Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137312e302f32342d3234203d3e20343030383636.roa
File: 39352e3136392e3137312e302f32342d3234203d3e20343030383636.roa (raw, json)
Hash identifier: kUDipBPTcvv3IwvmhZOp9Dx27tBlAmVU/rbvw+3RGEU=
Subject key identifier: 2A:C0:02:C1:51:74:E7:44:1E:19:7A:44:E7:06:AE:92:B3:51:05:9A
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 7A1BC61D37D73D55B23C4902381B6B7623E80100
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137312e302f32342d3234203d3e20343030383636.roa
Signing time: Tue 11 Jun 2024 09:54:32 +0000
ROA not before: Tue 11 Jun 2024 09:49:32 +0000
ROA not after: Tue 10 Jun 2025 09:54:32 +0000
asID: 400866
IP address blocks: 95.169.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jul 2024 00:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:1b:c6:1d:37:d7:3d:55:b2:3c:49:02:38:1b:6b:76:23:e8:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Jun 11 09:49:32 2024 GMT
Not After : Jun 10 09:54:32 2025 GMT
Subject: CN=2AC002C15174E7441E197A44E706AE92B351059A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b0:9e:bb:b9:96:bf:c9:a8:7a:af:73:10:c7:
99:ea:f3:f0:2d:1f:07:49:33:01:32:4a:b2:bc:0d:
4b:56:dc:04:81:20:61:ca:79:ce:e7:38:f3:92:95:
3d:af:0c:f6:dd:61:ff:e1:e0:ef:4e:0c:53:b5:b3:
74:11:17:5a:f5:41:99:11:2c:6d:86:71:58:10:81:
56:0c:80:11:99:c0:83:ca:b4:ad:77:ee:50:b5:66:
d7:5b:34:ee:c0:a0:d0:62:e5:da:b0:c7:d6:59:16:
c4:f3:44:2b:7d:ee:bc:6f:cd:6b:d4:e0:ed:19:1f:
42:58:8c:b7:22:a9:54:06:3b:f1:3d:e5:00:03:8f:
2e:8a:c6:f8:58:1f:f8:bf:c4:fc:d0:3d:6a:1e:2c:
92:03:04:64:64:01:53:bb:af:9a:1f:0e:b5:b0:5a:
b1:63:28:3c:1f:e4:66:b1:9c:18:e7:b4:e1:51:83:
e8:d5:e5:87:59:34:b4:34:fa:61:ef:63:60:5e:fc:
29:1f:4d:42:e8:2e:10:63:db:8f:23:23:00:92:9f:
6b:df:83:79:74:91:cf:30:1c:1e:e3:d3:32:8f:2f:
44:93:e7:64:03:dc:d2:8e:16:9c:e0:d8:01:df:b6:
ae:d9:18:38:03:a0:7f:48:b2:9a:2b:83:f0:aa:bc:
be:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C0:02:C1:51:74:E7:44:1E:19:7A:44:E7:06:AE:92:B3:51:05:9A
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137312e302f32342d3234203d3e20343030383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.171.0/24
Signature Algorithm: sha256WithRSAEncryption
81:e6:a3:8f:f2:cf:1b:d0:22:ba:4e:8e:1f:6c:ba:63:39:9d:
c3:57:69:87:4b:bc:2b:3a:ca:b2:cc:a2:84:59:20:3b:20:fc:
2c:46:41:1b:f4:01:eb:bf:ff:90:e1:66:7f:0e:a2:7a:a4:06:
55:25:4e:c0:21:aa:1f:96:da:ca:db:17:d3:3a:c2:72:f3:6f:
05:8b:dc:d0:8e:a4:68:4d:0d:86:88:6e:09:23:a5:55:b9:7a:
9d:70:78:d3:3b:3c:29:59:d2:be:3d:88:fb:e9:f1:6f:39:19:
a4:0a:9e:e4:7d:77:f4:f8:2d:7a:d8:fc:b1:9b:5c:32:b7:33:
55:ad:24:ce:93:7e:25:17:10:3a:fa:3b:48:e6:d0:c6:60:c3:
3c:f8:20:d3:a7:cc:b7:8d:ab:54:45:38:f2:2a:9e:78:c7:76:
63:f1:b0:f5:2b:a5:19:1b:94:96:1e:ac:82:ce:50:61:bb:53:
be:c5:10:96:78:18:4b:7a:bf:8a:4c:81:db:b5:f7:01:3e:ea:
f4:f8:5a:8e:47:44:af:e4:cf:00:4d:0c:d2:54:5e:8a:63:94:
de:ff:12:17:76:de:37:e9:b1:fc:b7:92:ee:82:f3:82:73:91:
c0:45:c4:3d:bc:a9:f1:de:9f:7c:15:50:f5:d4:df:20:1a:5d:
03:5a:7b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 11 02:22:05 2024 by rpki-client on console-fra.rpki-client.org