Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131362e302f32342d3234203d3e2033333536.roa
File: 39332e39352e3131362e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier: w08aZh17UZnShtL7gygHwmVskoyhi8qqtBuqVQrmSZM=
Subject key identifier: 78:90:D6:29:56:D4:FD:EC:53:B4:6D:9A:5C:20:8A:0F:08:80:BB:C8
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 3F48D5B15EEA91204574BCA3F7AEC2CD46C57346
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131362e302f32342d3234203d3e2033333536.roa
Signing time: Sun 19 Nov 2023 06:17:44 +0000
ROA not before: Sun 19 Nov 2023 06:12:44 +0000
ROA not after: Sun 17 Nov 2024 06:17:44 +0000
asID: 3356
IP address blocks: 93.95.116.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:48:d5:b1:5e:ea:91:20:45:74:bc:a3:f7:ae:c2:cd:46:c5:73:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Nov 19 06:12:44 2023 GMT
Not After : Nov 17 06:17:44 2024 GMT
Subject: CN=7890D62956D4FDEC53B46D9A5C208A0F0880BBC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:40:f3:d8:d4:18:c7:71:92:04:12:b0:92:16:
73:20:4d:6b:b3:a7:c4:80:ba:d8:be:ec:36:24:36:
49:48:4a:a1:6a:10:0b:a7:ef:56:2a:bd:40:25:7f:
f9:2d:50:3f:cd:10:f4:c1:78:26:da:f2:f5:ef:ce:
fe:8b:4c:50:62:ea:4f:44:48:bd:d9:6b:73:e1:df:
c5:42:5f:b5:1c:31:8b:d6:a9:54:42:81:8b:24:ce:
03:4e:47:c3:9e:bb:af:72:76:a0:c0:b5:e5:7c:10:
af:2a:8f:8e:dd:0e:26:c5:e9:09:5a:c5:5b:6f:9f:
7e:a2:11:37:b0:d9:c0:1b:92:92:f6:c8:62:49:c5:
fa:3e:85:d4:05:ea:8b:58:42:df:15:63:6e:5b:c2:
62:de:b5:0c:c6:0d:37:47:da:d7:ba:4d:cd:22:1e:
43:ae:27:20:64:f7:82:cd:fc:62:8b:ad:75:c3:f3:
e5:3e:57:6d:02:49:f6:02:d5:53:9b:27:ef:11:70:
46:ec:63:d7:a9:13:76:1d:c0:09:e7:2e:e0:6c:3e:
47:fa:b9:7f:23:2c:d4:2c:49:b4:f1:65:8a:8d:5d:
8e:79:6b:89:5d:dc:25:41:ea:44:99:55:ae:ce:c8:
d0:5a:ed:99:9a:67:c9:34:23:c1:b3:89:fb:f5:d6:
d1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:90:D6:29:56:D4:FD:EC:53:B4:6D:9A:5C:20:8A:0F:08:80:BB:C8
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131362e302f32342d3234203d3e2033333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.116.0/24
Signature Algorithm: sha256WithRSAEncryption
41:12:ac:90:a6:3c:35:c1:17:04:30:b5:3d:17:d8:ed:a4:63:
5c:48:9b:47:66:4a:25:01:44:35:0c:83:83:59:b1:80:df:34:
b0:e2:d8:e2:62:6e:c4:79:1d:59:94:5e:ce:99:bd:8d:31:b1:
7f:30:78:e6:07:5c:94:7b:2a:79:e4:37:2f:07:48:a4:d4:15:
fa:d7:d5:99:9b:bc:0f:88:ed:4e:23:96:6f:4c:9d:37:f7:1a:
6f:cb:bd:3f:85:65:dc:78:c8:64:b9:23:b6:aa:e5:82:ad:eb:
66:58:20:3c:70:06:8f:3d:0c:96:ea:3a:37:00:4c:d4:6c:bb:
60:20:70:dd:d0:5f:e6:41:d4:9f:e6:53:86:68:9c:19:07:db:
02:85:03:f8:12:c2:91:21:c7:1c:74:6c:58:f4:1c:c0:c4:6a:
af:e5:5f:50:41:a0:cf:40:7f:cd:1e:1b:ab:94:86:01:84:98:
f9:5d:e5:9c:8c:27:bc:92:e5:ad:64:56:82:e2:07:fd:63:8d:
b7:a6:fc:db:08:40:a3:ee:d9:69:e7:1d:49:64:15:2b:01:72:
a2:e4:8e:09:72:e3:87:c0:aa:1d:57:63:50:a4:cb:ef:ad:ca:
ae:a9:a2:42:e1:25:4f:13:bb:bd:02:27:9e:76:8a:bf:e1:e2:
2d:c9:52:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 28 09:01:54 2023 by rpki-client on console-fra.rpki-client.org