Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131372e302f32342d3234203d3e203230343733.roa
File: 39332e39352e3131372e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: qJL59hVRSqwkstexE2vKGlBjcyBeIqPrp5DzZkuu4DI=
Subject key identifier: 2C:73:D3:45:CC:96:F6:A9:B6:34:11:5E:01:1B:F0:73:F1:78:31:17
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 0A5DA862DDF660A2DA46939F1D221690BC8B4E8D
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131372e302f32342d3234203d3e203230343733.roa
Signing time: Mon 30 Sep 2024 15:08:40 +0000
ROA not before: Mon 30 Sep 2024 15:03:40 +0000
ROA not after: Mon 29 Sep 2025 15:08:40 +0000
asID: 20473
IP address blocks: 93.95.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 31 Oct 2024 17:20:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:5d:a8:62:dd:f6:60:a2:da:46:93:9f:1d:22:16:90:bc:8b:4e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Sep 30 15:03:40 2024 GMT
Not After : Sep 29 15:08:40 2025 GMT
Subject: CN=2C73D345CC96F6A9B634115E011BF073F1783117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7a:27:c2:07:c0:ab:1d:73:8f:07:25:87:5e:
b9:84:8c:dc:91:18:a5:14:9a:25:07:6e:50:12:00:
78:c4:70:fd:7a:ee:65:01:29:01:d3:8a:e2:29:c2:
1b:99:a4:71:24:2d:b6:08:56:bb:8a:29:16:7e:53:
ae:04:db:24:df:3a:da:48:25:56:59:18:c1:32:26:
e4:15:68:fc:2d:28:06:3c:6d:ea:a7:ba:7a:ba:d9:
ac:cf:80:77:49:4b:68:36:c5:3e:cd:02:2d:ac:3f:
2b:7d:13:f9:40:31:d9:ee:a0:46:fb:e5:66:b0:8a:
19:d1:6f:f6:36:8d:52:bf:6f:5f:00:c3:51:56:fa:
34:29:1a:a3:46:a2:b5:9d:15:ee:65:e5:ed:b7:f5:
80:af:ec:8d:67:e6:ff:63:5b:f3:fa:ca:c2:1e:03:
f4:a4:5b:22:3e:ba:82:ee:12:2e:0c:50:c4:d2:f1:
7c:a4:53:11:aa:d9:9c:5f:5e:cb:da:61:6d:a0:c5:
2e:47:bc:bc:37:62:95:cf:28:e4:16:83:3a:12:71:
86:fd:72:eb:5b:7f:93:4f:8b:28:05:d4:7f:d1:92:
73:d9:04:b2:ee:e7:cb:2e:65:69:b6:41:0a:a1:a2:
02:e9:54:da:15:fd:32:14:5a:2c:cb:d9:c2:79:5c:
24:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:73:D3:45:CC:96:F6:A9:B6:34:11:5E:01:1B:F0:73:F1:78:31:17
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131372e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.117.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:95:c1:38:99:96:b7:40:d2:84:b9:ee:92:3e:44:2d:14:22:
0d:df:da:96:60:be:51:9b:27:b3:34:10:b5:0a:15:ac:1e:ae:
a6:bf:b0:05:8b:51:17:34:77:be:33:9b:e3:9f:d9:92:67:2a:
c3:1c:47:1d:32:8c:34:0f:57:5d:c3:6e:dc:24:6e:fb:55:67:
80:c2:a1:e0:28:26:02:84:cb:2c:d8:0b:f9:32:61:29:7a:5f:
db:6f:72:93:34:aa:05:d6:dd:07:11:79:fe:dc:a5:9c:3a:41:
ff:d8:96:ac:f0:57:e0:48:32:56:54:ce:92:3b:38:1e:ed:a0:
93:bd:a4:79:09:cd:4c:4c:7f:05:66:56:a1:99:44:1a:42:12:
8e:7b:aa:da:5c:5a:28:03:37:89:a6:8e:4f:41:6d:39:6c:78:
5b:18:dc:d6:4f:dd:5b:49:ce:9d:81:3f:95:8d:d5:6d:be:da:
61:60:09:5b:4e:4c:09:1e:7a:af:4d:1e:23:ff:9a:0f:fc:b4:
eb:48:e2:ce:c9:43:5d:cb:01:4b:8d:e3:97:89:38:62:0d:aa:
66:f1:0e:e4:c9:ca:77:c7:40:9d:76:e3:af:82:c7:ef:17:b7:
3a:32:68:3d:56:c7:19:81:68:d1:ef:3a:35:53:18:ce:e6:59:
f3:51:1d:2a
-----BEGIN CERTIFICATE-----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Generated at Thu Oct 31 19:17:34 2024 by rpki-client on console-ams.rpki-client.org