuZEfz5Zj81DXkVT5orKjywira7l3t9pKnYtj1xD9A=
Subject key identifier: 29:22:FB:D0:12:43:7A:7B:DE:21:03:06:10:1E:3F:5F:71:F5:B4:E1
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 64BB3CC491D18025752DCCF01294A0E1A4AD2CD9
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3235352e302f32342d3234203d3e203538303631.roa
Signing time: Tue 20 Feb 2024 14:53:39 +0000
ROA not before: Tue 20 Feb 2024 14:48:39 +0000
ROA not after: Tue 18 Feb 2025 14:53:39 +0000
asID: 58061
IP address blocks: 91.124.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:bb:3c:c4:91:d1:80:25:75:2d:cc:f0:12:94:a0:e1:a4:ad:2c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 20 14:48:39 2024 GMT
Not After : Feb 18 14:53:39 2025 GMT
Subject: CN=2922FBD012437A7BDE210306101E3F5F71F5B4E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9e:62:4c:80:cc:7f:aa:51:34:5b:84:b8:ee:
c2:5c:5f:89:f4:bd:aa:80:42:a7:6c:41:41:f2:d6:
8a:e1:f8:37:cb:62:ce:85:ee:89:ff:89:a4:84:96:
4a:55:a6:a2:46:d5:9f:b6:61:cb:23:c2:14:19:e6:
d7:7e:53:1d:2c:49:b9:8b:fc:10:7d:ac:b7:46:02:
fa:dd:4b:4b:53:fa:37:17:a0:9d:9c:6d:bc:cd:6b:
5f:6a:42:bc:a3:06:32:bd:67:61:d9:5e:00:f1:45:
70:3d:96:96:0f:ba:e3:92:a2:33:f5:fb:06:01:2f:
12:03:9b:a4:4e:d4:22:43:c2:a8:86:5b:15:04:5d:
65:54:82:73:25:49:de:d2:5a:43:02:a5:fa:63:dc:
b0:31:76:bd:95:ea:71:80:20:ed:d3:ac:f0:cb:43:
a5:0c:9c:f7:50:96:ea:93:a4:49:0a:b5:49:2d:cd:
b7:11:4f:96:ed:2f:58:c6:9e:99:b7:7e:4d:e7:71:
c8:ec:7e:1d:33:c2:95:3f:a1:6b:65:ba:1b:0d:ee:
13:13:1d:7a:dd:5d:58:38:ea:c0:8a:da:90:c9:e4:
77:6b:fd:ed:49:9b:94:9c:f8:df:20:b1:0c:30:7f:
a8:2f:d9:2f:e3:1f:24:df:c8:7d:a8:5b:f2:6e:f8:
4f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:22:FB:D0:12:43:7A:7B:DE:21:03:06:10:1E:3F:5F:71:F5:B4:E1
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3235352e302f32342d3234203d3e203538303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.255.0/24
Signature Algorithm: sha256WithRSAEncryption
56:f2:ad:26:18:d2:df:8b:cf:a1:d6:58:d4:49:d7:a2:dc:20:
41:23:cd:39:00:21:43:20:7a:00:70:31:fe:a5:fb:c6:8e:fa:
03:e6:f5:9a:3d:dc:96:85:ff:57:eb:9e:68:a9:1f:77:13:d5:
ec:de:59:e6:44:04:61:75:1c:59:5f:29:1d:bf:07:17:60:13:
c1:16:2f:e5:8b:f3:56:fb:62:c8:d0:f9:88:b8:ea:df:43:83:
d3:3d:61:98:90:50:e0:51:72:e7:c1:f7:84:dd:56:1b:d8:49:
89:d1:bc:a3:8f:c9:89:31:4e:e1:b0:52:d9:d8:a9:32:15:e7:
d7:57:15:9b:86:1e:53:21:94:47:df:cf:02:cc:02:50:99:c3:
25:20:93:8f:c2:d0:d7:94:46:5a:5a:42:5f:7a:9d:b7:d9:7a:
0b:aa:9e:3f:75:9f:be:70:ee:3a:26:68:1b:e0:7d:8e:37:c7:
57:56:85:6a:9e:61:35:35:9c:e8:b3:a6:3e:18:e4:ba:d5:af:
f4:74:4a:ce:b6:0e:28:4c:2b:2f:a3:45:59:77:99:42:01:52:
83:ad:60:50:ed:71:f6:ff:44:ed:12:08:86:32:8c:41:77:db:
8d:94:38:f8:f5:2d:9d:35:d6:e5:b9:b4:26:30:70:12:85:7c:
fe:b9:54:c6
-----BEGIN CERTIFICATE-----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Generated at Fri Feb 23 13:38:39 2024 by rpki-client on console-ams.rpki-client.org