Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136332e302f32342d3234203d3e20323135323637.roa
File: 39352e3136392e3136332e302f32342d3234203d3e20323135323637.roa (raw, json)
Hash identifier: W6YCg1NrzaPHlVDdJ3kAn6vjzoqz89OYyQPJriMbfaQ=
Subject key identifier: 65:09:7C:42:34:DB:60:AD:53:F5:DC:A1:5D:9D:E7:08:A7:D8:6E:07
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 227C8702C585B0DC8CD7D2C32B3741BBDF2D94FD
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136332e302f32342d3234203d3e20323135323637.roa
Signing time: Tue 28 Jan 2025 16:22:47 +0000
ROA not before: Tue 28 Jan 2025 16:17:47 +0000
ROA not after: Tue 27 Jan 2026 16:22:47 +0000
asID: 215267
IP address blocks: 95.169.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Mar 2025 17:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:7c:87:02:c5:85:b0:dc:8c:d7:d2:c3:2b:37:41:bb:df:2d:94:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Jan 28 16:17:47 2025 GMT
Not After : Jan 27 16:22:47 2026 GMT
Subject: CN=65097C4234DB60AD53F5DCA15D9DE708A7D86E07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d8:c9:9a:68:58:16:58:5f:7d:49:be:85:65:
fc:02:9f:90:79:b4:84:d8:68:f3:23:9f:82:aa:0b:
fd:5f:6f:88:b9:03:0d:78:1c:b3:64:74:3f:be:1c:
65:77:ed:a9:17:37:1f:cd:a3:b0:1e:9c:dc:7b:47:
ad:97:5a:56:ef:c2:db:05:84:f4:41:32:45:6c:e3:
13:5c:76:15:ba:14:b4:81:90:f2:64:ff:e6:05:1e:
b1:61:65:b3:f7:25:61:95:96:5f:d2:ae:50:df:74:
5d:5b:16:74:72:1d:63:54:75:8a:96:90:6a:f3:a1:
0b:b1:03:df:05:d0:aa:84:af:fd:6e:42:aa:9b:91:
35:2b:ab:2e:e3:58:3f:d6:29:dd:5e:db:6b:fc:c1:
51:f1:4b:77:c1:c2:1e:e1:4d:d1:70:f4:47:f9:52:
fa:21:7c:f1:c5:c4:6d:f2:cd:f0:a7:16:70:e0:5a:
86:8a:b4:90:59:7b:a1:e6:b8:b8:c2:0f:47:25:d2:
ce:1d:76:46:db:8e:8d:c9:9e:cc:9d:1d:07:97:fa:
77:5d:64:19:8d:18:79:43:56:62:d0:16:bc:3e:3d:
bc:f9:03:cb:72:e6:2a:8d:3d:1a:ec:a5:dc:f8:69:
f4:b3:bb:37:dd:be:57:96:f0:63:39:a5:8b:df:9d:
32:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:09:7C:42:34:DB:60:AD:53:F5:DC:A1:5D:9D:E7:08:A7:D8:6E:07
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136332e302f32342d3234203d3e20323135323637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.163.0/24
Signature Algorithm: sha256WithRSAEncryption
85:bd:34:c3:ec:00:bc:cc:8f:39:31:32:cd:2f:a1:f0:fd:9d:
6c:5f:59:02:9f:13:e0:42:eb:83:bb:b5:38:97:e0:e5:9c:40:
5b:f7:c9:a9:d5:05:e8:dc:fc:15:ca:6c:9d:45:6e:f4:91:53:
cc:88:a1:a7:7f:f7:4b:e4:f1:4b:aa:f7:cf:d1:71:67:60:4d:
15:c1:b5:43:3f:56:06:8d:00:4c:40:1a:25:db:29:4f:f8:4d:
66:df:ce:c8:5e:12:e0:75:6a:90:f4:40:12:fb:d2:b0:cf:1d:
8b:d1:66:af:af:f7:e5:c6:65:d1:a5:00:d8:02:d1:64:2c:9a:
72:1b:92:91:2d:d0:52:9a:e5:c1:86:5d:b4:07:db:a2:11:02:
e4:e6:33:c6:8a:02:a0:9c:49:b5:30:07:29:e8:31:5d:67:89:
48:f2:a4:59:99:8f:80:12:bf:e0:e9:9c:be:35:d2:bb:fa:e1:
41:33:97:39:fe:d7:2b:cd:fd:dd:0b:91:83:c3:33:f2:1e:82:
95:a5:7e:8f:94:54:49:48:38:0c:67:5a:25:f0:42:fc:7a:e8:
5e:44:01:a6:43:13:26:e3:c2:d1:b9:ae:16:0b:d6:00:41:f1:
0c:8b:8f:28:8d:bb:b5:04:99:b9:2a:ff:9b:ab:04:8b:1b:d5:
ae:8d:bf:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:34:57 2025 by rpki-client