Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/G-LGU1L5746s_mKa7wG4hIbgVGk.roa
File: G-LGU1L5746s_mKa7wG4hIbgVGk.roa (raw, json)
Hash identifier: ujEPhHQTtMa5+l6xwvL1J/RFzUuRauBnTld+o0uCny4=
Subject key identifier: 1B:E2:C6:53:52:F9:EF:8E:AC:FE:62:9A:EF:01:B8:84:86:E0:54:69
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 0187B3299C31453AE2AF36CD070074222BAE
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/G-LGU1L5746s_mKa7wG4hIbgVGk.roa
Signing time: Mon 24 Apr 2023 12:07:41 +0000
ROA not before: Mon 24 Apr 2023 12:07:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44077
IP address blocks: 46.233.40.0/23 maxlen: 24
46.233.47.0/24 maxlen: 24
46.233.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b3:29:9c:31:45:3a:e2:af:36:cd:07:00:74:22:2b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Apr 24 12:07:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1be2c65352f9ef8eacfe629aef01b88486e05469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5b:ca:8c:90:65:d5:a7:33:ab:a9:22:f3:f6:
af:88:c4:ae:e6:dd:e6:16:08:40:6b:2b:ed:c7:9a:
53:f5:32:58:02:af:87:99:c5:e9:da:f7:92:23:22:
d0:e1:01:d0:41:c1:6b:43:ad:a5:15:23:b2:07:9e:
94:df:8d:b9:f0:35:ad:b1:ed:80:ea:e9:2c:79:32:
0d:83:41:ac:51:c5:18:89:b0:ad:fd:c0:4e:9e:f0:
e1:8a:ab:f2:4b:f4:1b:1a:0e:af:fa:02:20:c6:13:
86:01:e5:b7:ce:18:39:86:70:19:b3:c0:27:be:a7:
e8:e7:1e:29:21:11:1f:b4:fe:2e:7f:28:5e:7c:e3:
57:12:52:a8:c7:ff:e4:85:4b:ae:99:71:98:33:a8:
a5:e0:b7:c8:43:bc:a0:57:b9:3f:51:90:5c:ae:54:
20:0d:25:f6:7c:fb:c8:92:9a:ba:7a:1f:dc:7f:07:
a4:0e:0f:b3:23:4c:13:f6:5b:fd:81:84:7d:e3:13:
41:c4:3a:10:a3:51:8a:6e:5f:50:ab:f8:4b:26:59:
04:e4:ba:a7:98:a2:da:a9:80:97:ae:b3:18:d2:e3:
9e:d9:bb:1e:49:cb:88:83:fb:cc:16:7e:c3:03:eb:
71:37:41:ce:81:72:7f:74:42:be:05:fe:86:99:6e:
a4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E2:C6:53:52:F9:EF:8E:AC:FE:62:9A:EF:01:B8:84:86:E0:54:69
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/G-LGU1L5746s_mKa7wG4hIbgVGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.40.0/23
46.233.46.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:2e:5c:81:5c:a3:8c:d9:01:ec:3b:aa:b9:34:9e:83:71:8c:
18:31:28:9b:df:3c:12:69:96:dd:ff:39:3f:4c:e7:96:9a:81:
db:8e:25:f9:bb:b3:d1:f9:3f:d8:28:5d:72:25:2a:d7:85:71:
b9:79:32:66:49:5a:23:54:10:5e:61:0b:5e:a1:57:94:6f:be:
c1:7b:0c:e0:21:30:aa:bb:ab:5e:a2:6a:46:66:cd:15:5c:9a:
6a:cb:3a:3c:9f:c7:c1:50:a7:6d:13:d3:18:11:82:96:e5:d0:
fd:18:30:fb:d9:5b:8d:f4:df:58:96:fa:97:a5:f6:6f:e1:22:
09:0a:f0:d8:80:c2:92:2a:84:2d:6f:50:4e:c5:80:5d:62:14:
90:b8:3f:ea:ea:9e:ca:a1:87:17:49:d9:80:3e:b6:50:e0:d1:
3f:40:da:94:2c:53:72:fa:d2:5a:40:8f:72:43:9b:ed:5a:42:
09:17:de:ef:cc:2f:06:7c:9c:d6:38:79:8c:14:2f:94:ec:14:
c1:9c:c6:e5:7a:df:f4:80:95:d4:f6:e0:b1:d0:64:93:e9:1d:
bf:8a:c6:95:32:08:44:61:91:87:d8:cb:b3:a2:3c:b0:92:c9:
8c:5d:a4:65:67:e0:df:53:4a:0f:f1:2d:e2:d4:3a:ce:f7:eb:
ba:de:b3:41
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYezKZwxRTrirzbNBwB0IiuuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1
ZDU2ZjUwHhcNMjMwNDI0MTIwNzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmUyYzY1MzUyZjllZjhlYWNmZTYyOWFlZjAxYjg4NDg2ZTA1NDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlvKjJBl1aczq6ki8/aviMSu5t3m
FghAayvtx5pT9TJYAq+HmcXp2veSIyLQ4QHQQcFrQ62lFSOyB56U34258DWtse2A
6ukseTINg0GsUcUYibCt/cBOnvDhiqvyS/QbGg6v+gIgxhOGAeW3zhg5hnAZs8An
vqfo5x4pIREftP4ufyhefONXElKox//khUuumXGYM6il4LfIQ7ygV7k/UZBcrlQg
DSX2fPvIkpq6eh/cfwekDg+zI0wT9lv9gYR94xNBxDoQo1GKbl9Qq/hLJlkE5Lqn
mKLaqYCXrrMY0uOe2bseScuIg/vMFn7DA+txN0HOgXJ/dEK+Bf6GmW6kAQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBvixlNS+e+OrP5imu8BuISG4FRpMB8GA1UdIwQY
MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt
M2MxNmZmODQxYWIyLzEvRy1MR1UxTDU3NDZzX21LYTd3RzRoSWJnVkdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy
LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLukoAwQB
LukuMA0GCSqGSIb3DQEBCwUAA4IBAQAsLlyBXKOM2QHsO6q5NJ6DcYwYMSib3zwS
aZbd/zk/TOeWmoHbjiX5u7PR+T/YKF1yJSrXhXG5eTJmSVojVBBeYQteoVeUb77B
ewzgITCqu6teompGZs0VXJpqyzo8n8fBUKdtE9MYEYKW5dD9GDD72VuN9N9YlvqX
pfZv4SIJCvDYgMKSKoQtb1BOxYBdYhSQuD/q6p7KoYcXSdmAPrZQ4NE/QNqULFNy
+tJaQI9yQ5vtWkIJF97vzC8GfJzWOHmMFC+U7BTBnMblet/0gJXU9uCx0GST6R2/
isaVMghEYZGH2MuzojywksmMXaRlZ+DfU0oP8S3i1DrO9+u63rNB
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:23:14 2024 by rpki-client on console-ams.rpki-client.org