Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/5pIkBk0ZWo9LEnq7VHwZxGTcKOA.roa
File: 5pIkBk0ZWo9LEnq7VHwZxGTcKOA.roa (raw, json)
Hash identifier: KWdo2lzFS+fV9nnFurvSHvs4GtrXACX50hMB2dOG9qY=
Subject key identifier: E6:92:24:06:4D:19:5A:8F:4B:12:7A:BB:54:7C:19:C4:64:DC:28:E0
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 018571D7CBC57EE1E35A92D3AF4E0D3E6954
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/5pIkBk0ZWo9LEnq7VHwZxGTcKOA.roa
Signing time: Mon 02 Jan 2023 09:37:25 +0000
ROA not before: Mon 02 Jan 2023 09:37:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49738
IP address blocks: 46.233.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 25 Feb 2023 19:45:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:cb:c5:7e:e1:e3:5a:92:d3:af:4e:0d:3e:69:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Jan 2 09:37:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e69224064d195a8f4b127abb547c19c464dc28e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d9:22:a9:54:c8:64:c2:bc:61:4f:fc:2f:0f:
17:85:b3:61:39:f6:3f:c3:3c:db:9d:7d:3f:39:a0:
e6:a6:e1:09:ac:2f:a1:f0:23:c8:66:5e:84:6f:11:
10:37:26:dd:26:15:ec:ee:f5:a8:7c:63:ef:67:b2:
2a:1d:27:54:5b:90:be:b8:2f:5c:5a:c5:ed:b3:b8:
9d:77:6a:80:1c:e0:c9:31:49:41:0d:15:04:4b:a6:
c9:50:41:01:8b:1b:18:d0:a8:6f:c4:fd:05:87:d5:
3f:4e:b8:a4:9e:26:2b:a4:5c:99:7a:39:d2:cb:24:
c4:ca:0b:87:32:3a:6f:17:94:6b:62:a0:d1:b2:37:
88:0a:e8:e9:f8:8b:e7:da:ff:e1:fe:6a:32:14:b7:
08:4d:74:2a:92:fb:22:cd:da:c0:dc:20:6e:9e:ff:
7c:2e:fb:db:3f:56:0c:0d:76:ea:1f:a7:8c:cc:07:
b2:fd:48:27:e4:53:cf:eb:4a:a8:f1:ca:25:3b:7f:
bd:af:bc:f9:e2:3a:7a:b9:99:30:cc:a6:f1:68:b0:
f1:61:43:f0:ab:5a:47:21:15:d9:89:24:d9:1c:7c:
6f:e6:15:58:22:c5:fe:76:10:e0:be:db:25:e4:d8:
16:ad:be:56:62:97:8e:d2:ee:e2:bd:03:7b:1a:f5:
60:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:92:24:06:4D:19:5A:8F:4B:12:7A:BB:54:7C:19:C4:64:DC:28:E0
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/5pIkBk0ZWo9LEnq7VHwZxGTcKOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.39.0/24
Signature Algorithm: sha256WithRSAEncryption
72:68:1c:17:11:b7:5c:77:df:91:eb:99:d5:c9:73:1c:75:66:
f5:af:ae:3b:37:39:46:45:f1:cb:a8:f2:3f:47:7b:88:c5:67:
ae:12:b8:7c:35:56:0e:ae:2d:e4:7d:d9:3f:20:84:75:87:eb:
32:4b:ff:ea:4b:6f:3a:09:a6:a6:b6:c9:7b:5f:4a:a8:33:e2:
39:89:a4:dc:47:94:7c:e5:fd:f2:82:fa:84:cc:07:7a:a4:79:
ea:5b:1a:03:8b:b4:5f:61:55:a7:46:39:6c:8f:96:bc:36:fc:
4f:a0:a8:72:26:38:40:17:d5:6c:ca:c4:fd:a0:d5:25:47:6c:
47:f0:e4:83:ed:bf:fd:ce:9d:f3:39:e7:23:b0:5a:eb:84:06:
03:a4:28:36:48:47:9c:67:b3:23:23:7e:d6:c7:1d:43:fd:c3:
cf:02:11:38:fc:5c:82:aa:97:42:07:ed:14:f3:62:2b:19:8d:
db:bc:83:b3:b3:c4:29:f9:94:70:d4:55:42:1f:c1:a7:e7:5c:
b0:35:0f:4a:6e:9c:56:59:e3:a9:7c:5c:8e:67:18:34:d5:c3:
7f:dc:ff:84:e0:ec:25:76:43:72:e8:21:25:6d:e1:e5:da:ce:
4a:22:89:3d:d9:33:81:6b:43:27:4d:cf:b6:ad:4d:76:dc:d2:
07:0e:2b:9c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVx18vFfuHjWpLTr04NPmlUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1
ZDU2ZjUwHhcNMjMwMTAyMDkzNzI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjkyMjQwNjRkMTk1YThmNGIxMjdhYmI1NDdjMTljNDY0ZGMyOGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNkiqVTIZMK8YU/8Lw8XhbNhOfY/
wzzbnX0/OaDmpuEJrC+h8CPIZl6EbxEQNybdJhXs7vWofGPvZ7IqHSdUW5C+uC9c
WsXts7idd2qAHODJMUlBDRUES6bJUEEBixsY0KhvxP0Fh9U/TrikniYrpFyZejnS
yyTEyguHMjpvF5RrYqDRsjeICujp+Ivn2v/h/moyFLcITXQqkvsizdrA3CBunv98
LvvbP1YMDXbqH6eMzAey/Ugn5FPP60qo8colO3+9r7z54jp6uZkwzKbxaLDxYUPw
q1pHIRXZiSTZHHxv5hVYIsX+dhDgvtsl5NgWrb5WYpeO0u7ivQN7GvVg5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOaSJAZNGVqPSxJ6u1R8GcRk3CjgMB8GA1UdIwQY
MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt
M2MxNmZmODQxYWIyLzEvNXBJa0JrMFpXbzlMRW5xN1ZId1p4R1RjS09BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy
LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuknMA0G
CSqGSIb3DQEBCwUAA4IBAQByaBwXEbdcd9+R65nVyXMcdWb1r647NzlGRfHLqPI/
R3uIxWeuErh8NVYOri3kfdk/IIR1h+syS//qS286Caamtsl7X0qoM+I5iaTcR5R8
5f3ygvqEzAd6pHnqWxoDi7RfYVWnRjlsj5a8NvxPoKhyJjhAF9VsysT9oNUlR2xH
8OSD7b/9zp3zOecjsFrrhAYDpCg2SEecZ7MjI37Wxx1D/cPPAhE4/FyCqpdCB+0U
82IrGY3bvIOzs8Qp+ZRw1FVCH8Gn51ywNQ9KbpxWWeOpfFyOZxg01cN/3P+E4Owl
dkNy6CElbeHl2s5KIok92TOBa0MnTc+2rU123NIHDiuc
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:37 2024 by rpki-client on console-fra.rpki-client.org