Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS23470.roa
File: AS23470.roa (raw, json)
Hash identifier: qV34L3wS3vp+7+RPVpJoHcGg/fQhX8vBMR3Bt0KABg0=
Subject key identifier: DC:D7:BB:E0:CA:23:89:89:DE:82:EA:C2:EE:9D:A4:42:D5:78:77:C5
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 79489EBFBCD3B5ECB297E0F2607F7F79F47DD85B
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS23470.roa
Signing time: Wed 28 Feb 2024 11:37:21 +0000
ROA not before: Wed 28 Feb 2024 11:32:21 +0000
ROA not after: Wed 26 Feb 2025 11:37:21 +0000
asID: 23470
IP address blocks: 91.124.252.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 10:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:48:9e:bf:bc:d3:b5:ec:b2:97:e0:f2:60:7f:7f:79:f4:7d:d8:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 28 11:32:21 2024 GMT
Not After : Feb 26 11:37:21 2025 GMT
Subject: CN=DCD7BBE0CA238989DE82EAC2EE9DA442D57877C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:32:91:bd:36:57:99:11:5e:fe:58:cf:4f:33:
59:06:4a:63:e5:1a:db:62:f5:2f:93:ad:e3:13:e4:
8a:57:16:72:b1:92:29:2b:f8:3d:98:74:d7:b9:92:
e5:f1:62:92:97:74:f2:c1:b5:c2:6d:eb:7f:97:58:
f4:0e:91:13:be:64:80:b4:5e:e5:a0:78:bd:cd:c6:
1a:9d:85:eb:21:68:db:cc:fe:0e:0f:5d:7d:e3:17:
f9:0e:8d:0b:7b:86:9c:20:66:4e:b5:78:e1:ac:51:
08:11:a2:c1:69:e5:13:27:bb:d6:28:f4:ea:09:9e:
9b:08:c0:46:74:b1:aa:67:0d:df:1b:f7:ae:03:56:
bc:f9:36:f9:13:66:cb:5d:76:4d:5f:28:91:d0:8e:
2d:16:9a:29:a2:6b:1b:b9:80:77:df:52:dc:a5:53:
dc:b0:0d:e1:6d:31:9e:f6:a0:33:15:6b:5b:69:2c:
7b:ef:26:59:27:ba:bc:86:c8:6d:d0:4a:22:60:12:
07:e0:4a:5e:5e:17:36:7c:12:6a:fb:f1:3c:08:f0:
87:0d:82:9d:84:ef:fc:66:78:ba:02:69:9a:4d:78:
d8:56:00:d4:e7:3f:32:45:fb:09:58:a1:37:e9:8e:
9f:b3:6e:80:25:82:e4:d2:b8:90:79:26:c0:e4:55:
a6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D7:BB:E0:CA:23:89:89:DE:82:EA:C2:EE:9D:A4:42:D5:78:77:C5
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS23470.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.252.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:12:de:77:ca:f0:49:20:42:5a:fb:8b:18:d1:37:8b:ec:c6:
56:72:64:2d:1a:da:29:1c:b4:b5:69:87:32:2d:10:23:84:01:
fc:0a:84:96:cb:1f:5d:2e:40:ec:a1:3b:42:14:3a:1e:5e:6f:
ca:15:77:59:48:c4:cb:b6:98:4c:ac:fd:97:f2:c9:08:f6:eb:
6a:13:51:82:49:7f:23:33:2e:e6:66:70:a0:97:36:8b:af:6c:
f0:f2:ad:cb:0b:56:88:8a:0d:16:5a:27:75:74:14:8a:d9:44:
3a:bb:39:77:99:ac:3b:b3:49:33:91:39:08:73:37:97:8b:b8:
b5:20:79:68:bf:ae:40:6f:41:b1:26:b6:50:2d:dd:89:0d:de:
5d:97:dc:c5:ef:95:f3:94:f9:19:15:73:f0:58:81:66:10:ed:
e9:7e:09:3d:bb:1c:61:7f:50:ab:f4:09:79:8a:49:8f:4c:19:
37:6c:5c:56:1f:69:4b:bd:bf:4a:20:bb:7f:20:c9:ea:3d:90:
92:8a:4e:5d:39:8b:3d:1d:a6:79:ea:4c:69:29:c9:90:a7:8a:
6f:bf:18:25:99:d7:d6:a2:ef:e1:30:69:af:8d:d3:9e:dc:9b:
e7:23:c4:68:be:af:35:79:58:57:6a:1a:85:cc:0d:d1:98:2d:
3d:30:28:a7
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUeUiev7zTteyyl+DyYH9/efR92FswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNDAyMjgxMTMyMjFaFw0yNTAyMjYxMTM3MjFaMDMxMTAvBgNV
BAMTKERDRDdCQkUwQ0EyMzg5ODlERTgyRUFDMkVFOURBNDQyRDU3ODc3QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6MpG9NleZEV7+WM9PM1kGSmPl
Gtti9S+TreMT5IpXFnKxkikr+D2YdNe5kuXxYpKXdPLBtcJt63+XWPQOkRO+ZIC0
XuWgeL3NxhqdheshaNvM/g4PXX3jF/kOjQt7hpwgZk61eOGsUQgRosFp5RMnu9Yo
9OoJnpsIwEZ0sapnDd8b964DVrz5NvkTZstddk1fKJHQji0Wmimiaxu5gHffUtyl
U9ywDeFtMZ72oDMVa1tpLHvvJlknuryGyG3QSiJgEgfgSl5eFzZ8Emr78TwI8IcN
gp2E7/xmeLoCaZpNeNhWANTnPzJF+wlYoTfpjp+zboAlguTSuJB5JsDkVaZ3AgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQU3Ne74MojiYnegurC7p2kQtV4d8UwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjM0NzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFbfPww
DQYJKoZIhvcNAQELBQADggEBAH8S3nfK8EkgQlr7ixjRN4vsxlZyZC0a2ikctLVp
hzItECOEAfwKhJbLH10uQOyhO0IUOh5eb8oVd1lIxMu2mEys/ZfyyQj262oTUYJJ
fyMzLuZmcKCXNouvbPDyrcsLVoiKDRZaJ3V0FIrZRDq7OXeZrDuzSTOROQhzN5eL
uLUgeWi/rkBvQbEmtlAt3YkN3l2X3MXvlfOU+RkVc/BYgWYQ7el+CT27HGF/UKv0
CXmKSY9MGTdsXFYfaUu9v0ogu38gyeo9kJKKTl05iz0dpnnqTGkpyZCnim+/GCWZ
19ai7+Ewaa+N057cm+cjxGi+rzV5WFdqGoXMDdGYLT0wKKc=
Generated at Fri Mar 29 13:00:42 2024 by rpki-client on console-ams.rpki-client.org