Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137332e302f32342d3234203d3e203536393133.roa
File: 39352e3136392e3137332e302f32342d3234203d3e203536393133.roa (raw, json)
Hash identifier: DnRQeyNKa3frafvwH7H+99+JMF4jNbFN8HtAdt2l4aI=
Subject key identifier: DF:23:26:8E:C7:08:D8:02:70:79:71:33:22:6E:FA:EA:E4:61:77:DD
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 396037E0F8B01A0AEB8534260A66DD003B8E98EE
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137332e302f32342d3234203d3e203536393133.roa
Signing time: Wed 05 Jun 2024 08:59:06 +0000
ROA not before: Wed 05 Jun 2024 08:54:06 +0000
ROA not after: Wed 04 Jun 2025 08:59:06 +0000
asID: 56913
IP address blocks: 95.169.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jul 2024 00:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:60:37:e0:f8:b0:1a:0a:eb:85:34:26:0a:66:dd:00:3b:8e:98:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Jun 5 08:54:06 2024 GMT
Not After : Jun 4 08:59:06 2025 GMT
Subject: CN=DF23268EC708D80270797133226EFAEAE46177DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:39:51:4c:6c:b3:c6:0b:5c:f7:66:ef:03:0a:
0d:f4:60:49:3e:fa:0e:5f:a7:36:f1:86:e0:e6:19:
94:e2:74:e8:b2:48:cb:b5:96:ed:be:28:1a:d2:f9:
0a:bd:23:b3:c9:ec:9e:d7:75:e9:54:e5:8d:a4:cb:
02:6d:42:31:3d:a9:66:e7:da:d4:b4:12:56:8d:28:
0e:f0:8f:97:f4:ea:12:e0:15:0d:a3:3f:58:d6:da:
04:dc:32:a1:3d:c1:f8:b5:af:68:de:29:6f:9d:bc:
79:5c:1e:66:24:63:3b:c1:48:da:8c:24:75:3f:ed:
a7:24:bc:9e:1e:89:89:5e:d8:41:b8:69:a2:7a:e9:
61:7e:04:9e:c5:1a:42:15:b7:2e:46:06:99:a2:5d:
a3:f6:16:5e:9f:3a:f7:1c:03:5f:13:78:7a:30:3d:
e8:e4:be:a4:37:6a:3b:d3:96:52:69:bd:d5:13:23:
b8:58:2a:cb:75:10:41:41:1c:4e:52:70:6e:db:77:
c4:e5:1a:67:26:51:d6:2c:06:d5:38:d0:0d:73:53:
16:6f:46:90:8a:be:47:71:a8:ab:85:ee:e1:e8:d7:
e7:70:8f:27:1a:2f:d1:34:5a:37:b1:3d:d5:32:eb:
d9:a0:fb:8f:e1:97:ce:c3:ee:e7:86:97:d1:c4:1a:
60:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:23:26:8E:C7:08:D8:02:70:79:71:33:22:6E:FA:EA:E4:61:77:DD
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137332e302f32342d3234203d3e203536393133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.173.0/24
Signature Algorithm: sha256WithRSAEncryption
01:bf:8b:ba:b7:b6:8b:15:70:4d:d9:cd:5e:6d:ba:66:1d:d9:
d9:a5:f7:11:e2:03:ba:4d:09:c2:06:05:55:5c:ec:6e:46:cb:
14:ae:b2:36:88:31:6a:62:e2:20:70:05:4d:ab:6a:61:e2:ad:
82:9f:d5:52:42:03:7e:ac:41:e7:f7:6d:af:5c:da:2a:9c:73:
