Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3138302e302f32342d3234203d3e20333936333536.roa
File: 39352e3136392e3138302e302f32342d3234203d3e20333936333536.roa (raw, json)
Hash identifier: eSPS7q30tjHfSrxsgY4j3HlPOrIwfaPfvnn92m7wuLU=
Subject key identifier: 6D:43:52:A3:A4:96:6B:B2:0D:36:87:01:71:03:29:F0:B1:99:46:1F
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 136EC4F0F6BD52652D8C4CAE06CC0865CA71E58A
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3138302e302f32342d3234203d3e20333936333536.roa
Signing time: Fri 16 Aug 2024 06:14:31 +0000
ROA not before: Fri 16 Aug 2024 06:09:31 +0000
ROA not after: Fri 15 Aug 2025 06:14:31 +0000
asID: 396356
IP address blocks: 95.169.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 Aug 2024 05:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:6e:c4:f0:f6:bd:52:65:2d:8c:4c:ae:06:cc:08:65:ca:71:e5:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Aug 16 06:09:31 2024 GMT
Not After : Aug 15 06:14:31 2025 GMT
Subject: CN=6D4352A3A4966BB20D368701710329F0B199461F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:83:80:3d:63:f1:5b:c2:e0:4e:f7:9a:d9:ea:
ec:9c:3d:70:62:52:c7:2b:f1:12:be:c8:a1:9e:d0:
2f:ff:18:1b:27:66:78:96:7f:2e:1e:73:24:63:f2:
d4:7d:0e:04:75:b8:24:2a:7c:d6:42:9e:98:e3:15:
92:7b:29:7f:97:a5:20:27:18:4c:27:56:3e:4f:de:
9c:bd:93:4a:7d:87:29:cf:34:f1:8b:33:c6:46:68:
ed:67:40:6f:7c:d3:dc:7c:84:3e:7f:b1:45:59:1d:
6c:5b:3f:53:f6:1f:06:80:77:80:0a:88:43:23:a1:
d5:3a:b5:25:6f:ed:dd:fe:74:b1:41:17:5f:9e:48:
1d:f1:13:a9:0d:9a:7f:13:bd:41:35:c9:ca:42:1e:
8c:1d:36:f9:01:cd:ed:af:a3:75:e8:33:ce:9c:da:
03:b2:d5:e7:ce:17:07:4c:9a:02:cb:57:95:0f:9d:
d0:5f:59:5a:34:7a:eb:b8:ee:cd:bc:c8:af:04:98:
8a:8a:d6:9e:91:02:24:b7:8d:1a:bc:43:6d:1f:ee:
e8:31:9c:0a:80:41:d8:be:3a:cd:ad:c7:00:35:d0:
cc:26:61:7a:80:c6:b8:ee:13:34:cd:b6:a9:27:99:
93:89:2f:93:17:53:e1:36:b0:93:34:43:f2:09:eb:
d3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:43:52:A3:A4:96:6B:B2:0D:36:87:01:71:03:29:F0:B1:99:46:1F
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3138302e302f32342d3234203d3e20333936333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.180.0/24
Signature Algorithm: sha256WithRSAEncryption
10:08:80:55:ae:da:0e:40:93:4f:ab:94:c6:3e:9a:9b:73:aa:
43:51:92:d9:96:10:ed:c1:c9:86:57:33:3a:ee:31:85:c7:7c:
38:1d:fc:32:96:f9:5a:a8:1e:53:51:b1:20:a0:dd:53:f1:74:
99:f4:a7:ff:67:c4:0a:4c:8d:a1:4d:5d:a9:db:70:9f:28:cc:
02:51:27:7b:80:07:e7:2d:43:b2:d4:b5:37:d9:ec:4d:26:c5:
5c:d8:5e:ca:6e:ee:ec:5c:18:5e:aa:04:84:e0:99:2a:e1:9f:
c9:6a:b4:d4:d8:d6:e0:7d:48:ec:14:b7:92:43:2b:b4:4f:4d:
da:65:34:ea:66:3c:28:ef:2a:43:2b:54:d4:46:4f:07:5d:4f:
5d:91:f2:8f:07:22:98:28:2a:95:0f:62:54:e9:e4:66:16:e0:
4f:f0:6d:b8:9b:cc:5b:6a:f7:24:bd:4c:3c:bc:6f:c1:73:1e:
4b:59:41:aa:0b:15:92:96:eb:de:28:1a:de:f7:fa:ca:00:3d:
63:97:cd:55:00:ca:8a:97:66:83:33:f4:4b:54:8c:6b:e3:bf:
40:fe:7e:6a:1c:60:3a:60:d1:d4:8a:2d:1c:c3:98:e9:a8:b5:
ec:46:06:0c:32:55:4c:45:a4:1a:09:95:bf:d2:71:89:ff:a1:
8b:88:9f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 07:51:13 2024 by rpki-client on console-ams.rpki-client.org