Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137392e302f32342d3234203d3e20383334.roa
File: 39352e3136392e3137392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: vncizPYoJQIoUe/uVbfy2lgRlpVW9qgZrHyDYUSX/HA=
Subject key identifier: E4:2E:9A:F5:0A:BF:AE:FB:EC:EE:F6:24:FB:63:C1:A4:FB:1D:9B:3A
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 21019BCE52CE7E79801123CA00A3C955D43136E3
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137392e302f32342d3234203d3e20383334.roa
Signing time: Thu 11 Jul 2024 09:27:09 +0000
ROA not before: Thu 11 Jul 2024 09:22:09 +0000
ROA not after: Thu 10 Jul 2025 09:27:09 +0000
asID: 834
IP address blocks: 95.169.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jul 2024 09:46:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:01:9b:ce:52:ce:7e:79:80:11:23:ca:00:a3:c9:55:d4:31:36:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Jul 11 09:22:09 2024 GMT
Not After : Jul 10 09:27:09 2025 GMT
Subject: CN=E42E9AF50ABFAEFBECEEF624FB63C1A4FB1D9B3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b1:8e:bc:6a:1b:d4:ab:5b:0b:2e:12:85:4b:
40:11:69:49:e6:c2:78:b0:c4:30:ac:4f:19:67:bd:
47:b0:56:71:7c:b4:a6:e6:2d:73:e3:af:3d:45:68:
3c:32:ae:e4:d9:bf:d6:9b:2a:80:ef:73:e1:cb:f3:
27:b7:ce:17:a7:c8:c1:24:7f:37:d7:fe:c9:d5:29:
59:7f:85:f9:9b:80:6a:85:2a:00:72:8f:ae:bd:d4:
fe:a7:8f:6a:46:ff:29:2d:8c:de:4d:ce:41:f9:45:
a9:ee:07:39:86:45:80:19:44:be:32:fd:a4:1c:6f:
b9:15:bd:31:1b:6d:4b:92:ef:eb:86:42:88:b9:d1:
fb:f0:84:b7:83:05:5a:42:9a:b6:19:19:80:ce:de:
24:6c:c6:a4:0a:95:2d:9e:78:cc:4a:15:99:e8:4d:
83:04:05:24:53:c3:55:f5:c8:e9:ed:35:c7:8f:8c:
97:f7:68:05:70:af:0d:e1:d8:12:cf:12:ac:d8:fe:
ed:a5:d1:d8:83:d9:2f:cf:18:27:8c:40:40:8b:44:
31:07:4c:b7:13:d6:34:4d:a1:aa:bf:5f:fd:eb:3d:
ef:b5:4e:e0:88:37:2e:d9:87:06:04:a8:8c:01:9c:
eb:81:36:01:cb:fe:d9:cd:85:e7:5f:80:87:8d:db:
e4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2E:9A:F5:0A:BF:AE:FB:EC:EE:F6:24:FB:63:C1:A4:FB:1D:9B:3A
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.179.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:14:d7:79:0a:7d:49:a5:b0:be:68:f7:ea:8f:5d:16:90:3e:
95:f9:66:ce:36:04:2a:f8:9e:4f:c2:de:bc:79:c5:21:11:28:
1d:2e:a6:85:27:17:b8:e7:55:87:b4:f8:36:b8:ed:71:8e:93:
62:d9:e7:5e:70:61:84:5b:d0:7d:a9:92:ce:46:9a:3e:c8:06:
cf:3d:7c:c1:b4:4c:f9:98:56:c5:d6:49:d2:5a:3d:3a:a0:bb:
16:2d:99:04:42:3b:33:64:58:6d:26:0b:e2:12:d2:16:5c:e0:
3a:32:a0:92:4c:b8:15:d4:a4:47:60:ae:fe:31:47:b2:ab:c7:
2d:90:49:b0:66:52:81:c5:59:d3:9f:e3:c4:d1:8e:16:a3:e8:
e3:31:7d:f6:89:26:76:e4:d8:cc:87:e7:25:42:d6:21:76:da:
b2:17:7d:f3:9b:02:e1:ef:f3:35:6f:2a:dc:72:70:03:f1:33:
31:2e:1f:68:9a:29:12:7b:46:46:af:65:38:10:40:fb:49:8c:
3d:99:1e:84:2a:2c:0e:f7:49:6f:16:83:c2:92:1f:f5:8a:93:
d4:8c:df:d9:db:38:86:17:3d:9c:f4:0a:7f:1f:31:28:07:c9:
9f:2a:02:e9:41:42:e8:69:91:9d:27:b9:e9:f3:ea:c7:54:e9:
da:ed:4f:82
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUIQGbzlLOfnmAESPKAKPJVdQxNuMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWU1NzY5OTYzODhlOTRiOGM3YWIyMGVmZmIyM2JkMTFi
ZWNiNDEwODAeFw0yNDA3MTEwOTIyMDlaFw0yNTA3MTAwOTI3MDlaMDMxMTAvBgNV
BAMTKEU0MkU5QUY1MEFCRkFFRkJFQ0VFRjYyNEZCNjNDMUE0RkIxRDlCM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLsY68ahvUq1sLLhKFS0ARaUnm
wniwxDCsTxlnvUewVnF8tKbmLXPjrz1FaDwyruTZv9abKoDvc+HL8ye3zhenyMEk
fzfX/snVKVl/hfmbgGqFKgByj6691P6nj2pG/yktjN5NzkH5RanuBzmGRYAZRL4y
/aQcb7kVvTEbbUuS7+uGQoi50fvwhLeDBVpCmrYZGYDO3iRsxqQKlS2eeMxKFZno
TYMEBSRTw1X1yOntNcePjJf3aAVwrw3h2BLPEqzY/u2l0diD2S/PGCeMQECLRDEH
TLcT1jRNoaq/X/3rPe+1TuCINy7ZhwYEqIwBnOuBNgHL/tnNhedfgIeN2+QvAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQU5C6a9Qq/rvvs7vYk+2PBpPsdmzowHwYDVR0j
BBgwFoAUnldpljiOlLjHqyDv+yO9Eb7LQQgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAtMmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2
MTIzLzAvOUU1NzY5OTYzODhFOTRCOEM3QUIyMEVGRkIyM0JEMTFCRUNCNDEwOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25sZHBsamlPbExqSHF5RHYteU85RWI3
TFFRZy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAt
MmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2MTIzLzAvMzkzNTJlMzEzNjM5MmUzMTM3
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABfqbMw
DQYJKoZIhvcNAQELBQADggEBAKUU13kKfUmlsL5o9+qPXRaQPpX5Zs42BCr4nk/C
3rx5xSERKB0upoUnF7jnVYe0+Da47XGOk2LZ515wYYRb0H2pks5Gmj7IBs89fMG0
TPmYVsXWSdJaPTqguxYtmQRCOzNkWG0mC+IS0hZc4DoyoJJMuBXUpEdgrv4xR7Kr
xy2QSbBmUoHFWdOf48TRjhaj6OMxffaJJnbk2MyH5yVC1iF22rIXffObAuHv8zVv
KtxycAPxMzEuH2iaKRJ7RkavZTgQQPtJjD2ZHoQqLA73SW8Wg8KSH/WKk9SM39nb
OIYXPZz0Cn8fMSgHyZ8qAulBQuhpkZ0nuenz6sdU6drtT4I=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:41:07 2025 by rpki-client