Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/AQpu3GyqIJY2HM2r4W0BZAjwstg.roa
File: AQpu3GyqIJY2HM2r4W0BZAjwstg.roa (raw, json)
Hash identifier: QsKDBoylVihPp2ol79wJUPPcsFsijA5gxuLA5b0//9s=
Subject key identifier: 01:0A:6E:DC:6C:AA:20:96:36:1C:CD:AB:E1:6D:01:64:08:F0:B2:D8
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 01894E111FD86019C98F7CADE806146F4CF4
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/AQpu3GyqIJY2HM2r4W0BZAjwstg.roa
Signing time: Thu 13 Jul 2023 07:04:52 +0000
ROA not before: Thu 13 Jul 2023 07:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12679
IP address blocks: 45.134.12.0/24 maxlen: 24
45.134.15.0/24 maxlen: 24
212.8.224.0/22 maxlen: 22
212.8.228.0/24 maxlen: 24
2a07:505::/32 maxlen: 32
2a0e:7c41::/32 maxlen: 32
2a0e:7c45::/32 maxlen: 32
2a07:501::/32 maxlen: 32
2a0e:7c44::/32 maxlen: 32
2a07:504::/32 maxlen: 32
2a0e:7c42::/32 maxlen: 32
2a07:502::/32 maxlen: 32
2a0e:7c43::/32 maxlen: 32
2a07:507::/32 maxlen: 32
2a0e:7c47::/32 maxlen: 32
2a07:506::/32 maxlen: 32
2a0e:7c40::/32 maxlen: 32
2a07:500::/32 maxlen: 32
2a0e:7c46::/32 maxlen: 32
2a07:503::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 04 Aug 2023 05:53:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4e:11:1f:d8:60:19:c9:8f:7c:ad:e8:06:14:6f:4c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Jul 13 07:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=010a6edc6caa2096361ccdabe16d016408f0b2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bd:a3:47:17:e6:0f:e7:52:46:ad:5c:94:f8:
ba:71:cd:c0:23:0c:3e:60:9b:62:6a:42:c7:09:fc:
13:79:dc:4f:c7:46:e7:13:39:17:72:5b:c0:df:62:
fc:9b:77:71:2a:69:58:2f:6f:7f:b4:d8:d2:18:df:
31:72:7b:c4:5e:9f:04:f7:8c:13:0e:d4:1c:99:2a:
28:4e:7f:82:ce:82:95:f7:2a:6b:c1:e9:77:a0:dd:
8f:d6:76:ae:46:21:3c:fb:fe:e1:b7:24:2f:6d:43:
10:77:78:33:eb:52:6c:ad:77:13:53:ea:d3:43:43:
01:db:78:ef:98:68:65:06:a4:70:61:f8:84:1d:7c:
11:99:06:78:c1:a8:35:2d:62:df:69:3b:71:52:5a:
94:32:60:df:45:ef:04:e2:f6:92:ea:e1:c8:80:3a:
39:ad:03:46:fc:da:1c:58:00:65:01:1f:de:05:ec:
0f:52:f2:30:b1:b8:6d:95:e8:5f:df:79:8c:5e:84:
9f:b0:5d:0a:a0:d3:e2:4e:69:6f:6c:01:79:05:d1:
8c:6e:78:ef:80:68:8b:80:41:b1:41:ec:ef:bb:15:
82:c4:48:6f:4d:f6:f1:c7:72:59:16:6c:81:27:55:
e4:a6:0b:02:ee:10:ea:b8:c6:9d:db:d0:fa:57:a2:
0c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0A:6E:DC:6C:AA:20:96:36:1C:CD:AB:E1:6D:01:64:08:F0:B2:D8
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/AQpu3GyqIJY2HM2r4W0BZAjwstg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.12.0/24
45.134.15.0/24
212.8.224.0-212.8.228.255
