Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131342e302f32342d3234203d3e20383334.roa
File: 39332e39352e3131342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: P9oyXL/arjtDozUqegX85EKNOag15r5CQhvy9yZQouc=
Subject key identifier: B4:E6:82:2E:C7:A3:5B:3A:B3:5D:98:A4:67:92:AB:8B:AB:A2:CF:E0
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 7F5AB581753DB8F8D6A62C208F8F208A989EAE01
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131342e302f32342d3234203d3e20383334.roa
Signing time: Sun 07 Apr 2024 00:01:00 +0000
ROA not before: Sat 06 Apr 2024 23:56:00 +0000
ROA not after: Sun 06 Apr 2025 00:01:00 +0000
asID: 834
IP address blocks: 93.95.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Apr 2024 12:53:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:5a:b5:81:75:3d:b8:f8:d6:a6:2c:20:8f:8f:20:8a:98:9e:ae:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Apr 6 23:56:00 2024 GMT
Not After : Apr 6 00:01:00 2025 GMT
Subject: CN=B4E6822EC7A35B3AB35D98A46792AB8BABA2CFE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:26:bb:80:16:2d:7d:04:8b:ac:15:96:62:36:
7e:ff:4d:b7:ce:64:07:ce:f3:a0:13:e9:d8:8e:48:
38:3e:f9:2d:d3:ea:9d:e8:b9:0e:69:5f:06:b9:e1:
19:0f:c1:bc:ef:79:c9:9e:4d:8d:84:1c:07:dc:08:
f3:e4:78:62:c3:07:90:ec:38:1a:c0:f0:9d:e3:31:
98:18:95:82:76:44:c8:a3:4c:52:b1:fe:bf:17:b0:
cf:12:ac:5e:82:86:55:f9:70:c8:e1:fa:5b:ce:e9:
03:e4:7a:e9:33:65:41:17:43:26:90:d4:9f:f5:8a:
5f:1c:e6:83:83:5f:b7:e7:70:3a:af:e3:2b:9a:2d:
48:01:95:e8:c8:c1:64:c7:b9:0e:e3:63:53:42:74:
10:e7:fe:71:de:34:fd:fb:bc:e0:b8:86:25:75:9a:
1f:8e:3f:00:b8:5c:06:4f:9f:8f:18:dc:7c:52:27:
3a:9c:36:fc:8f:e1:1f:bf:98:a6:11:fd:16:c6:b8:
d2:4e:f4:19:ec:1e:bb:55:42:14:8f:8c:e1:6f:82:
6e:77:6d:52:18:ef:e3:cd:63:04:1e:17:c4:ab:6d:
43:7f:55:36:76:f2:2f:0b:61:c2:c8:10:05:a5:52:
96:22:93:1d:99:e0:de:ac:5e:c4:23:29:d9:75:2d:
e3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E6:82:2E:C7:A3:5B:3A:B3:5D:98:A4:67:92:AB:8B:AB:A2:CF:E0
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.114.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:e8:c2:5d:c7:44:8d:ca:8f:e4:e1:6e:75:e7:00:a4:cf:59:
d4:5f:bf:51:d5:0c:8c:51:a0:d8:89:8b:35:74:61:38:89:c8:
cf:a9:75:f9:45:38:a6:62:53:20:b9:8d:51:a0:f1:c1:2f:08:
9b:7c:c0:7b:da:9b:39:78:dc:9d:b7:40:9a:ae:75:c1:2d:4a:
59:cb:89:e6:bd:e6:74:20:15:b4:0e:a5:87:d5:45:c5:a1:c8:
ea:bf:97:f0:0f:f8:5f:3f:ed:f1:5d:01:21:68:f8:d6:f5:b2:
af:a8:8e:c7:36:88:02:05:9a:61:e3:fd:7e:7f:c7:fa:00:de:
86:c5:25:ff:10:e3:87:b6:b3:2e:c1:63:b9:1c:c4:3d:12:28:
e6:1f:de:9a:e1:f1:18:ae:28:63:4e:67:1a:58:c1:45:63:61:
b2:1b:c3:5c:7a:37:f3:85:10:66:9c:94:3d:36:87:1b:95:80:
a7:cd:32:cc:80:eb:5d:04:6f:ed:9c:6a:90:4e:b7:04:85:6a:
d1:0f:43:03:55:11:6c:e9:10:3a:32:9a:fa:fb:b0:54:29:0d:
1b:a9:83:37:54:da:93:d6:b2:8f:bf:58:5e:b1:d5:ec:04:97:
00:7f:cc:62:45:fb:82:97:90:1b:85:74:5b:e4:99:d6:29:cf:
9e:92:b9:49
-----BEGIN CERTIFICATE-----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Generated at Sun Apr 7 14:14:27 2024 by rpki-client on console-ams.rpki-client.org