Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS13926.roa
File: AS13926.roa (raw, json)
Hash identifier: 7laAMADBt42G1yAl5ppUi6QWPD0ry2lJmZcZIquJFpM=
Subject key identifier: F9:D4:2D:BF:0D:0C:66:4E:CF:67:B1:41:C7:85:F8:58:7A:DB:EF:B2
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 1B60FAC690A417002DE06A44C80A9C1AEB1908E5
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS13926.roa
Signing time: Thu 02 Nov 2023 17:48:29 +0000
ROA not before: Thu 02 Nov 2023 17:43:29 +0000
ROA not after: Thu 31 Oct 2024 17:48:29 +0000
asID: 13926
IP address blocks: 45.158.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Apr 2024 00:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:60:fa:c6:90:a4:17:00:2d:e0:6a:44:c8:0a:9c:1a:eb:19:08:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Nov 2 17:43:29 2023 GMT
Not After : Oct 31 17:48:29 2024 GMT
Subject: CN=F9D42DBF0D0C664ECF67B141C785F8587ADBEFB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:07:20:76:34:2e:8c:a6:92:33:93:2c:c4:5f:
f2:d2:d2:bb:58:1d:6f:5e:55:c3:34:d1:96:e6:1a:
8b:0f:1e:49:be:96:76:49:7d:1b:5d:a9:22:22:0a:
ac:eb:27:7f:8a:da:a2:4a:b9:3c:71:ce:0f:8a:c6:
cb:06:d8:49:cb:1c:7d:a7:39:4b:12:0b:9d:83:00:
0c:b5:85:6d:9b:07:1f:79:1c:c1:94:b9:f5:bc:9d:
13:96:ff:61:b2:ea:e3:d7:1b:ae:21:37:31:e1:18:
2f:54:cf:d9:7f:7f:e7:de:e7:06:97:76:f2:fb:ef:
68:ac:48:55:ab:9a:c3:2c:02:ef:73:a8:20:c3:2f:
b6:35:b9:75:8c:14:7a:37:37:85:6c:83:7c:3b:9f:
ed:bb:7b:74:22:7d:1e:ac:bb:f0:c7:53:d7:b9:7f:
d6:55:6a:62:e5:7b:82:42:a2:a9:3b:fd:d0:38:0e:
00:d4:55:f4:67:e0:e1:f2:e6:96:1c:d4:b5:14:46:
94:84:55:b3:29:4b:14:ab:c7:3e:c9:88:a6:ba:b5:
90:32:bc:96:2d:62:a4:09:9f:02:7e:ab:c5:04:db:
30:cc:fc:7e:1a:15:e5:b9:ea:b3:91:5d:78:88:58:
b1:3f:59:7d:12:10:f9:b0:82:36:f9:ee:b1:8b:eb:
de:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D4:2D:BF:0D:0C:66:4E:CF:67:B1:41:C7:85:F8:58:7A:DB:EF:B2
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS13926.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.170.0/24
Signature Algorithm: sha256WithRSAEncryption
14:c3:08:3c:7d:38:4f:9a:ad:fc:da:ab:36:5e:da:08:d5:8d:
72:0e:a5:4a:dd:d8:b0:92:96:17:00:00:b0:5f:e7:94:3c:2b:
45:5d:63:a5:d9:79:2e:21:f5:83:6e:9a:06:f4:1f:6d:b5:25:
db:cf:29:69:29:f0:83:a3:a2:f8:53:bb:0d:a0:8b:58:e3:b5:
fb:1d:df:2f:89:07:00:d0:46:fb:e8:d7:33:ab:0b:21:7b:d5:
b2:4a:80:a1:2d:fc:70:7e:98:a7:35:55:77:9e:a8:f3:12:7e:
8e:d8:4c:d5:03:32:19:67:d3:48:1f:e0:bd:3e:f0:3c:0c:b4:
14:f8:69:66:9b:27:e9:30:c1:0a:62:3d:96:4c:b1:45:21:3c:
b3:9b:9e:52:e7:a2:68:7a:cb:ec:1c:8d:c6:e2:1a:9f:75:57:
98:7c:a1:a6:c9:b3:7c:3e:2f:63:9b:bb:f7:d7:c7:d5:4a:7c:
e3:dd:e7:7c:4f:02:91:9b:10:29:d8:8c:7a:5c:d5:87:d0:3e:
9d:5a:84:96:b7:8a:7f:21:d6:71:4f:17:36:8b:eb:ba:d0:93:
7a:c8:6d:81:09:99:d7:f3:52:e0:d9:75:e0:72:c4:b0:e1:69:
ec:6f:d4:77:de:61:85:9f:47:40:98:77:3c:13:89:54:24:4e:
fa:93:50:dd
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUG2D6xpCkFwAt4GpEyAqcGusZCOUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yMzExMDIxNzQzMjlaFw0yNDEwMzExNzQ4MjlaMDMxMTAvBgNV
BAMTKEY5RDQyREJGMEQwQzY2NEVDRjY3QjE0MUM3ODVGODU4N0FEQkVGQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpByB2NC6MppIzkyzEX/LS0rtY
HW9eVcM00ZbmGosPHkm+lnZJfRtdqSIiCqzrJ3+K2qJKuTxxzg+KxssG2EnLHH2n
OUsSC52DAAy1hW2bBx95HMGUufW8nROW/2Gy6uPXG64hNzHhGC9Uz9l/f+fe5waX
dvL772isSFWrmsMsAu9zqCDDL7Y1uXWMFHo3N4Vsg3w7n+27e3QifR6su/DHU9e5
f9ZVamLle4JCoqk7/dA4DgDUVfRn4OHy5pYc1LUURpSEVbMpSxSrxz7JiKa6tZAy
vJYtYqQJnwJ+q8UE2zDM/H4aFeW56rORXXiIWLE/WX0SEPmwgjb57rGL694jAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQU+dQtvw0MZk7PZ7FBx4X4WHrb77IwHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMTM5MjYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtnqow
DQYJKoZIhvcNAQELBQADggEBABTDCDx9OE+arfzaqzZe2gjVjXIOpUrd2LCSlhcA
ALBf55Q8K0VdY6XZeS4h9YNumgb0H221JdvPKWkp8IOjovhTuw2gi1jjtfsd3y+J
BwDQRvvo1zOrCyF71bJKgKEt/HB+mKc1VXeeqPMSfo7YTNUDMhln00gf4L0+8DwM
tBT4aWabJ+kwwQpiPZZMsUUhPLObnlLnomh6y+wcjcbiGp91V5h8oabJs3w+L2Ob
u/fXx9VKfOPd53xPApGbECnYjHpc1YfQPp1ahJa3in8h1nFPFzaL67rQk3rIbYEJ
mdfzUuDZdeByxLDhaexv1HfeYYWfR0CYdzwTiVQkTvqTUN0=
Generated at Tue Apr 2 03:07:23 2024 by rpki-client on console-fra.rpki-client.org