Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137342e302f32342d3234203d3e20383334.roa
File: 39352e3136392e3137342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 95EkLErLPFLUNmE0RjtnsLxrNuP0QpQHrmG0pAb9WpQ=
Subject key identifier: 98:02:BF:D2:32:C3:A1:C4:FE:02:42:9F:B9:57:E7:36:0F:70:6E:CA
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 3CC5EE5DBCE7BBCBFE168A1B862879C51ECCCC9D
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137342e302f32342d3234203d3e20383334.roa
Signing time: Fri 31 May 2024 09:35:30 +0000
ROA not before: Fri 31 May 2024 09:30:30 +0000
ROA not after: Fri 30 May 2025 09:35:30 +0000
asID: 834
IP address blocks: 95.169.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 30 Jun 2024 09:10:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:c5:ee:5d:bc:e7:bb:cb:fe:16:8a:1b:86:28:79:c5:1e:cc:cc:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: May 31 09:30:30 2024 GMT
Not After : May 30 09:35:30 2025 GMT
Subject: CN=9802BFD232C3A1C4FE02429FB957E7360F706ECA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e6:24:e1:08:95:a7:d0:52:18:69:e3:ad:9d:
ce:e1:a4:16:b4:ef:c9:f8:5b:90:8d:60:f3:a7:63:
0e:0b:f2:9d:2e:fa:42:26:6a:4e:ce:1d:f4:c7:7f:
c3:38:70:d3:6e:a2:17:c7:67:23:a7:05:d3:7a:70:
9b:07:a8:19:98:ee:7d:b2:16:3d:20:21:c6:49:44:
0b:8b:6a:5b:a0:36:57:bf:33:61:8b:a5:79:12:20:
8f:82:39:bf:6a:83:23:f8:e9:2c:98:85:be:5d:76:
f9:d9:0b:79:e1:6d:3c:2b:46:5a:16:ea:c9:2d:3a:
af:76:43:7b:17:59:28:fa:ec:88:7b:5f:cc:03:15:
13:22:49:05:c8:cc:e3:ab:40:9e:41:16:32:a7:08:
14:d5:f4:79:d4:d2:48:88:54:25:34:9d:80:72:4f:
ac:76:29:f5:64:62:d4:cc:38:d7:9e:ce:d5:81:b5:
4a:fa:92:37:a4:c3:bf:c7:9d:45:31:aa:19:11:3c:
24:06:cc:ef:5e:14:af:39:e1:86:6d:3d:19:0a:70:
f7:79:38:1a:75:15:90:65:76:39:13:3a:09:dc:f7:
8e:37:a6:61:08:da:cf:ce:a2:b2:56:ba:b6:57:3a:
83:27:55:fa:e9:c2:aa:da:c9:fb:a7:e9:c4:d6:ee:
47:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:02:BF:D2:32:C3:A1:C4:FE:02:42:9F:B9:57:E7:36:0F:70:6E:CA
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.174.0/24
Signature Algorithm: sha256WithRSAEncryption
69:35:b4:93:62:4f:aa:70:b8:2a:81:bf:7f:ac:68:00:65:cd:
e7:15:7b:24:c3:a0:a4:de:75:e8:0e:73:10:49:22:64:eb:23:
5b:e9:05:b8:43:ca:68:2c:71:0b:67:3d:b5:04:45:d9:85:46:
44:31:31:6d:d9:41:7c:9c:42:4b:c6:09:46:f1:fc:00:1e:c1:
02:f4:66:fe:49:40:e1:ec:e5:77:44:5c:ec:46:d0:db:a8:da:
35:7f:88:22:7a:a2:95:0c:5d:ab:2a:03:5c:ea:a6:86:69:0b:
9f:11:76:81:20:8f:bb:26:c8:4c:bc:01:3d:78:83:48:d2:88:
a2:8b:6f:eb:1f:df:09:57:ae:b0:43:27:bf:fd:18:b5:bb:92:
e7:62:61:77:9a:15:b1:de:86:77:c9:f6:58:15:5c:b1:78:cd:
86:9c:55:f0:ae:c9:2c:99:28:d5:2b:79:49:12:ca:c7:09:03:
86:d6:f8:4e:99:3a:72:45:bc:35:ba:25:49:03:80:5d:90:6c:
0c:b4:a7:24:c6:54:9d:4b:9e:63:04:49:19:de:22:21:0d:7d:
9c:92:b6:2d:35:ac:75:9c:e4:85:80:39:06:ae:86:cc:0f:93:
2a:6e:25:a8:5b:ee:cb:e6:45:f2:77:9a:a9:c4:a9:62:fd:57:
ba:45:57:11
-----BEGIN CERTIFICATE-----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Generated at Sun Jun 30 14:05:46 2024 by rpki-client on console-fra.rpki-client.org