Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/C29TsUpz4Gukj_MNeu3xWuyxB4c.roa
File: C29TsUpz4Gukj_MNeu3xWuyxB4c.roa (raw, json)
Hash identifier: Qv9t2jrOt3GD5aeXFO26+dHMHcqmFfpmRQVvvwILbtI=
Subject key identifier: 0B:6F:53:B1:4A:73:E0:6B:A4:8F:F3:0D:7A:ED:F1:5A:EC:B1:07:87
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018CC86FB34C8F1F40D525164A929CB6BBFF
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/C29TsUpz4Gukj_MNeu3xWuyxB4c.roa
Signing time: Tue 02 Jan 2024 04:30:12 +0000
ROA not before: Tue 02 Jan 2024 04:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206150
IP address blocks: 45.130.140.0/24 maxlen: 24
2a0f:f43::/32 maxlen: 48
2a0f:f47::/32 maxlen: 48
2a0f:f45::/32 maxlen: 48
2a0f:f41::/32 maxlen: 32
2a0f:f44::/32 maxlen: 48
2a0f:f40::/32 maxlen: 32
2a0f:f46::/32 maxlen: 48
2a07:e342::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 23 Jan 2024 05:45:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:b3:4c:8f:1f:40:d5:25:16:4a:92:9c:b6:bb:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 04:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b6f53b14a73e06ba48ff30d7aedf15aecb10787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:23:53:36:0a:61:76:ab:88:aa:e5:25:f9:89:
dc:da:f4:21:cb:60:64:59:9e:de:f7:a6:7b:de:5f:
0d:b2:a6:9c:b6:d4:a2:45:6a:be:e3:f5:8e:f3:08:
95:21:fa:39:16:40:83:37:1f:8e:59:1e:00:d9:cf:
d2:20:33:b0:da:08:05:00:d1:0b:5e:af:4a:b4:7e:
b1:64:af:d9:43:2c:ff:b0:ad:9e:76:32:1b:85:94:
c7:13:27:f2:f2:be:99:df:69:ad:46:b2:63:f8:97:
7e:c5:77:33:ad:a0:b2:eb:ec:4a:a1:04:aa:79:a1:
82:dd:96:df:9b:a9:a1:3a:bf:1c:ef:06:2c:2b:ff:
5b:6b:9a:3d:4a:19:9d:9c:89:4f:42:e4:6a:79:0d:
74:9d:fe:52:a6:06:4b:f8:5b:dc:e9:eb:7b:95:ae:
92:78:0c:6e:0c:3e:84:dc:ae:59:ca:19:c4:de:fb:
33:a3:1f:e2:3e:04:9b:b9:81:14:00:d4:eb:d7:4d:
14:d0:1d:17:3f:2f:da:65:91:ea:e4:f7:6d:46:06:
b8:70:b0:28:fe:44:ba:c7:37:23:f9:4b:6e:bc:a6:
c1:fe:0d:65:18:16:65:db:15:5c:a6:0b:be:89:1c:
a0:de:4f:fe:21:21:b5:87:5f:08:31:bd:02:bc:e1:
f5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6F:53:B1:4A:73:E0:6B:A4:8F:F3:0D:7A:ED:F1:5A:EC:B1:07:87
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/C29TsUpz4Gukj_MNeu3xWuyxB4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.140.0/24
IPv6:
2a07:e342::/32
2a0f:f40::/31
2a0f:f43::-2a0f:f47:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
ab:f9:28:07:de:63:46:c5:8a:54:3a:37:08:d7:ea:74:7c:9a:
77:a2:6c:88:3a:7a:48:15:04:9e:6e:55:ad:84:54:36:86:f2:
3a:d6:37:18:51:a2:d3:32:0b:4f:c3:ea:44:8a:86:50:45:09:
e3:77:dc:3a:16:b4:68:49:67:20:c5:3a:8a:63:89:63:83:ab:
7a:39:af:e9:e6:af:73:01:9a:ea:0e:e0:0e:48:54:2b:be:2e:
18:e7:b9:75:d2:b2:51:21:58:28:3d:43:94:c6:fc:57:a5:ad:
48:03:c2:83:d0:32:c2:19:70:a4:03:bb:dc:7e:9c:79:f5:1f:
d9:b9:0d:6c:9b:9e:f9:57:18:fb:c6:cb:13:ed:c6:b0:90:21:
1d:22:0b:89:18:89:6f:fa:76:44:d9:1a:38:97:6b:90:b0:13:
92:83:59:47:19:37:89:02:75:75:fb:93:27:8b:74:cd:c0:53:
ee:63:e6:c8:7b:ed:da:e8:f5:e3:a0:8a:98:e8:22:fa:77:b8:
49:f8:37:f5:ee:87:6f:02:fb:b9:2b:25:b6:eb:56:f4:bf:a5:
13:bb:9d:fb:5a:cb:a2:a7:e5:67:81:8a:24:fd:79:05:70:42:
54:69:7c:a7:54:db:1b:30:f4:f5:f4:95:22:22:29:6a:d6:04:
97:c1:77:c7
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAYzIb7NMjx9A1SUWSpKctrv/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjQwMTAyMDQzMDEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjZmNTNiMTRhNzNlMDZiYTQ4ZmYzMGQ3YWVkZjE1YWVjYjEwNzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCNTNgphdquIquUl+Ync2vQhy2Bk
WZ7e96Z73l8NsqacttSiRWq+4/WO8wiVIfo5FkCDNx+OWR4A2c/SIDOw2ggFANEL
Xq9KtH6xZK/ZQyz/sK2edjIbhZTHEyfy8r6Z32mtRrJj+Jd+xXczraCy6+xKoQSq
eaGC3Zbfm6mhOr8c7wYsK/9ba5o9ShmdnIlPQuRqeQ10nf5SpgZL+Fvc6et7la6S
eAxuDD6E3K5ZyhnE3vszox/iPgSbuYEUANTr100U0B0XPy/aZZHq5PdtRga4cLAo
/kS6xzcj+UtuvKbB/g1lGBZl2xVcpgu+iRyg3k/+ISG1h18IMb0CvOH1dQIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFAtvU7FKc+BrpI/zDXrt8VrssQeHMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvQzI5VHNVcHo0R3Vral9NTmV1M3hXdXl4QjRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAMBAIAATAGAwQALYKMMCQE
AgACMB4DBQAqB+NCAwUBKg8PQDAOAwUAKg8PQwMFAyoPD0AwDQYJKoZIhvcNAQEL
BQADggEBAKv5KAfeY0bFilQ6NwjX6nR8mneibIg6ekgVBJ5uVa2EVDaG8jrWNxhR
otMyC0/D6kSKhlBFCeN33DoWtGhJZyDFOopjiWODq3o5r+nmr3MBmuoO4A5IVCu+
LhjnuXXSslEhWCg9Q5TG/FelrUgDwoPQMsIZcKQDu9x+nHn1H9m5DWybnvlXGPvG
yxPtxrCQIR0iC4kYiW/6dkTZGjiXa5CwE5KDWUcZN4kCdXX7kyeLdM3AU+5j5sh7
7dro9eOgipjoIvp3uEn4N/Xuh28C+7krJbbrVvS/pRO7nftay6Kn5WeBiiT9eQVw
QlRpfKdU2xsw9PX0lSIiKWrWBJfBd8c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:51 2024 by rpki-client on console-ams.rpki-client.org