Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131382e302f32342d3234203d3e20383334.roa
File: 39332e39352e3131382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: m2CHjgdCdJnog8vx+JJI7Kk74TMQpsX5GiwtdKTYtBM=
Subject key identifier: 66:31:BD:98:21:8B:AC:37:0C:DD:64:92:42:4F:CF:20:B4:2E:BF:F5
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 55DFAEF5972C443834973078F2D7022BBAD4D553
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131382e302f32342d3234203d3e20383334.roa
Signing time: Thu 28 Nov 2024 00:01:00 +0000
ROA not before: Wed 27 Nov 2024 23:56:00 +0000
ROA not after: Thu 27 Nov 2025 00:01:00 +0000
asID: 834
IP address blocks: 93.95.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Nov 2024 04:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:df:ae:f5:97:2c:44:38:34:97:30:78:f2:d7:02:2b:ba:d4:d5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Nov 27 23:56:00 2024 GMT
Not After : Nov 27 00:01:00 2025 GMT
Subject: CN=6631BD98218BAC370CDD6492424FCF20B42EBFF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e1:ba:c5:72:c1:ea:bb:5b:96:72:0e:c5:c7:
4a:7f:1c:49:20:5c:1e:7d:6d:2b:25:6a:49:33:49:
75:ee:f9:78:70:d8:c2:7d:d0:39:1f:e6:37:5b:84:
82:94:2a:a0:0e:77:5a:fd:a7:c2:c0:1a:42:8d:bc:
4a:0a:24:b1:6d:e8:5d:5d:35:dd:21:f9:84:81:fa:
ec:90:28:26:44:f5:26:53:5a:b5:85:a9:92:11:64:
80:79:55:e9:98:0d:44:22:a8:17:c2:32:ac:da:35:
bc:46:3b:e5:61:d9:a1:c6:26:9b:43:0a:aa:1e:d3:
88:a5:1f:84:7f:51:f7:78:8e:c6:f9:7b:3f:07:8c:
dc:55:ab:9c:24:ee:20:aa:12:2d:6a:5f:87:94:c7:
b0:14:75:c8:8b:0e:79:7b:9c:ff:85:08:77:19:ae:
22:71:23:57:9f:2d:ed:17:24:68:01:b6:be:92:07:
6a:7c:a7:ff:d1:b7:cb:c6:81:8c:7a:ae:11:49:11:
a7:51:87:fb:e8:65:f3:79:89:81:0c:b3:a2:66:1c:
b6:29:0e:e1:68:ad:31:c4:d0:7e:41:d3:ea:c1:64:
ca:81:f1:d0:52:7b:01:02:df:b0:28:2e:0a:9b:ab:
b8:63:6d:22:90:53:1a:a3:d8:3f:5a:ce:30:4f:18:
cc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:31:BD:98:21:8B:AC:37:0C:DD:64:92:42:4F:CF:20:B4:2E:BF:F5
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.118.0/24
Signature Algorithm: sha256WithRSAEncryption
70:8e:ee:5d:ff:86:20:5c:63:6c:c7:5a:76:d0:37:f2:c0:df:
e3:ff:5f:62:63:79:69:96:75:6d:bf:7c:7f:fc:bc:7d:24:14:
06:b0:56:55:5d:3e:97:2e:51:84:67:67:10:cb:1f:a2:71:81:
45:bc:61:cb:c4:a4:49:fa:7b:78:50:eb:0b:e2:e6:94:96:65:
09:fb:d4:57:82:25:d1:05:5b:0a:c4:60:fa:04:99:38:ba:3f:
8a:79:fc:33:72:6b:b2:ec:3f:77:76:87:da:72:7b:c0:e9:7d:
e2:19:aa:9c:73:62:68:71:8f:e0:8b:69:53:d0:3c:f9:6e:32:
1c:4c:43:11:7b:dd:3b:14:cf:44:6b:24:4c:8d:5d:dc:77:e8:
f5:ab:cd:e7:f5:bd:b1:97:06:4c:d6:7d:ca:44:01:24:a8:7c:
b5:2b:9e:40:dd:85:75:81:8a:d8:2c:a6:b0:df:ce:40:4a:83:
3d:e8:79:3b:47:be:56:40:c4:ab:c2:f7:21:6c:e7:9e:73:92:
f5:1c:d1:5f:4c:dc:fd:33:14:fa:c6:44:fa:90:e4:2a:6c:95:
4a:e3:f0:5a:7b:47:44:96:81:cd:7d:50:ba:51:6b:cf:7c:37:
5d:b0:a0:43:60:c0:9f:f7:f9:84:2b:33:88:27:6d:bd:b5:17:
bd:c3:35:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:33:57 2025 by rpki-client