Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136322e302f32342d3234203d3e20383334.roa
File: 39352e3136392e3136322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 1wWf1O8VL08H3jEFp1HLbs173oLZNjRpJQ7LQ4McS9I=
Subject key identifier: 40:DC:34:CA:14:8B:B4:EA:8D:08:68:0E:24:A5:99:42:1E:F3:38:D3
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 04B8D9D927AB17E123C1A4FEB0F05F588439BE60
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136322e302f32342d3234203d3e20383334.roa
Signing time: Wed 20 Nov 2024 00:04:18 +0000
ROA not before: Tue 19 Nov 2024 23:59:18 +0000
ROA not after: Wed 19 Nov 2025 00:04:18 +0000
asID: 834
IP address blocks: 95.169.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Nov 2024 03:39:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:b8:d9:d9:27:ab:17:e1:23:c1:a4:fe:b0:f0:5f:58:84:39:be:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Nov 19 23:59:18 2024 GMT
Not After : Nov 19 00:04:18 2025 GMT
Subject: CN=40DC34CA148BB4EA8D08680E24A599421EF338D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9d:ba:3a:9f:98:7c:ad:e5:0a:dd:25:b3:91:
41:d2:e6:c3:3a:ba:5c:dc:1e:83:bd:dd:24:56:a2:
81:a4:1b:6c:67:71:c4:1e:18:24:52:6a:a5:c9:b8:
21:0b:04:e4:1c:26:a8:48:c5:14:32:58:bc:32:8f:
96:9e:06:5b:c0:18:56:92:eb:84:30:10:b2:9b:4a:
4d:ec:34:ad:f5:e2:d5:a0:f0:ac:84:ba:8e:8c:b9:
61:63:28:47:ba:a3:f8:54:38:14:f1:62:92:b2:ab:
28:a3:ae:a1:0a:9f:dd:3a:72:fd:f4:41:86:dd:17:
82:ac:8d:3c:63:67:f0:6d:da:97:89:d4:03:fd:91:
74:39:12:00:4d:52:9b:6a:14:bc:ca:1b:66:f7:3c:
8a:eb:b4:cc:39:3b:1a:ae:fb:f2:78:7e:6f:c2:13:
49:4a:1e:92:67:5c:7d:fc:21:ff:fd:e2:41:93:11:
ee:20:09:13:e7:7e:8e:e1:73:54:12:88:b4:f8:1c:
7b:14:34:cb:f2:ba:8d:f8:52:f0:85:17:86:cb:49:
b3:d8:e5:39:b9:83:97:23:a0:44:3d:e3:64:f0:14:
ca:b4:83:49:d2:f5:84:cf:f5:69:23:68:ec:15:a8:
cc:c0:45:7c:81:86:e6:4f:ad:2f:21:3e:54:06:be:
fe:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DC:34:CA:14:8B:B4:EA:8D:08:68:0E:24:A5:99:42:1E:F3:38:D3
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.162.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:02:3c:0d:55:c9:74:0b:67:22:62:6f:20:2b:ef:9c:4a:dd:
ce:17:64:0a:63:26:e0:fc:36:34:c8:f7:45:41:37:d3:00:c2:
27:19:56:4c:51:a9:92:27:5b:28:f5:06:f9:6c:18:e7:18:d7:
2f:79:da:5d:6f:d7:f8:ca:60:6b:48:1d:5e:59:87:e2:81:66:
ce:5b:7c:fe:eb:94:0f:82:73:e7:52:61:21:36:c6:01:25:37:
81:4c:9c:55:70:91:d2:f6:10:15:3a:06:b7:52:5e:a5:95:b5:
ed:e4:fa:e5:80:a5:d6:65:75:69:21:56:d8:63:e2:02:2b:43:
69:09:40:c3:a3:f0:fc:ad:85:60:b1:35:b2:62:8a:a5:b0:54:
d1:bf:17:ef:77:b4:6d:e0:26:d0:c0:2f:39:96:42:ed:67:81:
84:af:37:17:e4:99:95:9f:a7:a1:17:9f:2d:ad:c1:14:f2:92:
e1:8b:78:c2:3f:64:92:d4:24:15:ff:1b:a1:60:67:77:b2:84:
c2:52:09:44:45:71:86:df:56:66:be:82:71:c4:c3:b0:a3:7b:
90:f2:7e:b4:4d:5c:8b:e2:c2:13:28:58:33:62:40:19:d0:0f:
bb:de:5f:64:10:2e:a7:be:34:32:bf:74:7b:8c:5f:aa:a6:81:
d3:9c:3e:15
-----BEGIN CERTIFICATE-----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Generated at Wed Nov 20 07:02:16 2024 by rpki-client on console-ams.rpki-client.org