Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137372e302f32342d3234203d3e20323135303836.roa
File: 39352e3136392e3137372e302f32342d3234203d3e20323135303836.roa (raw, json)
Hash identifier: N3wpTBxrHv5qqe8FQ+iTymX8IfEQ1tbDO9X8M+CUZig=
Subject key identifier: 7C:97:10:F6:BF:9E:85:AA:5D:C1:51:F1:93:6D:DB:D9:C3:E3:1A:D6
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 662EF46A999034A1A27E7DE4E733A5662D725E9F
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137372e302f32342d3234203d3e20323135303836.roa
Signing time: Sat 15 Jun 2024 21:27:45 +0000
ROA not before: Sat 15 Jun 2024 21:22:45 +0000
ROA not after: Sat 14 Jun 2025 21:27:45 +0000
asID: 215086
IP address blocks: 95.169.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jul 2024 08:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:2e:f4:6a:99:90:34:a1:a2:7e:7d:e4:e7:33:a5:66:2d:72:5e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Jun 15 21:22:45 2024 GMT
Not After : Jun 14 21:27:45 2025 GMT
Subject: CN=7C9710F6BF9E85AA5DC151F1936DDBD9C3E31AD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:48:f6:9d:c1:5f:2f:43:91:5e:f4:9f:7a:91:
ed:06:f1:c5:9f:bc:37:67:3c:8c:e9:f5:b3:9f:ae:
13:29:9a:5f:ad:b6:34:e3:bd:38:fe:47:40:9d:dd:
39:a0:41:8f:4e:db:65:ec:23:04:63:9a:63:f2:d7:
5e:49:a8:36:4b:0d:7b:4b:8d:7a:03:40:fb:47:23:
32:60:70:05:66:05:2e:eb:16:da:0f:4c:c8:79:ef:
fd:0a:24:44:67:56:2d:b4:82:45:48:de:b2:50:3c:
0b:99:1f:3c:7a:bb:ed:2f:ff:2f:a0:43:d1:87:5f:
da:f7:b2:3e:39:98:5a:95:d3:a4:e8:e1:b6:13:a1:
e4:c6:e7:4a:7b:9f:4f:90:d8:5e:a6:78:8a:4e:d0:
9a:e9:03:71:07:f5:2a:d5:71:30:3a:80:39:c2:81:
1e:94:60:20:f7:5c:6b:c1:31:ed:4b:ed:22:ee:36:
90:45:31:bc:f9:37:89:8b:ac:d3:ef:fd:d2:10:10:
6d:09:47:4e:86:7f:be:c5:87:ee:aa:d4:1c:bf:95:
19:02:84:57:a9:70:a2:1d:6b:cc:e0:3b:cb:6e:d9:
16:ed:e4:02:05:8d:27:b5:ce:b7:9c:af:18:ea:5b:
05:b4:cd:e4:49:9f:10:b9:4a:ce:0c:02:84:03:d0:
5e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:97:10:F6:BF:9E:85:AA:5D:C1:51:F1:93:6D:DB:D9:C3:E3:1A:D6
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137372e302f32342d3234203d3e20323135303836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.177.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:79:5b:5a:41:c1:e4:b0:22:0e:bd:2a:db:48:9c:91:5b:64:
6c:a1:53:95:11:35:e6:71:83:7a:6a:ce:62:a9:7a:1a:ca:8c:
c4:47:d6:05:dc:bf:00:10:20:c3:d6:a7:bc:56:6a:6c:60:7d:
12:40:18:ac:c1:4f:97:a1:52:1c:12:da:1f:e7:3d:2a:b6:3c:
05:2e:de:1a:6b:1a:9c:68:4b:81:17:b7:13:d8:f2:5a:31:f6:
8f:65:73:03:7f:55:59:76:ab:81:a3:1f:90:67:bf:e4:25:21:
76:4d:a3:e0:3d:33:07:08:c5:31:bf:06:0f:82:50:60:ba:36:
88:76:01:9d:06:6b:7b:de:ac:b4:b6:6c:a5:e3:cb:b9:06:f5:
cb:e5:25:28:3d:49:7c:39:34:de:6b:a3:93:15:72:ed:73:1d:
fc:c8:79:47:8e:85:22:89:bd:41:f2:43:51:80:d2:e4:4d:05:
43:8e:6c:b4:bd:21:4e:ea:cc:15:c6:2e:f7:3f:3d:7c:0c:36:
93:db:a8:de:01:aa:f8:fb:81:d6:d6:69:6f:65:00:e6:bc:8c:
9b:f9:9a:ee:fc:25:28:13:b8:bf:b4:94:e7:bd:af:52:b2:a8:
60:45:d6:34:8b:57:7a:55:86:0c:75:1e:7d:e5:1e:05:5e:1c:
f0:ec:4a:b4
-----BEGIN CERTIFICATE-----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Generated at Mon Jul 22 10:50:31 2024 by rpki-client on console-fra.rpki-client.org