Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131382e302f32342d3234203d3e20383334.roa
File: 39332e39352e3131382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: PJ0T2tTAVvOIXczm/oNqVEzXlpmQJCUv5n36Njv1wys=
Subject key identifier: 29:F7:CD:6B:22:1A:80:EA:1C:D5:CC:02:69:FE:5F:82:FF:55:40:BD
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 3EE59A8943E674EB72403D12A09EDA7CFF8BD422
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131382e302f32342d3234203d3e20383334.roa
Signing time: Sun 28 Apr 2024 00:00:14 +0000
ROA not before: Sat 27 Apr 2024 23:55:14 +0000
ROA not after: Sun 27 Apr 2025 00:00:14 +0000
asID: 834
IP address blocks: 93.95.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Apr 2024 19:19:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:e5:9a:89:43:e6:74:eb:72:40:3d:12:a0:9e:da:7c:ff:8b:d4:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Apr 27 23:55:14 2024 GMT
Not After : Apr 27 00:00:14 2025 GMT
Subject: CN=29F7CD6B221A80EA1CD5CC0269FE5F82FF5540BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:76:5c:86:5e:62:23:a2:d5:04:d4:5f:7c:81:
c7:c4:09:eb:e3:9e:64:fd:06:e5:94:c4:18:e9:7a:
1a:83:4c:f2:23:ae:8d:3b:c4:fc:ba:7a:5b:82:78:
0f:54:ab:fd:d9:e2:6b:12:e7:2c:b1:f1:34:e6:6a:
8c:56:5c:e7:24:8d:ab:b2:d4:cb:ea:c3:d5:07:e8:
38:ed:3e:cf:68:3e:12:08:ae:f1:b8:28:0f:64:df:
e7:74:16:b9:6d:f9:ae:2f:2f:d0:fa:bf:bf:41:6e:
e7:32:97:43:14:09:bd:6e:ee:22:a9:66:06:2e:78:
52:79:d8:84:10:7d:ac:eb:78:b5:fe:37:13:1e:99:
fc:3e:d3:16:dd:ea:9e:9d:7c:41:81:ef:a9:5c:ae:
2d:ef:5a:f5:3b:86:e3:64:e2:a5:82:b3:d8:a2:15:
35:4f:bf:d0:73:77:f7:2d:80:09:19:6d:dc:e5:a4:
e6:5e:4e:db:32:ef:06:a9:e0:6d:f3:ef:9b:cd:e4:
08:23:71:e8:80:e2:2f:3c:fa:32:f0:bc:e5:d0:4e:
d4:a0:a0:c6:cf:8d:e2:86:ab:c5:cc:47:10:db:d6:
f2:72:dc:f3:5f:0e:31:cb:f7:74:93:d4:2c:2f:fe:
7b:72:11:ff:68:ac:63:03:1d:47:aa:36:ff:68:c9:
b2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F7:CD:6B:22:1A:80:EA:1C:D5:CC:02:69:FE:5F:82:FF:55:40:BD
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.118.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:fc:f3:e4:6a:f0:69:74:73:22:c7:b9:ef:8c:64:03:9f:b7:
6f:25:21:96:92:d9:0a:f2:b1:38:3b:70:ad:96:7b:3d:b9:11:
cd:a5:92:19:53:c5:d3:61:c3:2e:6c:f7:cd:a2:d1:e5:47:70:
f9:fb:71:10:32:3f:e1:43:f2:a5:b2:6c:09:70:de:4a:cc:76:
b2:52:7c:aa:66:1a:45:67:02:b0:9f:1e:15:ad:59:a9:61:14:
db:5a:d7:df:cd:20:dd:ff:f3:b3:f9:a3:da:76:96:7c:fd:9e:
dd:02:29:24:52:a0:10:7d:5b:49:3f:2c:35:c6:05:c6:0d:40:
9b:df:8f:e3:bd:8a:36:a2:47:db:d1:4a:53:52:aa:57:6e:74:
8d:00:da:71:b3:6f:54:f2:8a:f5:34:f5:c9:f6:43:72:5d:d2:
80:01:ca:7c:95:da:67:75:ba:7d:2a:11:43:e8:46:25:7d:3e:
89:5b:3f:c9:b5:70:03:4a:c1:5c:56:29:16:dc:29:1e:b5:b6:
a4:8a:d6:93:ec:4e:7c:f7:fc:9c:2b:5d:8f:8f:35:c7:96:9c:
19:09:92:7b:ca:c0:d8:df:d7:ef:8f:61:56:ed:9d:e7:66:14:
3e:94:36:0c:49:a5:02:a9:19:4a:ff:ea:49:35:e7:e1:35:a7:
ce:3b:22:a7
-----BEGIN CERTIFICATE-----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Generated at Sun Apr 28 20:07:40 2024 by rpki-client on console-fra.rpki-client.org