Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131362e302f32342d3234203d3e20383334.roa
File: 39332e39352e3131362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: iTPZzZ6fXQUVdhJzOplxVVeIyNEM4Qxknsbid180vrs=
Subject key identifier: 7E:E7:68:A0:50:28:C1:6C:85:C1:7D:72:81:73:27:EC:5C:38:9E:7D
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 5907BB58EDFC98071886FE1CA3C198BA226BCA49
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131362e302f32342d3234203d3e20383334.roa
Signing time: Sun 19 Nov 2023 06:17:55 +0000
ROA not before: Sun 19 Nov 2023 06:12:55 +0000
ROA not after: Sun 17 Nov 2024 06:17:55 +0000
asID: 834
IP address blocks: 93.95.116.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:07:bb:58:ed:fc:98:07:18:86:fe:1c:a3:c1:98:ba:22:6b:ca:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Nov 19 06:12:55 2023 GMT
Not After : Nov 17 06:17:55 2024 GMT
Subject: CN=7EE768A05028C16C85C17D72817327EC5C389E7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fc:9e:55:98:9f:7b:cb:da:66:34:c4:55:da:
a9:5a:2c:f0:ec:86:44:18:3b:f7:b6:b1:92:42:63:
4c:ed:8c:6a:ef:5e:7a:1f:4c:b6:56:39:56:35:bb:
83:0f:16:98:11:a5:bd:8f:63:25:e4:96:f6:97:ce:
de:54:00:1d:75:be:56:9b:64:53:62:c6:17:54:87:
3f:6d:51:63:bd:f0:a4:68:f8:fb:f5:f6:d5:a1:95:
e4:af:4a:24:81:54:8f:b0:37:55:0d:ff:be:91:20:
80:bd:e4:f3:5a:3c:61:13:00:e9:fb:c7:9e:1d:88:
e5:89:7e:2b:f4:ca:4a:5d:f1:78:45:2b:64:18:37:
cd:8f:2a:6b:a2:ba:15:78:c7:c6:6e:67:bc:81:b5:
98:30:37:f4:c5:40:b2:26:fc:fe:6d:a1:f7:bd:a6:
bb:d0:d4:e1:fb:2b:44:b1:02:29:50:29:dc:fa:3a:
55:db:75:1e:be:df:5a:21:a5:bd:89:4f:b8:1d:f2:
61:ef:e9:80:6d:95:17:be:2a:41:84:c2:a0:ef:9a:
74:d3:08:c7:e9:08:84:63:ad:04:56:95:ca:c8:bf:
68:c0:4a:c9:01:3e:f0:2a:e5:d8:70:eb:85:10:49:
73:3a:b0:f7:44:70:72:99:7d:2a:14:8e:fb:1a:ba:
2e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E7:68:A0:50:28:C1:6C:85:C1:7D:72:81:73:27:EC:5C:38:9E:7D
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.116.0/24
Signature Algorithm: sha256WithRSAEncryption
f4:e3:0d:4c:4d:30:f1:ec:62:31:22:15:bb:dc:9c:13:d2:e9:
58:95:c4:57:23:db:12:b7:25:1b:79:f2:14:ad:39:be:bf:cd:
44:45:1d:79:4b:74:6d:ec:08:52:c4:bd:82:bc:d3:1f:b2:01:
4a:c9:43:a0:a1:bd:4c:fa:10:93:fb:22:91:e3:cd:02:62:b8:
f6:da:4f:ef:0a:be:cd:fd:8b:ea:5e:db:c6:8c:25:5b:d9:60:
ea:2c:ca:50:bf:f8:94:18:4e:72:d2:41:6e:94:42:dc:f5:0e:
13:a2:1c:7f:11:4f:a2:52:88:d5:22:3d:12:d0:dc:43:1b:b4:
68:60:78:e4:80:8b:3c:c3:41:f6:4a:8e:07:dd:e7:e5:50:ba:
fe:83:08:0f:e7:32:17:73:94:31:5c:e9:dd:9c:99:3d:74:c4:
a6:a5:7d:04:35:5a:db:d9:76:97:28:ad:10:e6:ec:15:07:92:
dc:6c:48:2a:54:8a:27:35:18:54:d7:f2:9a:c1:77:f0:55:ac:
da:cc:c5:f7:cd:51:ea:ae:2e:6d:41:ca:3b:bd:3f:f5:4b:3a:
a3:af:8a:fa:3e:d2:54:c0:b2:30:53:db:b4:7b:95:7e:a7:0e:
68:98:01:ea:9c:45:ec:2e:34:eb:03:61:1e:25:f7:19:78:d4:
a4:18:c3:f4
-----BEGIN CERTIFICATE-----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Generated at Tue Nov 28 14:03:57 2023 by rpki-client on console-ams.rpki-client.org