Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131392e302f32342d3234203d3e203434343133.roa
File: 39332e39352e3131392e302f32342d3234203d3e203434343133.roa (raw, json)
Hash identifier: m+c/WALax3CJ3ZItqUNZekxk7WXj78IRivYraLdvQFo=
Subject key identifier: BB:96:A4:6D:DE:00:AB:B3:C6:6D:56:F7:5D:99:EF:D8:0F:A0:7A:4E
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 12C848B6D1F5A07B8723501C1D252BA01D2371B3
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131392e302f32342d3234203d3e203434343133.roa
Signing time: Sun 21 Jan 2024 10:28:43 +0000
ROA not before: Sun 21 Jan 2024 10:23:43 +0000
ROA not after: Sun 19 Jan 2025 10:28:43 +0000
asID: 44413
IP address blocks: 93.95.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 10:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:c8:48:b6:d1:f5:a0:7b:87:23:50:1c:1d:25:2b:a0:1d:23:71:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Jan 21 10:23:43 2024 GMT
Not After : Jan 19 10:28:43 2025 GMT
Subject: CN=BB96A46DDE00ABB3C66D56F75D99EFD80FA07A4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:26:de:42:21:fd:c3:8e:46:be:e0:4b:40:f7:
ef:31:52:4c:19:0e:f6:1e:9b:4c:a7:03:28:e6:e7:
75:6d:dc:f6:60:75:7c:2e:e8:0b:7d:96:2b:bb:c8:
22:13:7c:9c:94:ee:fd:8c:8c:d8:1b:01:23:1f:fa:
72:af:0b:3e:3c:40:74:f1:24:8d:c4:9c:31:aa:b8:
b8:ef:71:b4:92:42:b5:03:c0:ad:b6:27:6b:dd:d2:
13:8e:d5:e4:11:e4:a4:39:6f:05:f1:d3:f3:08:94:
51:2d:d7:05:fc:1c:e7:c1:76:fd:f1:70:24:10:d9:
b2:5c:d6:78:a4:24:10:9b:e9:01:fd:5a:6d:37:74:
b0:28:35:69:b9:ff:46:c2:5f:a7:30:43:eb:d5:00:
08:be:e2:0b:4b:58:7a:f4:04:7d:69:dc:f5:94:69:
95:01:9a:0f:b1:cf:2b:18:65:6d:25:24:bb:6e:f5:
41:f2:85:e4:5c:33:47:eb:b2:49:f1:a7:cc:40:d7:
0b:6f:43:a3:9f:ef:81:ad:ee:46:e1:47:3d:30:c6:
53:49:fe:78:bd:d8:34:df:c8:27:10:81:4f:59:d1:
29:de:06:d4:7c:82:97:f9:27:b0:8c:5e:7a:9a:07:
a6:f6:46:f7:a9:43:0f:65:9e:2e:66:9b:89:5b:92:
31:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:96:A4:6D:DE:00:AB:B3:C6:6D:56:F7:5D:99:EF:D8:0F:A0:7A:4E
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131392e302f32342d3234203d3e203434343133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.119.0/24
Signature Algorithm: sha256WithRSAEncryption
e8:76:e5:49:15:49:28:1e:aa:94:c0:f4:50:7f:ff:dc:87:1c:
cf:25:93:54:aa:d5:21:1a:e8:35:36:c3:ba:23:dd:11:93:8f:
6c:23:b3:b5:ef:5b:be:1a:8d:dc:84:35:4b:2c:89:52:00:8c:
c2:c3:3f:66:66:10:90:ce:d2:8e:40:6e:47:d7:3a:54:80:13:
df:78:25:cb:b6:82:8b:6f:35:cd:fb:a7:b3:fc:9b:15:e0:13:
a2:25:f1:45:26:5c:6d:66:da:90:9c:bd:00:51:d2:72:f3:30:
c1:99:75:c7:38:27:12:ad:9d:68:da:d6:15:a7:b9:48:b2:ea:
d5:cc:3b:47:4a:d6:ed:e3:69:5d:d2:21:d7:1f:95:fd:a7:60:
e7:d0:79:64:af:fe:cd:0b:78:bd:30:d6:29:5e:38:39:94:0c:
e5:4e:75:20:26:f6:9d:44:0a:c8:7e:77:25:b5:95:f6:88:d4:
bd:8c:4c:62:d6:ac:e5:9a:de:5f:b2:d0:58:35:4e:51:19:d2:
8f:42:7d:b6:1f:cd:62:31:39:97:1a:2e:a9:11:24:7f:03:fc:
64:98:e9:b7:f8:59:29:84:9f:5e:4c:eb:42:77:fc:f2:95:8a:
af:c8:59:ad:8d:3b:ab:6f:12:3f:2a:1a:80:49:8e:c3:9f:83:
d6:99:f6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 22 13:04:13 2024 by rpki-client on console-ams.rpki-client.org