Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/DAKA5tRtIZPOo00z-VtR5WUBlIk.roa
File: DAKA5tRtIZPOo00z-VtR5WUBlIk.roa (raw, json)
Hash identifier: 4b2Z3u0CI43wtLape3+7WGCCb/GUnZtXzCiVBsBw0w4=
Subject key identifier: 0C:02:80:E6:D4:6D:21:93:CE:A3:4D:33:F9:5B:51:E5:65:01:94:89
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 018A59F2E3553A35C6F5042514D8BA8B27FF
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/DAKA5tRtIZPOo00z-VtR5WUBlIk.roa
Signing time: Sun 03 Sep 2023 07:30:04 +0000
ROA not before: Sun 03 Sep 2023 07:30:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212477
IP address blocks: 46.233.44.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 07 Sep 2023 14:04:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:59:f2:e3:55:3a:35:c6:f5:04:25:14:d8:ba:8b:27:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Sep 3 07:30:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c0280e6d46d2193cea34d33f95b51e565019489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d7:7b:bd:83:d2:ef:ea:eb:db:ca:12:b4:8e:
11:8c:26:df:69:17:d9:f3:34:a9:ea:10:04:f1:4e:
19:b4:fe:7b:3d:ac:7b:36:49:ba:85:6f:67:05:61:
43:ce:31:09:bb:73:79:df:c1:eb:b3:d8:37:fb:44:
7e:63:5d:fb:9f:c2:88:40:15:a1:50:3c:28:be:8d:
36:19:9e:a0:02:03:40:92:05:f7:bc:28:55:26:ec:
01:54:82:3a:a5:e9:13:0d:ac:a8:be:97:b7:e6:c6:
f3:ee:78:43:d0:22:12:24:f2:a0:fe:92:c0:b7:8c:
f8:44:59:55:8d:dd:2e:88:09:08:3f:9c:05:5c:e2:
6c:33:f5:21:16:1f:58:63:b5:91:c6:32:c6:a6:75:
92:35:ad:ea:29:c0:c5:59:6b:68:aa:9a:9f:4f:92:
1f:0f:c9:7d:f8:83:ae:84:10:ce:1e:fc:1b:6b:0b:
2d:82:27:f0:9d:e3:83:25:ea:eb:67:0f:e6:8d:a0:
7f:c7:61:9e:f5:20:77:4f:17:07:25:e1:16:b1:4a:
55:87:02:c2:34:99:8f:e7:5c:a1:81:e6:79:5c:dd:
a9:ea:82:98:b7:2e:07:4b:80:77:e4:8c:b1:a4:6a:
a7:6d:19:d2:e6:3a:78:61:2a:65:fa:b5:0e:80:c2:
05:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:02:80:E6:D4:6D:21:93:CE:A3:4D:33:F9:5B:51:E5:65:01:94:89
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/DAKA5tRtIZPOo00z-VtR5WUBlIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.44.0/23
Signature Algorithm: sha256WithRSAEncryption
90:f2:fc:dc:15:e1:9c:28:1c:30:2d:4f:41:29:2f:1a:6a:f7:
00:0e:42:df:ab:3c:c5:00:0a:33:45:63:ca:29:2f:04:c8:ce:
b5:48:db:ed:d6:6e:49:c2:d2:fa:4f:00:b4:d2:38:84:6e:73:
f5:8a:f6:f6:06:23:b8:9d:6f:91:65:a4:e9:69:3d:48:ea:e6:
2e:9a:92:e5:03:11:39:9a:70:e9:45:5b:4c:ef:36:e4:32:86:
02:d9:74:d7:b9:ab:9a:4b:11:04:14:d2:d5:90:84:d0:d1:b6:
e8:dd:a1:7d:ab:be:9d:01:1f:03:3b:dd:43:fa:8a:5c:e4:d4:
42:7b:44:3c:60:42:4c:1f:b3:f3:c7:ee:35:62:d9:82:e2:90:
97:a8:d1:f8:a4:b0:36:e9:f3:ca:2a:39:1f:ed:0a:07:33:d1:
79:c3:3a:27:b1:21:47:12:fe:21:19:98:a4:3e:b0:a2:2a:d4:
a0:bb:c2:0d:82:88:9c:4b:58:80:42:9c:25:19:8c:73:0b:dd:
d4:da:33:fd:37:1c:21:cf:fe:6d:25:61:06:da:8e:6a:04:ec:
4d:6d:27:28:18:43:7c:c4:49:78:f1:d5:f1:c1:29:f8:df:b9:
c1:c4:4a:f4:e7:bf:a2:ef:b1:10:52:d0:78:d7:34:a1:81:a2:
22:ea:8f:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYpZ8uNVOjXG9QQlFNi6iyf/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1
ZDU2ZjUwHhcNMjMwOTAzMDczMDA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzAyODBlNmQ0NmQyMTkzY2VhMzRkMzNmOTViNTFlNTY1MDE5NDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9d7vYPS7+rr28oStI4RjCbfaRfZ
8zSp6hAE8U4ZtP57Pax7Nkm6hW9nBWFDzjEJu3N538Hrs9g3+0R+Y137n8KIQBWh
UDwovo02GZ6gAgNAkgX3vChVJuwBVII6pekTDayovpe35sbz7nhD0CISJPKg/pLA
t4z4RFlVjd0uiAkIP5wFXOJsM/UhFh9YY7WRxjLGpnWSNa3qKcDFWWtoqpqfT5If
D8l9+IOuhBDOHvwbawstgifwneODJerrZw/mjaB/x2Ge9SB3TxcHJeEWsUpVhwLC
NJmP51yhgeZ5XN2p6oKYty4HS4B35IyxpGqnbRnS5jp4YSpl+rUOgMIFuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAwCgObUbSGTzqNNM/lbUeVlAZSJMB8GA1UdIwQY
MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt
M2MxNmZmODQxYWIyLzEvREFLQTV0UnRJWlBPbzAwei1WdFI1V1VCbElrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy
LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLuksMA0G
CSqGSIb3DQEBCwUAA4IBAQCQ8vzcFeGcKBwwLU9BKS8aavcADkLfqzzFAAozRWPK
KS8EyM61SNvt1m5JwtL6TwC00jiEbnP1ivb2BiO4nW+RZaTpaT1I6uYumpLlAxE5
mnDpRVtM7zbkMoYC2XTXuauaSxEEFNLVkITQ0bbo3aF9q76dAR8DO91D+opc5NRC
e0Q8YEJMH7Pzx+41YtmC4pCXqNH4pLA26fPKKjkf7QoHM9F5wzonsSFHEv4hGZik
PrCiKtSgu8INgoicS1iAQpwlGYxzC93U2jP9Nxwhz/5tJWEG2o5qBOxNbScoGEN8
xEl48dXxwSn437nBxEr057+i77EQUtB41zShgaIi6o/6
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:09 2024 by rpki-client on console-ams.rpki-client.org