Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131372e302f32342d3234203d3e2033333536.roa
File: 39332e39352e3131372e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier: sgb+kqRjPLoAVXO4Cl5eOU7bIV8GFnYgFSDQf0P1Gko=
Subject key identifier: 5A:F1:E0:02:19:D3:5B:17:68:05:A7:61:98:5A:B1:A3:4A:0B:6F:6F
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 3599A043BBFB5DB12EC0D5D462DF4210D03A164C
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131372e302f32342d3234203d3e2033333536.roa
Signing time: Sun 19 Nov 2023 06:17:49 +0000
ROA not before: Sun 19 Nov 2023 06:12:49 +0000
ROA not after: Sun 17 Nov 2024 06:17:49 +0000
asID: 3356
IP address blocks: 93.95.117.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:99:a0:43:bb:fb:5d:b1:2e:c0:d5:d4:62:df:42:10:d0:3a:16:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Nov 19 06:12:49 2023 GMT
Not After : Nov 17 06:17:49 2024 GMT
Subject: CN=5AF1E00219D35B176805A761985AB1A34A0B6F6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9e:69:80:bb:3a:c2:08:0d:f4:26:65:11:45:
66:56:44:b9:1d:48:30:38:46:74:ad:0a:de:fb:cf:
3b:a3:d3:d1:3e:53:94:97:32:1f:09:64:01:a0:04:
f7:2a:13:fd:a8:91:3e:79:39:81:39:0d:54:92:d8:
c7:cd:ae:ac:b5:9c:3f:c6:62:c8:ae:f3:ee:3a:1e:
b8:d9:7c:28:0c:59:66:14:3b:db:76:ed:03:5a:69:
1f:8a:05:3d:29:8f:77:79:1e:33:f1:be:9d:b2:0d:
9b:c1:52:df:6c:e1:dc:a1:51:9c:6c:64:f4:1f:20:
f1:e3:3a:fb:17:a8:78:b4:69:c0:7a:ec:f2:0a:01:
97:be:5a:16:e8:13:10:fa:96:64:77:26:06:d0:fe:
6a:d9:c9:e3:92:0a:a9:8d:a3:d0:8e:8d:1d:fe:5f:
e7:76:06:2c:52:49:30:ce:5f:b9:96:cb:5e:9b:24:
89:5c:7c:18:12:7e:38:1d:4b:6c:85:75:d4:e9:37:
36:48:24:07:f5:da:d8:bd:6a:4b:52:95:26:c1:69:
8c:8f:5a:9d:04:9d:76:61:e6:26:f1:57:ee:0f:8b:
38:1d:aa:c6:35:4b:8a:cb:e2:53:93:55:75:8a:85:
68:39:d3:35:15:e2:6c:c6:7b:ec:86:33:1c:7d:ea:
b4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F1:E0:02:19:D3:5B:17:68:05:A7:61:98:5A:B1:A3:4A:0B:6F:6F
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131372e302f32342d3234203d3e2033333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.117.0/24
Signature Algorithm: sha256WithRSAEncryption
64:ab:95:68:64:1c:10:60:af:95:a1:3e:91:e6:5d:bc:0f:96:
6c:d1:72:6c:31:e7:56:e2:b2:23:00:3d:78:32:7b:38:c6:bf:
a4:41:4c:56:45:9f:77:92:95:f0:29:10:52:92:a8:2f:ed:18:
eb:1b:0f:c7:ca:11:bc:de:7f:43:da:a1:12:84:86:7c:71:f1:
f1:1e:56:d5:2b:4b:4a:81:8c:d7:f2:45:43:b0:9c:2f:76:a8:
c0:d9:90:d7:18:6d:d5:98:6b:7c:ef:e5:e0:cc:33:a1:95:fb:
4d:0e:ab:43:5a:c3:fc:28:02:5a:29:8f:94:2b:32:42:64:bf:
f3:15:d7:c9:b7:52:54:22:24:88:56:ea:b5:fc:64:16:de:08:
7a:64:2d:d0:57:a8:39:11:4d:e1:0a:75:a3:05:72:b0:b2:7e:
83:85:fa:73:ed:00:c3:73:f2:34:d4:1d:89:81:14:91:13:53:
41:8b:42:6f:27:5f:b1:51:cb:3e:49:fe:86:b3:32:fc:a2:ef:
c7:52:92:34:4c:f3:9b:da:88:97:a1:b6:43:9d:9e:89:f1:a4:
3e:30:58:ae:a5:14:ab:df:3d:4f:fc:12:10:81:a9:cd:fb:98:
86:f9:53:07:13:8f:4e:98:59:bb:8d:b4:37:44:40:1e:2d:51:
8e:54:b4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 28 09:01:54 2023 by rpki-client on console-fra.rpki-client.org