Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137312e302f32342d3234203d3e20383334.roa
File: 39352e3136392e3137312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: opQobfhow/Ty3eASQJ9bfSx7IVgpXkwiKad1CeMtXpQ=
Subject key identifier: 58:EE:EA:00:A1:F3:3F:8C:61:A5:6A:4F:7E:2C:3B:86:49:F6:24:DE
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 5AC5A42C328B21C1CD8667DB6C3C1BC0F0B65376
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137312e302f32342d3234203d3e20383334.roa
Signing time: Thu 11 Jul 2024 09:27:03 +0000
ROA not before: Thu 11 Jul 2024 09:22:03 +0000
ROA not after: Thu 10 Jul 2025 09:27:03 +0000
asID: 834
IP address blocks: 95.169.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jul 2024 09:46:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:c5:a4:2c:32:8b:21:c1:cd:86:67:db:6c:3c:1b:c0:f0:b6:53:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Jul 11 09:22:03 2024 GMT
Not After : Jul 10 09:27:03 2025 GMT
Subject: CN=58EEEA00A1F33F8C61A56A4F7E2C3B8649F624DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:29:e1:97:03:f6:01:a0:9f:b0:5f:e2:86:f6:
2c:e9:e2:aa:4f:f4:57:c5:79:a1:6a:30:a4:64:a5:
82:02:11:70:59:bc:2e:48:5d:7b:d3:21:55:4c:f4:
cd:2c:2d:0d:a3:13:78:b6:2e:68:33:1d:b8:a8:3e:
b0:38:22:b1:c3:59:79:88:c4:21:cc:1c:61:d6:20:
09:ce:c0:5a:5c:25:e9:0e:28:09:46:3f:7c:df:a5:
b8:57:d9:e2:69:39:2a:88:1e:af:de:8a:44:b6:53:
59:ea:c3:30:34:ab:45:c5:8f:f3:bb:7f:3b:4c:96:
59:58:b7:13:80:1a:f4:a7:08:1c:44:d0:1d:07:3a:
c4:47:79:cd:3f:57:d4:a9:da:8a:ff:1e:d4:b4:07:
d0:83:5c:c5:fb:df:db:30:f5:5c:9f:12:d5:b4:cb:
47:d6:fd:28:6b:cd:da:12:4e:48:cc:e4:d7:e2:16:
3f:32:75:f9:65:26:0b:14:ec:13:75:18:26:77:b7:
9d:8c:70:74:da:b1:89:4d:4a:da:41:8f:d2:e5:6f:
8e:96:50:c6:4a:cf:a7:33:be:b9:4d:af:2d:e0:fa:
1c:25:e1:d2:c0:ae:eb:5d:c7:31:19:78:58:b2:49:
d5:c7:7f:80:fe:7e:25:96:50:10:08:65:c2:72:57:
0b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EE:EA:00:A1:F3:3F:8C:61:A5:6A:4F:7E:2C:3B:86:49:F6:24:DE
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.171.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:94:5c:a8:50:21:0e:e0:38:48:92:54:5a:68:2d:47:9f:f3:
ca:61:9b:b8:6b:4c:29:62:5f:1e:49:a0:9c:e6:5d:4f:5a:a6:
b3:99:6a:a7:09:8b:0a:6a:2f:15:f4:ee:5a:29:4d:e2:21:c9:
61:f8:f5:af:55:67:3e:00:da:c6:36:13:5b:c6:e8:5f:ca:6c:
ac:d9:e4:e5:57:79:4d:31:ec:26:75:76:62:48:d1:f8:bc:84:
f6:f1:1e:3a:61:37:0a:1a:7b:19:49:60:d6:1e:c5:de:52:c3:
c6:d0:4f:8f:94:b3:8b:0d:31:31:26:44:1d:80:be:f9:9a:55:
65:c2:54:7e:0d:bb:8a:b6:3d:24:cc:29:ad:39:a8:0e:a1:57:
a6:94:ce:bb:e4:74:38:fd:3a:05:26:d7:0f:e2:03:69:2f:ca:
a9:ea:ac:41:e0:2b:5d:31:5a:b9:28:30:28:92:a8:34:2f:f8:
f9:32:ce:2a:6f:81:41:9c:5f:e3:4e:87:64:4e:ca:57:3c:23:
65:19:44:4b:7f:d4:09:08:e3:91:7a:47:a0:88:08:9f:7c:cd:
3a:86:44:1e:40:40:a2:88:b4:0c:b1:ee:2a:12:4d:bc:4e:eb:
fb:4a:53:c5:d1:61:db:17:a1:c0:61:c5:51:14:cc:99:a0:f4:
f6:67:4a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 11 11:45:42 2024 by rpki-client on console-fra.rpki-client.org