Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136342e302f32342d3234203d3e20323135323837.roa
File: 39352e3136392e3136342e302f32342d3234203d3e20323135323837.roa (raw, json)
Hash identifier: XLV614RiwidhVbt52/KInO/Hvasr6ajOC3fKNJHL4f8=
Subject key identifier: B5:29:C0:67:AA:40:44:AE:F5:21:0D:95:DA:3D:F7:DD:03:1F:13:14
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 33A111328BEBCD1C8A1B0312A8D1F63D955B2C62
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136342e302f32342d3234203d3e20323135323837.roa
Signing time: Sun 20 Oct 2024 13:36:58 +0000
ROA not before: Sun 20 Oct 2024 13:31:58 +0000
ROA not after: Sun 19 Oct 2025 13:36:58 +0000
asID: 215287
IP address blocks: 95.169.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Nov 2024 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:a1:11:32:8b:eb:cd:1c:8a:1b:03:12:a8:d1:f6:3d:95:5b:2c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Oct 20 13:31:58 2024 GMT
Not After : Oct 19 13:36:58 2025 GMT
Subject: CN=B529C067AA4044AEF5210D95DA3DF7DD031F1314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f3:4e:06:cb:20:e3:86:f0:31:b6:68:aa:e5:
12:8d:95:45:b3:67:9c:b9:5d:d8:19:24:6b:5d:40:
93:78:05:a9:3d:6e:46:b2:4e:eb:de:39:b3:6a:7f:
da:7e:36:a4:58:f8:c6:5d:1d:e0:5b:3d:3b:46:c4:
76:d3:5e:f6:14:6f:bc:46:94:27:8a:15:85:5e:47:
c0:7e:44:0f:a5:a7:72:33:7d:95:00:1c:86:88:de:
6f:9a:f7:dd:81:79:2c:43:10:fe:a6:c7:2a:9b:72:
35:06:b0:48:89:46:0e:83:57:44:f8:a9:2f:5e:b4:
5b:fe:13:74:de:1e:7b:1e:40:95:fd:82:89:0f:db:
9e:3c:59:65:bb:d8:f5:fb:22:59:6e:6f:a1:c2:bd:
7e:ff:3e:4a:38:5d:90:e9:33:f5:bf:18:33:92:ab:
3b:cc:4e:6f:12:eb:b8:bb:6f:65:7b:a8:32:55:21:
54:86:0c:d1:dc:cb:e3:47:4c:91:62:6d:5b:86:8c:
9b:13:21:5c:0b:82:a4:a7:23:54:de:c8:b0:de:63:
75:53:ec:33:67:da:ff:56:e6:8f:f0:00:de:b6:9e:
e0:e5:07:ea:dd:79:4f:93:36:b1:82:6d:fc:dd:b2:
bf:09:47:e7:d7:f9:e1:f0:a7:54:d3:2b:dc:30:2e:
b0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:29:C0:67:AA:40:44:AE:F5:21:0D:95:DA:3D:F7:DD:03:1F:13:14
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136342e302f32342d3234203d3e20323135323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.164.0/24
Signature Algorithm: sha256WithRSAEncryption
39:30:12:40:9c:27:b2:ff:fe:e1:04:8c:8a:36:c8:55:d3:6e:
2f:60:b3:d2:36:a6:b2:bc:4b:8b:c4:8e:2c:c6:6b:df:8e:4e:
2c:3d:21:4b:95:75:19:f8:56:b3:38:6b:06:9b:91:99:a0:02:
8b:5b:c7:42:3f:41:8b:bb:15:09:1e:5f:61:b6:4e:6c:41:b4:
0b:60:c1:67:08:2b:1d:0f:4d:fb:e5:fa:53:74:74:93:05:cd:
58:35:96:97:48:d7:f0:29:2d:53:9d:07:e8:ab:b4:8a:11:b3:
0f:71:59:48:f1:ed:be:9a:d2:20:8b:6d:fd:d7:ea:9f:c2:69:
83:b2:8d:fd:cc:74:2d:c1:2c:e2:73:e9:18:8d:2a:92:0b:c1:
09:b5:18:1a:da:a8:b1:42:86:b8:f7:6b:9b:1b:7f:bb:5a:c9:
f8:41:d2:2e:91:7b:79:fe:fa:0f:b6:26:16:e0:ac:ef:38:fd:
b7:c3:5e:fb:3f:ed:34:31:6c:bd:b2:b1:81:98:53:a9:53:bb:
5b:a2:49:7a:8d:f8:61:79:97:e2:9d:a5:59:cd:e5:81:e3:7d:
5e:a8:f6:1c:c0:41:1e:6d:02:ad:a2:72:1b:9b:c9:54:81:6e:
91:8a:00:01:61:2b:38:ce:11:e2:03:69:f0:94:cc:b5:ad:86:
29:39:cc:9a
-----BEGIN CERTIFICATE-----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Generated at Wed Nov 20 01:59:58 2024 by rpki-client on console-ams.rpki-client.org