Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131382e302f32342d3234203d3e2033333536.roa
File: 39332e39352e3131382e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier: Rw/DQ3Dp76BMIaOGKXk6zTBA5/GCEo0Lb+NCd9iK7Mk=
Subject key identifier: 0C:11:53:53:CD:DA:EC:EF:E6:CE:64:01:A8:CE:BC:BA:20:05:54:F9
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 34BBE2E714CB4DF4CDE674DA755E18B9ED5A38E8
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131382e302f32342d3234203d3e2033333536.roa
Signing time: Sun 19 Nov 2023 06:17:41 +0000
ROA not before: Sun 19 Nov 2023 06:12:41 +0000
ROA not after: Sun 17 Nov 2024 06:17:41 +0000
asID: 3356
IP address blocks: 93.95.118.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:bb:e2:e7:14:cb:4d:f4:cd:e6:74:da:75:5e:18:b9:ed:5a:38:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Nov 19 06:12:41 2023 GMT
Not After : Nov 17 06:17:41 2024 GMT
Subject: CN=0C115353CDDAECEFE6CE6401A8CEBCBA200554F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3a:17:35:82:75:40:fe:d3:16:d7:62:b3:a6:
1b:c8:ad:11:f2:fc:b8:53:92:a9:2a:f6:03:cf:2e:
33:fd:a7:42:5e:4e:9a:1f:16:bf:ea:22:d9:b3:ef:
18:6a:06:bb:d1:97:5c:29:97:d2:49:c9:e0:f7:a8:
38:2f:f5:90:84:65:af:1d:fc:09:54:73:a5:9b:e0:
57:12:3c:80:87:fb:8d:34:89:b2:5a:72:ed:6a:11:
03:25:b9:8a:ce:38:9e:58:f9:97:e2:be:c9:2c:b5:
86:62:4f:f1:b2:e6:81:b5:fc:24:3d:af:f3:d3:6d:
b4:58:77:7b:57:46:dc:b9:b5:33:68:13:cd:5e:8f:
f1:b9:d9:7a:75:00:36:52:1f:74:ef:ca:ff:d6:4a:
10:c4:ca:5e:4b:3f:37:ab:c6:c8:ff:58:9b:3d:4c:
83:4a:59:ff:73:1e:c0:28:66:59:10:96:41:79:b9:
c8:2d:7f:84:fb:e2:20:1c:a1:c5:22:74:6f:46:93:
0e:28:6e:fc:4b:29:15:04:64:89:4d:94:a6:04:61:
c7:63:9f:56:ef:fe:b0:0c:22:44:01:d4:eb:fe:3c:
a7:51:6a:ce:23:a9:10:28:04:4f:58:36:42:cc:be:
d3:14:00:37:bd:d3:7b:d7:3e:74:b9:42:1e:88:6b:
1a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:11:53:53:CD:DA:EC:EF:E6:CE:64:01:A8:CE:BC:BA:20:05:54:F9
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131382e302f32342d3234203d3e2033333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.118.0/24
Signature Algorithm: sha256WithRSAEncryption
82:b2:28:5e:78:76:63:11:b1:7e:1f:1c:af:d0:19:3f:5e:44:
e4:fd:17:83:79:ce:8b:f1:2a:83:3b:65:8b:e0:33:d1:d6:a9:
72:a6:fe:ae:ce:f5:fc:47:44:a1:90:d5:34:14:d9:9c:cb:df:
09:e1:1c:61:12:73:a3:3d:f6:10:58:9e:d2:15:89:fb:a4:24:
47:d3:ad:18:30:8d:13:44:57:15:5a:7d:11:86:db:e1:68:a5:
9f:ac:ec:16:a7:80:f3:63:45:1d:6a:cf:29:2d:d1:f2:e2:5a:
03:42:7c:bf:ac:bb:f5:80:a7:9a:c5:a2:c5:2b:53:e4:6d:40:
7a:2c:77:26:8f:d2:0b:a2:b3:0b:d2:1d:56:f3:7f:f2:68:ae:
68:5f:96:c5:3c:b3:8b:46:89:3e:88:b7:08:d4:9e:df:b5:b5:
df:81:be:30:3f:91:89:06:dc:8e:99:5a:e4:56:66:ab:78:fb:
e1:f4:5d:29:4a:30:7e:6b:eb:04:1d:83:dc:db:12:e1:32:0a:
b6:46:a8:c4:62:b7:ac:54:c7:6c:7c:0c:2c:f0:a2:7d:13:eb:
72:4f:0a:fc:56:d6:81:de:66:25:eb:db:dc:cb:bf:2e:4d:d1:
7a:eb:15:00:8a:45:ef:6e:7f:08:af:68:4d:74:e7:a8:96:82:
eb:06:33:aa
-----BEGIN CERTIFICATE-----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Generated at Tue Nov 28 09:01:54 2023 by rpki-client on console-fra.rpki-client.org