Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/1-tWgC9M4n9_-3K2Bkyb_1TTxQr4.roa
File: 1-tWgC9M4n9_-3K2Bkyb_1TTxQr4.roa (raw, json)
Hash identifier: NHGbr3ORSDHes2A4g369pRs2sX3eBUp6vIbguG9yY5E=
Subject key identifier: FA:D5:A0:0B:D3:38:9F:DF:FE:DC:AD:81:93:26:FF:D5:34:F1:42:BE
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 0187960A790360F6A20CB8B0A2BB29898885
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/1-tWgC9M4n9_-3K2Bkyb_1TTxQr4.roa
Signing time: Tue 18 Apr 2023 20:24:41 +0000
ROA not before: Tue 18 Apr 2023 20:24:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.233.38.0/24 maxlen: 24
46.233.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:96:0a:79:03:60:f6:a2:0c:b8:b0:a2:bb:29:89:88:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Apr 18 20:24:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fad5a00bd3389fdffedcad819326ffd534f142be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e3:ec:c5:4e:73:5e:40:c1:13:d7:e5:c8:58:
a2:e6:17:bb:3a:7d:ca:87:e7:89:83:a6:f3:6a:fa:
29:1c:af:eb:fb:3a:8d:17:75:9f:6b:0b:af:a9:37:
a7:87:cf:9f:d1:7b:b0:00:bf:96:38:c0:ed:a2:84:
dc:f8:b8:8e:a1:4b:a9:19:d2:e8:3d:6f:ae:66:14:
46:a9:cd:c9:35:9e:4c:6c:a7:54:62:55:9c:29:cb:
1f:6b:36:d6:8b:d8:13:54:38:5c:da:e4:b6:34:54:
1b:8d:2b:af:a2:41:a4:32:91:2e:13:b4:04:68:c8:
73:16:63:57:14:9e:db:1c:6b:86:c8:79:03:62:0a:
ac:ab:22:f8:27:48:3e:55:9e:4b:e5:73:64:bd:c7:
35:60:16:e5:37:15:b6:fd:89:11:b9:a6:c4:b0:4a:
ed:6d:9c:93:0c:04:7c:a8:16:53:96:8e:81:1f:f0:
c9:03:e9:19:cb:30:b0:6b:9e:5d:81:b0:ca:11:c2:
8f:53:33:a3:3d:de:a9:f4:5b:73:3a:a3:3f:11:6c:
d5:70:8c:92:32:5f:71:a2:14:01:f6:b3:5a:62:bf:
8c:c6:4a:23:8f:19:b7:76:6f:4d:59:1c:a0:ea:01:
76:6d:c2:00:04:4b:87:c7:00:7e:ab:16:27:83:4e:
6b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D5:A0:0B:D3:38:9F:DF:FE:DC:AD:81:93:26:FF:D5:34:F1:42:BE
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/1-tWgC9M4n9_-3K2Bkyb_1TTxQr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.38.0/23
Signature Algorithm: sha256WithRSAEncryption
06:dc:64:3d:28:e9:90:a8:b3:07:17:f5:48:a4:0e:a6:4c:7b:
1a:df:71:d6:00:05:1a:f2:10:57:25:7e:4e:9f:e3:b6:c0:32:
88:bf:e3:41:be:64:9e:d3:a7:1b:d8:5e:c4:79:7d:ca:d5:a1:
4d:75:87:63:ec:fa:7e:0f:b2:d4:26:ff:39:4c:d4:2c:96:69:
24:53:98:5a:e4:3f:46:49:99:43:4e:a9:50:ed:fa:74:e1:17:
4d:5a:b6:44:db:29:96:41:da:8b:10:27:c4:ca:a7:70:0c:36:
45:26:f5:02:5b:df:c9:d3:6f:63:38:52:90:92:0d:07:5b:72:
df:16:f3:96:2c:fc:8a:8d:b1:b8:61:c5:1c:b5:fa:48:76:7d:
b2:df:9c:ed:21:ca:54:a7:f1:e7:bf:ee:29:b3:16:f6:79:ad:
6f:1b:93:64:f7:78:c4:d2:fb:74:e6:d1:74:c4:8f:d3:38:24:
06:87:8d:bf:6e:d2:13:fd:59:2b:ed:ee:25:ab:6c:9c:6a:3f:
5c:83:84:a8:b1:e0:c1:99:6d:4a:25:b6:f6:7e:bb:bb:26:1d:
43:4c:a0:04:1c:6a:c1:60:f6:9a:26:03:61:fd:9d:9d:bf:e0:
71:63:4d:8d:42:1b:5b:2a:9b:4c:80:6d:28:f6:3e:a1:c8:4b:
54:8e:32:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:55 2023 by rpki-client on console-ams.rpki-client.org