Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131342e302f32342d3234203d3e203439393831.roa
File: 39332e39352e3131342e302f32342d3234203d3e203439393831.roa (raw, json)
Hash identifier: ldsVTyseQFTtymIqXBGvzFRvjhWD34rr/bfXyokH9W0=
Subject key identifier: 3F:D3:4F:44:B1:59:00:56:B8:16:0A:F9:00:D9:33:C4:63:94:C2:68
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 3B7067FD6B847DB6177D37EE9AFDA8F36D86CA37
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131342e302f32342d3234203d3e203439393831.roa
Signing time: Wed 20 Dec 2023 14:45:19 +0000
ROA not before: Wed 20 Dec 2023 14:40:19 +0000
ROA not after: Wed 18 Dec 2024 14:45:19 +0000
asID: 49981
IP address blocks: 93.95.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Apr 2024 00:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:70:67:fd:6b:84:7d:b6:17:7d:37:ee:9a:fd:a8:f3:6d:86:ca:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Dec 20 14:40:19 2023 GMT
Not After : Dec 18 14:45:19 2024 GMT
Subject: CN=3FD34F44B1590056B8160AF900D933C46394C268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4c:a1:f3:0b:6e:97:62:a4:85:e7:e2:7c:57:
aa:a0:19:50:3b:0a:75:49:60:f9:e4:81:e5:97:4c:
87:9b:ff:73:cc:eb:18:8d:b9:6a:43:75:9e:a0:39:
4a:97:e8:05:9a:6b:b3:e1:a7:8e:3f:5a:8d:cd:61:
1a:a8:9f:f0:18:a0:36:01:50:d9:81:02:de:9c:84:
28:9b:70:ae:92:5a:88:88:4d:bc:47:9a:21:f3:79:
3d:95:42:c8:bf:8d:3d:ca:c5:d7:d5:bc:b1:69:dd:
4b:9d:1b:1e:55:a5:0d:32:da:c0:a8:0b:a6:2b:76:
31:04:27:23:ca:24:eb:c5:ba:67:75:2c:69:37:bc:
86:ad:b2:14:fa:71:01:4c:b1:c5:0f:80:ca:66:73:
90:76:0d:2b:59:22:9a:90:4f:e4:c2:38:4a:38:f2:
0b:59:1b:6e:77:1f:53:e1:43:3b:2e:d6:56:26:06:
e3:67:af:53:a8:10:35:d5:e6:70:8b:35:bd:69:50:
68:61:2b:1f:fa:12:fd:43:a2:25:05:3f:d7:f3:7a:
5c:33:bb:39:40:e2:89:14:6a:30:f3:e8:74:23:f3:
13:14:96:d3:ce:bd:27:0a:b5:ec:36:fa:45:9a:69:
bf:85:4d:e7:be:f6:c0:fb:76:bd:24:af:78:43:6d:
a4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D3:4F:44:B1:59:00:56:B8:16:0A:F9:00:D9:33:C4:63:94:C2:68
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131342e302f32342d3234203d3e203439393831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.114.0/24
Signature Algorithm: sha256WithRSAEncryption
15:5e:5d:c5:0c:ca:88:d6:b1:ba:89:e9:7b:d1:96:79:7b:96:
61:86:17:50:6a:d4:1b:c2:6f:16:32:b0:3c:2a:9c:28:d3:16:
46:65:40:18:05:05:5e:91:33:73:63:6e:fb:62:ac:22:63:73:
9b:f3:be:10:01:9a:e8:9d:19:22:7d:c1:9c:c2:9a:a9:9a:70:
9f:7a:73:74:1a:fc:78:74:e2:5b:3f:b0:5e:1c:ef:4c:e0:a8:
15:e6:17:de:af:ef:f1:d0:f4:59:7c:a7:2f:4a:7b:0e:53:69:
a9:15:39:23:ae:f8:39:95:e8:76:c8:bd:8f:98:d8:f0:27:60:
73:b2:09:37:41:79:8d:57:aa:15:f1:9b:1a:32:1a:5e:c7:e3:
c4:84:cd:f1:7b:09:a5:74:6b:ff:d1:a6:55:c9:44:7a:1b:da:
54:5c:d4:e8:e8:38:a0:3b:71:5c:a8:3a:89:04:8e:c2:31:b8:
1b:5d:5c:b2:50:d5:3a:d4:29:5c:01:2b:33:6b:59:2e:2a:c0:
ad:f8:1a:b5:aa:9d:29:14:1b:e2:15:cc:68:ee:d4:34:14:09:
84:5a:86:a5:93:b9:7b:e7:c7:78:d6:78:ea:63:ef:d9:88:4b:
0b:01:b3:64:b9:44:cd:25:0e:0a:3b:21:ca:d2:a0:cf:c8:16:
0c:3f:28:2b
-----BEGIN CERTIFICATE-----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Generated at Sun Apr 7 01:15:35 2024 by rpki-client on console-ams.rpki-client.org