04:e5:0d:96:8f:88:88:28:1c:7a:32:f4:60:0e:f6:0d:c1:8f:
c5:a3:60:0e:d9:6c:a4:f6:08:b8:17:ac:24:75:03:53:6c:8d:
49:3e:e0:cb:74:46:6d:ab:89:2e:d4:ee:a9:3d:04:4b:aa:83:
a1:47:7c:79:bd:e3:90:04:7e:7c:3b:5c:54:3a:63:90:06:62:
2e:6e:7b:86:2b:53:7b:8d:1e:fa:ec:d8:9f:39:a5:ee:9a:65:
c3:14:7a:c2:04:09:ab:85:bd:b1:77:e6:9e:50:50:7d:c4:a8:
76:7e:12:29:b8:f7:d9:a7:6a:15:9d:2e:cd:6e:87:c2:49:25:
bc:43:aa:f3:0a:ea:a2:6d:d5:ae:94:92:ef:3f:e9:62:c9:39:
16:0e:c4:15:31:52:a4:4f:bc:86:5c:bb:85:99:a6:f7:02:61:
88:75:15:73:bb:91:af:e6:48:d7:a7:ca:f9:a7:6e:79:96:0d:
26:15:5f:0b
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUOWA34PiwGgrrhTQmCmbdADuOmO4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWU1NzY5OTYzODhlOTRiOGM3YWIyMGVmZmIyM2JkMTFi
ZWNiNDEwODAeFw0yNDA2MDUwODU0MDZaFw0yNTA2MDQwODU5MDZaMDMxMTAvBgNV
BAMTKERGMjMyNjhFQzcwOEQ4MDI3MDc5NzEzMzIyNkVGQUVBRTQ2MTc3REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0OVFMbLPGC1z3Zu8DCg30YEk+
+g5fpzbxhuDmGZTidOiySMu1lu2+KBrS+Qq9I7PJ7J7XdelU5Y2kywJtQjE9qWbn
2tS0ElaNKA7wj5f06hLgFQ2jP1jW2gTcMqE9wfi1r2jeKW+dvHlcHmYkYzvBSNqM
JHU/7ackvJ4eiYle2EG4aaJ66WF+BJ7FGkIVty5GBpmiXaP2Fl6fOvccA18TeHow
PejkvqQ3ajvTllJpvdUTI7hYKst1EEFBHE5ScG7bd8TlGmcmUdYsBtU40A1zUxZv
RpCKvkdxqKuF7uHo1+dwjycaL9E0WjexPdUy69mg+4/hl87D7ueGl9HEGmBTAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU3yMmjscI2AJweXEzIm766uRhd90wHwYDVR0j
BBgwFoAUnldpljiOlLjHqyDv+yO9Eb7LQQgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAtMmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2
MTIzLzAvOUU1NzY5OTYzODhFOTRCOEM3QUIyMEVGRkIyM0JEMTFCRUNCNDEwOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25sZHBsamlPbExqSHF5RHYteU85RWI3
TFFRZy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAt
MmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2MTIzLzAvMzkzNTJlMzEzNjM5MmUzMTM3
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTM2MzkzMTMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
X6mtMA0GCSqGSIb3DQEBCwUAA4IBAQABv4u6t7aLFXBN2c1ebbpmHdnZpfcR4gO6
TQnCBgVVXOxuRssUrrI2iDFqYuIgcAVNq2ph4q2Cn9VSQgN+rEHn922vXNoqnHME
5Q2Wj4iIKBx6MvRgDvYNwY/Fo2AO2Wyk9gi4F6wkdQNTbI1JPuDLdEZtq4ku1O6p
PQRLqoOhR3x5veOQBH58O1xUOmOQBmIubnuGK1N7jR767NifOaXummXDFHrCBAmr
hb2xd+aeUFB9xKh2fhIpuPfZp2oVnS7NbofCSSW8Q6rzCuqibdWulJLvP+liyTkW
DsQVMVKkT7yGXLuFmab3AmGIdRVzu5Gv5kjXp8r5p255lg0mFV8L
-----END CERTIFICATE-----
Generated at Fri Jul 5 02:41:49 2024 by rpki-client on console-ams.rpki-client.org