Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136362e302f32342d3234203d3e20383334.roa
File: 39352e3136392e3136362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Iqwe7gts009u5SanyuIGjka5/VuB2zkGY0B1LtaephM=
Subject key identifier: 65:16:33:3E:71:F7:CE:4C:8A:33:51:1C:E9:44:46:CB:51:79:20:82
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 78BC8E8F4D949E7D0C9E0C2BC1D53B98C6A556BC
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136362e302f32342d3234203d3e20383334.roa
Signing time: Sat 09 Nov 2024 00:02:13 +0000
ROA not before: Fri 08 Nov 2024 23:57:13 +0000
ROA not after: Sat 08 Nov 2025 00:02:13 +0000
asID: 834
IP address blocks: 95.169.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Nov 2024 08:48:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:bc:8e:8f:4d:94:9e:7d:0c:9e:0c:2b:c1:d5:3b:98:c6:a5:56:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Nov 8 23:57:13 2024 GMT
Not After : Nov 8 00:02:13 2025 GMT
Subject: CN=6516333E71F7CE4C8A33511CE94446CB51792082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:30:0b:e1:69:49:75:de:06:66:b9:ae:ae:52:
8f:86:5c:ec:69:0b:9b:7e:a1:67:71:4c:40:60:19:
40:fd:7b:ac:fb:6c:00:2e:b4:c7:96:2e:cb:fd:68:
5c:df:ef:eb:cf:b2:36:23:b8:71:0e:d2:a4:d8:df:
67:3c:c8:0f:b4:45:5e:4c:d8:9c:0f:48:2e:fe:f3:
be:56:67:73:6a:d6:9a:8e:ef:03:eb:6b:7f:8a:54:
b6:b5:ba:57:e8:ef:5c:c6:99:3c:30:a8:2d:1a:ea:
ce:61:a5:7a:97:9d:80:ca:03:5d:93:4a:38:26:4e:
aa:c8:86:a6:b2:39:1d:1f:fd:06:84:c4:d9:76:b0:
be:6b:3f:53:66:19:06:33:e1:5c:b3:81:90:5d:13:
21:fa:47:28:8c:fe:92:79:40:cc:02:ff:76:af:1d:
14:9a:df:6a:17:2d:72:e7:2a:57:4d:ed:c5:28:64:
85:5a:67:ce:47:e4:c3:0c:24:ae:b5:59:61:7a:71:
18:cb:06:7c:85:e7:ff:a6:d6:7e:1b:b8:ec:54:16:
bf:1c:2a:50:5e:0b:f6:a2:8c:77:75:59:1d:7d:79:
38:07:2d:e7:d1:7f:c4:6f:4b:03:ab:be:49:be:16:
c8:3e:61:af:9b:91:95:e6:59:37:19:7b:56:1e:7b:
0c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:16:33:3E:71:F7:CE:4C:8A:33:51:1C:E9:44:46:CB:51:79:20:82
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.166.0/24
Signature Algorithm: sha256WithRSAEncryption
06:74:fb:90:ae:12:57:e0:db:ad:ec:a1:76:b7:50:c6:94:2c:
9f:42:9f:b6:47:af:ba:2f:ba:f9:17:dd:c9:91:88:24:b0:6b:
bc:a2:01:0a:63:98:58:13:51:b0:85:53:b7:82:f6:42:d4:6d:
82:b6:e1:1d:41:e1:e7:bd:58:ab:f2:5f:9d:78:61:48:cc:14:
78:27:2f:3b:8d:2a:5d:17:d2:64:75:ac:6f:f9:1c:f6:2c:d3:
68:98:6c:0f:59:86:0d:01:07:d4:8e:55:91:86:4d:14:a2:7b:
6b:04:44:71:49:d7:b8:cf:ba:d9:cd:cb:f4:38:14:27:2f:c3:
61:e9:fe:18:d8:71:d4:74:3c:2a:a0:e1:73:51:1a:18:79:ff:
d6:32:d3:95:0b:15:68:98:c3:ab:b4:99:ac:45:f1:1b:36:4a:
b5:70:65:e5:81:73:b8:e6:a1:0b:f0:7b:a5:6f:f8:6b:81:39:
89:ca:30:88:ea:e8:a2:3c:bd:a2:52:ee:bd:93:0a:ea:bd:b0:
24:95:d4:08:5f:ef:fb:15:76:9f:00:7f:e6:93:74:47:24:af:
0f:75:8e:ab:df:c5:f1:20:7f:21:6f:66:f9:c1:18:82:60:ae:
5c:88:af:47:90:c8:02:f8:41:e4:d4:b2:34:99:c1:73:43:ed:
6b:14:b8:c3
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUeLyOj02Unn0MngwrwdU7mMalVrwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWU1NzY5OTYzODhlOTRiOGM3YWIyMGVmZmIyM2JkMTFi
ZWNiNDEwODAeFw0yNDExMDgyMzU3MTNaFw0yNTExMDgwMDAyMTNaMDMxMTAvBgNV
BAMTKDY1MTYzMzNFNzFGN0NFNEM4QTMzNTExQ0U5NDQ0NkNCNTE3OTIwODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFMAvhaUl13gZmua6uUo+GXOxp
C5t+oWdxTEBgGUD9e6z7bAAutMeWLsv9aFzf7+vPsjYjuHEO0qTY32c8yA+0RV5M
2JwPSC7+875WZ3Nq1pqO7wPra3+KVLa1ulfo71zGmTwwqC0a6s5hpXqXnYDKA12T
SjgmTqrIhqayOR0f/QaExNl2sL5rP1NmGQYz4VyzgZBdEyH6RyiM/pJ5QMwC/3av
HRSa32oXLXLnKldN7cUoZIVaZ85H5MMMJK61WWF6cRjLBnyF5/+m1n4buOxUFr8c
KlBeC/aijHd1WR19eTgHLefRf8RvSwOrvkm+Fsg+Ya+bkZXmWTcZe1YeewyrAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUZRYzPnH3zkyKM1Ec6URGy1F5IIIwHwYDVR0j
BBgwFoAUnldpljiOlLjHqyDv+yO9Eb7LQQgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAtMmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2
MTIzLzAvOUU1NzY5OTYzODhFOTRCOEM3QUIyMEVGRkIyM0JEMTFCRUNCNDEwOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25sZHBsamlPbExqSHF5RHYteU85RWI3
TFFRZy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAt
MmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2MTIzLzAvMzkzNTJlMzEzNjM5MmUzMTM2
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABfqaYw
DQYJKoZIhvcNAQELBQADggEBAAZ0+5CuElfg263soXa3UMaULJ9Cn7ZHr7ovuvkX
3cmRiCSwa7yiAQpjmFgTUbCFU7eC9kLUbYK24R1B4ee9WKvyX514YUjMFHgnLzuN
Kl0X0mR1rG/5HPYs02iYbA9Zhg0BB9SOVZGGTRSie2sERHFJ17jPutnNy/Q4FCcv
w2Hp/hjYcdR0PCqg4XNRGhh5/9Yy05ULFWiYw6u0maxF8Rs2SrVwZeWBc7jmoQvw
e6Vv+GuBOYnKMIjq6KI8vaJS7r2TCuq9sCSV1Ahf7/sVdp8Af+aTdEckrw91jqvf
xfEgfyFvZvnBGIJgrlyIr0eQyAL4QeTUsjSZwXND7WsUuMM=
Generated at Sat Nov 9 09:56:09 2024 by rpki-client on console-ams.rpki-client.org