Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131392e302f32342d3234203d3e2033333536.roa
File: 39332e39352e3131392e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier: 2d/fIWU9KUQZBq3+NC/Y2pkUclmFN/MESW1WiMFvkO8=
Subject key identifier: 34:7B:5D:E3:14:BE:D1:C4:64:2B:7A:76:00:27:87:67:B4:B8:6E:5A
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 490ACA01CCC6CF6119BAA833F64AAB052765EFC9
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131392e302f32342d3234203d3e2033333536.roa
Signing time: Sun 19 Nov 2023 06:17:37 +0000
ROA not before: Sun 19 Nov 2023 06:12:37 +0000
ROA not after: Sun 17 Nov 2024 06:17:37 +0000
asID: 3356
IP address blocks: 93.95.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:0a:ca:01:cc:c6:cf:61:19:ba:a8:33:f6:4a:ab:05:27:65:ef:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Nov 19 06:12:37 2023 GMT
Not After : Nov 17 06:17:37 2024 GMT
Subject: CN=347B5DE314BED1C4642B7A7600278767B4B86E5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ad:6d:6b:25:e3:4e:ca:00:4f:14:5b:4d:2e:
68:6c:c4:d2:40:69:b8:16:f3:4a:b0:09:8f:44:a4:
04:4a:3d:4f:94:d6:cf:f4:6b:1d:d5:b8:dc:0a:f0:
dc:39:a2:89:7e:28:8f:61:18:1e:e7:f9:b9:8d:08:
36:94:23:85:de:47:27:1c:64:98:2c:a5:20:21:bc:
25:d9:c8:52:71:f0:a8:06:31:ed:2e:3b:eb:a9:e6:
0c:73:35:11:12:e1:ec:79:50:2a:e8:40:6b:b7:c0:
10:bc:dc:5b:f8:08:6d:6a:14:2b:d4:e8:86:e0:d0:
db:53:d9:70:53:98:06:f4:83:e5:1b:1c:b0:3b:7f:
46:1e:96:3d:4d:4c:42:35:07:e2:fb:85:2c:72:56:
22:bb:7f:e2:0f:14:87:c9:02:ca:6a:17:b8:64:fc:
30:04:cb:9f:dd:dd:ac:c5:52:5e:24:f0:11:8b:3b:
28:f9:0d:a3:9e:d0:22:8b:5b:b6:97:20:b7:55:15:
15:ff:91:d8:5f:f2:a6:e5:a4:57:df:e5:d5:4f:eb:
d4:36:15:96:72:2d:80:b9:a5:5e:0a:45:1a:02:a7:
5e:e4:ec:3d:dc:7b:b0:8e:fc:63:56:62:60:40:78:
44:33:66:78:43:a9:4f:d2:a9:6a:f1:09:a9:00:ed:
ac:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7B:5D:E3:14:BE:D1:C4:64:2B:7A:76:00:27:87:67:B4:B8:6E:5A
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131392e302f32342d3234203d3e2033333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.119.0/24
Signature Algorithm: sha256WithRSAEncryption
df:9c:44:69:7a:a2:d4:b7:34:a7:da:19:ff:f8:4c:c7:03:de:
b8:4b:ee:dd:c7:5a:c5:53:9d:93:ca:6d:7d:9a:f9:61:a1:a5:
60:3e:c1:60:f3:83:6c:b1:be:3c:0e:12:d0:a7:b4:b5:01:34:
78:90:db:66:4c:a8:8e:51:6d:bc:6b:b3:88:b4:6c:fb:72:80:
66:1a:33:9d:87:42:39:f1:5c:9f:2d:d1:60:c5:4a:3a:1a:d5:
