Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/CD-07ig2FCm_z4B3-OxoCzr-IXs.roa
File: CD-07ig2FCm_z4B3-OxoCzr-IXs.roa (raw, json)
Hash identifier: dMmc5d9OGYZvsNCCd5+sxb/M0QeXaRgJRgBq+cHHNLU=
Subject key identifier: 08:3F:B4:EE:28:36:14:29:BF:CF:80:77:F8:EC:68:0B:3A:FE:21:7B
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 0186AC675E231D68E1190654F9ED38F51D54
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/CD-07ig2FCm_z4B3-OxoCzr-IXs.roa
Signing time: Sat 04 Mar 2023 11:35:00 +0000
ROA not before: Sat 04 Mar 2023 11:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.233.38.0/24 maxlen: 24
46.233.39.0/24 maxlen: 24
46.233.44.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 03 Apr 2023 06:41:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ac:67:5e:23:1d:68:e1:19:06:54:f9:ed:38:f5:1d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Mar 4 11:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=083fb4ee28361429bfcf8077f8ec680b3afe217b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:93:34:f9:23:f0:db:9b:85:54:f7:a1:d9:6a:
7e:40:fe:c3:72:c2:03:18:7f:e2:36:4f:3e:d1:c5:
c3:11:df:04:87:a9:05:48:c5:8f:09:e8:be:23:d9:
c7:36:fb:82:76:f6:3f:42:37:41:8c:66:44:af:6a:
1e:02:53:dd:e0:d1:47:e6:15:17:6d:96:8e:34:4a:
b9:96:69:43:3a:80:0b:4f:d9:13:d8:ca:35:04:df:
c0:7a:6a:f0:26:0e:97:9f:8f:4d:04:1d:5f:7e:56:
ea:09:53:0a:2b:7f:2e:26:17:09:f2:1b:1f:fb:e8:
d1:1f:0d:6a:8b:f5:0e:4d:c7:f8:bb:71:a3:0f:e3:
c5:26:b9:5f:3b:09:fd:d6:71:90:6a:58:cb:bd:7c:
cd:2c:a9:9f:79:a3:bb:58:80:cf:1e:50:7a:a7:06:
af:bc:df:56:55:49:24:e0:18:13:57:e7:3b:61:9a:
91:28:c0:46:ef:8b:d7:51:98:24:61:cf:a8:9d:6e:
9b:35:91:f4:93:46:1f:d1:4e:bf:5e:88:5d:4a:a0:
ea:dd:e1:fe:ac:d9:fd:ad:6d:24:f3:58:92:7c:17:
11:52:c6:93:ae:9a:4b:0b:41:81:2c:eb:a1:20:9e:
34:58:e3:9c:85:68:3f:18:72:ff:43:c1:03:93:e6:
62:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3F:B4:EE:28:36:14:29:BF:CF:80:77:F8:EC:68:0B:3A:FE:21:7B
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/CD-07ig2FCm_z4B3-OxoCzr-IXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.38.0/23
46.233.44.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:e0:11:20:1e:a7:6d:39:f7:44:12:15:0d:85:78:25:41:39:
f8:a6:ca:42:73:96:e3:7b:9e:7a:39:4e:83:8b:d6:d5:1b:ef:
35:4d:d4:3e:a8:95:cb:2c:a0:54:46:d0:70:f2:6e:ff:32:f7:
80:f2:90:f1:21:ed:e7:c1:55:e0:c1:28:4c:3e:ff:8c:2e:75:
e0:31:4f:47:38:23:29:78:3b:59:20:72:0e:a6:f1:06:1c:2d:
92:2b:08:ab:d0:43:52:89:43:81:fe:c2:c2:a2:a5:a9:eb:aa:
fb:48:2c:f5:3d:95:e0:4e:d2:1a:ab:57:5e:dc:22:ec:66:1b:
11:bf:51:aa:62:93:04:4c:74:07:08:04:d2:77:f8:8b:1f:47:
6a:42:8f:76:5e:d2:a2:99:07:c9:c5:ca:70:c7:5d:3b:b9:70:
0d:06:ac:5c:84:6f:8b:d2:c3:14:3f:88:61:0c:2d:2b:8f:d9:
8d:60:d0:c8:fc:5b:b0:78:9a:8a:71:8b:42:b2:71:cb:1a:a0:
a0:4f:05:3a:59:03:dd:fb:06:92:17:1e:35:a9:97:ae:45:fe:
bc:c1:4e:ec:4b:03:48:b0:0c:a7:0e:49:82:0e:2f:ae:b9:c2:
d9:2f:5b:ff:81:87:e8:49:8b:32:98:d7:6f:ca:87:01:64:45:
4d:23:61:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:09 2024 by rpki-client on console-ams.rpki-client.org