Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/NJXyzTk94-av3gggjITT-Emmjxg.roa
File: NJXyzTk94-av3gggjITT-Emmjxg.roa (raw, json)
Hash identifier: xEMtkdPa3IED+0rd1He0p74OmGGQ2WogR2YL+xUB26o=
Subject key identifier: 34:95:F2:CD:39:3D:E3:E6:AF:DE:08:20:8C:84:D3:F8:49:A6:8F:18
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 0186A8240E7C11E836ED73A455C8FF2FD798
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/NJXyzTk94-av3gggjITT-Emmjxg.roa
Signing time: Fri 03 Mar 2023 15:43:00 +0000
ROA not before: Fri 03 Mar 2023 15:43:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44077
IP address blocks: 46.233.40.0/22 maxlen: 22
46.233.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Mar 2023 11:35:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a8:24:0e:7c:11:e8:36:ed:73:a4:55:c8:ff:2f:d7:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Mar 3 15:43:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3495f2cd393de3e6afde08208c84d3f849a68f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:99:6a:bc:07:19:74:7a:78:fc:2b:9a:42:0b:
70:6f:ab:26:44:27:03:5b:e6:a7:57:65:93:b0:97:
1a:4f:aa:1b:4f:66:e6:50:ce:49:58:34:5a:8c:1a:
e0:68:20:4e:d4:33:14:7b:9c:60:36:bd:ae:50:19:
a0:39:91:fe:d6:46:1e:9d:6c:7c:04:dd:be:6d:f8:
c6:35:ec:a9:c1:82:40:dc:c2:a5:33:c4:9f:a0:4e:
1b:51:b3:64:f3:3b:54:4b:d1:df:43:37:b3:ac:63:
1d:9e:aa:4a:bb:d5:35:2e:b2:50:57:9b:39:64:86:
6f:38:91:88:1c:ad:c1:42:d9:ae:fc:02:cd:0c:3b:
db:f1:2d:2c:75:84:c7:7a:59:f3:f8:46:be:d7:ff:
0f:c8:d8:1f:44:bb:bd:c4:65:6d:69:9b:67:1b:1e:
af:b6:35:a6:e9:c9:86:bb:1e:2c:dd:01:c7:4c:b2:
dd:af:f5:01:9f:3c:aa:07:0d:14:51:2b:83:f6:72:
13:1e:05:4f:91:10:83:a3:b2:2b:fe:ff:7b:94:7f:
ee:39:4e:9c:53:e4:86:77:86:18:f3:61:39:33:4a:
69:b6:fa:6e:10:13:13:87:5b:e6:5f:0a:8e:86:41:
0d:12:f7:3b:5c:30:1b:18:15:12:28:40:94:4e:cc:
e1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:95:F2:CD:39:3D:E3:E6:AF:DE:08:20:8C:84:D3:F8:49:A6:8F:18
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/NJXyzTk94-av3gggjITT-Emmjxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.40.0/22
46.233.47.0/24
Signature Algorithm: sha256WithRSAEncryption
08:32:97:9e:1f:09:5c:3f:c6:91:46:05:cc:0e:c0:3a:b7:c3:
5a:a5:e6:6e:09:a8:03:27:7a:e9:f3:79:1a:f5:e5:35:f9:13:
76:45:e2:c3:d7:f4:97:b9:c1:9a:2a:1e:08:0b:4c:68:3f:e9:
c5:6b:92:4e:30:b9:56:bc:90:b8:fb:61:01:4c:42:b0:07:3b:
6d:a2:36:e7:8e:95:2e:1d:c1:91:64:ae:ad:46:89:11:52:37:
b8:18:77:47:ad:36:a8:f8:ba:8b:b7:a5:33:22:ce:cb:06:cd:
51:1e:ea:2e:22:30:bc:64:6b:a8:88:36:1a:64:e1:c7:99:88:
c1:a5:0d:66:17:a3:d2:d3:ef:6c:d3:aa:87:1b:e7:01:6c:dd:
44:6c:38:7d:8a:88:65:51:30:28:6b:90:1a:69:7f:9f:3e:1d:
38:0b:06:dd:be:3a:64:b7:7b:ec:75:43:39:1e:49:2e:ef:fa:
7f:8a:a4:d6:0f:db:c3:64:55:f8:af:d2:59:30:f0:76:b9:22:
91:fe:23:3b:0e:e2:83:d3:20:7f:e6:ee:b4:e8:6e:59:cb:42:
80:7b:22:ff:27:05:40:28:ac:17:8f:17:63:16:0a:ec:8f:36:
8c:60:a7:83:a9:61:46:b1:a7:37:e0:27:b7:8b:9c:db:de:5e:
f9:23:d6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:37 2024 by rpki-client on console-fra.rpki-client.org