Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS8100.roa
File: AS8100.roa (raw, json)
Hash identifier: ynVM0tBbHSBzej5X5kkoDTGv1fOY08vnVTnb1BBD5fY=
Subject key identifier: EE:97:1C:C1:A3:15:60:63:D2:1E:0E:BD:08:8C:98:3A:EF:74:0E:A0
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 6721732564CE43F6E048EFCB3BEFF19CF0CBA434
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS8100.roa
Signing time: Thu 23 Jan 2025 11:40:47 +0000
ROA not before: Thu 23 Jan 2025 11:35:47 +0000
ROA not after: Thu 22 Jan 2026 11:40:47 +0000
asID: 8100
IP address blocks: 91.124.145.0/24 maxlen: 24
91.124.178.0/24 maxlen: 24
91.124.179.0/24 maxlen: 24
91.124.216.0/24 maxlen: 24
91.124.219.0/24 maxlen: 24
91.124.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 13:33:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:21:73:25:64:ce:43:f6:e0:48:ef:cb:3b:ef:f1:9c:f0:cb:a4:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jan 23 11:35:47 2025 GMT
Not After : Jan 22 11:40:47 2026 GMT
Subject: CN=EE971CC1A3156063D21E0EBD088C983AEF740EA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fa:bc:70:1e:e9:c1:c5:7a:97:3d:0c:8f:cd:
93:f6:d0:52:79:b2:61:7c:83:ab:98:40:f9:a8:81:
85:d1:e5:df:56:7f:e2:a9:28:41:48:83:ca:ea:99:
00:ba:6c:c3:5f:97:4d:c4:bb:b4:ce:21:c9:41:1b:
e5:5f:9f:a7:55:eb:30:cd:b5:4d:ea:0d:82:76:b7:
39:02:32:47:2f:cb:20:b4:2b:97:fd:02:37:d3:63:
69:b5:87:21:00:a4:db:71:ac:f3:79:ed:26:2f:be:
8f:95:1b:75:08:6f:68:e4:4d:01:6e:7a:6e:99:ea:
c3:af:85:76:5c:32:0e:39:f5:a9:5e:f7:98:52:99:
4c:fa:8c:5f:45:9f:ea:b9:7f:1f:ef:36:79:bb:d3:
62:f3:67:8d:82:bf:a9:66:3c:dd:c8:61:be:f1:bf:
f5:f4:d7:85:e0:6c:56:47:29:07:cd:93:15:a9:7a:
ac:73:61:eb:77:38:9c:1e:f2:c2:d6:f9:75:c5:00:
49:44:a2:1c:6c:c7:23:2b:ba:0e:d8:37:d2:d3:eb:
ad:26:a9:da:eb:e8:be:cd:5f:ef:65:74:ff:f7:7d:
dd:a1:06:2d:75:aa:01:e0:0f:e1:84:48:d3:15:97:
c6:fb:36:8e:70:1b:9a:ab:76:0c:0a:86:96:7d:be:
77:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:97:1C:C1:A3:15:60:63:D2:1E:0E:BD:08:8C:98:3A:EF:74:0E:A0
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS8100.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.145.0/24
91.124.178.0/23
91.124.216.0/24
91.124.219.0/24
91.124.237.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:5c:d6:28:af:64:87:fd:31:c1:30:97:41:96:4a:fa:b1:d5:
22:f6:26:da:78:07:4a:6f:68:c3:dc:04:72:f2:52:0c:a4:49:
1c:12:03:27:c1:45:5d:1b:18:64:21:b7:10:ed:77:f7:84:e3:
3b:94:f8:f5:7b:6c:7d:63:a6:bd:40:71:f8:f5:7a:5f:39:50:
b3:ca:72:81:b0:7e:b3:1a:13:df:d2:14:ac:89:32:0d:30:f8:
ac:d2:ca:a4:2f:b3:8a:1c:34:0f:11:28:ec:ee:45:bc:12:1d:
73:64:8a:ba:fd:df:57:33:1a:47:f7:3f:f3:c3:c7:ad:44:8f:
db:19:9b:96:b6:8a:7d:d5:6b:04:ec:6c:71:85:b7:58:25:7c:
11:ec:a9:36:c8:8c:86:72:09:be:dc:54:9c:bb:a5:ea:7c:4d:
ce:94:ad:ba:7f:0e:0f:3d:9c:db:2a:43:b3:83:1c:3a:f7:f7:
68:1e:58:37:1e:08:50:5a:01:79:7f:aa:0a:69:57:51:97:50:
19:81:1e:75:18:58:6d:05:9f:ad:33:de:2a:08:ee:3a:e5:36:
02:1d:06:cf:a2:0f:a4:7a:17:86:28:5a:5b:ab:5b:97:97:14:
6e:01:2f:82:3e:ec:8e:61:bd:f7:50:98:10:a2:5b:96:7a:55:
3c:fd:84:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIUZyFzJWTOQ/bgSO/LO+/xnPDLpDQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTAxMjMxMTM1NDdaFw0yNjAxMjIxMTQwNDdaMDMxMTAvBgNV
BAMTKEVFOTcxQ0MxQTMxNTYwNjNEMjFFMEVCRDA4OEM5ODNBRUY3NDBFQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1+rxwHunBxXqXPQyPzZP20FJ5
smF8g6uYQPmogYXR5d9Wf+KpKEFIg8rqmQC6bMNfl03Eu7TOIclBG+Vfn6dV6zDN
tU3qDYJ2tzkCMkcvyyC0K5f9AjfTY2m1hyEApNtxrPN57SYvvo+VG3UIb2jkTQFu
em6Z6sOvhXZcMg459ale95hSmUz6jF9Fn+q5fx/vNnm702LzZ42Cv6lmPN3IYb7x
v/X014XgbFZHKQfNkxWpeqxzYet3OJwe8sLW+XXFAElEohxsxyMrug7YN9LT660m
qdrr6L7NX+9ldP/3fd2hBi11qgHgD+GESNMVl8b7No5wG5qrdgwKhpZ9vnc/AgMB
AAGjggIgMIICHDAdBgNVHQ4EFgQU7pccwaMVYGPSHg69CIyYOu90DqAwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTODEwMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA3BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAFt8kQME
AVt8sgMEAFt82AMEAFt82wMEAFt87TANBgkqhkiG9w0BAQsFAAOCAQEApVzWKK9k
h/0xwTCXQZZK+rHVIvYm2ngHSm9ow9wEcvJSDKRJHBIDJ8FFXRsYZCG3EO1394Tj
O5T49XtsfWOmvUBx+PV6XzlQs8pygbB+sxoT39IUrIkyDTD4rNLKpC+zihw0DxEo
7O5FvBIdc2SKuv3fVzMaR/c/88PHrUSP2xmblraKfdVrBOxscYW3WCV8EeypNsiM
hnIJvtxUnLul6nxNzpStun8ODz2c2ypDs4McOvf3aB5YNx4IUFoBeX+qCmlXUZdQ
GYEedRhYbQWfrTPeKgjuOuU2Ah0Gz6IPpHoXhihaW6tbl5cUbgEvgj7sjmG991CY
EKJblnpVPP2ErA==
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:34:06 2025 by rpki-client