Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136332e302f32342d3234203d3e20383334.roa
File: 39352e3136392e3136332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: xrQfRaV5Zaq032G3Js0CX2/DmUP5heBlak8o8kPVX38=
Subject key identifier: D1:87:2F:D1:54:2A:16:4A:A6:B6:19:22:2F:58:A6:8D:08:92:46:D4
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 77F85DE1E7F0CBF04817F366121469AA265D549B
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136332e302f32342d3234203d3e20383334.roa
Signing time: Wed 20 Nov 2024 00:04:24 +0000
ROA not before: Tue 19 Nov 2024 23:59:24 +0000
ROA not after: Wed 19 Nov 2025 00:04:24 +0000
asID: 834
IP address blocks: 95.169.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Nov 2024 17:34:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:f8:5d:e1:e7:f0:cb:f0:48:17:f3:66:12:14:69:aa:26:5d:54:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Nov 19 23:59:24 2024 GMT
Not After : Nov 19 00:04:24 2025 GMT
Subject: CN=D1872FD1542A164AA6B619222F58A68D089246D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bf:d3:b4:b3:c7:a2:79:49:68:c6:dc:7d:3e:
ae:3e:83:83:fc:f5:7c:d1:48:0a:7c:d4:bd:be:b4:
49:b9:39:13:bf:96:95:14:72:a7:5b:44:37:03:61:
34:0f:e6:a2:91:ed:8d:eb:4b:46:e3:a6:5c:47:22:
aa:df:c3:33:7c:67:8e:2d:f4:90:d5:db:04:f5:10:
d2:92:8c:d7:bb:ca:f2:a5:0e:c1:bc:6b:3a:58:93:
bc:44:bd:08:48:01:04:1a:a1:1b:f2:51:36:22:4c:
98:a6:18:fc:1f:95:2d:2e:c0:04:6c:37:aa:10:08:
6d:08:06:d6:62:e3:cb:2d:ea:e4:0a:c3:60:1f:63:
8e:13:b5:bf:22:82:25:b9:f8:12:fe:ec:74:6b:e2:
8c:21:44:2d:75:5d:56:1a:63:6f:98:ba:ad:19:d3:
24:cb:ea:a9:13:50:45:87:9a:b4:99:e7:9d:ce:59:
13:e0:32:93:b3:f2:9e:d9:d4:96:fd:a4:76:ac:c7:
03:3a:e9:ac:70:2a:9a:95:f1:95:04:f3:55:fb:ca:
6b:73:da:57:ce:17:66:ab:7d:0a:8a:c3:17:0e:c1:
0f:de:d5:19:3e:83:20:53:23:04:ff:e9:a0:18:16:
15:08:9c:2e:0b:cc:fa:17:09:cb:1e:0b:a2:f3:d4:
49:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:87:2F:D1:54:2A:16:4A:A6:B6:19:22:2F:58:A6:8D:08:92:46:D4
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.163.0/24
Signature Algorithm: sha256WithRSAEncryption
58:b1:c1:ed:69:b5:87:c4:68:7e:1c:75:73:70:16:64:47:c1:
74:22:9d:24:4e:aa:a5:39:06:01:f3:a3:62:55:39:92:0e:c5:
29:e0:1d:5b:9e:16:e2:3b:5c:b9:87:7b:9e:5d:46:73:3e:9b:
5e:56:05:87:6e:21:a1:8f:35:81:55:ea:af:43:03:e7:13:f2:
ac:3f:27:e8:e1:1b:4e:42:ca:25:f2:bf:9e:d6:57:da:f9:32:
f2:8a:9f:fa:a1:97:89:b3:09:4a:e8:aa:dd:8c:3d:6f:1b:96:
81:a5:0b:cd:89:75:e0:1b:f1:a8:f6:03:c0:0e:50:a3:2b:d7:
5e:c2:a6:98:db:72:f0:8b:93:5e:69:8f:94:06:ac:5b:2e:eb:
9f:99:b1:53:19:f9:46:f4:bd:c3:90:02:b1:73:d0:93:89:53:
a1:c2:4b:55:32:ff:a9:b9:2a:7e:2b:8b:69:f9:af:e5:69:38:
06:0f:32:c4:3a:64:e4:d2:9b:9a:fd:6a:0f:1f:92:b6:4f:e3:
96:a6:c8:b6:fd:27:42:ab:2b:7a:9a:ee:fb:db:49:fb:c7:16:
8a:03:5e:0c:4c:61:40:60:38:93:9c:31:81:58:ac:a1:c0:ee:
99:36:95:cf:8c:c1:0c:52:a1:3b:90:2b:e7:08:38:69:c8:cd:
8f:45:82:0b
-----BEGIN CERTIFICATE-----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Generated at Wed Nov 20 19:50:12 2024 by rpki-client on console-ams.rpki-client.org