Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS0.roa
File: AS0.roa (raw, json)
Hash identifier: 9Hr9V0+rzUdtctKEEivwFZi6Vj4LEqA0QrIt6rIs7fM=
Subject key identifier: 5C:43:FB:BE:DB:D9:B8:0C:01:B5:72:8C:1D:90:94:06:C3:FC:76:23
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 336F1FD21693FA684DDCC423D643D8B98917A500
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS0.roa
Signing time: Thu 18 Apr 2024 13:47:12 +0000
ROA not before: Thu 18 Apr 2024 13:42:12 +0000
ROA not after: Thu 17 Apr 2025 13:47:12 +0000
asID: 0
IP address blocks: 91.124.250.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Apr 2024 13:07:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:6f:1f:d2:16:93:fa:68:4d:dc:c4:23:d6:43:d8:b9:89:17:a5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 18 13:42:12 2024 GMT
Not After : Apr 17 13:47:12 2025 GMT
Subject: CN=5C43FBBEDBD9B80C01B5728C1D909406C3FC7623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:75:92:86:f1:6a:3a:70:5e:49:ec:cc:40:c8:
2d:cd:ed:95:09:d8:8a:31:16:06:a2:79:7d:63:ba:
ce:bd:d6:37:a5:e9:93:0b:95:7f:68:30:1e:11:c3:
ce:8e:00:eb:f3:b6:3c:77:b3:b6:65:a9:34:41:39:
b9:91:89:da:62:a9:f8:05:f5:da:39:61:c8:c6:d0:
6b:48:b9:dd:97:e2:e4:86:03:a2:c4:ef:7c:e8:e4:
7b:e3:96:b5:de:cb:61:92:87:ee:ac:62:13:55:17:
e0:43:8c:5d:71:a6:c9:63:49:1c:9f:f5:d3:58:e2:
de:20:34:f8:02:a6:b2:e1:f0:d8:e3:7d:3a:ad:66:
05:19:4a:e0:99:44:36:b0:ff:67:d6:46:c0:3f:b5:
b2:99:3c:30:93:b8:cc:9a:b6:02:6a:17:26:04:51:
03:54:71:7f:e8:3d:ce:0e:ce:d4:43:b8:e7:de:11:
70:f9:02:3e:e3:de:3f:33:fc:e7:2b:7c:da:22:c2:
bc:3d:30:8a:f6:35:df:ca:50:77:dc:bb:b6:c0:3b:
3d:3e:e1:e9:e0:75:9c:2a:4f:95:77:f4:03:ae:8b:
95:a6:a3:26:d0:47:71:6b:6b:c6:7c:eb:b0:32:e5:
02:96:e6:d1:76:a2:89:23:30:56:92:cd:84:ff:19:
60:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:43:FB:BE:DB:D9:B8:0C:01:B5:72:8C:1D:90:94:06:C3:FC:76:23
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS0.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.250.0/23
Signature Algorithm: sha256WithRSAEncryption
43:e8:40:87:56:f4:69:10:26:bb:e2:a4:a2:ef:36:b2:cc:e4:
06:55:53:c4:4c:d8:e6:4c:0d:b0:60:02:ef:e1:f6:32:15:eb:
29:86:e6:77:76:4d:67:90:8f:68:2a:97:06:04:0a:dc:ed:1c:
30:8f:fe:51:04:b2:4e:43:46:2a:42:59:79:46:35:4d:37:44:
d2:7f:37:65:ba:53:a6:2e:1c:fd:8a:fd:aa:f4:af:b4:02:02:
c0:bc:0d:be:88:5f:86:32:3c:6e:cd:1a:90:2e:2d:eb:79:74:
0d:ab:f6:ee:db:c7:cf:cb:dd:b2:fb:d3:3d:bc:cd:c6:0c:86:
38:74:a0:54:d3:c2:ba:fc:27:7f:66:91:96:9b:00:4b:9f:ce:
5b:fc:ec:5c:1c:7d:63:75:c0:31:73:1e:89:7d:bf:d1:25:82:
a9:ed:59:a8:eb:0d:7a:a6:fa:2e:a4:95:00:81:f3:d8:4c:e6:
c9:e2:8f:b5:83:35:3a:e8:77:92:d2:53:f5:27:2b:ed:94:9e:
a2:56:a2:68:95:50:64:59:6c:71:19:08:64:cf:98:c6:1e:b0:
28:9c:ed:10:17:c7:cd:80:51:43:17:e6:0b:8b:ce:86:d3:9e:
b6:3d:81:cf:23:df:33:76:48:08:49:9c:86:f1:d4:a7:44:98:
40:66:5e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:56 2025 by rpki-client