Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137332e302f32342d3234203d3e20383334.roa
File: 39352e3136392e3137332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: +nwKi8G0daY6Y9w525meQdK/iA4VgAkiU00fExMYLQY=
Subject key identifier: FD:45:44:B2:A0:A8:5D:43:DA:FB:6A:1B:BA:52:E6:A1:96:89:03:39
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 6B02A172FE54DDD515AEB1091DCCEBC5F1BE2F34
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137332e302f32342d3234203d3e20383334.roa
Signing time: Wed 07 Aug 2024 10:10:27 +0000
ROA not before: Wed 07 Aug 2024 10:05:27 +0000
ROA not after: Wed 06 Aug 2025 10:10:27 +0000
asID: 834
IP address blocks: 95.169.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Aug 2024 16:41:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:02:a1:72:fe:54:dd:d5:15:ae:b1:09:1d:cc:eb:c5:f1:be:2f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Aug 7 10:05:27 2024 GMT
Not After : Aug 6 10:10:27 2025 GMT
Subject: CN=FD4544B2A0A85D43DAFB6A1BBA52E6A196890339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:56:8d:ed:1b:52:55:1a:0f:ff:51:43:3c:bb:
72:13:df:02:63:a6:e2:0d:56:e2:12:36:11:db:df:
06:1b:35:83:5c:20:7f:85:ff:27:62:ed:78:cb:1e:
4d:d9:22:39:89:26:8b:f4:1d:01:25:02:d5:b5:35:
02:15:cf:f5:ba:ee:fd:be:4f:03:0d:0b:bb:4a:4b:
d8:1b:68:66:0a:4b:1a:7b:5b:9e:4b:ac:ed:c2:bc:
07:87:33:5a:f9:ac:32:8c:d9:c5:16:46:8c:09:c1:
fb:88:d6:83:bc:71:25:61:e4:20:6a:dd:12:73:0a:
c5:21:c5:4e:d2:3c:a0:9b:7e:69:cd:e7:d4:1e:8b:
d4:28:a0:ea:77:43:59:f6:b3:87:6e:2e:6a:29:1d:
d8:30:07:39:15:9d:d2:5d:51:c1:07:5c:2c:ea:04:
e9:0e:c0:24:4f:f2:87:65:e1:9a:37:e3:da:aa:84:
d5:73:3d:7e:db:8d:6d:f6:3b:0c:49:52:13:7b:01:
be:b5:2b:21:d0:1b:a6:d8:1b:3f:2c:19:f9:06:97:
aa:04:f8:96:4f:c2:5b:8e:e2:fa:10:7d:63:ee:e6:
68:0c:92:4b:19:00:85:84:55:88:e0:33:e6:bc:e9:
48:7e:d2:9a:87:64:67:3e:e4:56:98:0e:de:08:75:
e6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:45:44:B2:A0:A8:5D:43:DA:FB:6A:1B:BA:52:E6:A1:96:89:03:39
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.173.0/24
Signature Algorithm: sha256WithRSAEncryption
03:59:11:8e:f4:ef:1a:5d:11:04:9b:9b:81:21:4c:83:5a:04:
6b:c0:f1:6d:34:3d:8d:47:b0:29:49:55:b2:ae:d1:67:44:be:
8a:30:72:e3:6f:0a:59:05:ad:b2:07:52:b1:3d:47:d7:b1:47:
8d:1b:5c:ba:d6:47:43:c6:29:a6:6b:73:7a:27:cb:64:78:06:
58:00:dc:20:13:ff:72:62:bb:ef:be:f3:bb:ae:c0:03:5d:b7:
c5:74:cc:59:5e:c5:7c:02:fc:f1:27:11:28:c8:21:99:61:b2:
54:ad:05:7f:63:62:61:ab:2e:a0:3a:54:b5:c5:63:fb:57:30:
f1:0d:0a:53:30:2e:c4:40:2b:69:f7:59:96:5d:65:dd:95:1e:
47:67:5f:bf:0d:77:e8:ed:bc:40:62:62:c4:71:14:79:b6:06:
b9:22:a0:02:66:81:91:c9:77:17:bf:32:02:7b:82:f3:e7:fb:
e4:df:b6:d9:7e:ec:7b:f6:ce:21:b9:05:75:da:b7:f5:9a:81:
2a:b4:59:09:16:94:29:c0:a5:a6:72:40:4e:fe:4d:39:50:f0:
50:aa:2c:2d:24:44:1e:aa:f1:3d:f1:63:e0:7b:ee:f2:00:0b:
ad:9d:e2:8b:76:9c:bb:7c:b1:53:95:08:7c:94:5e:01:22:c7:
22:c1:bc:92
-----BEGIN CERTIFICATE-----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Generated at Wed Aug 7 19:40:56 2024 by rpki-client on console-ams.rpki-client.org