Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137372e302f32342d3234203d3e20323135303531.roa
File: 39352e3136392e3137372e302f32342d3234203d3e20323135303531.roa (raw, json)
Hash identifier: 4X3Q3quTNtA6ulKCfCkP7+EQeGtgZ+aLFLmhMWa9t08=
Subject key identifier: BA:07:9D:67:73:AB:CA:CC:96:D6:88:33:81:A6:AE:CE:59:1F:AD:63
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 29E00DC3FE0FC41E4FBB109A7BD894732329D6A6
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137372e302f32342d3234203d3e20323135303531.roa
Signing time: Tue 11 Jun 2024 10:16:47 +0000
ROA not before: Tue 11 Jun 2024 10:11:47 +0000
ROA not after: Tue 10 Jun 2025 10:16:47 +0000
asID: 215051
IP address blocks: 95.169.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Jun 2024 21:27:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:e0:0d:c3:fe:0f:c4:1e:4f:bb:10:9a:7b:d8:94:73:23:29:d6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Jun 11 10:11:47 2024 GMT
Not After : Jun 10 10:16:47 2025 GMT
Subject: CN=BA079D6773ABCACC96D6883381A6AECE591FAD63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9c:a1:e2:25:bd:22:56:33:94:d0:2e:33:91:
56:ca:bd:8f:1c:42:8d:95:80:58:54:99:b5:04:14:
35:89:d0:8b:de:ec:27:bf:05:df:b6:3c:81:ae:93:
77:55:5a:7b:7a:84:f5:f2:35:a5:3f:97:6f:70:7e:
a2:e5:b0:da:cb:49:d5:c6:6e:c3:8e:07:e5:e4:b0:
26:94:42:08:ad:66:86:f7:b6:f7:37:95:22:fd:51:
4f:ba:e0:4a:6e:7b:7f:34:c4:df:81:c8:57:c2:53:
a1:f4:af:1d:53:73:2a:aa:da:c0:7d:d8:8d:31:32:
9e:bb:8b:00:43:d0:33:f9:8b:b1:1e:88:62:4c:82:
96:8f:d6:fa:53:fa:54:b8:9f:0f:3e:0e:02:e4:31:
11:15:66:e3:9d:36:fa:30:53:2c:e2:b4:15:ce:95:
9e:b8:39:c8:71:36:d3:cc:4d:8e:30:be:19:7b:08:
ba:5c:2e:bd:e9:d6:b8:30:66:76:4d:67:5d:e7:64:
94:d7:a6:9b:e8:ea:86:f7:ca:53:49:dc:19:e7:c9:
bd:ba:8f:54:64:99:60:50:b5:80:d1:83:3e:b7:d5:
dd:c5:e4:b5:e3:91:a0:f6:05:79:41:5f:ed:6a:cd:
03:cb:d0:9c:8a:97:06:d0:f3:19:27:a0:1f:2e:42:
d4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:07:9D:67:73:AB:CA:CC:96:D6:88:33:81:A6:AE:CE:59:1F:AD:63
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137372e302f32342d3234203d3e20323135303531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.177.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:8c:be:1a:42:a8:01:30:43:82:87:4d:5b:18:35:62:9c:c5:
39:ea:fa:56:49:00:73:d3:d7:db:e0:79:a1:4b:e7:60:36:e5:
2a:fa:a8:06:a7:5a:c2:a6:9b:8e:99:f1:17:ef:12:36:15:32:
c2:2a:89:a9:00:b7:21:05:21:49:b9:55:cd:28:dc:fd:00:57:
6e:07:c8:f9:82:50:c6:79:fd:4e:7e:38:ed:eb:3a:f4:c7:49:
36:f6:da:a0:a6:f8:73:c4:7c:64:ba:1d:e0:38:b0:85:35:08:
1c:a6:4c:3f:23:db:e0:db:e3:d0:e5:e3:cc:75:ad:c9:ba:70:
05:c4:b5:e7:ca:43:7f:9c:6e:69:b4:7c:61:44:00:f7:76:e1:
51:81:6f:2a:e4:bd:67:04:5c:0d:f3:4d:19:7c:a0:4e:3d:b5:
9d:c8:eb:f2:b6:bd:77:d9:44:ee:c9:e9:e5:5b:05:2d:90:63:
df:7f:ed:b5:78:8a:88:83:bb:86:2a:f2:64:f5:59:d5:29:b5:
89:9a:d6:dd:03:54:14:86:90:0f:f3:1c:c9:9c:ff:06:c6:0d:
93:3c:d9:40:93:aa:05:36:76:5a:fe:99:d6:61:ba:b8:4a:f1:
cc:28:14:d6:b3:95:a7:ff:63:92:71:ca:03:d9:2f:55:9f:8f:
5f:00:12:db
-----BEGIN CERTIFICATE-----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Generated at Sat Jun 15 22:11:58 2024 by rpki-client on console-fra.rpki-client.org