Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212027.roa
File: AS212027.roa (raw, json)
Hash identifier: f6mb21Bl8gKbUP4tu8gVNsjRU+jMzU9atcvb4t0Zh/k=
Subject key identifier: 53:13:0B:A0:E9:BA:93:BE:3A:0B:EC:3F:FC:F0:6E:63:F3:D4:F0:AD
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2852C6900D2EFC70E6B8D5CA954BBDFD7D8D8811
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212027.roa
Signing time: Fri 08 Mar 2024 06:09:21 +0000
ROA not before: Fri 08 Mar 2024 06:04:21 +0000
ROA not after: Fri 07 Mar 2025 06:09:21 +0000
asID: 212027
IP address blocks: 91.124.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Apr 2024 00:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:52:c6:90:0d:2e:fc:70:e6:b8:d5:ca:95:4b:bd:fd:7d:8d:88:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 8 06:04:21 2024 GMT
Not After : Mar 7 06:09:21 2025 GMT
Subject: CN=53130BA0E9BA93BE3A0BEC3FFCF06E63F3D4F0AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:da:e7:d9:74:eb:3c:88:34:b4:20:51:29:7b:
31:6c:2b:f9:6c:27:9e:ff:ff:02:09:42:93:32:bb:
be:6c:83:ac:c3:fd:1f:6b:ff:87:3a:e8:13:d5:3f:
0c:d5:cc:53:e1:26:12:60:c2:aa:ab:59:d0:d2:3f:
e4:90:4e:4f:d5:c4:21:b4:0c:da:2f:b8:80:1b:0e:
29:c6:77:b9:aa:2b:8b:5b:ff:90:a3:9b:b4:bf:4b:
de:26:8a:7c:68:ad:f7:f9:39:cd:eb:a3:5a:0c:9e:
5c:d6:9f:09:ec:90:71:a4:51:d5:f4:c4:3e:7c:86:
7e:16:73:2a:6a:d7:f3:dc:6a:be:ea:bc:84:ca:b0:
80:a0:56:13:e1:a9:70:11:03:52:0c:07:62:8b:2d:
d1:44:10:5c:d1:5a:df:3c:0a:ea:ec:15:88:cf:8d:
bf:b6:cf:81:a1:5d:a2:4f:f7:e7:01:b1:5c:80:55:
4a:f9:ae:d3:08:a4:34:2c:83:3a:25:d6:eb:2d:ec:
dc:8f:38:29:88:5e:e2:b3:9f:8d:1d:a6:40:97:69:
f4:be:4a:ee:fc:4d:29:dc:d7:17:57:cd:f2:54:8f:
41:83:f7:8f:62:fa:a1:cc:5b:63:98:d0:9d:de:44:
28:86:ab:f3:6d:15:91:d1:a0:fe:44:48:74:22:bc:
f3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:13:0B:A0:E9:BA:93:BE:3A:0B:EC:3F:FC:F0:6E:63:F3:D4:F0:AD
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212027.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.3.0/24
Signature Algorithm: sha256WithRSAEncryption
76:4c:d3:a6:90:d1:26:70:9a:70:28:f0:64:5d:17:ee:de:17:
28:82:57:4d:b2:d0:ea:be:43:bb:04:4a:78:db:68:7a:53:96:
af:36:53:5f:5d:06:98:d6:62:26:57:08:a3:79:e4:87:ee:9b:
dd:60:d3:78:94:b7:8a:46:0d:41:7e:bd:b8:25:af:1b:3e:db:
29:33:a9:83:43:47:9e:b9:ee:1a:25:aa:58:83:a6:5b:90:cf:
d9:79:99:cf:40:68:8b:15:41:15:38:d5:8f:a5:11:b5:88:e7:
f4:f5:e1:2f:af:ee:85:1d:ea:5d:b9:05:5e:55:79:31:c1:44:
50:36:9a:e9:b6:e2:90:c6:46:a3:5a:0c:14:e6:32:30:8b:f6:
e7:ae:c4:f6:3a:42:18:ad:dc:0a:1e:17:85:18:0a:c4:da:a3:
bc:51:99:cf:f5:36:1e:38:39:03:45:75:f9:f7:96:b1:ca:4e:
1c:88:12:df:f1:b4:56:7d:07:e0:27:81:0e:2a:ce:d6:81:5a:
bd:34:fd:3d:82:a5:75:2d:e2:dc:2e:af:36:8f:6d:0d:41:dd:
e0:c7:05:84:80:f4:32:c3:22:bb:f0:23:f1:30:9d:7e:ee:81:
9b:16:bb:bd:13:ae:4e:23:74:59:85:77:e6:3d:23:38:6d:ad:
de:81:8f:f3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUKFLGkA0u/HDmuNXKlUu9/X2NiBEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNDAzMDgwNjA0MjFaFw0yNTAzMDcwNjA5MjFaMDMxMTAvBgNV
BAMTKDUzMTMwQkEwRTlCQTkzQkUzQTBCRUMzRkZDRjA2RTYzRjNENEYwQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC62ufZdOs8iDS0IFEpezFsK/ls
J57//wIJQpMyu75sg6zD/R9r/4c66BPVPwzVzFPhJhJgwqqrWdDSP+SQTk/VxCG0
DNovuIAbDinGd7mqK4tb/5Cjm7S/S94minxorff5Oc3ro1oMnlzWnwnskHGkUdX0
xD58hn4Wcypq1/Pcar7qvITKsICgVhPhqXARA1IMB2KLLdFEEFzRWt88CursFYjP
jb+2z4GhXaJP9+cBsVyAVUr5rtMIpDQsgzol1ust7NyPOCmIXuKzn40dpkCXafS+
Su78TSnc1xdXzfJUj0GD949i+qHMW2OY0J3eRCiGq/NtFZHRoP5ESHQivPPpAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUUxMLoOm6k746C+w//PBuY/PU8K0wHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjEyMDI3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW3wD
MA0GCSqGSIb3DQEBCwUAA4IBAQB2TNOmkNEmcJpwKPBkXRfu3hcogldNstDqvkO7
BEp422h6U5avNlNfXQaY1mImVwijeeSH7pvdYNN4lLeKRg1Bfr24Ja8bPtspM6mD
Q0eeue4aJapYg6ZbkM/ZeZnPQGiLFUEVONWPpRG1iOf09eEvr+6FHepduQVeVXkx
wURQNprptuKQxkajWgwU5jIwi/bnrsT2OkIYrdwKHheFGArE2qO8UZnP9TYeODkD
RXX595axyk4ciBLf8bRWfQfgJ4EOKs7WgVq9NP09gqV1LeLcLq82j20NQd3gxwWE
gPQywyK78CPxMJ1+7oGbFru9E65OI3RZhXfmPSM4ba3egY/z
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:19 2024 by rpki-client on console-fra.rpki-client.org