Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137352e302f32342d3234203d3e20383334.roa
File: 39352e3136392e3137352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: i4mlKseep3mPRDrgc2OFo0ISoM90BqSM/UI4gY4Ie48=
Subject key identifier: A9:A9:B3:7F:16:68:11:1B:EB:76:92:15:38:D2:7C:34:A1:89:80:67
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 5D9F168E3778280845B50B0B0B3C6252F23E64BA
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137352e302f32342d3234203d3e20383334.roa
Signing time: Fri 31 May 2024 09:35:30 +0000
ROA not before: Fri 31 May 2024 09:30:30 +0000
ROA not after: Fri 30 May 2025 09:35:30 +0000
asID: 834
IP address blocks: 95.169.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jun 2024 11:44:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:9f:16:8e:37:78:28:08:45:b5:0b:0b:0b:3c:62:52:f2:3e:64:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: May 31 09:30:30 2024 GMT
Not After : May 30 09:35:30 2025 GMT
Subject: CN=A9A9B37F1668111BEB76921538D27C34A1898067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:db:84:f7:17:f5:aa:c7:11:f0:5f:72:51:26:
ec:0c:23:58:b0:a5:b4:e6:9d:9a:e0:68:30:a2:81:
c1:44:cb:e4:94:d7:9c:90:ac:84:cc:65:bf:4e:54:
cb:fa:ad:65:7c:63:69:5f:a1:97:31:04:cb:3b:72:
bf:43:8c:ce:ab:83:80:fa:a6:2e:50:e1:00:7d:5d:
ab:d9:e1:8d:87:2c:bb:32:3e:34:b7:e6:7b:8a:db:
d3:ad:94:4a:76:8c:e4:03:71:5c:e2:d5:4e:0b:d0:
6a:3b:fc:7c:c6:cf:20:0f:41:2c:8b:8b:b2:c9:5f:
e0:75:ed:4f:50:f4:50:8f:72:bc:92:74:0a:2c:d4:
f1:e8:69:a0:ca:30:b0:1a:35:19:b6:26:40:b7:3e:
2f:87:92:fe:b8:8a:c9:1f:26:b0:30:fe:25:2d:b4:
94:9d:7f:f4:31:6f:94:69:5f:c7:2e:04:36:af:f8:
f9:30:f6:22:44:32:2c:7d:50:72:0f:50:56:cf:c1:
9c:66:7f:78:29:15:eb:de:7b:b0:3e:8b:82:4a:2e:
68:ea:75:55:a6:0c:e5:fe:6a:5d:5b:42:62:94:30:
2c:e1:63:ca:ff:7d:ea:e4:30:89:75:1a:dc:22:d3:
ee:7a:7e:dc:56:9e:a3:36:94:12:5a:61:0e:12:b1:
71:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A9:B3:7F:16:68:11:1B:EB:76:92:15:38:D2:7C:34:A1:89:80:67
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
25:02:38:69:6f:bf:33:80:5e:42:bc:3c:75:81:e5:12:a8:76:
06:b2:31:cc:80:e2:bd:15:b0:b5:fd:ec:60:c7:a0:ab:5d:e0:
0c:1d:ac:b1:0f:d9:38:70:18:8d:0b:cd:a8:06:52:fa:e5:55:
19:44:54:85:79:d1:16:e1:ab:15:b0:cf:6a:c5:07:a6:7f:94:
0e:41:f7:c4:ab:78:d0:70:1d:bf:1b:c2:d8:19:c6:a8:a5:43:
46:e0:97:57:aa:1c:72:e2:f8:6d:b2:75:db:18:67:12:40:b7:
41:b4:6e:d9:4b:54:97:66:77:77:47:57:fe:f4:90:64:06:31:
66:08:b3:d2:2f:ae:13:b0:b8:a4:b4:94:71:14:4e:d5:fa:7c:
c3:39:57:a2:37:8c:f0:2d:42:27:5a:2f:78:bd:d1:2f:22:83:
a0:5e:0f:e3:f7:32:22:96:25:f2:68:85:9c:30:11:90:6d:11:
e8:c7:19:c2:62:89:36:37:2d:8a:df:1b:42:41:37:be:6f:bd:
17:82:d2:57:46:69:4e:ce:62:4d:a1:21:16:33:94:4b:94:84:
f4:c0:82:d8:8c:de:d7:ed:ca:56:9a:af:1f:74:56:c7:e5:fc:
b9:e3:a5:b2:de:53:50:4f:d8:87:0a:83:68:80:c1:c0:80:79:
e2:a8:98:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 14:02:08 2024 by rpki-client on console-fra.rpki-client.org