Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS135391.roa
File: AS135391.roa (raw, json)
Hash identifier: W+eUykr+9ogk0PyOloLc6UvhpkcMeFhFczizlwI9xlI=
Subject key identifier: D8:0B:4F:2B:41:63:16:47:89:AE:F2:2C:66:6B:0D:FF:56:ED:22:37
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 370809EED325FF60D0BD24D78B2D720444170B4D
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS135391.roa
Signing time: Fri 23 Aug 2024 06:49:54 +0000
ROA not before: Fri 23 Aug 2024 06:44:54 +0000
ROA not after: Fri 22 Aug 2025 06:49:54 +0000
asID: 135391
IP address blocks: 92.113.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Nov 2024 00:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:08:09:ee:d3:25:ff:60:d0:bd:24:d7:8b:2d:72:04:44:17:0b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 23 06:44:54 2024 GMT
Not After : Aug 22 06:49:54 2025 GMT
Subject: CN=D80B4F2B4163164789AEF22C666B0DFF56ED2237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ed:be:55:89:87:ce:a9:2e:ef:10:b6:a0:5d:
e9:fe:7b:9e:06:94:86:65:80:0a:90:7a:99:93:3b:
2a:2b:7b:be:0d:c3:3b:03:a5:52:fd:7a:df:a0:40:
a9:9c:61:51:25:48:6c:5f:f0:10:b0:4b:0c:a6:7c:
d2:de:25:bc:a1:f7:f1:7e:82:27:f9:a8:94:92:66:
f5:ec:62:29:81:0b:a9:f1:0f:b2:55:48:61:eb:82:
39:d0:b5:dd:fb:98:43:e8:4b:80:d7:c6:70:1f:98:
8b:71:88:4c:78:d8:97:65:f2:a5:62:04:93:07:86:
5e:18:8c:b4:42:59:0a:ca:07:2e:65:89:69:c5:06:
b4:5d:a7:be:73:15:db:ae:90:cc:ef:09:57:d6:cf:
02:9b:2b:42:83:fb:a6:f7:a8:a1:a8:0a:cb:13:68:
64:e9:51:cb:68:98:8c:d7:71:e7:27:ce:68:89:42:
f7:6f:58:f8:69:65:03:d6:9d:0a:82:5f:3a:ed:2a:
e8:3e:d9:87:62:d6:52:79:23:b7:e9:8b:8f:4c:f5:
09:83:b8:9c:7f:f3:a7:b6:5e:e4:6e:db:af:d1:eb:
33:04:b6:67:c3:37:2c:b8:65:6f:79:aa:07:00:82:
89:ce:a9:61:55:28:8e:86:d3:8c:e6:78:16:2a:67:
1a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0B:4F:2B:41:63:16:47:89:AE:F2:2C:66:6B:0D:FF:56:ED:22:37
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS135391.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.113.13.0/24
Signature Algorithm: sha256WithRSAEncryption
26:26:62:6b:3d:4b:f4:6a:e1:0c:a2:81:a9:e1:33:dd:7a:5a:
c0:71:fc:1a:12:40:5e:8b:09:e4:86:c8:85:1b:69:00:9c:36:
78:25:c7:a8:19:ee:34:04:2b:51:43:b9:77:01:dd:15:d7:53:
35:b7:28:70:cf:15:6e:37:b0:f7:7f:9b:68:9f:b9:80:1d:4f:
43:23:56:c9:85:de:cc:09:0a:8a:c5:2c:6d:e2:6c:e2:67:dd:
a2:a7:7e:e6:f5:db:62:f0:de:9d:af:01:d4:ad:36:b7:99:c9:
4a:83:c6:28:55:d3:0a:d8:e0:9f:13:c8:b8:df:cb:db:84:f7:
8b:67:1e:46:13:aa:f6:3a:94:3c:01:bf:0d:6f:1d:4f:06:eb:
2c:0a:b3:15:0c:2c:2b:46:41:16:83:38:00:a2:5e:89:38:a0:
4e:d9:cb:aa:96:de:ec:96:ec:7a:d3:c2:a8:7d:a5:f9:2d:50:
f0:2d:49:d8:04:4d:f1:42:76:82:ed:73:b1:ad:b6:a4:72:3c:
4b:50:e0:cb:ec:70:55:b3:31:60:d0:6c:c4:18:25:3e:fd:a7:
84:5e:47:57:89:64:dd:1b:52:4e:4f:0e:59:0b:74:4a:74:fe:
e8:0c:8f:a9:f4:6d:73:1a:00:1f:e7:9d:d0:96:4c:12:e8:02:
b2:8f:9c:65
-----BEGIN CERTIFICATE-----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Generated at Fri Nov 22 02:47:25 2024 by rpki-client on console-fra.rpki-client.org