Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137322e302f32342d3234203d3e20383334.roa
File: 39352e3136392e3137322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: KcU4mUtYSyitRgb7DxQh5D/pHMshN/WckKZy0FLjeFo=
Subject key identifier: B3:29:DE:3E:DD:5F:34:A7:E2:55:65:8B:2A:D1:23:4D:A8:19:9E:BE
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 0CD58CD0B3384DAEAFE76404F3765526363F25D2
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137322e302f32342d3234203d3e20383334.roa
Signing time: Fri 31 May 2024 09:35:29 +0000
ROA not before: Fri 31 May 2024 09:30:29 +0000
ROA not after: Fri 30 May 2025 09:35:29 +0000
asID: 834
IP address blocks: 95.169.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jun 2024 11:44:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:d5:8c:d0:b3:38:4d:ae:af:e7:64:04:f3:76:55:26:36:3f:25:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: May 31 09:30:29 2024 GMT
Not After : May 30 09:35:29 2025 GMT
Subject: CN=B329DE3EDD5F34A7E255658B2AD1234DA8199EBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:db:ce:ee:35:41:16:df:52:e6:aa:44:bd:cb:
e6:7e:c0:f4:38:5f:9c:9b:a8:cb:09:58:fe:2f:97:
f0:72:1b:d9:af:e1:60:a5:86:fd:c0:99:45:61:31:
dc:08:3d:12:0a:ab:34:7e:55:a9:a9:97:f4:c7:28:
7a:f5:47:cc:f8:25:f6:51:aa:94:38:52:57:b6:30:
d9:a5:8d:f8:9b:fc:8d:ae:e2:7a:1f:0d:37:39:72:
65:f8:0c:3a:d0:99:15:88:5f:ab:23:0c:ab:95:d9:
86:4c:5e:9a:ee:de:5d:9f:4a:a0:e1:9e:b9:2b:53:
8b:e9:a7:72:52:91:45:69:b5:45:11:69:6b:f4:ae:
a9:d9:a3:80:eb:0e:92:08:7d:11:f8:c8:a4:74:09:
13:22:4a:33:70:f1:61:2b:f2:80:5f:e5:1d:96:d3:
41:87:82:d2:71:5c:c4:db:dd:6b:7e:06:6d:08:c7:
36:a7:93:21:ea:40:b1:72:c6:b1:a5:19:7a:87:0b:
42:62:fa:22:b1:0e:87:7f:c9:67:07:e0:22:9f:a3:
d9:31:46:f1:7b:83:91:50:f7:8f:b7:cb:51:c4:16:
f4:bb:2d:b2:92:38:c2:ac:8f:c0:5f:3b:b0:1f:d7:
df:8f:b6:8c:8f:2d:a9:3a:39:c5:01:4d:99:0c:4f:
d1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:29:DE:3E:DD:5F:34:A7:E2:55:65:8B:2A:D1:23:4D:A8:19:9E:BE
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.172.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:1c:06:59:61:38:5f:6f:11:73:21:e8:84:67:fd:64:61:77:
14:50:a3:b3:60:ad:80:02:21:94:a4:69:79:ec:43:a8:66:9a:
9e:15:c7:20:d0:4b:c2:d3:03:7c:5c:34:39:d5:81:39:72:1b:
b5:04:e4:07:dc:c1:90:12:79:4f:c5:17:69:03:8c:d3:b0:92:
aa:03:43:1a:f2:5f:7a:a4:89:f2:e1:07:08:94:62:6a:1e:fe:
69:9e:c0:0e:b8:0e:56:0f:b6:fd:ad:97:ca:ad:08:71:8e:3a:
e8:e1:3b:be:b2:ad:02:4f:99:4d:df:6b:16:b6:f4:27:7b:24:
50:25:fa:88:42:ef:82:17:fb:a0:07:14:95:24:ff:dd:55:a3:
8b:b7:3f:62:1d:98:f0:6e:c2:34:5e:f5:1c:57:bc:cc:1d:5b:
49:ba:72:e0:5d:2f:83:5b:33:43:62:80:f1:96:43:30:94:91:
c0:20:01:9a:9d:90:94:a3:7b:8b:02:20:9a:a8:36:54:3c:72:
aa:7b:f3:14:ea:c7:12:b8:75:b3:fe:a8:8a:4e:33:8c:ed:71:
1f:7d:08:48:47:fa:b8:c3:59:36:3b:c2:fe:b6:69:00:a1:35:
9d:75:d0:20:82:f3:17:3e:79:85:7f:69:be:2f:cd:8b:45:63:
ad:40:d9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 14:02:08 2024 by rpki-client on console-fra.rpki-client.org