Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137302e302f32342d3234203d3e20343030383636.roa
File: 39352e3136392e3137302e302f32342d3234203d3e20343030383636.roa (raw, json)
Hash identifier: VY9plSAcIH6anopJYSUD2ZFuigAfpiV1Px+TxGyYfBo=
Subject key identifier: 65:03:F1:4A:E7:50:36:E7:35:C5:F5:B2:68:5D:E9:49:EB:82:7A:E2
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 748C55F75F041076C32051763F4D0D6F457C02CA
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137302e302f32342d3234203d3e20343030383636.roa
Signing time: Mon 17 Jun 2024 02:50:36 +0000
ROA not before: Mon 17 Jun 2024 02:45:36 +0000
ROA not after: Mon 16 Jun 2025 02:50:36 +0000
asID: 400866
IP address blocks: 95.169.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jul 2024 00:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:8c:55:f7:5f:04:10:76:c3:20:51:76:3f:4d:0d:6f:45:7c:02:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Jun 17 02:45:36 2024 GMT
Not After : Jun 16 02:50:36 2025 GMT
Subject: CN=6503F14AE75036E735C5F5B2685DE949EB827AE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f1:28:a8:61:36:93:1e:66:fa:85:9f:d8:b6:
f6:c0:6a:22:43:9d:d1:73:92:1e:13:4d:f3:3e:b8:
49:83:78:47:17:97:48:a3:5a:58:7f:c8:1b:50:ef:
5c:8e:b5:71:f1:6d:6a:14:aa:9f:c9:9f:9c:2c:69:
37:3c:53:1c:93:4d:09:97:33:31:a2:30:01:79:fa:
92:f7:da:44:14:8c:4e:71:f9:0f:15:22:a6:f8:cb:
1d:4b:c6:34:63:2d:1c:bc:73:b0:24:54:8a:2e:26:
0b:23:c1:4b:33:bb:4d:d0:04:c0:bf:7c:a7:74:bf:
ee:55:b8:ac:74:b8:ec:d5:b1:4c:e7:13:f0:09:a4:
d8:f6:23:f4:57:93:2b:e0:a2:6d:ea:62:b2:ab:59:
eb:91:23:f5:e2:c2:ea:41:d2:2c:3d:a6:7e:85:b0:
92:fb:ac:86:1e:4e:cd:91:7e:4f:64:75:74:68:8e:
61:47:b5:ba:c3:6a:0d:78:5a:fb:da:34:36:39:90:
e5:4a:68:20:d0:bb:99:de:8b:53:97:79:c6:b9:c5:
5d:e0:ef:4b:2b:00:67:86:00:ae:4b:cb:82:ef:53:
af:29:89:c6:20:90:86:08:73:e3:31:c6:5f:1f:66:
97:52:23:10:5d:34:ea:4b:bc:9e:f0:41:ba:3b:e3:
2c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:03:F1:4A:E7:50:36:E7:35:C5:F5:B2:68:5D:E9:49:EB:82:7A:E2
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137302e302f32342d3234203d3e20343030383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.170.0/24
Signature Algorithm: sha256WithRSAEncryption
42:a1:94:4e:8e:7e:0e:e9:29:97:4f:27:57:ac:e4:14:67:74:
a2:a3:be:cb:f0:55:35:92:c0:52:d7:b9:5d:41:88:7d:00:a2:
f0:d3:42:c2:ab:9f:3f:a7:5a:29:3e:91:7e:c7:d4:1c:21:cf:
f2:96:b0:c8:c7:c0:4e:0a:5b:21:23:d1:ef:e4:39:02:ab:e4:
