Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/NDxzt6Y6AnW9Iq1mpvw3JMLCVxk.roa
File: NDxzt6Y6AnW9Iq1mpvw3JMLCVxk.roa (raw, json)
Hash identifier: L4m+BBRGb8vJH2WfNxt75kK+kybcrXqXbTLIJECxWHI=
Subject key identifier: 34:3C:73:B7:A6:3A:02:75:BD:22:AD:66:A6:FC:37:24:C2:C2:57:19
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 018571D7C9C91230E54F9C9D4AA4FCB817C3
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/NDxzt6Y6AnW9Iq1mpvw3JMLCVxk.roa
Signing time: Mon 02 Jan 2023 09:37:25 +0000
ROA not before: Mon 02 Jan 2023 09:37:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44077
IP address blocks: 46.233.40.0/21 maxlen: 24
46.233.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:c9:c9:12:30:e5:4f:9c:9d:4a:a4:fc:b8:17:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Jan 2 09:37:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=343c73b7a63a0275bd22ad66a6fc3724c2c25719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2c:bc:a2:76:06:f1:e1:2a:71:6a:cd:c7:26:
0a:33:8a:d8:0c:ea:23:9f:a1:5a:c1:07:af:db:63:
d0:5e:1f:7d:85:48:49:1f:43:eb:87:bd:6a:d8:f6:
e4:d9:b6:e9:14:61:1f:8d:9c:c1:5b:ec:d1:e6:ef:
76:03:07:9a:91:6a:52:fb:02:1f:bb:1f:74:67:ab:
5a:b9:68:04:cd:01:4d:a0:f4:32:ff:c8:5b:ab:db:
27:55:dd:fb:df:c5:d5:1d:b9:bb:e1:e2:67:82:13:
f1:3c:15:78:91:c4:af:cf:22:fc:e4:76:89:5e:5c:
c2:0e:0b:32:66:ce:ac:bf:83:ff:11:1e:f0:40:d9:
4f:c9:fe:a5:5e:11:f0:4e:b9:48:fd:32:50:51:35:
b3:4b:ff:e6:d2:83:89:f7:c5:37:9f:b6:0a:ce:8d:
68:7d:22:e7:16:a6:85:ed:7a:c0:ce:7d:2e:ee:52:
b6:31:93:3c:97:4d:ea:20:db:9a:d1:1d:b8:e1:5f:
80:a5:ce:b9:b9:00:da:a2:d0:a4:6f:48:3d:b3:80:
90:03:39:2e:d1:90:b9:ca:88:d8:44:f5:77:24:6b:
d8:03:69:9a:db:94:8c:26:2f:c1:70:2f:76:06:f5:
d7:39:cc:44:91:1a:88:be:66:a2:2e:fb:1c:ac:f3:
52:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3C:73:B7:A6:3A:02:75:BD:22:AD:66:A6:FC:37:24:C2:C2:57:19
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/NDxzt6Y6AnW9Iq1mpvw3JMLCVxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.40.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:e6:cb:42:2e:84:6a:a4:cf:92:aa:00:ff:4b:6e:04:92:66:
2b:2c:09:34:b9:28:3b:63:aa:4e:01:38:3e:fa:de:05:79:0d:
6b:19:00:c1:07:fd:36:49:ef:72:32:fe:38:f6:45:0f:a7:e0:
c4:48:9b:6e:78:7f:7b:fd:7d:29:40:fa:c4:ac:50:cf:90:a7:
4f:db:6d:c6:5c:62:ae:ae:1a:91:a5:6e:f2:bc:b7:2e:b2:03:
10:46:b9:db:54:ba:3c:10:73:de:cf:d6:f7:0b:96:ca:3f:b9:
24:13:13:03:79:c3:7b:54:74:9a:6b:c5:80:aa:f0:60:c1:97:
4f:d8:60:ee:86:18:11:98:ca:00:e0:00:ed:94:b4:84:95:99:
c3:97:41:0a:68:c6:5f:c9:3c:bf:63:77:ae:eb:7d:ff:8d:06:
8c:ba:00:10:72:c1:15:d8:93:89:99:33:e3:47:96:94:ce:bf:
b3:52:c4:d2:54:a4:44:ed:e8:05:cb:75:0e:aa:41:b5:9b:c5:
69:87:8b:b5:76:3b:ff:6a:dd:e0:1f:19:00:ea:35:b3:71:7e:
3d:5c:12:8b:26:4d:f1:a4:aa:ef:96:d6:c8:98:c1:a9:9c:31:
76:87:b7:52:f4:bd:eb:a4:a3:49:19:23:ef:19:c0:ab:bf:2a:
9f:cd:24:01
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVx18nJEjDlT5ydSqT8uBfDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1
ZDU2ZjUwHhcNMjMwMTAyMDkzNzI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDNjNzNiN2E2M2EwMjc1YmQyMmFkNjZhNmZjMzcyNGMyYzI1NzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCy8onYG8eEqcWrNxyYKM4rYDOoj
n6FawQev22PQXh99hUhJH0Prh71q2Pbk2bbpFGEfjZzBW+zR5u92AweakWpS+wIf
ux90Z6tauWgEzQFNoPQy/8hbq9snVd3738XVHbm74eJnghPxPBV4kcSvzyL85HaJ
XlzCDgsyZs6sv4P/ER7wQNlPyf6lXhHwTrlI/TJQUTWzS//m0oOJ98U3n7YKzo1o
fSLnFqaF7XrAzn0u7lK2MZM8l03qINua0R244V+Apc65uQDaotCkb0g9s4CQAzku
0ZC5yojYRPV3JGvYA2ma25SMJi/BcC92BvXXOcxEkRqIvmaiLvscrPNShQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDQ8c7emOgJ1vSKtZqb8NyTCwlcZMB8GA1UdIwQY
MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt
M2MxNmZmODQxYWIyLzEvTkR4enQ2WTZBblc5SXExbXB2dzNKTUxDVnhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy
LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLukoMA0G
CSqGSIb3DQEBCwUAA4IBAQAq5stCLoRqpM+SqgD/S24EkmYrLAk0uSg7Y6pOATg+
+t4FeQ1rGQDBB/02Se9yMv449kUPp+DESJtueH97/X0pQPrErFDPkKdP223GXGKu
rhqRpW7yvLcusgMQRrnbVLo8EHPez9b3C5bKP7kkExMDecN7VHSaa8WAqvBgwZdP
2GDuhhgRmMoA4ADtlLSElZnDl0EKaMZfyTy/Y3eu633/jQaMugAQcsEV2JOJmTPj
R5aUzr+zUsTSVKRE7egFy3UOqkG1m8Vph4u1djv/at3gHxkA6jWzcX49XBKLJk3x
pKrvltbImMGpnDF2h7dS9L3rpKNJGSPvGcCrvyqfzSQB
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:05 2023 by rpki-client on console-fra.rpki-client.org