Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136332e302f32342d3234203d3e20323133373338.roa
File: 39352e3136392e3136332e302f32342d3234203d3e20323133373338.roa (raw, json)
Hash identifier: +r9lySywVpcwkFlq3tz9EV7s7/oSYotxjv0MQuPstA4=
Subject key identifier: B2:46:FC:8C:7F:21:FE:58:0A:7B:98:B0:B6:07:98:D0:32:71:9D:84
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 0E6F6F1D8146EBC1F97F3DAC1E6A8F6D06070394
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136332e302f32342d3234203d3e20323133373338.roa
Signing time: Thu 26 Dec 2024 01:31:08 +0000
ROA not before: Thu 26 Dec 2024 01:26:08 +0000
ROA not after: Thu 25 Dec 2025 01:31:08 +0000
asID: 213738
IP address blocks: 95.169.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 26 Jan 2025 00:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:6f:6f:1d:81:46:eb:c1:f9:7f:3d:ac:1e:6a:8f:6d:06:07:03:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Dec 26 01:26:08 2024 GMT
Not After : Dec 25 01:31:08 2025 GMT
Subject: CN=B246FC8C7F21FE580A7B98B0B60798D032719D84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:ed:7a:fc:42:71:08:1d:50:e4:de:26:85:
82:4f:a7:66:e0:8a:a2:0c:78:c5:d6:7b:ff:af:29:
bb:f8:7d:cb:72:f3:14:42:80:61:38:38:6b:b5:68:
b3:89:35:a9:8d:80:a8:30:ab:fb:8d:13:8f:f9:09:
d3:58:28:2b:5a:12:a4:4f:36:38:42:a8:69:70:73:
30:0e:78:b5:ff:c7:02:39:5f:16:d9:1c:e7:ae:fb:
55:1f:f8:15:c9:36:9a:6e:c7:4e:75:58:61:e6:ab:
b3:61:03:c1:25:c8:ae:ab:03:30:e4:72:47:78:5b:
db:86:1d:34:40:d9:c5:54:37:0d:3a:61:85:2e:62:
00:f7:a1:eb:7f:5e:c3:d3:c7:da:78:15:d5:c4:99:
15:a5:b8:ae:9b:1c:f5:53:1b:af:90:6c:8e:2f:e5:
69:05:e3:c3:b1:09:b7:21:58:d3:cc:09:61:6e:5a:
93:b2:57:24:ca:5c:07:4a:6a:bf:e1:b7:20:93:8e:
3e:f4:34:b3:c5:be:0a:b9:b3:7f:c8:15:ba:a2:6f:
a1:ad:e9:56:1b:38:df:1d:b3:5f:d4:b1:a4:45:c5:
e7:2e:4c:9d:84:c9:7b:78:50:c3:92:f6:90:ae:76:
8d:30:d4:67:15:ec:db:e2:b5:f9:91:f6:0b:f0:1a:
2b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:46:FC:8C:7F:21:FE:58:0A:7B:98:B0:B6:07:98:D0:32:71:9D:84
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136332e302f32342d3234203d3e20323133373338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.163.0/24
Signature Algorithm: sha256WithRSAEncryption
46:ae:1f:41:a4:89:7d:fe:7b:86:18:59:84:a5:54:1e:0a:e6:
39:e0:42:54:6e:ca:de:77:f9:8a:b6:dc:b9:80:9a:0d:0c:14:
7f:ad:70:e7:a3:1c:26:8d:ce:42:00:cd:0f:4d:78:0c:52:b0:
51:00:c5:1c:7c:7f:7a:41:f1:fe:54:70:5f:55:79:f9:e3:c5:
d8:c4:3c:66:ed:08:a7:0a:ee:87:77:38:0b:61:04:3a:2d:49:
fb:71:0c:1e:ac:12:88:ca:91:71:31:13:2c:f1:a2:48:3f:c8:
25:de:48:c8:aa:07:4e:9d:fc:06:22:ad:f8:70:90:dd:98:f8:
f1:a9:b2:4e:1c:35:cf:e5:dc:af:0a:79:8e:13:19:32:b3:5b:
b7:b1:d3:c9:e8:6e:7f:46:06:78:44:a0:d5:ef:bd:bd:b3:ba:
f3:01:b7:43:09:ec:0a:b8:d8:82:5c:c1:4a:81:70:13:ad:e6:
f8:f0:35:02:f1:f5:f0:5b:da:de:63:27:ee:7d:9a:11:91:9b:
c6:49:43:9a:20:81:fc:37:db:c1:65:75:20:8a:3b:fe:1d:99:
aa:c7:29:57:09:56:c0:13:c1:84:58:38:82:0f:86:b3:f7:c5:
61:7c:26:ab:86:65:c5:68:68:ff:47:c5:ca:a2:8f:2b:2a:d5:
ba:eb:84:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:28 2025 by rpki-client