Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/Njnt38eNsTKikSI-kqJzuPeFuc8.roa
File: Njnt38eNsTKikSI-kqJzuPeFuc8.roa (raw, json)
Hash identifier: hsXDsYIpg/dZHlHpFU9jAZ2MAU7vwA7BIAagKWUIa50=
Subject key identifier: 36:39:ED:DF:C7:8D:B1:32:A2:91:22:3E:92:A2:73:B8:F7:85:B9:CF
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 0189DE0D43C8BDD7DCC3260907E07612E424
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/Njnt38eNsTKikSI-kqJzuPeFuc8.roa
Signing time: Thu 10 Aug 2023 06:05:58 +0000
ROA not before: Thu 10 Aug 2023 06:05:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.233.38.0/24 maxlen: 24
46.233.42.0/23 maxlen: 23
46.233.43.0/24 maxlen: 24
46.233.44.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Sep 2023 07:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:de:0d:43:c8:bd:d7:dc:c3:26:09:07:e0:76:12:e4:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Aug 10 06:05:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3639eddfc78db132a291223e92a273b8f785b9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:54:1e:f5:07:fa:23:d1:d8:3f:08:b7:58:f2:
f8:68:26:69:13:94:d1:78:64:f4:96:a1:f2:6c:3d:
46:9a:5a:73:c6:90:74:da:74:a9:98:5e:70:b3:f8:
dd:bc:09:aa:5b:58:01:5e:95:25:9c:27:f1:20:be:
6e:32:1d:7a:68:55:11:55:4b:f0:77:33:02:b5:2d:
b0:08:08:62:10:2c:ab:be:2a:6c:eb:f2:0f:4f:fd:
a7:f4:2b:d3:f8:79:27:a5:67:84:5f:b2:0a:1f:25:
e7:14:7a:bb:07:ab:88:12:6e:e2:95:52:98:98:99:
35:e4:19:d7:13:75:a0:9e:e4:fb:0f:35:07:81:61:
3b:ef:88:4c:0c:e4:22:d4:ca:92:d2:66:70:f5:84:
35:ae:af:a5:ea:1c:ce:08:9f:fe:2d:0d:30:ee:1f:
ab:68:86:08:19:0b:be:76:74:2e:0c:29:e4:5b:34:
70:ef:14:35:e9:a6:69:63:1c:80:ff:ad:c9:66:2f:
e3:55:52:48:bf:08:2a:f6:d8:ab:ef:c2:8f:0d:f4:
70:bd:06:2d:3f:5d:16:35:43:76:5f:f3:a3:b6:62:
d8:81:04:58:5c:09:d9:d8:f9:e7:0b:f3:ef:ac:21:
0a:01:d0:37:76:0f:86:0c:ec:f1:e6:57:e9:cd:4c:
37:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:39:ED:DF:C7:8D:B1:32:A2:91:22:3E:92:A2:73:B8:F7:85:B9:CF
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/Njnt38eNsTKikSI-kqJzuPeFuc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.38.0/24
46.233.42.0-46.233.45.255
Signature Algorithm: sha256WithRSAEncryption
25:34:6d:a0:5c:61:43:b1:fb:bf:5a:44:4a:7e:26:6f:ea:5e:
be:0c:20:98:58:ac:ad:c8:bd:07:5c:87:3c:57:da:aa:61:aa:
bb:2b:67:11:49:d4:8c:db:bf:ec:21:ec:62:67:0e:fd:ee:be:
be:d1:19:5a:db:d6:bb:3d:6e:3c:1c:02:71:28:c5:63:5f:6f:
82:bf:69:90:03:84:e2:2c:b4:60:a4:c3:8a:f3:61:60:4e:80:
57:1c:15:b6:41:45:1d:bc:b3:3e:fc:0f:1b:6d:fe:67:7c:da:
16:ad:1c:76:93:13:4c:95:b4:cb:cc:da:db:96:65:2d:da:4b:
7d:7e:26:ce:87:f2:3f:f2:31:ab:f8:ca:da:93:be:3b:3a:63:
12:25:76:e4:e8:6e:00:de:35:23:bc:4b:35:37:af:0a:6f:00:
61:88:5a:47:6b:bf:f8:da:71:f7:20:6b:53:f0:c2:b4:6f:60:
c7:7d:90:e1:4e:10:40:15:14:99:a7:4d:de:04:0c:bb:d5:90:
78:0f:ae:f5:51:ac:04:88:56:4f:1e:0d:66:a3:46:03:a6:cf:
64:68:fe:d6:4e:b1:de:a1:1b:85:91:cf:7f:38:6a:02:fc:80:
a8:10:eb:1c:16:58:c8:85:71:6a:ae:60:2f:ec:cd:84:8f:37:
d0:e1:e5:a7
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYneDUPIvdfcwyYJB+B2EuQkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1
ZDU2ZjUwHhcNMjMwODEwMDYwNTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjM5ZWRkZmM3OGRiMTMyYTI5MTIyM2U5MmEyNzNiOGY3ODViOWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1Qe9Qf6I9HYPwi3WPL4aCZpE5TR
eGT0lqHybD1GmlpzxpB02nSpmF5ws/jdvAmqW1gBXpUlnCfxIL5uMh16aFURVUvw
dzMCtS2wCAhiECyrvips6/IPT/2n9CvT+HknpWeEX7IKHyXnFHq7B6uIEm7ilVKY
mJk15BnXE3WgnuT7DzUHgWE774hMDOQi1MqS0mZw9YQ1rq+l6hzOCJ/+LQ0w7h+r
aIYIGQu+dnQuDCnkWzRw7xQ16aZpYxyA/63JZi/jVVJIvwgq9tir78KPDfRwvQYt
P10WNUN2X/OjtmLYgQRYXAnZ2PnnC/PvrCEKAdA3dg+GDOzx5lfpzUw3SwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFDY57d/HjbEyopEiPpKic7j3hbnPMB8GA1UdIwQY
MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt
M2MxNmZmODQxYWIyLzEvTmpudDM4ZU5zVEtpa1NJLWtxSnp1UGVGdWM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy
LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQALukmMAwD
BAEu6SoDBAEu6SwwDQYJKoZIhvcNAQELBQADggEBACU0baBcYUOx+79aREp+Jm/q
Xr4MIJhYrK3IvQdchzxX2qphqrsrZxFJ1Izbv+wh7GJnDv3uvr7RGVrb1rs9bjwc
AnEoxWNfb4K/aZADhOIstGCkw4rzYWBOgFccFbZBRR28sz78Dxtt/md82hatHHaT
E0yVtMvM2tuWZS3aS31+Js6H8j/yMav4ytqTvjs6YxIlduTobgDeNSO8SzU3rwpv
AGGIWkdrv/jacfcga1PwwrRvYMd9kOFOEEAVFJmnTd4EDLvVkHgPrvVRrASIVk8e
DWajRgOmz2Ro/tZOsd6hG4WRz384agL8gKgQ6xwWWMiFcWquYC/szYSPN9Dh5ac=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:09 2024 by rpki-client on console-ams.rpki-client.org