Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131332e302f32342d3234203d3e20383334.roa
File: 39332e39352e3131332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: pUd9ervuh8N7Vr65Pbx/Yt3RSydlSqQxZo8G16KB/3w=
Subject key identifier: 92:C7:4A:3E:F7:09:C1:A3:76:D1:81:B1:F8:43:03:07:C2:EE:38:12
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 4F8807D996E6D51991239A775E7798B006EDFB03
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131332e302f32342d3234203d3e20383334.roa
Signing time: Fri 10 Jan 2025 00:04:20 +0000
ROA not before: Thu 09 Jan 2025 23:59:20 +0000
ROA not after: Fri 09 Jan 2026 00:04:20 +0000
asID: 834
IP address blocks: 93.95.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Jan 2025 16:12:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:88:07:d9:96:e6:d5:19:91:23:9a:77:5e:77:98:b0:06:ed:fb:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Jan 9 23:59:20 2025 GMT
Not After : Jan 9 00:04:20 2026 GMT
Subject: CN=92C74A3EF709C1A376D181B1F8430307C2EE3812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1c:93:57:12:40:14:57:d8:b9:f0:69:33:1b:
63:bd:f2:b4:3e:43:5b:ab:c8:36:28:33:75:cf:ff:
37:c2:9c:c5:2f:11:31:1f:2d:ee:55:4f:0b:12:2e:
7d:ef:19:cc:4f:30:9e:af:73:89:6c:bb:8e:83:3a:
18:d2:af:bf:91:1c:74:db:4d:81:3b:9c:14:8a:cf:
98:fd:d2:54:b7:ff:2d:c8:80:5a:e0:8c:3b:0a:33:
9f:5e:12:40:65:0f:a5:a7:4e:2e:51:54:af:a5:8f:
33:14:c6:65:69:72:7b:d8:ec:9a:30:6b:fa:00:ac:
eb:2f:15:da:1f:41:49:f8:51:1d:79:78:62:57:2a:
3f:f8:be:d6:97:26:28:07:bd:70:b5:2f:7b:91:49:
94:67:a2:62:ae:8d:44:7e:f1:83:08:1b:ab:4e:4b:
09:cb:64:41:8b:01:fe:b2:3c:cf:15:15:a9:92:e9:
67:9b:13:12:ea:6c:a1:89:9e:eb:13:c4:fe:16:1f:
58:28:8b:05:71:73:68:62:7a:95:86:4b:e4:ad:5a:
d5:24:fe:6d:9f:ec:72:ea:d4:2e:9a:31:0c:b9:ef:
3c:b7:83:03:24:3f:c0:47:66:51:90:30:6f:4d:ea:
2f:8a:93:0a:39:d9:72:56:c9:40:6d:17:17:2e:a3:
40:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C7:4A:3E:F7:09:C1:A3:76:D1:81:B1:F8:43:03:07:C2:EE:38:12
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.113.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:45:cb:ea:ec:a3:5e:9a:4e:b8:b1:ee:01:e4:5d:96:8c:29:
0a:69:a7:2a:f8:4d:f7:0d:58:48:2f:74:ef:4c:6f:e2:3f:d0:
75:63:e1:e1:9e:2d:af:e4:e5:b1:2f:25:e3:37:2d:8c:66:ec:
4a:f9:a9:b2:c7:3f:d9:66:9d:fd:71:34:3e:a5:06:74:b4:ef:
fa:0f:0d:f5:c3:6d:1e:7e:94:d6:db:75:dc:53:b6:a0:9d:a3:
14:a7:48:92:8b:d2:80:64:38:92:30:ae:d4:8a:85:dc:1f:01:
76:22:cd:27:b2:5a:3b:ab:d2:22:a6:e4:14:12:00:ff:58:ed:
0b:97:ae:2c:07:8b:2d:9b:14:2b:26:72:7a:11:ee:77:14:df:
fd:32:a9:00:84:dd:d5:e3:83:74:b0:f2:f5:06:ac:49:0c:9f:
cd:6e:d9:b2:47:df:55:40:c3:5e:75:8d:ff:a5:04:c1:36:04:
29:61:bb:59:60:1c:26:de:73:31:d8:3a:97:60:08:b4:63:8a:
43:60:43:59:b6:00:43:13:94:69:ce:bc:be:86:a8:2a:1a:f6:
63:81:14:b5:99:6d:67:59:9f:90:54:df:f5:af:6c:f0:ee:f1:
3e:7b:7a:8e:13:cc:48:27:31:97:b5:cf:82:f1:8d:1b:1b:ef:
44:2b:84:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:34:06 2025 by rpki-client