Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS19318.roa
File: AS19318.roa (raw, json)
Hash identifier: SnMjLjrqrEVLrS6R7UagC1iXb+jXo3ou3arSmTq5T4s=
Subject key identifier: 78:47:2F:E8:D0:E0:45:52:FA:AB:11:39:74:A5:56:1D:29:E5:3C:8F
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 45D7D2F655BB5A787D701F1031243BB2AC0F4CB6
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS19318.roa
Signing time: Tue 02 Apr 2024 10:04:01 +0000
ROA not before: Tue 02 Apr 2024 09:59:01 +0000
ROA not after: Tue 01 Apr 2025 10:04:01 +0000
asID: 19318
IP address blocks: 91.124.40.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Apr 2024 10:03:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:d7:d2:f6:55:bb:5a:78:7d:70:1f:10:31:24:3b:b2:ac:0f:4c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 2 09:59:01 2024 GMT
Not After : Apr 1 10:04:01 2025 GMT
Subject: CN=78472FE8D0E04552FAAB113974A5561D29E53C8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0c:c8:5c:47:d3:9a:89:12:83:46:64:71:c6:
4b:b9:75:5a:a8:52:77:7d:94:dc:d1:44:8f:18:fc:
e8:1b:16:f3:cc:8e:f1:df:be:31:82:f7:e6:80:92:
3c:3f:e8:68:1b:a6:1f:a8:d1:1b:85:b2:84:3c:a8:
62:50:a6:97:7e:51:06:dc:ff:55:84:1e:7a:a6:ba:
cf:c0:88:ac:a3:b8:92:d8:6a:a2:4b:85:d2:6e:95:
63:e0:7a:ce:4d:27:47:46:07:31:d4:98:9d:e4:77:
dd:01:61:b8:ae:5f:56:fd:d4:93:c2:11:96:20:64:
3e:4d:47:59:f7:d0:1f:ad:6c:e3:02:cf:fe:80:60:
20:25:0a:6f:1e:24:ea:93:c7:3f:ce:66:1b:be:81:
a1:7c:e4:fe:aa:b3:51:58:be:80:76:56:58:39:bb:
62:eb:4f:b5:2a:9f:fd:f8:51:13:f8:f0:1d:70:e9:
65:35:55:fd:5d:6f:e4:76:b7:51:71:94:37:a8:93:
bf:8e:3f:79:8c:ed:3d:72:80:fc:ec:2f:1d:e7:30:
6e:74:07:c8:3b:ae:3f:89:69:84:ae:62:2d:21:91:
fc:c6:59:7e:96:0c:1d:2b:d7:c7:7f:97:00:8c:19:
0d:38:79:5c:cb:cb:a8:dd:41:1d:97:1e:3f:fc:32:
50:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:47:2F:E8:D0:E0:45:52:FA:AB:11:39:74:A5:56:1D:29:E5:3C:8F
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS19318.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.40.0/21
Signature Algorithm: sha256WithRSAEncryption
93:47:9a:93:96:c8:fe:76:5f:b4:d7:90:ee:75:09:d3:ce:cc:
0c:bb:ed:c0:a0:94:b9:31:d6:26:6d:f5:05:49:66:34:65:86:
37:12:36:f2:db:36:75:35:a5:87:4c:d7:e4:14:80:29:83:cc:
12:60:03:6f:ca:c3:ee:c6:c7:31:6d:12:90:03:16:b2:f8:42:
9b:db:f9:05:60:50:25:aa:80:e2:84:11:1d:a4:4f:34:9c:66:
00:c8:f8:75:9b:c3:c1:c3:a7:16:55:d4:b6:ba:35:74:c3:e5:
61:02:eb:98:6d:c8:d1:3e:d9:a0:1a:ac:48:d2:19:1e:7e:4b:
96:1d:b5:fd:32:26:c2:66:dc:2e:0c:1c:f4:43:ab:1c:ba:c1:
34:7e:76:7c:97:a8:0c:0c:d2:e3:d0:a6:aa:b6:32:b3:38:6e:
30:04:62:1c:83:c7:37:15:0f:d7:4d:69:57:28:ee:d0:c2:76:
a1:8f:e3:b0:bd:d0:fa:e9:aa:67:63:e4:3b:50:2c:aa:47:16:
c3:10:b4:68:19:4b:c3:70:7e:bc:fc:a2:2f:b2:9c:f1:04:24:
70:1f:29:6c:c1:bf:d9:91:55:30:f7:94:e7:6f:e2:45:c6:05:
25:71:96:4a:21:9c:3d:40:58:25:b6:a9:05:cb:1c:09:aa:13:
1c:c0:19:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:19 2024 by rpki-client on console-fra.rpki-client.org