IPv6:
2a07:500::/29
2a0e:7c40::/29
Signature Algorithm: sha256WithRSAEncryption
24:90:29:1f:c8:d1:91:cf:96:67:16:4a:d8:ed:ab:87:64:de:
d3:5c:5a:7e:50:2e:2b:dc:a7:c9:47:1f:86:a1:7a:e9:92:f1:
ef:95:33:c4:23:36:0b:33:ee:22:23:77:05:36:3c:6c:b9:8f:
dc:57:a3:62:e8:22:f2:67:66:ed:db:ab:56:84:2d:88:5e:c0:
02:35:0d:5e:0e:9a:17:b5:e0:59:01:05:f0:cc:fc:64:ac:49:
ea:05:6d:94:a3:f7:39:1c:47:87:e5:4d:87:a3:73:3a:e3:e5:
96:32:48:2d:aa:45:ad:ab:10:42:d1:8e:9c:d8:0c:3b:36:d2:
58:e1:42:85:95:ec:6b:d6:86:86:ce:09:a7:9f:b0:bd:53:4e:
f9:a9:68:93:a4:35:36:a9:01:cb:2d:e0:c9:b4:4a:08:80:04:
f3:dd:0f:c4:0a:0f:f9:90:b3:88:b7:cb:c9:5f:58:fd:d8:d5:
a3:11:e4:61:18:75:be:57:d7:19:b4:af:7b:54:d9:2e:ff:b2:
87:e2:be:54:83:b5:ac:0a:c8:28:a4:21:f0:f0:df:27:b2:c8:
52:e7:54:67:78:c6:ce:36:fa:f2:1e:7b:73:42:e4:65:05:e9:
d2:02:4c:de:12:1b:0c:de:fb:20:46:46:f9:a8:ad:4a:e6:ab:
f5:1e:8f:48
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYlOER/YYBnJj3yt6AYUb0z0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTY5NzE2ZDBhZTY0MDY4NzAzMTQwYWEzNzMwZTM3ODhm
ZGQ0YzYwHhcNMjMwNzEzMDcwNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTBhNmVkYzZjYWEyMDk2MzYxY2NkYWJlMTZkMDE2NDA4ZjBiMmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr2jRxfmD+dSRq1clPi6cc3AIww+
YJtiakLHCfwTedxPx0bnEzkXclvA32L8m3dxKmlYL29/tNjSGN8xcnvEXp8E94wT
DtQcmSooTn+CzoKV9yprwel3oN2P1nauRiE8+/7htyQvbUMQd3gz61JsrXcTU+rT
Q0MB23jvmGhlBqRwYfiEHXwRmQZ4wag1LWLfaTtxUlqUMmDfRe8E4vaS6uHIgDo5
rQNG/NocWABlAR/eBewPUvIwsbhtlehf33mMXoSfsF0KoNPiTmlvbAF5BdGMbnjv
gGiLgEGxQezvuxWCxEhvTfbxx3JZFmyBJ1XkpgsC7hDquMad29D6V6IMYwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFAEKbtxsqiCWNhzNq+FtAWQI8LLYMB8GA1UdIwQY
MBaAFMYWlxbQrmQGhwMUCqNzDjeI/dTGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC80MDA2ODUtZjQ4ZS00YWI5LThlM2Yt
MDQyNDQ2YjcwZmIxLzEvQVFwdTNHeXFJSlkySE0ycjRXMEJaQWp3c3RnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC80MDA2ODUtZjQ4ZS00YWI5LThlM2YtMDQyNDQ2YjcwZmIx
LzEveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODAgBAIAATAaAwQALYYMAwQA
LYYPMAwDBAXUCOADBADUCOQwFAQCAAIwDgMFAyoHBQADBQMqDnxAMA0GCSqGSIb3
DQEBCwUAA4IBAQAkkCkfyNGRz5ZnFkrY7auHZN7TXFp+UC4r3KfJRx+GoXrpkvHv
lTPEIzYLM+4iI3cFNjxsuY/cV6Ni6CLyZ2bt26tWhC2IXsACNQ1eDpoXteBZAQXw
zPxkrEnqBW2Uo/c5HEeH5U2Ho3M64+WWMkgtqkWtqxBC0Y6c2Aw7NtJY4UKFlexr
1oaGzgmnn7C9U075qWiTpDU2qQHLLeDJtEoIgATz3Q/ECg/5kLOIt8vJX1j92NWj
EeRhGHW+V9cZtK97VNku/7KH4r5Ug7WsCsgopCHw8N8nsshS51RneMbONvryHntz
QuRlBenSAkzeEhsM3vsgRkb5qK1K5qv1Ho9I
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:34 2024 by rpki-client on console-fra.rpki-client.org