ff:aa:a0:5b:7b:4d:a0:49:dd:b4:5a:b6:49:5d:7d:a7:98:2f:
47:d2:29:86:2e:58:08:5f:96:57:87:2a:67:68:72:1e:da:4b:
8e:ed:fc:02:2a:c5:74:46:a1:4a:8c:e5:46:a2:34:19:ff:17:
4c:38:78:6f:9f:90:a6:53:46:d4:f6:d4:20:4f:f3:6d:46:50:
e6:d8:0f:ca:b8:9c:ff:50:48:e2:56:7f:5d:a0:63:c4:d6:98:
4c:56:a9:f3:b1:22:32:7a:c3:00:c7:65:fc:dd:aa:49:76:4c:
94:0a:c3:ce:0d:55:87:62:07:0d:f5:76:dc:42:b8:74:f2:73:
1b:e7:2a:c2:34:6a:10:d9:c2:7c:c4:0f:0e:b5:cd:e8:b5:5e:
81:27:80:40:0f:4d:b9:31:85:8a:c7:97:cb:d8:74:28:21:ed:
ea:48:6b:2c:f5:65:93:cf:d3:d9:ab:54:4b:0f:2c:96:5d:24:
bc:dd:7d:73
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUdIxV918EEHbDIFF2P00Nb0V8AsowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWU1NzY5OTYzODhlOTRiOGM3YWIyMGVmZmIyM2JkMTFi
ZWNiNDEwODAeFw0yNDA2MTcwMjQ1MzZaFw0yNTA2MTYwMjUwMzZaMDMxMTAvBgNV
BAMTKDY1MDNGMTRBRTc1MDM2RTczNUM1RjVCMjY4NURFOTQ5RUI4MjdBRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz8SioYTaTHmb6hZ/YtvbAaiJD
ndFzkh4TTfM+uEmDeEcXl0ijWlh/yBtQ71yOtXHxbWoUqp/Jn5wsaTc8UxyTTQmX
MzGiMAF5+pL32kQUjE5x+Q8VIqb4yx1LxjRjLRy8c7AkVIouJgsjwUszu03QBMC/
fKd0v+5VuKx0uOzVsUznE/AJpNj2I/RXkyvgom3qYrKrWeuRI/XiwupB0iw9pn6F
sJL7rIYeTs2Rfk9kdXRojmFHtbrDag14WvvaNDY5kOVKaCDQu5nei1OXeca5xV3g
70srAGeGAK5Ly4LvU68picYgkIYIc+Mxxl8fZpdSIxBdNOpLvJ7wQbo74yxrAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUZQPxSudQNuc1xfWyaF3pSeuCeuIwHwYDVR0j
BBgwFoAUnldpljiOlLjHqyDv+yO9Eb7LQQgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAtMmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2
MTIzLzAvOUU1NzY5OTYzODhFOTRCOEM3QUIyMEVGRkIyM0JEMTFCRUNCNDEwOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25sZHBsamlPbExqSHF5RHYteU85RWI3
TFFRZy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAt
MmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2MTIzLzAvMzkzNTJlMzEzNjM5MmUzMTM3
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMwMzAzODM2MzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABfqaowDQYJKoZIhvcNAQELBQADggEBAEKhlE6Ofg7pKZdPJ1es5BRndKKjvsvw
VTWSwFLXuV1BiH0AovDTQsKrnz+nWik+kX7H1Bwhz/KWsMjHwE4KWyEj0e/kOQKr
5P+qoFt7TaBJ3bRatkldfaeYL0fSKYYuWAhflleHKmdoch7aS47t/AIqxXRGoUqM
5UaiNBn/F0w4eG+fkKZTRtT21CBP821GUObYD8q4nP9QSOJWf12gY8TWmExWqfOx
IjJ6wwDHZfzdqkl2TJQKw84NVYdiBw31dtxCuHTycxvnKsI0ahDZwnzEDw61zei1
XoEngEAPTbkxhYrHl8vYdCgh7epIayz1ZZPP09mrVEsPLJZdJLzdfXM=
Generated at Wed Jul 17 04:40:01 2024 by rpki-client on console-fra.rpki-client.org