Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131392e302f32342d3234203d3e20383334.roa
File: 39332e39352e3131392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: z0q8Wo3TNyXr5b7m0GS8lrntISFbNtm0hDIm0Xpe8Ng=
Subject key identifier: 55:EB:5D:8B:2C:61:7D:CA:13:04:8E:64:00:57:4A:84:E2:12:BF:E6
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 3ECD73B02B3DC949F5526AC910501940FAD30E16
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131392e302f32342d3234203d3e20383334.roa
Signing time: Thu 22 Feb 2024 10:07:53 +0000
ROA not before: Thu 22 Feb 2024 10:02:53 +0000
ROA not after: Thu 20 Feb 2025 10:07:53 +0000
asID: 834
IP address blocks: 93.95.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 17:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:cd:73:b0:2b:3d:c9:49:f5:52:6a:c9:10:50:19:40:fa:d3:0e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Feb 22 10:02:53 2024 GMT
Not After : Feb 20 10:07:53 2025 GMT
Subject: CN=55EB5D8B2C617DCA13048E6400574A84E212BFE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a2:15:5c:e8:48:34:60:26:a4:c3:0f:c2:7b:
f4:f0:31:41:92:e3:e6:60:21:36:f2:9a:ee:28:d8:
ed:f5:c9:f8:0c:a7:68:1b:85:3f:6c:25:f3:34:8d:
78:81:f1:c0:66:bf:29:98:c7:75:db:51:ee:fd:dd:
28:e4:82:38:6f:fa:d6:85:5d:d1:2a:80:b9:95:43:
74:c7:28:fc:38:ef:86:6c:93:ab:1f:ff:70:42:39:
ab:96:43:cf:eb:86:95:3d:c6:79:6e:19:26:c3:c0:
a7:ae:ec:9c:c5:26:47:b9:4e:2a:a4:27:57:0b:15:
a6:d1:0b:0d:20:fd:3f:77:ee:8f:a2:b0:7e:e6:0f:
6e:a1:0f:eb:59:db:a7:64:8b:2a:53:70:dc:73:64:
c2:8b:fb:9e:32:d4:15:c2:97:16:36:15:08:ab:6e:
57:60:ed:65:22:d6:91:94:0f:e2:a6:76:1f:be:fe:
a8:4a:1f:fe:76:0d:2b:dc:c9:7a:b5:b8:be:22:c4:
3c:20:39:7c:10:ea:57:32:2a:07:ad:1f:c3:2d:c1:
9c:de:d3:de:78:66:72:f2:3a:1f:88:73:ac:97:d3:
bc:9f:bd:c2:6a:a4:23:fe:9f:f0:89:f3:28:c1:53:
23:32:43:99:4e:2d:09:d5:6d:e4:02:8b:3c:ee:e8:
93:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:EB:5D:8B:2C:61:7D:CA:13:04:8E:64:00:57:4A:84:E2:12:BF:E6
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.119.0/24
Signature Algorithm: sha256WithRSAEncryption
19:6b:4a:ae:e9:b9:45:55:e5:b0:b5:a3:6d:12:cf:d0:6c:0f:
51:61:79:09:c4:e2:98:cb:96:11:06:1e:19:cc:2c:25:8e:f0:
42:3f:eb:8b:7f:be:64:78:f2:08:79:64:ec:e5:90:f5:2d:fe:
6a:fd:4d:c3:07:55:2b:7d:33:0d:1a:70:15:b0:91:7e:27:54:
11:42:ac:e6:44:5d:8b:8a:0d:b9:a4:0b:0c:3b:56:b1:b4:c2:
f4:67:91:71:8a:77:ee:73:3d:68:7a:38:48:bb:c4:2a:b8:9f:
ec:18:e8:e9:62:53:62:fd:d8:a7:d2:c7:ff:b8:ca:a6:cc:d1:
db:60:83:6c:6b:88:d5:4e:92:4d:dc:98:a2:7e:2c:a6:19:84:
9a:5d:61:8f:ce:5f:19:e3:e4:5c:bf:e1:cb:57:f8:c3:20:65:
31:46:4a:b5:ea:91:db:a7:04:e0:e1:4f:40:13:a8:41:d6:5c:
d6:79:5f:6c:a6:80:20:9b:29:8e:79:ff:be:bf:97:e4:e6:57:
c1:91:d6:38:9f:44:5c:55:84:c2:20:aa:d6:43:22:12:e4:00:
df:c2:09:58:0c:48:8e:74:a5:ce:29:91:cb:f8:74:6f:72:28:
3c:a6:3a:23:ba:cf:62:fc:d3:a5:89:72:14:a4:ed:01:7a:9e:
77:ae:06:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 22:16:32 2024 by rpki-client on console-fra.rpki-client.org