Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/C3vRrUqHfkVckAS7Er-6w9LGhOk.roa
File: C3vRrUqHfkVckAS7Er-6w9LGhOk.roa (raw, json)
Hash identifier: J1R8hAak9e3lFm54PrbIy2cMZ/BZ2fi4bsGSQUoLH7I=
Subject key identifier: 0B:7B:D1:AD:4A:87:7E:45:5C:90:04:BB:12:BF:BA:C3:D2:C6:84:E9
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 018A6FF58F3B2AB4578AD26891CDCB239C09
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/C3vRrUqHfkVckAS7Er-6w9LGhOk.roa
Signing time: Thu 07 Sep 2023 14:04:38 +0000
ROA not before: Thu 07 Sep 2023 14:04:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212477
IP address blocks: 46.233.44.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6f:f5:8f:3b:2a:b4:57:8a:d2:68:91:cd:cb:23:9c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Sep 7 14:04:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b7bd1ad4a877e455c9004bb12bfbac3d2c684e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3a:bd:4c:82:a7:21:5e:d7:fc:a0:18:b8:45:
e5:2d:1a:9d:c7:86:1a:b1:50:cb:f8:56:5e:b5:01:
cd:3f:fa:1e:af:90:83:66:1a:b2:a3:5c:9c:f1:ea:
97:fd:82:19:73:a3:6d:a7:90:b9:16:a1:1b:51:aa:
c2:cc:3c:e2:15:51:78:f0:43:c3:3c:19:ee:3d:6e:
1f:12:b7:49:8e:8e:30:e9:38:9a:08:b5:27:fd:7e:
2b:a8:b0:97:8e:2c:b0:d7:e2:c1:66:25:fe:9e:d0:
ba:a6:ba:0c:dd:ee:ab:14:6a:aa:ba:11:8f:62:20:
5b:68:24:fe:2d:34:f2:c0:52:b2:70:4a:54:f3:a3:
ea:03:e0:78:8e:1f:76:ce:f2:6d:bd:65:74:da:ce:
19:82:05:50:40:47:1b:97:c4:bf:75:00:3e:cd:b5:
0b:20:91:01:47:31:4e:33:05:97:9d:86:06:93:fd:
e2:fd:07:c8:e2:8a:6c:87:c6:46:1a:6d:67:83:78:
61:8d:f0:f0:49:1c:bf:22:32:94:c6:96:2b:3c:06:
42:1a:c9:7c:b8:5a:12:c3:b6:f0:42:38:7f:5b:7a:
52:65:3a:63:55:36:ff:31:84:2f:29:a2:5a:ec:cc:
fe:d2:49:a0:62:9b:c7:57:53:93:47:c5:86:f4:46:
a8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7B:D1:AD:4A:87:7E:45:5C:90:04:BB:12:BF:BA:C3:D2:C6:84:E9
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/C3vRrUqHfkVckAS7Er-6w9LGhOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.44.0/23
Signature Algorithm: sha256WithRSAEncryption
13:f7:65:5e:c4:98:5d:3e:30:ca:91:82:29:64:ef:d2:43:0a:
81:47:ad:4b:36:59:68:47:e7:b7:35:68:20:61:71:95:8c:bb:
d9:ff:a8:ee:67:1d:97:6e:b5:11:62:f3:24:53:a8:cd:07:85:
49:5c:00:3d:54:fa:b0:a9:88:0e:3a:1c:ce:14:64:3e:ca:d8:
83:85:92:a2:a6:19:43:8d:bb:54:5f:ec:1b:a4:2b:ee:08:cd:
e7:47:bf:41:10:68:31:e1:a9:8a:2a:54:8e:0d:c9:32:c5:51:
8b:23:2b:0d:c8:5b:5d:75:c6:1e:0b:63:93:d4:aa:d2:26:2d:
c6:db:f3:23:b4:f5:a8:f9:41:72:0e:7d:7c:71:27:f4:4b:29:
12:13:08:dd:c2:cd:b7:66:85:bf:de:10:85:86:c8:ac:a8:1e:
85:cf:05:58:20:58:19:68:be:71:03:44:26:e6:48:a7:ab:c7:
30:f8:05:7e:d4:cd:4f:5d:67:90:b6:02:e9:c8:ce:72:1b:2e:
ec:50:a6:28:cc:35:4a:52:36:59:9e:75:04:23:e9:12:a6:3b:
0f:9b:c9:72:10:02:2d:45:63:d9:a3:e5:2d:1c:95:72:5c:72:
ec:25:75:2e:4b:24:70:79:14:fa:c9:90:5b:1c:85:e5:13:61:
ef:d8:8c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:23:14 2024 by rpki-client on console-ams.rpki-client.org