Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137302e302f32342d3234203d3e20383334.roa
File: 39352e3136392e3137302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: pdtRrv1nDLJ4U0ZxJj7AxTuZuOcEQpLCVhhIOaJhHAc=
Subject key identifier: 58:A1:F9:D0:7C:61:FB:FE:2F:56:15:B0:78:6E:C6:17:22:B5:A0:DE
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 62BFE3CBD35749081827DD9AABB4AABA33C20C1F
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137302e302f32342d3234203d3e20383334.roa
Signing time: Wed 17 Jul 2024 00:00:28 +0000
ROA not before: Tue 16 Jul 2024 23:55:28 +0000
ROA not after: Wed 16 Jul 2025 00:00:28 +0000
asID: 834
IP address blocks: 95.169.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Aug 2024 16:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:bf:e3:cb:d3:57:49:08:18:27:dd:9a:ab:b4:aa:ba:33:c2:0c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Jul 16 23:55:28 2024 GMT
Not After : Jul 16 00:00:28 2025 GMT
Subject: CN=58A1F9D07C61FBFE2F5615B0786EC61722B5A0DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1a:23:ac:78:52:84:cf:88:fd:01:89:10:d7:
b7:58:34:a7:68:80:e5:db:b2:57:55:8a:4f:64:eb:
97:c7:c2:91:bc:e1:aa:82:61:d5:c0:74:0b:99:91:
9e:63:45:44:25:0d:9e:d8:88:a5:ea:ab:d2:1d:f6:
1e:f8:97:d3:be:f2:c9:75:a6:9e:ee:77:13:09:c5:
a0:a9:c9:11:b4:29:b9:36:c0:70:32:8f:5e:1f:66:
81:92:1b:9f:3f:4a:c3:85:d3:0e:98:43:b9:dc:4e:
96:8a:77:e4:21:f7:18:94:e8:4a:6d:50:68:15:20:
38:e1:63:34:c6:f2:64:9c:82:39:e6:b6:d1:4d:ec:
b2:ca:a2:d6:7f:b6:22:6d:8e:31:c6:ce:88:b4:92:
f8:98:b1:bc:62:cd:af:56:d8:e8:4d:90:15:6d:a3:
e5:51:7d:c3:a8:a0:b6:a7:1f:41:63:8c:79:c3:3b:
01:b4:3e:5a:42:e2:88:53:3c:ff:26:85:4a:66:af:
4b:81:4e:08:74:0c:ef:a2:bf:39:6a:b5:a0:e9:0e:
b8:1f:00:d4:dc:a8:26:3b:d9:67:f3:b4:89:0e:87:
2a:99:80:05:e0:d1:9e:e5:ed:bb:75:a1:b3:0c:59:
14:13:d1:fa:1f:19:f9:f4:5e:de:67:dc:12:bd:31:
ef:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A1:F9:D0:7C:61:FB:FE:2F:56:15:B0:78:6E:C6:17:22:B5:A0:DE
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.170.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:6e:aa:58:ee:d4:5e:1b:ca:ef:be:ed:31:3c:07:17:c9:a2:
77:a8:f2:44:32:37:b2:25:3f:21:cd:00:65:83:24:ae:81:8c:
9c:1d:50:cc:de:d4:60:6b:c2:59:f1:a6:96:eb:2f:c6:47:8e:
04:a5:11:ec:68:18:57:a0:e8:09:51:8c:be:76:0c:da:66:fb:
2b:f5:68:e3:1c:f9:0a:34:09:42:6c:1a:1d:0f:9c:4c:76:5d:
3d:a9:e8:e6:01:32:fd:2f:57:a8:f6:d3:06:a6:68:b9:d7:13:
4b:14:cf:89:cd:5c:63:88:fa:6e:ed:ff:b7:60:e1:bb:ad:34:
08:fb:2f:e4:d9:b4:58:24:8d:f6:29:29:f3:da:fd:01:0e:fc:
26:cb:5e:7f:62:84:ee:91:d9:20:c9:f2:7c:ff:60:a0:55:c1:
24:a9:7e:9a:5f:b3:2b:70:41:9c:be:8e:16:12:af:89:e0:db:
1b:ed:73:f0:a6:d3:81:d3:e5:2a:6e:63:6c:45:8e:67:dd:36:
1c:37:f4:87:c9:c4:94:e3:9d:6d:22:9f:87:34:84:8c:2a:40:
c6:49:5b:5a:7c:d3:ef:5d:5b:4f:6d:6d:c4:30:9d:a3:a0:b6:
43:46:ce:30:fa:30:4e:58:6d:39:4d:f3:e4:b8:f7:64:fc:93:
97:22:64:57
-----BEGIN CERTIFICATE-----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Generated at Thu Aug 1 19:34:20 2024 by rpki-client on console-fra.rpki-client.org