Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137392e302f32342d3234203d3e20343030383636.roa
File: 39352e3136392e3137392e302f32342d3234203d3e20343030383636.roa (raw, json)
Hash identifier: lDy+7ROkVsfR7kKwpbqZF3N0V/qUb+4g3Cofye+8GEA=
Subject key identifier: B3:F2:D0:3A:72:C4:92:57:E1:64:1D:92:77:B3:28:9A:83:6E:F0:BA
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 46A2201BFDB088761CCB90225934EED457ED3A0B
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137392e302f32342d3234203d3e20343030383636.roa
Signing time: Tue 11 Jun 2024 09:54:32 +0000
ROA not before: Tue 11 Jun 2024 09:49:32 +0000
ROA not after: Tue 10 Jun 2025 09:54:32 +0000
asID: 400866
IP address blocks: 95.169.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jul 2024 00:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:a2:20:1b:fd:b0:88:76:1c:cb:90:22:59:34:ee:d4:57:ed:3a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Jun 11 09:49:32 2024 GMT
Not After : Jun 10 09:54:32 2025 GMT
Subject: CN=B3F2D03A72C49257E1641D9277B3289A836EF0BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:de:e9:4e:49:ab:db:a1:1f:c4:8b:36:1c:2d:
21:a7:60:58:cf:8e:ae:55:d1:a3:04:fb:96:2f:2d:
b9:49:d8:2f:94:be:07:a2:50:2e:42:15:20:03:ca:
e3:2e:d5:eb:78:67:b1:d6:61:9a:7c:f1:7f:2a:9d:
10:5c:ad:88:27:d5:ec:d2:e0:9d:f5:69:34:02:3e:
09:9e:66:66:df:a9:48:29:bc:51:e3:14:36:26:45:
c9:ee:67:bf:f1:af:2c:9d:e3:42:0a:d4:b8:22:31:
bb:5b:c0:bc:de:dc:71:cc:b8:ef:52:74:8d:22:65:
67:f5:d5:a8:4c:b8:6b:5e:7f:9f:4a:16:3a:a1:f0:
eb:96:e2:62:3d:70:cb:aa:da:a0:3e:78:b3:69:77:
1e:04:33:37:85:f6:7c:f0:c5:54:0e:08:ba:20:8e:
20:f3:57:cd:bf:96:04:b9:29:28:81:6f:f8:2e:a1:
a9:be:63:07:96:07:98:c1:3b:dd:a2:e9:e2:d7:fe:
29:08:d2:09:3c:11:8a:69:1e:9a:01:ff:98:8b:7c:
cd:58:23:37:56:99:9f:8d:5f:82:80:ab:d7:73:04:
a7:26:81:7b:89:db:fb:80:e8:77:16:2b:fc:ea:9e:
91:85:a5:11:17:06:34:bd:5f:2e:a0:e7:61:de:36:
7f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F2:D0:3A:72:C4:92:57:E1:64:1D:92:77:B3:28:9A:83:6E:F0:BA
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137392e302f32342d3234203d3e20343030383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.179.0/24
Signature Algorithm: sha256WithRSAEncryption
47:a2:90:8b:f4:ee:40:f0:c0:31:71:67:e8:1f:97:7c:27:7f:
70:ee:d9:36:78:aa:da:1a:25:32:2c:c8:d0:d0:36:8d:aa:70:
01:ab:66:1d:9f:d0:22:fb:d8:13:03:13:4a:b4:68:84:2a:8c:
0b:0e:3a:51:f6:43:76:21:41:75:ff:67:87:6d:b3:32:d3:40:
e4:6a:70:4c:4c:f1:09:3c:96:c3:8b:df:66:6d:55:01:c5:04:
df:8f:c4:17:22:5b:bb:ce:62:64:7a:7a:74:36:53:eb:1c:92:
1c:6e:18:88:57:3d:90:eb:c9:9d:73:e1:bd:73:4f:10:eb:35:
88:12:86:56:44:26:2e:30:fc:9f:fa:0a:24:98:7f:b6:67:d1:
dc:dc:6c:73:c2:9d:e8:fd:d2:19:a1:18:3f:e5:fb:4a:05:bc:
6b:99:02:43:99:a6:0d:c0:d4:d5:49:23:a4:b9:7f:91:a5:45:
2e:d2:88:10:6e:4e:22:62:9e:c0:4a:bb:98:1d:d4:fd:6a:b2:
37:3c:15:11:5e:80:70:ce:56:27:25:a8:91:4a:cd:7c:c1:89:
76:78:93:49:b7:83:1c:44:3c:26:9e:a3:82:7a:5e:50:3e:b2:
3e:05:2d:39:38:0a:d8:37:28:bc:7e:a4:1b:0f:6a:b0:c8:71:
f7:6f:6c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 11 01:30:08 2024 by rpki-client on console-ams.rpki-client.org