Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS984.roa
File: AS984.roa (raw, json)
Hash identifier: FoqWWOIrXw+LdUKC2NwTzvuAiu464N7x8UrgT+KKHxk=
Subject key identifier: 90:E1:6D:00:67:00:7A:09:3C:63:00:6D:0E:3E:65:51:A8:70:59:09
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 10ADD3862721BED6085AC4B5017EE48C323976D8
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS984.roa
Signing time: Mon 19 Aug 2024 15:25:21 +0000
ROA not before: Mon 19 Aug 2024 15:20:21 +0000
ROA not after: Mon 18 Aug 2025 15:25:21 +0000
asID: 984
IP address blocks: 92.112.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Sep 2024 08:57:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:ad:d3:86:27:21:be:d6:08:5a:c4:b5:01:7e:e4:8c:32:39:76:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 19 15:20:21 2024 GMT
Not After : Aug 18 15:25:21 2025 GMT
Subject: CN=90E16D0067007A093C63006D0E3E6551A8705909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d3:fb:17:91:06:b2:66:8b:63:e8:40:ee:11:
03:2a:6c:eb:76:8a:a8:28:89:14:89:1f:bb:0c:8d:
3b:de:7f:5e:44:cc:63:f0:21:86:a4:f2:b8:3a:bc:
c2:f3:5c:1c:72:68:ac:86:b6:89:5e:c2:7d:bb:87:
6f:29:28:80:6c:64:4b:7d:6f:dc:f9:3e:c6:c5:49:
37:f1:bf:92:91:ed:08:78:c6:7e:5e:ea:c5:95:e9:
cb:17:71:fb:34:da:8c:b2:e8:7b:99:62:4d:c5:46:
0c:ba:45:d7:7f:1d:21:8d:9b:1d:12:0d:99:ff:5b:
9d:2a:40:b2:d5:b8:61:b7:2f:c8:bf:9a:16:04:9b:
f7:98:ad:5d:62:90:00:d3:a3:aa:84:5e:eb:97:98:
71:0d:9e:3f:f5:cd:37:9a:b2:40:32:09:d0:a5:bb:
07:7a:67:54:e3:d6:4d:ac:e1:a1:62:e4:16:90:39:
c9:62:52:19:56:d5:8c:24:3b:91:05:f8:2b:49:54:
5a:99:44:30:a4:2c:80:de:56:4c:bd:ee:06:f3:63:
1c:81:ff:58:65:20:d3:11:60:d5:dc:35:f2:07:6f:
5a:54:2b:bc:90:64:0b:84:1d:62:58:59:40:fa:40:
16:8a:53:51:c8:e1:06:a3:f4:37:b0:8a:82:45:7f:
7f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E1:6D:00:67:00:7A:09:3C:63:00:6D:0E:3E:65:51:A8:70:59:09
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS984.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.68.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:bf:bb:e9:07:e1:a4:88:66:40:51:8d:20:5f:7e:ad:45:9c:
9f:41:ff:e2:69:e7:b3:df:5b:79:db:fd:86:fb:5c:05:04:26:
22:5f:1c:49:c7:6c:c0:69:9e:91:f4:d4:df:7e:70:02:1e:66:
d8:0d:dc:cd:f2:40:cc:d6:a9:a9:12:e8:0f:50:1a:5b:72:27:
b3:52:40:aa:3e:cf:db:d8:b1:6c:2a:f1:6f:34:c8:c7:f7:94:
0a:7e:97:d0:4d:7b:18:1d:31:f3:ec:9e:d0:78:a0:d8:c2:51:
22:c0:b5:c3:04:64:f6:ef:43:9a:d5:09:de:e8:02:39:a6:d9:
3e:43:76:b8:81:5a:9f:36:14:37:ef:e4:e2:b8:ff:d5:c8:21:
12:12:5c:bf:81:f2:1c:78:d3:66:3d:f0:6d:57:ff:b9:0c:82:
d1:e8:f3:a8:06:2e:5a:55:03:e3:bf:da:f1:66:a6:17:23:72:
3f:1f:c7:da:2a:8d:ac:a7:f9:4c:e7:be:62:f1:b0:3c:68:62:
6d:91:e8:91:09:44:18:18:16:d0:6a:a1:b3:a9:d8:c0:0e:94:
dc:cb:58:45:7c:6e:5d:b3:ee:82:e1:2a:5c:a3:31:11:62:65:
b5:12:c0:dd:7f:1f:cc:65:3b:3d:38:79:be:3a:7c:75:2b:8b:
9b:00:45:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:47 2025 by rpki-client