Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/BAPiJTSDuq4YmnWk2VVlQWvBKRs.roa
File: BAPiJTSDuq4YmnWk2VVlQWvBKRs.roa (raw, json)
Hash identifier: rmV2zm1tb07vVDnGxOHyu6XUGSIban7zQsf5Zi5wFHI=
Subject key identifier: 04:03:E2:25:34:83:BA:AE:18:9A:75:A4:D9:55:65:41:6B:C1:29:1B
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 018B0AF005374A38B2B77C2D3073571242A4
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/BAPiJTSDuq4YmnWk2VVlQWvBKRs.roa
Signing time: Sat 07 Oct 2023 16:19:43 +0000
ROA not before: Sat 07 Oct 2023 16:19:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 46.233.43.0/24 maxlen: 24
46.233.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0a:f0:05:37:4a:38:b2:b7:7c:2d:30:73:57:12:42:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Oct 7 16:19:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0403e2253483baae189a75a4d95565416bc1291b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:98:6c:52:91:2c:1c:55:5e:41:91:3e:cb:a3:
c8:4a:6c:76:26:b1:99:e0:79:d2:d8:b1:d0:5a:b8:
23:7c:7f:cd:f8:a8:3c:4b:3e:fb:ed:e4:55:8f:a0:
24:2e:67:63:37:b3:a7:a7:66:b5:9b:9a:be:69:05:
83:f2:23:92:b3:3d:8d:ad:08:8f:12:bc:b5:33:dc:
b5:d6:b6:62:d5:c9:b5:f1:20:12:c2:c9:59:b0:3a:
9c:08:9c:9d:76:a6:87:9e:10:5e:04:46:a2:98:e0:
46:9c:29:d8:bf:3b:f8:26:7c:43:f6:50:4e:7c:e7:
30:56:37:57:6e:fa:4e:ab:91:d6:20:c5:28:f7:0d:
02:c9:10:94:15:e2:cf:fc:46:04:1c:6a:1c:09:4d:
2a:85:05:36:b7:de:ff:ba:94:95:92:05:d8:4d:ee:
a9:e5:f6:c7:26:7b:13:22:7b:9f:04:34:e3:5d:3f:
2e:8b:eb:2c:52:b9:1e:8b:46:75:96:c6:7c:cc:c7:
c9:3d:ad:af:d4:99:c1:8b:ee:12:3c:2c:61:35:58:
59:99:1e:af:d1:f1:68:41:97:6d:85:77:e5:cf:dc:
f2:46:7b:db:e7:80:53:93:23:08:d1:be:26:38:5d:
aa:d2:f8:74:23:9e:e5:6e:bb:f2:f3:8c:6b:5f:5d:
3f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:03:E2:25:34:83:BA:AE:18:9A:75:A4:D9:55:65:41:6B:C1:29:1B
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/BAPiJTSDuq4YmnWk2VVlQWvBKRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.42.0/23
Signature Algorithm: sha256WithRSAEncryption
74:83:5a:87:d8:ec:a0:fb:96:0d:1a:29:70:df:4d:b1:1d:5b:
b3:d8:1a:af:58:d4:8b:2f:bc:65:19:55:38:dd:e5:9f:ac:1e:
6f:5d:47:39:60:1e:96:e9:62:67:f0:3d:f6:19:ba:aa:6c:68:
1b:24:ba:08:e6:59:6f:03:61:8f:29:46:4f:3a:bb:50:b1:c9:
f2:8d:5e:22:84:6a:ee:6c:4c:e0:0d:d6:0b:d6:9b:fe:9a:75:
ec:84:8e:9e:29:5a:bf:a3:2a:a5:7f:85:ed:7b:4d:b4:ee:3e:
40:ac:18:86:af:d4:8c:3b:0e:aa:e8:b1:ac:12:8d:d1:3c:ab:
fd:66:9d:39:4a:2d:b7:48:0e:70:1c:ce:08:f0:ec:e9:99:76:
be:b1:6b:11:fb:9f:93:e4:82:11:52:f5:c2:54:86:92:66:e6:
c7:96:38:c6:46:44:63:62:93:ff:85:3d:5d:80:14:29:f7:e6:
12:09:48:12:6a:e9:e6:84:c2:38:fe:e9:33:d2:08:56:a2:f8:
c9:30:77:7a:8b:5b:ab:e5:ac:49:d3:8f:6f:fa:80:90:c7:71:
5b:ae:b2:7f:76:e2:95:3a:3d:cb:ac:2c:0a:39:07:8a:3f:42:
31:b9:8f:7a:62:a9:c7:7a:e1:c8:b2:1f:d7:98:c3:c3:4e:47:
41:9a:88:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:37 2024 by rpki-client on console-fra.rpki-client.org