Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131332e302f32342d3234203d3e20383334.roa
File: 39332e39352e3131332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: g2J/bdpUognHk7eGcTfvsm+sJAIKKn6T1pqr0rZZ8mY=
Subject key identifier: 8A:DD:31:01:8A:B1:96:59:BF:28:A9:E2:36:80:95:D3:D6:42:C8:6A
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 467CFA82B6730E7F7A4ADDDA8EE695438D4FA9B7
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131332e302f32342d3234203d3e20383334.roa
Signing time: Wed 10 Jan 2024 00:00:07 +0000
ROA not before: Tue 09 Jan 2024 23:55:07 +0000
ROA not after: Wed 08 Jan 2025 00:00:07 +0000
asID: 834
IP address blocks: 93.95.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 04:36:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:7c:fa:82:b6:73:0e:7f:7a:4a:dd:da:8e:e6:95:43:8d:4f:a9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Jan 9 23:55:07 2024 GMT
Not After : Jan 8 00:00:07 2025 GMT
Subject: CN=8ADD31018AB19659BF28A9E2368095D3D642C86A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:eb:cc:43:cd:4c:95:e3:b1:77:e7:6c:14:3d:
69:14:e8:95:ef:11:ff:88:26:05:79:f9:50:dc:6d:
9f:9b:44:c8:4f:b9:1f:7a:d4:44:2f:55:2a:c8:5b:
b6:6d:91:0e:4f:58:21:4f:fe:d0:c8:71:c4:4a:d7:
79:c8:12:18:02:60:65:15:00:47:bc:8c:a1:80:ab:
5b:20:50:33:6c:4c:3e:09:64:2c:65:06:8d:94:84:
6b:54:1e:68:81:b1:1a:af:2a:19:57:9c:18:d8:c7:
b2:75:ea:53:3c:ce:49:05:81:94:e0:fb:82:e0:31:
eb:31:b8:25:6f:3a:43:60:59:1d:c1:42:81:d2:eb:
29:cb:e5:1d:ce:d2:7b:b8:8d:e7:ef:80:50:c4:79:
a4:42:2e:b0:73:d7:08:f2:7a:cd:0f:e8:a9:21:47:
7e:e3:56:9e:9d:46:47:d6:91:93:81:4a:13:ec:4f:
07:75:4c:87:65:63:79:95:2c:20:03:93:26:7c:4f:
12:d4:45:cb:63:ea:85:7b:4b:96:37:40:b5:ee:77:
15:c9:cf:56:4e:90:f0:a3:6f:fa:ff:ca:6b:5c:2e:
5e:e7:a5:ed:10:32:ac:c5:1f:d2:f9:7a:55:fe:30:
b4:82:cf:c3:d2:b0:e8:86:14:a8:7c:68:cc:38:86:
9a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DD:31:01:8A:B1:96:59:BF:28:A9:E2:36:80:95:D3:D6:42:C8:6A
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.113.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:f0:58:31:de:af:b6:97:83:dd:c0:92:0b:73:f9:8a:ad:2a:
3e:51:f4:58:0f:ec:16:ff:d6:19:8c:08:03:ae:6e:1f:c8:b5:
e8:69:43:09:7d:61:e0:9f:41:5d:8e:e0:49:fc:94:ae:a3:7d:
12:a1:fc:21:bc:30:da:d1:c7:6b:55:26:fb:9f:1a:36:4c:e3:
c2:a5:a4:44:13:40:9f:5b:14:53:77:8c:8b:3a:e1:da:62:52:
65:72:8f:b1:85:78:0a:0d:d8:02:2f:76:eb:54:0c:dc:ef:cf:
fd:19:f2:35:e9:df:6d:e9:d0:81:39:36:b2:a6:91:58:85:ec:
f3:c0:fa:2e:03:ad:fb:fd:a8:9a:7f:81:79:ef:2d:e3:25:35:
4f:92:0c:0d:01:3a:94:d5:55:28:18:b8:8a:91:ab:fc:0d:a2:
a3:01:8d:98:ae:ec:36:cb:ad:03:55:7a:c5:6e:22:5a:20:07:
a8:40:73:1b:b0:58:de:cc:9c:76:c8:61:07:f6:86:27:c3:e3:
9c:a5:2c:58:6f:82:e9:71:c4:e5:d9:a9:b0:b6:c8:99:6e:2a:
99:7d:c9:84:86:13:be:4d:88:a0:3e:ef:7e:99:2b:5d:a1:d8:
66:5a:90:b7:a3:67:83:30:82:b8:7e:bd:df:6b:43:90:df:de:
f7:07:cb:7d
-----BEGIN CERTIFICATE-----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Generated at Wed Jan 10 07:33:53 2024 by rpki-client on console-ams.rpki-client.org