Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/FKG5ckl-rpG83RRbbYL4IQS_okA.roa
File: FKG5ckl-rpG83RRbbYL4IQS_okA.roa (raw, json)
Hash identifier: JtWTD7jqzYZrkLRuimyTRDwbdlNJ0F4FaqZ4egeiMwQ=
Subject key identifier: 14:A1:B9:72:49:7E:AE:91:BC:DD:14:5B:6D:82:F8:21:04:BF:A2:40
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 0187960A79ACD8C9984F14A085B6E42C4E48
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/FKG5ckl-rpG83RRbbYL4IQS_okA.roa
Signing time: Tue 18 Apr 2023 20:24:41 +0000
ROA not before: Tue 18 Apr 2023 20:24:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209043
IP address blocks: 46.233.44.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 19 Apr 2023 06:17:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:96:0a:79:ac:d8:c9:98:4f:14:a0:85:b6:e4:2c:4e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Apr 18 20:24:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14a1b972497eae91bcdd145b6d82f82104bfa240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e7:98:2c:25:f9:dc:b5:f7:df:88:27:77:8a:
6a:fe:c3:17:e8:47:65:99:4e:b6:20:a8:69:68:b7:
58:1a:a1:e3:ea:e7:3d:a7:52:cd:e4:d7:03:38:bb:
9d:e2:9d:25:17:4e:e6:15:ca:89:c2:ed:b5:c6:9d:
62:cf:d3:dd:af:33:2c:b3:2d:c3:ee:27:d9:92:81:
d6:7a:e3:5f:1b:2c:6d:35:3b:ac:f8:6f:5b:1e:75:
1f:02:49:6b:02:c4:c6:f5:f8:a5:ce:69:81:1e:90:
72:c7:49:ad:23:d6:ee:6c:9f:d2:fc:67:fa:86:a5:
02:3d:0c:df:23:eb:a9:c0:f2:4e:7e:d6:df:24:87:
d2:77:9f:d8:98:ae:5f:32:0c:fa:df:d6:ed:53:1b:
2b:bb:fc:d5:51:93:55:3e:fb:fd:ae:b8:e9:c6:76:
8f:90:24:2c:23:26:df:95:8c:1e:f5:07:aa:ca:43:
e3:db:c8:5b:23:94:51:ab:d2:73:47:85:11:e3:b5:
aa:7c:0a:b0:4c:70:ad:a7:ba:f2:ec:b9:b7:04:bd:
27:b6:db:76:4a:15:ef:81:c2:df:7a:ce:67:8b:96:
5f:df:a8:7c:6e:88:ff:a3:e1:f6:76:13:8a:db:6e:
81:4f:8c:ef:a0:41:fd:ae:62:7c:8b:77:5c:32:ef:
70:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A1:B9:72:49:7E:AE:91:BC:DD:14:5B:6D:82:F8:21:04:BF:A2:40
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/FKG5ckl-rpG83RRbbYL4IQS_okA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.44.0/23
Signature Algorithm: sha256WithRSAEncryption
68:0c:cd:f6:8c:a2:50:46:52:1f:69:66:81:90:a2:6a:8b:0a:
75:c5:6b:c9:78:19:55:d0:7b:5c:1b:10:5b:da:28:fe:3d:50:
2f:c3:2a:29:80:f6:dc:22:19:ea:35:96:b2:f4:cc:1f:a7:0f:
04:4b:5f:f7:49:45:b6:0e:42:ee:15:39:87:57:9d:9d:1b:64:
a5:28:c7:87:9b:c7:71:b4:36:e0:80:ce:b0:c8:ac:bb:90:26:
88:5b:20:8d:75:3b:c0:a1:8f:ad:99:85:78:f8:15:29:54:48:
83:19:e3:37:dd:e8:4c:ae:61:38:e8:55:e3:71:07:12:43:c7:
65:21:5e:87:11:9e:ff:13:78:5a:d3:5d:16:2a:8b:2b:62:c7:
11:f0:a8:62:58:f6:56:63:7c:60:8f:3a:0f:b5:06:c0:fb:46:
ef:ea:8f:04:c9:11:03:ca:04:9d:b3:d9:e0:5f:4b:2b:af:e4:
0e:2c:a5:0b:ee:6b:b0:3f:fc:13:ab:5d:16:5a:d4:f0:47:4b:
c7:5b:8a:0b:f2:71:9d:ff:2b:9a:1d:4c:ac:5d:3a:37:9b:0a:
d0:75:81:b0:ac:2a:41:a7:27:73:cf:b3:2f:25:06:a8:77:31:
51:a9:1a:88:66:95:33:d9:ef:66:5c:63:87:42:e5:07:5d:06:
bc:d8:1b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:37 2024 by rpki-client on console-fra.rpki-client.org