02:04:7d:49:90:47:ee:19:32:be:52:9e:a7:e1:d0:4c:ef:02:
aa:4c:44:ed:35:86:d5:35:97:ed:ac:3d:d9:72:f2:9b:12:1e:
fa:e5:52:22:b5:bb:de:aa:06:2d:3a:13:1a:8c:86:d3:f7:d7:
0a:01:13:85:24:e8:a9:4d:12:cf:7d:42:ba:92:4c:61:5c:1e:
e6:9b:8e:61:8e:96:86:39:d0:a5:15:fb:04:67:de:ec:5c:b1:
fb:c4:cf:c4:b0:d1:be:66:cc:22:6f:1d:5c:47:50:69:0d:c0:
83:2f:b0:0c:e5:4a:be:8f:c0:93:58:72:6d:e2:e6:46:5c:35:
43:7f:2b:6e:5e:67:41:45:1a:39:bc:19:c4:53:ec:3c:a9:11:
2e:33:0a:23:c5:1f:0e:17:d1:28:28:0e:97:6e:fb:2d:be:94:
11:79:21:13
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUSQrKAczGz2EZuqgz9kqrBSdl78kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjE3MjU0OGZhM2M0NjBlMjZjYjUxOWVlNTI0MzYxYmNh
NmM3MTMyZTAeFw0yMzExMTkwNjEyMzdaFw0yNDExMTcwNjE3MzdaMDMxMTAvBgNV
BAMTKDM0N0I1REUzMTRCRUQxQzQ2NDJCN0E3NjAwMjc4NzY3QjRCODZFNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxrW1rJeNOygBPFFtNLmhsxNJA
abgW80qwCY9EpARKPU+U1s/0ax3VuNwK8Nw5ool+KI9hGB7n+bmNCDaUI4XeRycc
ZJgspSAhvCXZyFJx8KgGMe0uO+up5gxzNRES4ex5UCroQGu3wBC83Fv4CG1qFCvU
6Ibg0NtT2XBTmAb0g+UbHLA7f0Yelj1NTEI1B+L7hSxyViK7f+IPFIfJAspqF7hk
/DAEy5/d3azFUl4k8BGLOyj5DaOe0CKLW7aXILdVFRX/kdhf8qblpFff5dVP69Q2
FZZyLYC5pV4KRRoCp17k7D3ce7CO/GNWYmBAeEQzZnhDqU/SqWrxCakA7ax5AgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUNHtd4xS+0cRkK3p2ACeHZ7S4blowHwYDVR0j
BBgwFoAUsXJUj6PEYOJstRnuUkNhvKbHEy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTY1NzNlODgtZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdk
MjVlLzAvQjE3MjU0OEZBM0M0NjBFMjZDQjUxOUVFNTI0MzYxQkNBNkM3MTMyRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NYSlVqNlBFWU9Kc3RSbnVVa05odkti
SEV5NC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTY1NzNlODgt
ZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdkMjVlLzAvMzkzMzJlMzkzNTJlMzEzMTM5
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzMzM1MzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABdX3cw
DQYJKoZIhvcNAQELBQADggEBAN+cRGl6otS3NKfaGf/4TMcD3rhL7t3HWsVTnZPK
bX2a+WGhpWA+wWDzg2yxvjwOEtCntLUBNHiQ22ZMqI5Rbbxrs4i0bPtygGYaM52H
QjnxXJ8t0WDFSjoa1QIEfUmQR+4ZMr5Snqfh0EzvAqpMRO01htU1l+2sPdly8psS
HvrlUiK1u96qBi06ExqMhtP31woBE4Uk6KlNEs99QrqSTGFcHuabjmGOloY50KUV
+wRn3uxcsfvEz8Sw0b5mzCJvHVxHUGkNwIMvsAzlSr6PwJNYcm3i5kZcNUN/K25e
Z0FFGjm8GcRT7DypES4zCiPFHw4X0SgoDpdu+y2+lBF5IRM=
-----END CERTIFICATE-----
Generated at Fri Dec 15 00:46:35 2023 by rpki-client on console-fra.rpki-client.org