Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131352e302f32342d3234203d3e20383334.roa
File: 39332e39352e3131352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: JBzsjwVIoYQrey0r6PFrWMKtmltkvXgSGCDqXOqUQv0=
Subject key identifier: 41:E4:DC:F8:02:33:C8:4D:B1:99:72:6C:D6:06:CB:14:0D:39:7A:5F
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 633B96C07DCC664907E83C462885EEDD1821BBD6
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131352e302f32342d3234203d3e20383334.roa
Signing time: Wed 29 Nov 2023 00:00:07 +0000
ROA not before: Tue 28 Nov 2023 23:55:07 +0000
ROA not after: Wed 27 Nov 2024 00:00:07 +0000
asID: 834
IP address blocks: 93.95.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:3b:96:c0:7d:cc:66:49:07:e8:3c:46:28:85:ee:dd:18:21:bb:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Nov 28 23:55:07 2023 GMT
Not After : Nov 27 00:00:07 2024 GMT
Subject: CN=41E4DCF80233C84DB199726CD606CB140D397A5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:be:a1:10:5a:ec:14:8f:bd:9c:23:69:78:50:
2f:20:f0:ed:62:20:ad:65:12:d2:5e:38:a2:1b:f8:
66:87:5f:8f:c0:2a:f1:8c:d6:8d:b7:9d:7b:3c:fa:
6f:76:2f:49:32:90:53:3f:02:a3:73:5d:b5:11:0f:
2c:99:0e:d9:72:da:dc:dc:49:08:bc:08:a5:99:2c:
04:76:20:d9:f1:db:97:d5:97:5e:75:78:65:4e:1a:
30:43:2b:c2:26:b8:23:91:56:8d:aa:e6:cf:a5:c1:
44:45:a5:f0:73:cc:44:1f:06:6b:0e:b9:2b:e4:b5:
a1:a4:14:82:1a:2a:dc:7b:51:08:5a:e7:b6:76:51:
ca:28:8d:44:d6:2b:55:fa:6d:24:c8:64:2d:c1:2c:
19:6f:0c:81:39:73:b0:11:2a:34:94:00:b1:fb:de:
a2:24:d9:07:62:c4:ff:10:0f:41:f8:46:ee:8f:52:
f1:66:e3:2a:aa:5d:b7:04:5e:b5:3a:4e:8e:eb:13:
78:2f:5f:db:61:30:c0:d9:98:0a:47:ab:13:8a:7e:
16:28:fb:e5:3e:ad:20:86:b5:2c:68:39:9b:1d:b5:
61:91:9c:a0:3d:6e:fa:d7:13:10:2d:ec:66:32:be:
78:91:68:e3:db:9d:c1:da:67:67:53:6b:88:73:e5:
bd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E4:DC:F8:02:33:C8:4D:B1:99:72:6C:D6:06:CB:14:0D:39:7A:5F
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.115.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:31:ae:8b:ff:f0:6c:af:ef:1b:d0:cc:c8:c4:9c:dc:7f:a2:
af:17:f5:51:1f:40:d8:e2:d2:d9:4a:49:f2:f4:81:54:2e:a3:
64:84:b8:cc:00:18:5b:3d:0a:04:3c:01:5e:0d:86:a0:9e:82:
a3:d5:8f:cf:ae:d3:e6:94:12:98:62:35:97:7d:3a:30:5e:05:
43:ad:c1:02:21:61:60:cc:39:6b:85:7b:31:b9:98:3a:af:be:
36:76:01:34:50:6a:fa:55:d2:61:14:4f:9a:a7:11:a9:36:e4:
54:ee:02:8c:8c:87:97:6c:f6:82:15:c8:2f:31:a7:b3:eb:21:
1a:03:cd:b0:6a:bd:c3:a3:24:7a:c0:d6:9a:b9:23:8a:4f:33:
7c:a2:0e:ae:9e:c6:0e:b9:21:33:45:42:60:5c:5a:84:ae:3e:
cf:e3:6c:79:2e:43:c5:ff:c7:b2:1c:4c:d5:20:24:4a:00:29:
fa:78:dd:20:9f:b3:dd:e7:ca:75:0b:89:8d:c5:5a:04:16:8a:
29:46:be:10:ee:96:3c:eb:aa:45:f2:4b:2d:09:50:9b:83:da:
c7:c1:19:af:d8:40:db:16:62:d5:4c:93:58:d1:70:4b:c7:9d:
4e:f2:e2:fe:39:be:91:53:fc:6b:58:51:74:27:30:56:30:78:
3a:e2:ad:e0
-----BEGIN CERTIFICATE-----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Generated at Fri Dec 1 12:34:40 2023 by rpki-client on console-ams.rpki-client.org