Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136322e302f32342d3234203d3e203231383539.roa
File: 39352e3136392e3136322e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: mUacdifBcGeI+kTZRLetyRblJxLZP/5UVGcU6BSTQU4=
Subject key identifier: B4:67:20:DD:57:CD:34:61:07:7D:AF:6B:91:E0:06:F0:93:55:B2:AD
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 2EF0C35C61EA366670DC6A2A736FB2297E0DA46A
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136322e302f32342d3234203d3e203231383539.roa
Signing time: Sun 20 Oct 2024 05:41:55 +0000
ROA not before: Sun 20 Oct 2024 05:36:55 +0000
ROA not after: Sun 19 Oct 2025 05:41:55 +0000
asID: 21859
IP address blocks: 95.169.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Nov 2024 00:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:f0:c3:5c:61:ea:36:66:70:dc:6a:2a:73:6f:b2:29:7e:0d:a4:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Oct 20 05:36:55 2024 GMT
Not After : Oct 19 05:41:55 2025 GMT
Subject: CN=B46720DD57CD3461077DAF6B91E006F09355B2AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3d:77:e3:4b:e1:10:db:2d:d2:c1:7c:b5:b8:
6a:95:87:18:4c:7b:f3:f9:bc:2c:43:d9:f1:08:bf:
ea:8b:56:b7:f0:de:c5:bb:7d:0e:34:2a:74:b8:9b:
61:41:c3:02:d2:18:90:c0:1e:71:94:81:28:15:4d:
05:a9:25:fc:f9:68:c1:41:20:4c:ce:83:a1:b2:e5:
a8:b4:f0:a2:2e:82:f4:82:f5:2d:2f:10:bb:a2:a6:
81:36:82:1e:c2:c5:f9:c4:12:2a:29:35:6e:f5:44:
ff:9c:90:5c:23:b6:4f:7f:03:c6:76:7e:72:8d:88:
02:97:b4:82:27:1f:a6:60:2c:3b:81:1a:35:ff:7d:
aa:13:6e:ac:d7:b3:a9:6f:bb:1d:95:3d:5e:d1:b4:
77:be:a6:2c:9f:b5:7f:6c:a5:aa:cc:06:87:94:1f:
e1:be:05:51:02:0c:d3:4b:3e:1a:96:92:94:5d:c5:
e2:7c:5b:2d:34:95:3b:c5:03:9b:ed:af:e5:5d:5a:
7a:05:b2:f0:eb:34:46:bf:85:13:e5:b5:0b:69:2b:
19:25:b6:de:e6:2b:af:0f:a0:a0:7d:57:5c:7d:c2:
48:23:14:52:9e:76:9c:e8:32:08:21:5d:33:ba:9b:
3d:ce:65:54:cc:6e:62:4a:43:3e:2e:8c:42:6a:8e:
8a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:67:20:DD:57:CD:34:61:07:7D:AF:6B:91:E0:06:F0:93:55:B2:AD
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136322e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.162.0/24
Signature Algorithm: sha256WithRSAEncryption
51:20:09:fa:aa:c0:b9:af:58:2e:f3:c9:24:bb:6b:51:0c:66:
6f:58:8a:6c:0d:a2:65:ac:1e:2a:58:ce:37:74:9c:d3:10:ac:
93:9a:61:97:b9:3a:8c:54:3d:54:47:f9:43:d7:d9:53:33:17:
c6:e4:e2:1d:f7:ec:13:e4:45:4d:62:d4:81:c0:1f:90:7a:48:
b6:cd:51:dc:40:98:a5:85:c4:1a:3b:2a:7a:44:c3:98:ec:b0:
ed:06:8a:44:9a:2a:be:4c:c0:aa:b2:c1:78:c9:6d:09:17:84:
c9:5d:48:cc:06:2e:4e:b9:5b:d0:97:ca:3d:e1:6f:c7:83:59:
38:30:fa:65:3d:d1:01:54:36:51:e8:4a:8f:1c:4c:f4:e8:29:
f8:0d:96:91:f5:b9:47:d7:f1:c1:78:61:1e:41:44:c0:74:2a:
d7:23:ca:6f:53:ce:bf:b1:a7:d0:06:9c:8e:4a:3b:4f:f8:f1:
1a:0d:33:84:70:60:db:69:20:fa:90:2a:ef:23:53:04:a5:8a:
3f:3f:b6:c7:b8:07:1c:9a:18:ef:98:4c:19:00:a3:10:99:27:
0f:ed:6f:90:1e:6f:05:37:71:ea:ca:98:0c:d4:be:19:39:59:
af:7f:30:85:1a:5f:72:77:24:b9:54:7b:c3:ba:8b:c3:ed:7f:
db:e0:21:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 02:05:09 2024 by rpki-client on console-fra.rpki-client.org