Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136342e302f32342d3234203d3e20383334.roa
File: 39352e3136392e3136342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: uCmJFc9rEa6vr0MtX+iXekNtcJhTwRYc7E+R2GFCDKg=
Subject key identifier: 04:DF:64:0F:28:A9:EB:75:20:20:94:DE:F1:30:36:03:E0:A7:19:20
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 7B31D00D48EB6AE824685589F7C2B864763E3DB9
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136342e302f32342d3234203d3e20383334.roa
Signing time: Wed 20 Nov 2024 00:01:08 +0000
ROA not before: Tue 19 Nov 2024 23:56:08 +0000
ROA not after: Wed 19 Nov 2025 00:01:08 +0000
asID: 834
IP address blocks: 95.169.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Nov 2024 20:22:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:31:d0:0d:48:eb:6a:e8:24:68:55:89:f7:c2:b8:64:76:3e:3d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Nov 19 23:56:08 2024 GMT
Not After : Nov 19 00:01:08 2025 GMT
Subject: CN=04DF640F28A9EB75202094DEF1303603E0A71920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:34:e6:2d:d3:c8:75:f0:a3:41:3f:68:54:b6:
bb:18:6e:68:cd:54:40:23:12:7c:38:13:bb:c9:52:
f3:aa:86:4c:a3:20:96:27:82:24:6d:17:f4:9c:b3:
88:1a:7d:b7:6d:60:ab:61:d5:b8:b2:d4:11:b3:8c:
8a:f5:42:e4:6b:c7:9a:22:27:2f:51:63:fa:88:ba:
9d:14:f3:24:8a:e7:a2:e6:02:1a:d7:2d:f2:8d:7f:
95:3c:7f:78:0f:0f:d2:e9:14:c0:e0:17:f0:45:7a:
72:a0:e7:4d:01:3f:25:c5:52:11:ab:aa:b7:8d:fd:
6f:4d:39:d7:ef:d5:db:a2:7b:8f:71:94:bf:3f:70:
0b:36:6b:59:78:74:66:d8:fb:83:e8:a5:92:8f:64:
30:d9:6f:08:91:b2:a8:e6:9f:77:85:02:d3:c4:b2:
63:f0:7f:37:5b:4f:fd:c5:16:e0:3d:3e:65:06:a0:
a8:25:2f:63:23:43:17:c8:19:67:99:bb:f1:a8:b6:
13:79:ee:c6:97:de:f9:4b:b4:94:86:e0:e5:01:26:
52:95:fa:b5:31:6b:96:90:09:e9:0d:8e:98:ed:ae:
4c:8b:86:83:16:b7:86:89:f4:6c:9c:cf:07:34:7f:
33:17:76:4f:da:31:d5:ca:af:33:45:4e:c6:2b:ba:
6f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:DF:64:0F:28:A9:EB:75:20:20:94:DE:F1:30:36:03:E0:A7:19:20
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.164.0/24
Signature Algorithm: sha256WithRSAEncryption
86:4e:13:83:1e:39:a2:41:c5:21:49:c7:46:5e:15:94:83:71:
d8:9b:f1:69:1b:7c:b8:7f:e6:e6:a5:71:bc:0f:62:3a:76:36:
21:a5:8c:2b:ce:55:a4:6d:7a:26:11:00:68:20:68:e0:b0:df:
2f:2d:6e:fb:4e:c5:e3:e1:af:92:80:91:35:b9:c7:d2:58:58:
74:77:5d:31:65:82:6c:b5:1e:f0:e1:a8:b8:92:37:9c:d8:11:
8c:fc:db:93:8e:6c:3a:a8:19:12:7b:6a:3a:f3:42:f3:68:ca:
69:ed:1e:5c:90:7f:55:4f:6a:aa:63:12:7c:aa:d9:fb:e6:a8:
be:ac:23:60:93:ee:85:fe:63:7d:7b:d0:32:36:0f:a4:1d:96:
2a:e7:1a:ed:79:a3:0e:e7:61:6c:84:c6:9e:1e:b7:1c:52:02:
84:85:32:36:67:c1:7b:43:a4:c8:3d:29:db:f5:a7:ed:c5:9c:
69:79:79:71:66:2a:ab:69:18:3b:6a:14:16:f4:23:66:d7:bd:
4a:7a:12:88:30:fe:79:c9:00:cf:86:6d:88:98:d7:c8:28:5d:
e9:ba:5c:1d:5b:d3:66:c8:88:09:59:05:29:86:2c:bd:84:a6:
f3:69:52:1b:47:cd:90:8c:a2:4d:3c:e3:e8:e5:88:23:7d:88:
9b:b3:f2:dd
-----BEGIN CERTIFICATE-----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Generated at Wed Nov 20 22:05:19 2024 by rpki-client on console-fra.rpki-client.org