Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/6qdEAtBb7NIAb4IW0-C_iZOagQE.roa
File: 6qdEAtBb7NIAb4IW0-C_iZOagQE.roa (raw, json)
Hash identifier: c4BMMbk9/ptPDXWWK3RZ2/bLB3xYhpP2SNBDVDfITdM=
Subject key identifier: EA:A7:44:02:D0:5B:EC:D2:00:6F:82:16:D3:E0:BF:89:93:9A:81:01
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 01868A1F561F0F5D0665251AE9E9FA2D09DB
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/6qdEAtBb7NIAb4IW0-C_iZOagQE.roa
Signing time: Sat 25 Feb 2023 19:49:14 +0000
ROA not before: Sat 25 Feb 2023 19:49:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.233.38.0/24 maxlen: 24
46.233.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 25 Feb 2023 20:29:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:8a:1f:56:1f:0f:5d:06:65:25:1a:e9:e9:fa:2d:09:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Feb 25 19:49:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eaa74402d05becd2006f8216d3e0bf89939a8101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f5:46:df:bc:6b:7a:79:52:4c:68:fe:d1:e4:
7a:01:2c:6d:6f:14:4a:94:d3:0c:9f:3a:b5:90:6b:
2a:28:50:a0:e9:15:d7:ad:73:72:f3:8d:3a:7e:c5:
dd:a6:62:33:c3:e3:a9:59:de:49:89:24:8e:af:5d:
d5:51:89:37:6f:cf:26:a4:4f:ca:23:3a:49:a8:d6:
8b:c1:d2:b1:b2:94:cc:16:c6:8b:65:81:e2:53:0a:
0a:d1:b7:ba:6f:80:d2:de:e3:df:0f:52:b3:fa:bf:
89:56:64:c6:df:0e:10:5a:e2:19:8b:62:37:ea:a5:
40:75:09:f6:fe:d4:12:94:e1:6e:0b:fc:7d:bf:b6:
a9:a9:c0:24:66:2d:d5:9b:72:34:46:cd:c4:e4:14:
1f:d8:c8:5d:4c:28:aa:81:01:4e:dc:9b:da:91:87:
fd:3f:83:78:67:a0:fd:7e:0b:59:48:ff:03:ec:a7:
7c:ca:ad:b5:0c:b4:02:7d:0f:c2:47:ec:e7:a5:d0:
20:c0:3e:c6:fb:64:63:f0:16:cb:26:ab:ad:c8:c4:
28:7c:3a:c8:55:21:95:1e:e2:04:ab:7e:29:ae:b7:
c5:93:cd:8e:cf:b0:0b:77:fb:c1:51:f2:fa:48:b7:
51:41:27:b7:55:81:1a:1e:52:09:9f:1a:1f:99:9d:
3f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A7:44:02:D0:5B:EC:D2:00:6F:82:16:D3:E0:BF:89:93:9A:81:01
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/6qdEAtBb7NIAb4IW0-C_iZOagQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.38.0/23
Signature Algorithm: sha256WithRSAEncryption
10:6e:ab:bf:03:7f:2d:1e:74:53:d2:92:fd:08:d4:5a:03:5d:
81:f2:4a:0a:cd:9a:6e:04:56:88:2c:68:ef:f0:2f:2d:dd:2f:
d9:02:66:b2:88:1d:79:2e:ea:db:8f:6f:31:70:0b:57:40:b0:
62:95:61:1f:55:5a:b3:e0:84:24:e1:25:51:52:da:d4:83:16:
8c:fe:01:a6:03:e2:2f:b4:e4:c7:52:26:0f:77:cb:2b:f8:5f:
9c:89:67:8c:ed:01:77:3c:b2:8e:3b:54:b4:26:52:2f:48:2c:
93:2f:f9:df:23:29:41:91:74:df:26:55:48:b8:4a:02:cb:e0:
fd:af:2a:1b:3e:65:c7:85:29:f1:fe:77:59:21:c2:45:26:bd:
ff:4a:fd:0e:8c:c1:9f:88:0e:65:2b:4f:44:b6:e4:d8:47:7d:
db:6f:39:b7:40:0e:a4:12:21:64:92:57:b8:3d:51:d8:c9:29:
9c:05:92:10:7c:88:6f:db:cc:2a:ac:76:6a:12:61:35:00:31:
08:77:c0:00:a7:15:a4:bc:66:2a:d3:37:a9:4e:b3:86:88:a5:
9d:c7:24:22:78:24:b0:d8:d7:e6:86:77:e3:37:7e:de:87:43:
92:ef:23:01:01:09:6f:16:9a:d9:e9:13:25:17:f2:a3:f8:66:
17:ed:6c:12
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYaKH1YfD10GZSUa6en6LQnbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1
ZDU2ZjUwHhcNMjMwMjI1MTk0OTE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWE3NDQwMmQwNWJlY2QyMDA2ZjgyMTZkM2UwYmY4OTkzOWE4MTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PVG37xrenlSTGj+0eR6ASxtbxRK
lNMMnzq1kGsqKFCg6RXXrXNy8406fsXdpmIzw+OpWd5JiSSOr13VUYk3b88mpE/K
IzpJqNaLwdKxspTMFsaLZYHiUwoK0be6b4DS3uPfD1Kz+r+JVmTG3w4QWuIZi2I3
6qVAdQn2/tQSlOFuC/x9v7apqcAkZi3Vm3I0Rs3E5BQf2MhdTCiqgQFO3JvakYf9
P4N4Z6D9fgtZSP8D7Kd8yq21DLQCfQ/CR+znpdAgwD7G+2Rj8BbLJqutyMQofDrI
VSGVHuIEq34prrfFk82Oz7ALd/vBUfL6SLdRQSe3VYEaHlIJnxofmZ0/FQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOqnRALQW+zSAG+CFtPgv4mTmoEBMB8GA1UdIwQY
MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt
M2MxNmZmODQxYWIyLzEvNnFkRUF0QmI3TklBYjRJVzAtQ19pWk9hZ1FFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy
LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLukmMA0G
CSqGSIb3DQEBCwUAA4IBAQAQbqu/A38tHnRT0pL9CNRaA12B8koKzZpuBFaILGjv
8C8t3S/ZAmayiB15Lurbj28xcAtXQLBilWEfVVqz4IQk4SVRUtrUgxaM/gGmA+Iv
tOTHUiYPd8sr+F+ciWeM7QF3PLKOO1S0JlIvSCyTL/nfIylBkXTfJlVIuEoCy+D9
ryobPmXHhSnx/ndZIcJFJr3/Sv0OjMGfiA5lK09EtuTYR33bbzm3QA6kEiFkkle4
PVHYySmcBZIQfIhv28wqrHZqEmE1ADEId8AApxWkvGYq0zepTrOGiKWdxyQieCSw
2NfmhnfjN37eh0OS7yMBAQlvFprZ6RMlF/Kj+GYX7WwS
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:09 2024 by rpki-client on console-ams.rpki-client.org