Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136332e302f32342d3234203d3e20323135323837.roa
File: 39352e3136392e3136332e302f32342d3234203d3e20323135323837.roa (raw, json)
Hash identifier: bO0zc+4JbTALzCa+3nMUWXfn1n2XDPtmFnMtVPVpeoY=
Subject key identifier: CB:4F:F2:D1:93:52:EE:10:ED:86:8A:3C:FD:B7:2C:36:91:12:6F:BE
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 463C9767B8420603146096273F68382E790AAF89
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136332e302f32342d3234203d3e20323135323837.roa
Signing time: Sun 20 Oct 2024 13:38:11 +0000
ROA not before: Sun 20 Oct 2024 13:33:11 +0000
ROA not after: Sun 19 Oct 2025 13:38:11 +0000
asID: 215287
IP address blocks: 95.169.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Nov 2024 00:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:3c:97:67:b8:42:06:03:14:60:96:27:3f:68:38:2e:79:0a:af:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Oct 20 13:33:11 2024 GMT
Not After : Oct 19 13:38:11 2025 GMT
Subject: CN=CB4FF2D19352EE10ED868A3CFDB72C3691126FBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:02:3e:7b:d0:fb:98:f5:6e:f0:88:bc:66:ac:
9b:c1:ff:dc:89:79:d7:6e:e8:62:78:f5:0c:58:e0:
d2:33:b2:14:e7:4d:78:59:af:a3:b3:7c:98:f6:06:
9e:5e:45:a5:ad:5d:c6:75:3d:d9:f7:8e:c1:62:bb:
ec:c9:19:e8:bc:b6:c4:3f:ce:ea:84:5e:c3:15:8f:
56:6b:b3:2f:0f:51:8e:59:09:ca:1a:ac:17:e0:13:
8c:9e:37:7f:1e:12:1a:a7:3f:1f:87:ee:4f:f8:7b:
8a:5c:05:bd:2a:77:72:c7:8c:65:5c:77:39:ed:0a:
82:9b:59:63:f5:3b:7a:03:fc:b9:d7:8e:02:14:14:
f3:61:77:d7:95:3b:8e:2f:8a:2f:bd:de:08:f9:7a:
4b:ef:13:55:f0:74:fc:c3:f4:da:ed:96:25:9d:8b:
a5:4f:eb:dc:85:3f:63:61:7d:c7:90:57:9f:1b:84:
d1:c7:fb:c9:d0:2f:38:4b:d0:0a:96:f2:54:8c:02:
bc:1f:12:83:7c:63:c1:83:e5:da:75:d6:a7:f9:63:
db:79:f8:aa:a1:dd:72:a8:dc:f6:45:8b:47:d7:3c:
38:d0:d0:3b:21:5a:e7:dc:70:bd:9a:90:b6:9d:ac:
43:67:9f:2a:73:d5:4e:39:14:d8:96:13:7d:8f:f8:
f9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4F:F2:D1:93:52:EE:10:ED:86:8A:3C:FD:B7:2C:36:91:12:6F:BE
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136332e302f32342d3234203d3e20323135323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.163.0/24
Signature Algorithm: sha256WithRSAEncryption
67:03:77:32:2a:f1:06:a7:6e:2e:f6:3e:46:d4:46:57:89:b4:
e5:c3:71:ff:3b:b1:f0:34:25:1c:74:bd:0b:b3:8d:a0:5e:34:
d9:5d:54:09:3f:aa:87:83:ee:cf:56:a2:01:14:4b:bf:f0:2e:
79:96:23:9a:44:de:d4:dd:43:6b:11:eb:f6:29:cf:c5:0c:ce:
56:1e:19:a2:cf:58:a6:dc:fe:58:d0:d1:3c:37:7b:aa:49:f4:
14:19:4e:98:c8:fd:1d:a2:d6:31:d7:d6:d5:df:0b:45:cb:6a:
82:3c:3e:ab:f3:62:9c:20:89:03:56:be:98:eb:73:bf:9d:1d:
4b:73:1c:0b:50:7a:b8:55:20:fa:8b:c2:50:cb:06:02:e3:22:
b1:7f:ae:db:2a:20:05:a2:f1:b1:29:a7:64:14:e3:45:e5:2b:
3a:d3:f5:27:9c:58:42:1b:e9:b7:7f:22:0f:47:d2:65:f2:b4:
5d:e2:3c:83:fc:df:0e:d6:68:b6:ec:62:a7:b0:16:7d:fd:07:
53:c2:68:ca:e8:8f:8a:fe:d3:0c:af:74:fa:3c:7b:7b:7c:ca:
fb:56:7e:92:b8:76:7b:b9:ba:64:71:a6:3e:2f:ea:2a:d0:8d:
17:eb:88:af:fb:e7:ee:61:03:62:be:26:b0:3d:13:fa:e7:69:
c6:f4:4d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 02:05:09 2024 by rpki-client on console-fra.rpki-client.org