Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/H8d4bYX98g6De7O3RlB8XXFC5qA.roa
File: H8d4bYX98g6De7O3RlB8XXFC5qA.roa (raw, json)
Hash identifier: FTm1TkMJmsBLYp5CmzK/RANeFF3MH7glS25iS8soGW0=
Subject key identifier: 1F:C7:78:6D:85:FD:F2:0E:83:7B:B3:B7:46:50:7C:5D:71:42:E6:A0
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 01885732C4763F5D3E8CBD13A913635E6FA2
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/H8d4bYX98g6De7O3RlB8XXFC5qA.roa
Signing time: Fri 26 May 2023 08:35:24 +0000
ROA not before: Fri 26 May 2023 08:35:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12679
IP address blocks: 45.134.12.0/24 maxlen: 24
45.134.14.0/24 maxlen: 24
212.8.224.0/22 maxlen: 22
212.8.229.0/24 maxlen: 24
212.8.228.0/24 maxlen: 24
2a07:505::/32 maxlen: 32
2a0e:7c41::/32 maxlen: 32
2a0e:7c45::/32 maxlen: 32
2a07:501::/32 maxlen: 32
2a0e:7c44::/32 maxlen: 32
2a07:504::/32 maxlen: 32
2a0e:7c42::/32 maxlen: 32
2a07:502::/32 maxlen: 32
2a0e:7c43::/32 maxlen: 32
2a07:507::/32 maxlen: 32
2a0e:7c47::/32 maxlen: 32
2a07:506::/32 maxlen: 32
2a0e:7c40::/32 maxlen: 32
2a07:500::/32 maxlen: 32
2a0e:7c46::/32 maxlen: 32
2a07:503::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 30 May 2023 09:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:57:32:c4:76:3f:5d:3e:8c:bd:13:a9:13:63:5e:6f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: May 26 08:35:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1fc7786d85fdf20e837bb3b746507c5d7142e6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:57:84:4e:a3:36:24:8d:63:73:3d:72:08:e3:
03:94:b3:5a:69:db:62:05:bf:55:b1:63:d3:48:71:
ed:a8:85:ff:53:aa:a8:21:9a:40:2a:6a:65:43:b6:
53:4a:e8:ea:3c:2e:5e:0d:97:72:bf:4b:7d:fe:e9:
99:66:52:8f:99:33:0f:a7:2c:e0:4e:de:a6:12:5a:
4c:f5:e2:cc:e5:ee:f7:eb:07:df:7b:a1:ab:b8:4d:
85:37:53:08:6e:22:20:89:c3:2a:9d:14:1c:f5:5b:
21:35:b3:4d:b7:e1:a5:c4:5b:b1:63:64:df:6d:15:
03:f9:58:02:34:9a:be:1b:31:12:0a:3c:6e:8a:9f:
ba:96:0d:7d:42:eb:79:80:ce:b5:11:69:0a:76:8c:
8f:29:ea:e5:93:40:ff:0f:19:0b:00:e1:a3:1a:6b:
4a:99:d4:c2:cc:41:a3:45:26:d7:98:56:51:c9:46:
15:a8:fb:8c:f6:72:dc:01:6d:f9:6b:05:56:b9:30:
36:b8:76:a2:11:55:da:77:4c:e0:9b:b7:2b:1c:a7:
97:52:cf:15:1a:ea:33:0f:1d:e1:83:12:81:4a:a2:
77:fd:94:53:e9:84:c2:0a:07:bd:b3:75:35:4b:b4:
21:9d:ab:df:b7:d8:cf:6c:2d:f0:e8:1d:0f:21:62:
a0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C7:78:6D:85:FD:F2:0E:83:7B:B3:B7:46:50:7C:5D:71:42:E6:A0
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/H8d4bYX98g6De7O3RlB8XXFC5qA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.12.0/24
45.134.14.0/24
212.8.224.0-212.8.229.255
IPv6:
2a07:500::/29
2a0e:7c40::/29
Signature Algorithm: sha256WithRSAEncryption
3f:52:61:6e:ef:6a:5c:bb:52:0f:21:b7:da:90:8b:d8:36:27:
d5:66:02:2a:5b:cf:d8:72:ab:e5:67:2e:69:81:c7:65:4d:16:
63:7d:3b:6e:56:1e:7a:08:7e:2e:23:0b:d1:a4:58:53:00:16:
eb:00:a7:bc:be:a9:f0:23:fa:55:03:80:56:eb:12:c0:02:f3:
07:59:94:f9:ea:00:44:3b:62:8c:36:dd:7f:cc:a2:1a:fc:b4:
35:39:19:9e:71:1a:41:11:b7:fc:e5:ce:61:59:36:39:0c:0d:
fe:12:0f:7b:3d:af:8f:f5:cc:04:e7:41:53:11:4b:1a:c7:48:
d2:25:ad:03:a0:11:c1:42:3c:14:0b:9e:bf:ad:8a:7b:7f:16:
3a:79:c1:02:f8:e8:cc:d4:70:38:24:4b:17:44:f6:ae:56:15:
96:46:eb:73:36:70:57:02:16:d1:2b:14:f0:fb:77:f2:c6:aa:
e7:89:3b:91:39:c8:de:51:55:35:b9:eb:c9:c4:1f:21:74:de:
83:09:83:c7:ad:18:87:3a:fd:69:84:c2:b7:04:50:12:5d:fd:
35:d0:81:e5:6f:4d:4c:bc:fa:43:5e:96:93:2a:64:fd:6e:5b:
a0:53:0a:f3:12:2c:dd:7c:9f:0c:fe:bd:f4:be:e1:3d:6b:d0:
42:52:cd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:11 2024 by rpki-client on console-ams.rpki-client.org