Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137312e302f32342d3234203d3e20383334.roa
File: 39352e3136392e3137312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: JKe+CdYk4pK01TOMRNFyTGZKoQnO8jFrbgovZch/ZBE=
Subject key identifier: 08:E7:DB:B8:B9:CA:D6:4A:B5:51:FD:DC:C3:B6:80:01:1F:00:A9:27
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 3951A3B7B5E5280F0FBCBC1B23AA7AD9AAAC6855
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137312e302f32342d3234203d3e20383334.roa
Signing time: Fri 31 May 2024 09:35:29 +0000
ROA not before: Fri 31 May 2024 09:30:29 +0000
ROA not after: Fri 30 May 2025 09:35:29 +0000
asID: 834
IP address blocks: 95.169.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jun 2024 09:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:51:a3:b7:b5:e5:28:0f:0f:bc:bc:1b:23:aa:7a:d9:aa:ac:68:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: May 31 09:30:29 2024 GMT
Not After : May 30 09:35:29 2025 GMT
Subject: CN=08E7DBB8B9CAD64AB551FDDCC3B680011F00A927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ef:a4:1b:2c:f2:7e:2b:7d:c9:27:87:10:6a:
dc:89:a5:07:50:9c:1b:47:14:c9:94:47:78:54:e3:
81:c8:ad:cf:6a:26:9c:d3:4a:9f:53:67:1d:e1:85:
1e:0f:ca:c7:5b:d2:2f:6f:99:19:7d:f0:b1:1a:ef:
43:d0:a9:da:fc:29:71:06:73:d9:ab:98:b3:5f:a5:
10:0c:40:04:f5:4f:ce:fc:a7:38:6a:06:f8:90:fa:
f3:54:1d:96:60:3a:5a:f4:20:b9:c9:a7:08:24:24:
3e:50:68:9d:3b:5c:8f:1e:94:c8:7d:b6:af:1c:b2:
71:48:d6:84:d2:31:d7:4f:2c:4d:7c:20:89:66:fd:
b9:1e:28:52:1d:46:e1:f2:77:92:e5:dc:e3:85:46:
c8:a0:84:a9:19:57:e2:ce:76:e6:8a:ea:e9:b6:bb:
91:3d:e3:d2:41:82:48:05:72:12:04:97:aa:28:86:
e9:11:cb:e3:3c:34:d6:96:48:6a:20:73:a0:d7:20:
6b:66:e7:5b:c6:e8:fc:9b:62:e4:40:bb:59:95:3d:
46:5e:58:1c:13:01:a6:46:9a:38:02:2a:48:a4:91:
07:a9:a0:a2:e0:2c:50:1d:9a:12:ee:3b:fe:e4:c4:
e5:b7:c0:17:27:47:e3:a0:cd:5f:c7:43:a6:6e:1a:
c7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E7:DB:B8:B9:CA:D6:4A:B5:51:FD:DC:C3:B6:80:01:1F:00:A9:27
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.171.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:9a:10:d3:79:c8:4d:6e:b0:53:68:21:4c:29:91:95:09:e9:
f7:f9:6c:11:eb:c1:11:b1:e8:25:e9:06:38:50:f4:08:70:cc:
c7:93:bb:ae:eb:81:5d:b4:cb:2d:9c:d3:b7:b0:27:9f:f1:9b:
9f:62:51:10:38:7e:eb:b6:ff:dc:0e:ae:f5:79:81:a7:ea:e3:
5e:0e:27:9b:57:a5:9f:25:df:c7:63:f8:71:cf:4e:c2:bb:30:
1e:0c:da:3f:b0:55:2c:b6:77:11:48:a6:20:53:e6:bb:80:b2:
73:b9:cb:29:bd:0d:84:5d:53:db:a7:eb:20:13:d5:bc:7d:01:
ef:3a:00:03:c9:bc:c7:12:8a:31:42:38:c3:78:32:47:61:b3:
25:43:92:dc:ab:22:38:3b:b1:bd:1e:86:6a:75:ed:d0:ae:35:
bd:9c:82:83:64:fb:cc:6e:12:66:ac:cf:ba:4c:a7:cc:df:79:
46:6c:9c:c8:8c:98:ff:49:c1:d4:c4:4d:41:17:16:e2:c6:55:
1c:2e:ad:d8:1d:d1:73:1b:fa:8c:01:42:58:1d:2a:2d:c3:c2:
28:f0:f1:87:bc:c2:46:59:69:9f:b6:e2:52:89:49:a7:89:72:
d1:4c:2d:50:f2:f5:07:8c:93:8e:df:88:02:0a:c5:45:0b:54:
68:e6:31:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 16:28:29 2024 by rpki-client on console-ams.rpki-client.org