Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131322e302f32342d3234203d3e20383334.roa
File: 39332e39352e3131322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: K/J9BbenofKdtoRrrBZPoDS0Tr+yRinwTyZxCtoE/fU=
Subject key identifier: 04:2F:6B:24:E3:76:4A:5F:5D:DA:A7:A5:93:8D:B3:BD:38:BF:E1:77
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 51CABCC5C838EA56015ECB4ADCF703843C3D2A3C
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131322e302f32342d3234203d3e20383334.roa
Signing time: Tue 15 Apr 2025 23:21:41 +0000
ROA not before: Tue 15 Apr 2025 23:16:41 +0000
ROA not after: Tue 14 Apr 2026 23:21:41 +0000
asID: 834
IP address blocks: 93.95.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Apr 2025 07:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:ca:bc:c5:c8:38:ea:56:01:5e:cb:4a:dc:f7:03:84:3c:3d:2a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Apr 15 23:16:41 2025 GMT
Not After : Apr 14 23:21:41 2026 GMT
Subject: CN=042F6B24E3764A5F5DDAA7A5938DB3BD38BFE177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:44:86:8d:79:0a:f1:5b:57:1a:2f:9e:5e:ee:
54:8e:f4:ae:fb:31:2c:dd:19:0a:6a:91:0d:56:18:
8c:8a:43:b4:d2:8b:ef:df:97:b8:c3:7f:65:d6:89:
c1:11:b9:0a:82:19:6f:1f:9b:28:b3:f8:92:33:cd:
4b:59:c8:cd:2a:91:48:0c:2d:08:f7:70:4e:0a:11:
b4:aa:f7:cd:ae:85:89:ac:1a:69:2a:ee:89:73:79:
88:f9:40:fd:bb:1f:80:49:02:89:0f:55:8d:f3:bb:
a0:f1:ac:dc:65:c7:26:1b:3a:11:3b:a2:4e:db:c2:
57:bf:88:a4:06:49:85:0e:e9:9c:c5:76:da:94:b1:
cb:3e:f0:be:37:27:61:5f:f7:0e:94:17:a2:9e:88:
04:46:a9:aa:99:0e:08:48:96:be:75:c6:b2:d5:5f:
49:c8:66:a7:51:1d:b4:c3:e4:b7:a2:10:94:d8:7d:
df:23:a9:24:59:e3:81:0c:fc:5a:02:44:58:70:a2:
04:90:4f:3e:e4:83:ee:ff:9c:36:97:d9:20:6a:da:
31:ee:3b:eb:c6:37:fa:77:51:8e:ff:2b:a7:13:de:
97:9e:16:8d:08:b2:70:aa:f9:f1:92:d9:26:59:da:
d7:c3:cf:69:c0:8c:65:da:db:d1:f9:4d:9a:38:22:
52:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2F:6B:24:E3:76:4A:5F:5D:DA:A7:A5:93:8D:B3:BD:38:BF:E1:77
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.112.0/24
Signature Algorithm: sha256WithRSAEncryption
08:9e:ae:a0:95:31:d2:b5:a1:b8:3f:fd:e9:bd:59:1d:cf:e2:
1a:eb:ab:d7:95:18:26:60:3a:cb:c8:84:53:25:5f:e5:e0:5e:
e9:96:9a:82:42:98:f6:53:ab:d4:29:1b:69:9c:56:20:be:fa:
5d:9d:46:d1:93:18:a3:a1:a8:bc:c0:e2:a8:7b:75:b6:87:48:
95:fb:a7:5f:13:ec:1c:83:60:57:dc:54:dd:e5:bd:20:a2:a5:
ba:53:e2:db:71:63:12:fa:92:29:c7:7a:23:90:32:8d:4d:3b:
f5:ea:18:9d:f0:88:18:8d:70:90:5f:9b:0b:12:fb:77:21:e8:
34:1d:0c:50:3a:60:81:a2:6c:1b:96:b8:6c:6c:08:49:6d:65:
c2:df:08:d6:d2:92:5a:c8:a3:31:87:61:47:12:7b:8f:dc:c0:
03:d5:0e:4a:3a:15:f1:c1:de:7c:81:4c:4c:ea:5c:ae:2c:55:
b9:49:ca:a1:3c:46:5c:02:05:21:5d:01:bb:87:7d:de:81:dc:
0f:03:d9:69:7a:27:f0:48:29:8b:1d:3e:df:26:b6:15:bc:53:
11:a6:c0:a4:12:71:39:85:89:fa:2a:37:45:7a:a2:aa:79:d1:
91:ea:b2:99:93:d6:a9:5b:27:35:37:f5:f6:37:98:49:c8:3e:
25:0b:23:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 22:36:11 2025 by rpki-client