Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214616.roa
File: AS214616.roa (raw, json)
Hash identifier: TC1B3R18uPFGcTqgjzi8Lq3K7P/ohu36DGwIm4MCtQQ=
Subject key identifier: F0:B0:25:C6:EB:4B:C4:BF:DF:C9:E0:C9:D4:7D:EA:43:24:57:5A:63
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 1E614437DBEA48F2A69D864FB8311766E6C827DE
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214616.roa
Signing time: Mon 13 Jan 2025 09:08:21 +0000
ROA not before: Mon 13 Jan 2025 09:03:21 +0000
ROA not after: Mon 12 Jan 2026 09:08:21 +0000
asID: 214616
IP address blocks: 91.124.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Jan 2025 10:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:61:44:37:db:ea:48:f2:a6:9d:86:4f:b8:31:17:66:e6:c8:27:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jan 13 09:03:21 2025 GMT
Not After : Jan 12 09:08:21 2026 GMT
Subject: CN=F0B025C6EB4BC4BFDFC9E0C9D47DEA4324575A63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9d:26:02:47:71:13:65:50:f1:47:9b:41:97:
af:0e:7c:4c:8e:cd:e6:6d:7c:10:93:e1:fb:43:89:
a5:33:1e:fd:6e:04:a5:be:e2:37:a5:04:cf:6d:a9:
00:42:75:08:b5:bf:63:e8:4b:0f:da:1b:fb:09:70:
10:d4:fb:2e:89:1e:45:42:79:45:03:ae:e0:10:e2:
b6:fe:ba:1a:b0:14:a1:43:d6:0e:5a:ea:09:e3:a6:
5c:1a:21:7b:72:33:bd:22:6a:38:53:7f:67:1f:92:
9c:2b:f8:40:34:96:fc:5f:d6:e4:65:bb:d9:af:2c:
d2:98:99:11:5d:fe:18:fd:8f:97:1d:9c:4e:28:20:
71:bd:81:be:bb:65:5a:06:e8:8f:54:67:76:39:d2:
b3:b9:2d:bc:6f:3d:1f:69:a6:db:3e:65:ce:14:aa:
53:45:c5:9f:9d:20:6b:99:e8:2b:20:8c:8b:b4:97:
7d:51:e2:8d:9f:9b:b2:38:c3:3b:e2:f2:cd:42:6d:
57:b7:5b:5a:0e:32:6b:7d:2f:ab:fa:28:68:d3:5f:
1e:49:18:96:2c:a4:b0:65:72:b7:d6:c8:46:06:42:
cf:f8:78:b5:7f:42:37:93:1a:59:5f:e9:43:12:5d:
25:ed:4a:1f:58:6c:bc:2e:2b:19:a6:6b:cf:24:33:
15:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B0:25:C6:EB:4B:C4:BF:DF:C9:E0:C9:D4:7D:EA:43:24:57:5A:63
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214616.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.1.0/24
Signature Algorithm: sha256WithRSAEncryption
40:2b:01:73:d8:21:96:3e:5e:f0:3d:b1:17:24:61:7d:f7:81:
47:00:b1:c0:4c:ad:31:60:be:05:a6:89:b6:90:d9:03:94:bc:
99:7a:07:0b:46:bb:eb:1e:b1:71:03:de:98:03:77:d5:86:df:
03:e8:75:bb:02:c9:84:f8:70:ad:77:7b:d4:cd:48:87:32:79:
de:cf:65:94:96:b5:b9:ea:7c:45:09:fa:f7:88:f3:07:56:ff:
70:5f:16:2a:58:9f:42:f6:a4:70:f8:83:8b:43:84:fd:6d:e3:
c8:8c:ba:72:02:97:cb:89:ea:ca:a1:d6:d1:8f:40:aa:41:d8:
2f:f5:ce:a7:6b:40:e3:67:11:09:63:9a:54:7a:5b:89:25:99:
0f:da:9b:38:0f:59:4a:58:06:c1:57:72:b9:6b:fa:7b:32:e9:
ec:67:c1:c4:03:39:0e:14:ed:50:a0:05:e0:47:10:1d:ac:e5:
44:09:4b:1e:9d:d9:8b:fe:8c:3a:60:40:24:36:3f:81:77:91:
46:66:ba:5a:e0:be:c0:56:88:c1:d9:94:2c:cd:c1:43:71:18:
62:dc:0b:14:8a:40:a3:1d:0e:96:50:d1:e0:9c:00:99:06:d6:
eb:65:b3:54:e5:a2:20:75:d9:92:78:e8:e7:b6:ce:ca:24:2c:
dc:10:64:31
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUHmFEN9vqSPKmnYZPuDEXZubIJ94wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTAxMTMwOTAzMjFaFw0yNjAxMTIwOTA4MjFaMDMxMTAvBgNV
BAMTKEYwQjAyNUM2RUI0QkM0QkZERkM5RTBDOUQ0N0RFQTQzMjQ1NzVBNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYnSYCR3ETZVDxR5tBl68OfEyO
zeZtfBCT4ftDiaUzHv1uBKW+4jelBM9tqQBCdQi1v2PoSw/aG/sJcBDU+y6JHkVC
eUUDruAQ4rb+uhqwFKFD1g5a6gnjplwaIXtyM70iajhTf2cfkpwr+EA0lvxf1uRl
u9mvLNKYmRFd/hj9j5cdnE4oIHG9gb67ZVoG6I9UZ3Y50rO5LbxvPR9ppts+Zc4U
qlNFxZ+dIGuZ6CsgjIu0l31R4o2fm7I4wzvi8s1CbVe3W1oOMmt9L6v6KGjTXx5J
GJYspLBlcrfWyEYGQs/4eLV/QjeTGllf6UMSXSXtSh9YbLwuKxmma88kMxX5AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU8LAlxutLxL/fyeDJ1H3qQyRXWmMwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjE0NjE2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW3wB
MA0GCSqGSIb3DQEBCwUAA4IBAQBAKwFz2CGWPl7wPbEXJGF994FHALHATK0xYL4F
pom2kNkDlLyZegcLRrvrHrFxA96YA3fVht8D6HW7AsmE+HCtd3vUzUiHMnnez2WU
lrW56nxFCfr3iPMHVv9wXxYqWJ9C9qRw+IOLQ4T9bePIjLpyApfLierKodbRj0Cq
Qdgv9c6na0DjZxEJY5pUeluJJZkP2ps4D1lKWAbBV3K5a/p7MunsZ8HEAzkOFO1Q
oAXgRxAdrOVECUsendmL/ow6YEAkNj+Bd5FGZrpa4L7AVojB2ZQszcFDcRhi3AsU
ikCjHQ6WUNHgnACZBtbrZbNU5aIgddmSeOjnts7KJCzcEGQx
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:12:59 2025 by rpki-client