Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/17tbo5kZuMe8kdQEdPLEFAWYaU8.roa
File: 17tbo5kZuMe8kdQEdPLEFAWYaU8.roa (raw, json)
Hash identifier: QxXJSxLrY0l4bc9Q8tggEpEn4tO4bxNaRhOoA1gsPvg=
Subject key identifier: D7:BB:5B:A3:99:19:B8:C7:BC:91:D4:04:74:F2:C4:14:05:98:69:4F
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 0193CB874EA41D403A4616CF6CE65A3478DC
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/17tbo5kZuMe8kdQEdPLEFAWYaU8.roa
Signing time: Sun 15 Dec 2024 18:14:22 +0000
ROA not before: Sun 15 Dec 2024 18:14:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 46.233.42.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cb:87:4e:a4:1d:40:3a:46:16:cf:6c:e6:5a:34:78:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Dec 15 18:14:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7bb5ba39919b8c7bc91d40474f2c4140598694f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2d:7d:29:e7:ba:e1:23:c5:8b:fd:bd:48:b2:
e6:cc:c6:a9:6d:3c:7b:80:2b:2d:c1:98:34:f9:a4:
26:74:67:93:31:b1:37:6e:2a:c8:b8:7c:9c:2d:b2:
af:ae:a3:4f:aa:42:20:6a:2c:76:a7:36:90:6e:a9:
03:3f:42:c9:00:7d:b9:8a:49:b0:0e:04:65:36:c4:
f2:3a:69:88:2d:24:c8:73:e6:a9:bb:f9:78:2a:c9:
67:8d:be:4d:b8:5c:c6:09:45:a0:3f:ca:90:5a:4a:
0f:d4:a9:82:85:81:03:ee:dc:11:b6:92:34:3b:1e:
c0:a9:3a:04:18:0c:8e:9d:07:9f:96:4b:66:8e:62:
89:71:97:ef:86:01:1b:e6:8a:f4:6e:45:12:5f:8f:
09:0c:d5:22:03:05:f1:a5:e9:9e:91:5a:dc:f4:eb:
86:ac:37:fe:b7:f6:20:77:91:d7:8d:da:f1:b2:5f:
0a:33:1b:1c:70:c1:8a:7e:48:19:48:36:07:fc:9e:
8a:94:13:db:06:07:73:e0:39:ee:a3:65:28:24:50:
a8:58:fb:8c:0a:0d:43:8d:73:cc:5b:43:7b:b8:6c:
cd:a5:e8:12:e5:18:d0:14:8f:bd:f6:66:b5:7b:ff:
93:fd:94:70:4a:49:c3:61:50:da:7c:29:ce:c3:ab:
f5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:BB:5B:A3:99:19:B8:C7:BC:91:D4:04:74:F2:C4:14:05:98:69:4F
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/17tbo5kZuMe8kdQEdPLEFAWYaU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.42.0/23
Signature Algorithm: sha256WithRSAEncryption
18:8c:94:76:f9:29:cd:f3:78:ff:a8:17:ac:5a:b5:d8:21:00:
ae:2d:dc:12:66:09:9a:4e:f9:a9:e7:80:93:5c:c6:58:37:de:
e3:3f:3d:8f:55:04:e6:78:e6:bf:00:a1:5c:eb:93:32:56:3e:
1d:19:f1:1c:eb:a4:18:1d:9c:e7:2f:49:fe:af:75:fc:f6:a2:
d4:f7:ab:7b:2e:ca:2e:01:0a:26:4d:0e:2e:1d:41:28:9e:d1:
ac:0c:d0:66:cf:22:8d:ea:7b:d8:ba:ec:eb:f0:1f:9c:76:44:
f1:17:dd:28:36:e5:a1:c3:4e:08:f8:02:fc:7a:47:28:d8:81:
a4:bd:d5:68:67:fc:be:a2:5d:74:cc:72:04:63:35:6b:0b:8b:
fa:d4:69:87:2d:29:c8:98:b5:37:b3:91:74:e1:64:3e:f5:81:
62:c4:18:25:24:d7:0e:ee:09:be:e4:81:23:17:0a:7d:8d:22:
6e:3b:2f:ca:4e:7d:59:d4:83:22:4e:f9:00:fa:5e:c4:d0:c7:
eb:7d:10:ed:98:39:01:20:ed:f3:9f:d5:93:83:3c:54:86:d0:
c4:4b:30:97:22:95:d8:8d:b6:05:06:a6:c0:92:66:9f:dc:d3:
40:14:22:57:e4:c6:94:14:7f:e9:3e:9d:78:bd:9c:8c:56:3e:
79:47:c9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:41:51 2025 by rpki-client