Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/FfJNmmJhY1xGrI5yd8WSFgmIaQE.roa
File: FfJNmmJhY1xGrI5yd8WSFgmIaQE.roa (raw, json)
Hash identifier: IDYorC5pfoTWwWImBVYqdRvM4RxudRVXkRqN7t4Dioc=
Subject key identifier: 15:F2:4D:9A:62:61:63:5C:46:AC:8E:72:77:C5:92:16:09:88:69:01
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 01883923C1C2557856771562B67BB450FD38
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/FfJNmmJhY1xGrI5yd8WSFgmIaQE.roa
Signing time: Sat 20 May 2023 12:30:24 +0000
ROA not before: Sat 20 May 2023 12:30:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 46.233.42.0/24 maxlen: 24
46.233.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Jun 2023 13:55:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:39:23:c1:c2:55:78:56:77:15:62:b6:7b:b4:50:fd:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: May 20 12:30:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15f24d9a6261635c46ac8e7277c5921609886901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f0:7a:f4:1a:fd:28:b2:3c:75:44:a0:fb:c6:
61:9e:c8:da:ce:c4:b7:e9:03:63:ab:2e:ac:30:5f:
8b:71:8e:85:23:50:00:7e:de:62:d2:dd:a2:71:05:
bc:ce:44:c2:e3:d5:21:65:34:45:2c:1c:dc:cf:2c:
b9:f9:6c:e1:96:38:d5:4d:b4:ac:d4:58:1b:f6:02:
df:e8:df:09:1e:7b:7b:dd:1b:b3:0b:e3:08:17:87:
5f:cc:3d:05:02:96:cb:d2:52:1b:ec:9f:ed:f5:4e:
83:a0:4f:e3:e4:b7:b0:7b:b5:9d:90:5d:ec:9d:e2:
33:ea:62:79:49:73:fa:8f:a5:a4:67:10:ed:cc:56:
62:fa:e7:40:cd:da:59:66:3d:2d:2e:85:7c:c0:79:
6a:d2:cd:7d:0b:c2:80:1e:e7:be:4a:4d:af:8c:80:
52:81:8e:bb:57:b0:5e:12:bf:47:3e:6c:6a:c5:be:
a8:c5:4c:c0:2f:9f:ff:7f:cf:c7:dd:b9:7a:01:fe:
bf:22:b9:64:05:7e:48:f5:15:50:c2:5d:f7:fa:74:
85:55:c0:08:8d:5b:62:e8:fc:91:0d:43:20:6b:c7:
94:d5:ff:bf:cb:97:25:91:b4:32:97:4e:e2:fd:6e:
de:a3:22:eb:81:0f:00:ba:95:3d:67:5d:e1:fb:db:
9c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F2:4D:9A:62:61:63:5C:46:AC:8E:72:77:C5:92:16:09:88:69:01
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/FfJNmmJhY1xGrI5yd8WSFgmIaQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.42.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:f3:b8:76:f7:33:ca:cf:b2:89:30:5d:d6:e1:2a:74:06:90:
64:ad:9d:44:c8:f9:91:5e:7a:2b:eb:61:b1:21:77:66:fe:35:
75:6a:db:6e:e5:9b:fb:56:f9:da:22:9b:c1:d0:fc:c8:98:05:
3c:00:08:b3:a4:7e:fb:c5:97:e0:87:a4:80:d3:f6:c6:21:24:
73:8d:45:f9:dc:9a:af:5c:fa:31:fd:13:13:67:8e:eb:b9:ce:
9e:5b:52:88:fc:a8:40:23:a2:df:e9:4b:db:da:cf:f3:55:03:
be:55:de:f7:2d:b5:a4:f7:1e:04:1a:cf:81:68:63:4f:96:11:
2e:de:6e:60:77:4a:6d:78:91:42:5a:33:67:c4:7f:79:b5:cf:
fd:e2:b3:e7:82:68:cf:7a:27:5e:59:0c:e3:28:c5:c5:4c:30:
72:fd:0c:4f:42:c1:1b:d5:f0:01:e0:5f:dc:25:3c:32:6f:ae:
f0:a5:2a:3c:30:f7:10:e7:22:03:e8:b2:30:4e:b3:42:e7:69:
89:74:31:12:ae:e8:fa:88:9b:f3:ea:e3:3f:c4:75:c3:bc:22:
61:23:6c:c3:29:4e:b1:38:05:dd:9c:f5:bf:f6:0a:57:f2:e2:
56:88:7c:f2:28:5d:00:32:46:b8:c5:cc:77:09:8e:ca:30:fc:
f0:56:3a:44
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYg5I8HCVXhWdxVitnu0UP04MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1
ZDU2ZjUwHhcNMjMwNTIwMTIzMDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWYyNGQ5YTYyNjE2MzVjNDZhYzhlNzI3N2M1OTIxNjA5ODg2OTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fB69Br9KLI8dUSg+8ZhnsjazsS3
6QNjqy6sMF+LcY6FI1AAft5i0t2icQW8zkTC49UhZTRFLBzczyy5+WzhljjVTbSs
1Fgb9gLf6N8JHnt73RuzC+MIF4dfzD0FApbL0lIb7J/t9U6DoE/j5Lewe7WdkF3s
neIz6mJ5SXP6j6WkZxDtzFZi+udAzdpZZj0tLoV8wHlq0s19C8KAHue+Sk2vjIBS
gY67V7BeEr9HPmxqxb6oxUzAL5//f8/H3bl6Af6/IrlkBX5I9RVQwl33+nSFVcAI
jVti6PyRDUMga8eU1f+/y5clkbQyl07i/W7eoyLrgQ8AupU9Z13h+9ucQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBXyTZpiYWNcRqyOcnfFkhYJiGkBMB8GA1UdIwQY
MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt
M2MxNmZmODQxYWIyLzEvRmZKTm1tSmhZMXhHckk1eWQ4V1NGZ21JYVFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy
LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLukqMA0G
CSqGSIb3DQEBCwUAA4IBAQCq87h29zPKz7KJMF3W4Sp0BpBkrZ1EyPmRXnor62Gx
IXdm/jV1attu5Zv7VvnaIpvB0PzImAU8AAizpH77xZfgh6SA0/bGISRzjUX53Jqv
XPox/RMTZ47ruc6eW1KI/KhAI6Lf6Uvb2s/zVQO+Vd73LbWk9x4EGs+BaGNPlhEu
3m5gd0pteJFCWjNnxH95tc/94rPngmjPeideWQzjKMXFTDBy/QxPQsEb1fAB4F/c
JTwyb67wpSo8MPcQ5yID6LIwTrNC52mJdDESruj6iJvz6uM/xHXDvCJhI2zDKU6x
OAXdnPW/9gpX8uJWiHzyKF0AMka4xcx3CY7KMPzwVjpE
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:09 2024 by rpki-client on console-ams.rpki-client.org