Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/LLtFzmHM9WkRyaHK_EGWwTf1fkI.roa
File: LLtFzmHM9WkRyaHK_EGWwTf1fkI.roa (raw, json)
Hash identifier: gVQCtNXCl3li0tWW30hXtq0glgFDU/d3ej9IVJ+Hquw=
Subject key identifier: 2C:BB:45:CE:61:CC:F5:69:11:C9:A1:CA:FC:41:96:C1:37:F5:7E:42
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 01893F944E7C259747A7056E512679AAC0EE
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/LLtFzmHM9WkRyaHK_EGWwTf1fkI.roa
Signing time: Mon 10 Jul 2023 11:33:51 +0000
ROA not before: Mon 10 Jul 2023 11:33:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12679
IP address blocks: 45.134.13.0/24 maxlen: 24
45.134.12.0/24 maxlen: 24
45.134.15.0/24 maxlen: 24
212.8.224.0/22 maxlen: 22
212.8.228.0/24 maxlen: 24
2a07:505::/32 maxlen: 32
2a0e:7c41::/32 maxlen: 32
2a0e:7c45::/32 maxlen: 32
2a07:501::/32 maxlen: 32
2a0e:7c44::/32 maxlen: 32
2a07:504::/32 maxlen: 32
2a0e:7c42::/32 maxlen: 32
2a07:502::/32 maxlen: 32
2a0e:7c43::/32 maxlen: 32
2a07:507::/32 maxlen: 32
2a0e:7c47::/32 maxlen: 32
2a07:506::/32 maxlen: 32
2a0e:7c40::/32 maxlen: 32
2a07:500::/32 maxlen: 32
2a0e:7c46::/32 maxlen: 32
2a07:503::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 13 Jul 2023 07:04:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3f:94:4e:7c:25:97:47:a7:05:6e:51:26:79:aa:c0:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Jul 10 11:33:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cbb45ce61ccf56911c9a1cafc4196c137f57e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:73:39:49:e4:e3:0a:57:91:63:16:ff:1c:d1:
2a:dd:92:00:1f:2c:e3:73:4f:55:2a:e5:40:ac:08:
b0:2b:9c:71:92:89:7f:81:79:f4:e5:19:bf:1a:da:
8c:59:6b:69:5c:92:b1:7d:2b:33:b5:b2:37:14:d3:
a0:cb:d2:e7:1f:e8:a4:d6:d8:89:45:10:a9:76:e5:
07:15:bb:44:32:0d:1d:f8:67:d9:fa:cd:45:91:05:
f0:08:10:39:e8:bf:11:c3:52:01:ff:ad:a7:36:12:
0f:6c:81:70:a4:94:11:64:75:61:d9:99:44:54:f3:
be:b7:2a:dc:1b:ec:d5:e7:4b:08:7d:7e:c0:8d:e9:
13:87:3a:3a:11:0e:25:1d:65:24:25:1c:aa:46:cb:
1f:93:ca:26:70:27:eb:93:8e:f2:82:aa:b5:cd:98:
62:a1:ec:fd:ea:6c:02:70:46:8f:35:bb:53:44:4f:
e8:dd:78:80:45:31:e1:b0:69:a8:e0:08:b5:5d:7a:
37:af:86:c6:b0:18:b3:66:80:ed:0c:d6:3f:b5:1f:
ff:b9:0f:9e:79:e2:d3:42:ed:e3:56:c1:b4:92:36:
72:c2:ab:c7:b6:71:3a:f8:e7:04:54:32:c3:d7:3d:
2f:4c:73:15:08:e8:6b:05:59:a6:d9:e3:e3:41:7d:
fd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BB:45:CE:61:CC:F5:69:11:C9:A1:CA:FC:41:96:C1:37:F5:7E:42
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/LLtFzmHM9WkRyaHK_EGWwTf1fkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.12.0/23
45.134.15.0/24
212.8.224.0-212.8.228.255
IPv6:
2a07:500::/29
2a0e:7c40::/29
Signature Algorithm: sha256WithRSAEncryption
95:7b:78:48:72:5d:8b:ed:07:8a:66:6e:7d:d4:cf:f1:8a:e0:
bb:08:4c:3c:9e:ac:e9:46:f9:fc:74:94:a1:a8:ab:59:29:23:
b9:22:8c:19:75:f1:7f:34:cd:d4:db:08:42:bb:6e:42:e2:42:
b6:1c:1f:0b:7d:ce:55:04:3b:d6:c4:bf:2f:97:62:7c:59:b4:
16:ec:9c:16:99:ad:44:6e:32:d5:78:f6:10:7f:44:4d:7e:75:
3e:e7:25:dd:5d:1c:b7:b7:d5:2a:b2:c1:10:0c:69:81:04:6d:
78:f1:c9:87:05:4c:55:ce:9c:f6:7c:bf:1e:a4:07:be:f1:f2:
84:77:b4:a4:95:d1:ad:6e:19:5d:1b:73:2c:67:bf:38:40:2f:
e1:b2:85:f5:7b:75:19:6d:ac:53:b4:94:e4:65:c8:79:92:eb:
af:86:5c:73:91:15:8a:2e:b0:40:77:a3:33:a2:a8:b8:69:50:
98:4e:18:e8:8f:c5:f2:db:52:d3:83:dd:61:4c:ed:d0:d9:c9:
39:99:2e:eb:49:37:2c:26:5f:1b:6f:e8:91:35:2b:8f:dd:ad:
a6:1d:67:6a:44:aa:9f:e3:0f:8d:26:11:aa:cd:3f:a4:1f:71:
21:60:39:5e:86:6d:82:af:ed:32:50:f6:1e:fd:d6:39:07:f1:
12:2f:61:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:11 2024 by rpki-client on console-ams.rpki-client.org