Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/Lc9UZqn_m0RTXCCuemYoYn-Jl2Y.roa
File: Lc9UZqn_m0RTXCCuemYoYn-Jl2Y.roa (raw, json)
Hash identifier: zAHyUd41BhCNR06EkZIx8hwFcK3UPtr8zCIOHptFhfU=
Subject key identifier: 2D:CF:54:66:A9:FF:9B:44:53:5C:20:AE:7A:66:28:62:7F:89:97:66
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 0186AC675EFD228921663578D9151FF5D6D3
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/Lc9UZqn_m0RTXCCuemYoYn-Jl2Y.roa
Signing time: Sat 04 Mar 2023 11:35:00 +0000
ROA not before: Sat 04 Mar 2023 11:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44077
IP address blocks: 46.233.40.0/22 maxlen: 22
46.233.47.0/24 maxlen: 24
46.233.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Apr 2023 10:37:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ac:67:5e:fd:22:89:21:66:35:78:d9:15:1f:f5:d6:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Mar 4 11:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2dcf5466a9ff9b44535c20ae7a6628627f899766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5b:05:d1:e0:54:a3:20:c9:b6:6e:03:84:27:
0f:af:2e:15:70:e5:ef:4b:a3:43:ea:6a:7d:41:da:
f2:cc:39:13:c1:6f:ea:d7:c2:8f:d3:c2:41:b3:ba:
90:6d:ef:87:49:14:f3:dc:7f:44:83:7e:8f:24:96:
56:62:fa:a5:23:e8:3b:74:3c:0e:c6:80:7a:85:02:
82:3e:82:ae:1d:4b:91:a1:10:c3:1e:79:91:ed:0c:
00:04:28:aa:4a:da:b7:c0:19:dc:d1:ec:a9:a4:ff:
e6:ce:50:0c:cd:d1:2a:9d:cc:d8:bd:2a:f4:bd:cc:
e2:79:b7:4f:ba:da:ea:f4:5f:ef:b8:92:f6:ae:e3:
c0:65:01:81:d2:f3:d6:87:e8:34:95:64:a3:28:ae:
c1:ef:3d:07:93:9f:37:87:7b:df:6b:1d:d8:0f:ed:
55:44:e3:41:28:83:41:0b:a6:f3:5e:13:66:26:8e:
7d:d6:5f:c5:52:95:d4:b9:72:dc:20:04:b0:04:30:
88:28:a3:28:c4:5c:88:60:71:e5:51:7a:45:72:ca:
bf:9e:03:26:37:f6:dc:c9:6f:5e:05:8a:61:75:0c:
4d:c4:86:94:b6:57:24:f4:94:a7:a1:c4:dd:f2:80:
92:bf:c8:8e:e7:5a:3e:d0:70:f1:f2:55:88:3a:7b:
da:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CF:54:66:A9:FF:9B:44:53:5C:20:AE:7A:66:28:62:7F:89:97:66
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/Lc9UZqn_m0RTXCCuemYoYn-Jl2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.40.0/22
46.233.46.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:03:c7:cf:8b:06:fc:67:06:d5:4b:a2:fa:24:c5:d0:4a:82:
61:86:f3:0d:cf:f0:6b:19:b4:48:12:99:aa:8a:68:70:f9:96:
1c:cd:62:95:17:62:42:d0:17:de:3f:57:d1:05:12:c6:17:e8:
e5:c8:c0:b1:65:08:18:09:46:f3:94:dc:67:0c:23:cf:a5:ba:
1a:f2:4b:5e:c8:ea:4b:5f:52:e9:20:db:eb:77:ac:1c:8b:5e:
ee:b3:bb:89:94:15:34:38:27:47:ad:dc:9a:f7:ce:ab:ac:fe:
b8:a3:fe:09:3b:e1:78:1e:4d:85:e6:40:6c:b1:ff:18:04:aa:
af:9d:ce:85:bc:1a:64:a6:c8:53:a0:9b:41:b2:38:ab:d8:d4:
d7:6e:61:a9:7d:08:7d:01:0c:86:c1:3d:15:3e:ea:94:91:97:
a0:39:21:8b:ad:ea:5b:7e:59:d3:c5:9a:1c:58:37:15:94:74:
27:20:b0:e2:29:0f:fe:3a:75:ae:20:6d:79:44:8b:67:40:62:
43:15:ba:e7:5d:b0:25:09:99:4a:f6:a6:22:01:62:86:e6:4a:
bd:de:e2:cf:fa:93:46:c5:4c:50:7d:41:c1:dc:44:83:8b:f8:
e6:8b:d4:59:90:a1:8a:3c:48:f6:6f:a2:e2:78:01:b8:d6:91:
b7:fc:0f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:09 2024 by rpki-client on console-ams.rpki-client.org