Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137352e302f32342d3234203d3e20323134383238.roa
File: 39352e3136392e3137352e302f32342d3234203d3e20323134383238.roa (raw, json)
Hash identifier: V9Nty55XWMw62j++oglsPRV4RIpNI7qpi2CEtFEbvv8=
Subject key identifier: 38:21:AF:2E:AC:DA:5A:B3:8D:58:DC:BD:AA:F2:F4:1C:09:7B:F1:98
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 70E5B0BBE731B64731EAF496F861730305557038
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137352e302f32342d3234203d3e20323134383238.roa
Signing time: Mon 24 Feb 2025 22:09:35 +0000
ROA not before: Mon 24 Feb 2025 22:04:35 +0000
ROA not after: Mon 23 Feb 2026 22:09:35 +0000
asID: 214828
IP address blocks: 95.169.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Mar 2025 11:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:e5:b0:bb:e7:31:b6:47:31:ea:f4:96:f8:61:73:03:05:55:70:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Feb 24 22:04:35 2025 GMT
Not After : Feb 23 22:09:35 2026 GMT
Subject: CN=3821AF2EACDA5AB38D58DCBDAAF2F41C097BF198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:16:e1:b9:e1:61:6f:47:7c:16:53:c3:a6:d7:
d7:1f:08:73:54:55:2c:10:54:6f:0c:43:c3:a9:7e:
c2:99:49:cf:f0:5e:52:0c:47:5f:9d:44:ad:6d:d4:
63:49:31:10:b8:cd:90:e7:83:8a:79:e4:e4:65:61:
f5:d9:66:f6:18:4b:e8:98:fe:54:09:4e:a9:10:f3:
e4:18:88:17:5b:2b:f8:d6:c0:54:2e:6d:ca:c0:cb:
4f:a3:09:bd:9a:47:9c:f0:35:7f:b6:ca:92:b0:39:
fc:e4:2f:9e:a8:86:84:0c:52:88:ec:dd:40:c8:69:
11:8f:ad:ca:ee:53:c5:67:8c:12:a2:3c:cf:95:de:
a9:fd:c1:c8:e5:e4:00:14:62:53:60:9a:b9:6c:32:
48:e2:6b:8a:a6:be:36:15:1f:d8:ce:4e:18:3c:44:
8a:4a:6a:5a:d6:d8:5b:c2:d5:98:75:95:15:58:40:
18:1d:ad:3d:70:86:60:ee:0d:96:37:c4:fe:0a:60:
34:13:39:4f:57:dc:c9:cd:7c:8b:0a:ca:7e:e6:54:
7f:75:7f:c2:e8:ca:69:c0:5f:2b:5d:d2:b0:b3:77:
5f:89:ea:92:6c:c0:37:24:ae:05:3e:df:a5:ab:b3:
f3:6d:26:30:14:b1:05:8a:a5:3d:7d:35:95:59:39:
6d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:21:AF:2E:AC:DA:5A:B3:8D:58:DC:BD:AA:F2:F4:1C:09:7B:F1:98
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137352e302f32342d3234203d3e20323134383238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:d7:53:a1:60:f0:a8:c8:f7:80:e1:9e:75:99:59:77:cd:1e:
96:fb:5b:a7:13:e2:28:13:36:0f:05:d5:47:f7:81:96:1a:03:
02:07:82:11:1e:bb:c6:79:53:a7:75:48:78:21:7c:44:1f:55:
89:d4:6b:4b:8e:d8:0e:67:f8:ff:74:3c:0f:3f:2e:5c:1e:41:
87:98:c9:96:1b:82:f0:13:98:83:71:1b:30:73:36:35:38:20:
4c:d5:be:69:81:d4:e2:38:91:f5:66:d1:20:39:df:d9:24:30:
1b:90:46:61:57:3a:eb:0d:41:44:ad:5d:48:eb:87:35:2a:57:
f4:95:fa:15:b9:3e:df:dd:f0:8b:25:88:8e:6d:a1:18:05:4f:
f0:4c:90:a7:cb:6e:3d:f2:6f:c4:01:5c:87:05:a0:fc:cb:8b:
b2:57:90:d1:08:62:85:bc:47:45:ae:77:9f:97:71:81:c5:51:
22:87:78:67:26:9c:a2:ec:ac:7c:bc:a6:95:73:36:36:72:03:
55:3e:78:f1:3e:64:6b:4e:c1:02:a1:c6:b8:05:93:ef:c4:e6:
90:03:f9:4c:57:31:56:92:08:f2:e6:29:73:c8:c4:b1:ef:db:
17:19:f1:c8:55:c3:6f:c2:33:d6:a6:f5:bf:c5:e1:43:7a:40:
a7:01:f4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:10:55 2025 by rpki-client