Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137382e302f32342d3234203d3e203631333137.roa
File: 39352e3136392e3137382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: s57hKKC7TV6OCtS2JkqvcFwcKGAI4CTTvRoGXkgEjBs=
Subject key identifier: 1B:33:0D:E3:DC:EB:77:AD:8E:1A:F9:9C:26:50:05:AA:96:F2:35:FD
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 6EE04B1782E8235EDB5D077347C56A7F23D8253C
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137382e302f32342d3234203d3e203631333137.roa
Signing time: Mon 17 Jun 2024 14:41:38 +0000
ROA not before: Mon 17 Jun 2024 14:36:38 +0000
ROA not after: Mon 16 Jun 2025 14:41:38 +0000
asID: 61317
IP address blocks: 95.169.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Jun 2024 10:08:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:e0:4b:17:82:e8:23:5e:db:5d:07:73:47:c5:6a:7f:23:d8:25:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Jun 17 14:36:38 2024 GMT
Not After : Jun 16 14:41:38 2025 GMT
Subject: CN=1B330DE3DCEB77AD8E1AF99C265005AA96F235FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9d:d7:62:64:25:27:41:7b:8e:90:72:e9:ca:
d2:37:df:ac:df:c5:80:19:e1:43:51:95:75:53:d8:
5f:52:a2:ee:5a:44:d3:53:20:ef:33:a8:69:b7:f0:
3d:2c:12:17:a6:ac:8e:48:76:0b:9c:51:ee:e2:26:
ee:bf:7b:d9:2b:03:cb:db:f5:67:75:e7:97:33:9b:
a3:a3:03:91:b3:85:0c:6c:d2:93:64:8e:a3:8f:39:
37:5e:df:b2:6a:a4:de:f3:2b:3a:15:76:ab:1b:83:
de:a2:99:fb:ef:00:60:7d:9c:ee:aa:9c:ed:09:7d:
58:03:5d:c9:28:8c:74:f1:5d:bf:66:a6:d7:14:11:
d2:de:15:ba:3b:59:f1:c7:21:3b:98:f6:c3:50:76:
18:86:6d:d9:cf:2f:26:40:5a:2f:a0:bc:8c:eb:ad:
b9:cd:47:3e:08:e4:1f:76:30:6e:c0:57:48:14:84:
81:77:d7:ca:b8:5f:72:10:65:df:ee:03:17:16:67:
c9:4a:53:69:e0:0b:12:14:86:25:6e:eb:0a:99:ed:
22:9b:f5:0a:eb:27:9e:23:1f:2b:b9:67:fe:f7:96:
f8:34:98:dd:c4:77:8f:fa:99:88:fd:01:0f:6a:af:
57:53:01:9e:46:72:2e:ea:2f:e9:82:68:78:99:4e:
86:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:33:0D:E3:DC:EB:77:AD:8E:1A:F9:9C:26:50:05:AA:96:F2:35:FD
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137382e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.178.0/24
Signature Algorithm: sha256WithRSAEncryption
77:0b:1c:56:81:ef:14:2e:7e:62:88:33:a7:0b:f9:4e:82:ac:
f2:11:09:73:bb:97:c4:8b:85:05:0f:d3:54:91:32:8d:64:3b:
e7:58:eb:fb:8f:38:27:09:ee:07:0c:8e:c3:39:bd:fa:c4:80:
8f:5c:39:8a:d9:81:b0:78:1b:6b:9f:59:0f:0f:22:03:73:9e:
f4:c5:6f:02:4c:da:9a:91:7b:0c:01:c3:36:68:32:38:2c:a6:
eb:e4:68:3d:c1:6b:1a:c4:67:f5:e0:8c:5c:ef:37:d7:88:0f:
1f:e9:97:ac:c6:fd:d0:ee:3a:e2:a6:35:e4:d2:b5:41:91:79:
36:1b:0a:fb:2a:29:42:81:1f:6d:5f:6f:6f:e8:2e:ae:f2:43:
c9:f7:4c:d7:ae:f4:50:71:02:0d:dd:93:18:4a:52:74:2b:8f:
b1:73:b5:26:e5:77:ce:37:f5:0a:f6:90:2a:75:a4:c8:f0:88:
81:8b:42:35:62:9d:34:62:0c:7f:5f:21:0d:59:69:7d:f1:de:
98:06:96:eb:ce:c1:93:23:14:c7:62:1d:b2:81:fb:b9:54:40:
5b:2f:36:ca:36:0c:aa:a5:67:09:ef:cf:69:84:31:e3:4e:de:
ad:5f:dc:d8:42:89:59:71:3b:0e:fc:6e:4a:08:a4:ef:02:24:
c2:12:5f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 13:46:35 2024 by rpki-client on console-fra.rpki-client.org