Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/13YHnhqCEEwJf1AslthF-3TETGk.roa
File: 13YHnhqCEEwJf1AslthF-3TETGk.roa (raw, json)
Hash identifier: sryefGplkIVOLVoxmGEGayXaJpc/V6PhzztGB8CbW0A=
Subject key identifier: D7:76:07:9E:1A:82:10:4C:09:7F:50:2C:96:D8:45:FB:74:C4:4C:69
Certificate issuer: /CN=29275327a5e85f3c8c14c984036f493feb59b016
Certificate serial: 01884D0C7F9844C624911A006DA3B54C197E
Authority key identifier: 29:27:53:27:A5:E8:5F:3C:8C:14:C9:84:03:6F:49:3F:EB:59:B0:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/13YHnhqCEEwJf1AslthF-3TETGk.roa
Signing time: Wed 24 May 2023 09:17:24 +0000
ROA not before: Wed 24 May 2023 09:17:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51055
IP address blocks: 194.33.13.0/24 maxlen: 24
185.62.156.0/22 maxlen: 22
46.17.160.0/21 maxlen: 21
193.34.186.0/23 maxlen: 23
2a00:5f00::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4d:0c:7f:98:44:c6:24:91:1a:00:6d:a3:b5:4c:19:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29275327a5e85f3c8c14c984036f493feb59b016
Validity
Not Before: May 24 09:17:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d776079e1a82104c097f502c96d845fb74c44c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:26:fb:03:05:8e:93:57:a7:55:08:2a:25:
2b:63:c6:fe:bf:a0:f2:81:48:4d:fe:50:37:01:60:
ee:cd:b7:31:7a:ab:d1:f4:a0:74:5a:53:a7:83:aa:
14:e5:6a:9f:20:55:c7:94:46:5d:80:36:26:95:ad:
e0:7a:72:d9:1f:69:d1:cd:11:02:7c:15:2c:40:60:
34:50:e0:7f:bb:97:58:71:2f:f1:e7:65:13:e2:d2:
e9:73:e0:2c:c9:13:0e:3d:36:58:a4:3f:48:13:e7:
78:b0:63:f4:e7:0f:1c:89:b7:90:fe:49:08:a1:fb:
f0:6a:51:7c:ac:a1:45:98:a9:07:ac:de:bc:bb:79:
17:aa:5b:0a:56:af:1c:d7:f2:3d:ad:b6:3f:ca:d3:
3f:fb:3b:09:85:63:3d:29:d6:11:7a:9e:71:e2:a3:
3c:7c:55:0b:e9:e7:87:4c:64:9a:bd:e9:25:3b:3c:
22:c9:49:50:61:16:3e:c9:e7:85:72:60:10:1c:2a:
29:7b:69:39:2c:8c:31:1b:0d:a5:a4:16:e0:79:ac:
cf:06:ca:8f:87:a2:6b:df:df:34:04:03:0d:22:c3:
19:09:32:25:75:7f:e6:99:c9:74:da:88:f1:6d:c0:
45:14:36:00:e8:33:53:a7:dc:6a:6a:49:d2:40:e9:
72:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:76:07:9E:1A:82:10:4C:09:7F:50:2C:96:D8:45:FB:74:C4:4C:69
X509v3 Authority Key Identifier:
keyid:29:27:53:27:A5:E8:5F:3C:8C:14:C9:84:03:6F:49:3F:EB:59:B0:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/13YHnhqCEEwJf1AslthF-3TETGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.160.0/21
185.62.156.0/22
193.34.186.0/23
194.33.13.0/24
IPv6:
2a00:5f00::/32
Signature Algorithm: sha256WithRSAEncryption
13:9d:57:5b:d9:6c:41:66:19:ea:f5:53:82:6c:73:65:f8:21:
fa:39:9a:25:d8:d6:af:00:86:5f:bd:fc:31:0e:01:d2:71:41:
e3:80:d5:04:94:a4:2b:24:70:90:f9:e1:da:99:18:76:16:c4:
24:37:81:8e:31:bb:2b:38:1c:d9:0e:b1:c4:e2:9a:b3:8b:e2:
2d:1c:f4:be:c6:22:37:05:2b:c1:6c:12:f3:1a:86:d8:8e:04:
ea:a9:22:7c:cf:c8:6d:be:62:a2:db:4f:e2:7f:cd:18:9b:41:
d6:8e:5f:62:58:ac:ba:d4:49:ce:99:8f:09:bb:41:d9:6e:96:
6c:a7:a1:70:5b:6b:99:af:ef:da:c8:2b:25:44:f3:1b:f6:d9:
c6:cf:7f:ce:f3:3d:b7:d5:2b:81:67:19:25:ae:d3:7e:d0:57:
41:63:83:0a:93:16:3d:6f:6c:6a:b7:91:0d:ff:81:44:50:5e:
51:88:4d:6c:6b:8f:1c:b9:2c:73:c7:04:76:71:91:1b:5c:51:
ad:3c:94:07:43:0b:92:44:8e:bc:ce:75:1c:49:99:5d:02:ab:
2f:21:c3:8d:14:3e:65:90:06:3f:d7:0d:99:03:28:90:85:ef:
b5:84:76:9c:81:d7:e3:db:e6:59:55:b6:ed:2f:f6:94:fe:ff:
f1:5d:6b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:35 2024 by rpki-client on console-ams.rpki-client.org