Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/OGev6x7tUzCAwhBpbwuR-Jv7pUw.roa
File: OGev6x7tUzCAwhBpbwuR-Jv7pUw.roa (raw, json)
Hash identifier: fhZ9tt+zEhNPKVhFlLOKCLqCx3IdM9xpVmEBGpWPRiM=
Subject key identifier: 38:67:AF:EB:1E:ED:53:30:80:C2:10:69:6F:0B:91:F8:9B:FB:A5:4C
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 0189DE0D4420D95BFF9D8D0B34A5B300FD1D
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/OGev6x7tUzCAwhBpbwuR-Jv7pUw.roa
Signing time: Thu 10 Aug 2023 06:05:58 +0000
ROA not before: Thu 10 Aug 2023 06:05:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396998
IP address blocks: 46.233.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:de:0d:44:20:d9:5b:ff:9d:8d:0b:34:a5:b3:00:fd:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Aug 10 06:05:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3867afeb1eed533080c210696f0b91f89bfba54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8a:2c:71:c1:88:92:79:43:b9:56:f0:ef:60:
f2:9d:9b:ee:dc:69:d2:02:fb:68:2e:88:d4:3d:4b:
74:ef:5b:c1:bb:6e:40:4c:fb:82:c8:3f:14:c2:a4:
4f:b2:64:f0:dc:74:6c:84:d7:cb:f3:d6:ea:5e:fb:
1d:db:21:36:d8:29:fc:83:53:8d:d6:47:80:ce:58:
80:bc:44:54:ad:f9:b2:7a:17:6f:42:ef:f9:2b:90:
cb:69:b8:08:91:48:3b:ec:4e:eb:af:7d:3c:f8:57:
08:70:69:05:04:6d:22:5a:ea:69:5e:7e:dd:b5:c7:
79:ba:9e:00:3a:15:a7:60:3a:31:a3:f4:88:51:65:
44:54:18:a0:ea:e3:f1:ef:53:5a:d7:04:08:5b:b1:
b1:57:70:0f:ef:d9:1d:ab:70:bb:06:5c:f3:7d:95:
1c:0f:a1:a0:9a:2e:4a:45:ed:1e:33:af:71:bb:6b:
77:f9:97:5f:6d:ca:9b:72:dd:00:44:62:c8:23:8b:
85:e4:c8:1d:8f:da:6a:f2:f3:07:9b:19:59:87:75:
54:9f:3f:ca:59:52:c0:c5:3c:9d:07:b2:1b:0d:cb:
77:67:9c:37:e7:c2:c4:c8:37:27:5e:2f:b6:91:77:
2c:4b:d3:8f:2e:b8:33:38:83:c3:31:c0:13:21:34:
f5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:67:AF:EB:1E:ED:53:30:80:C2:10:69:6F:0B:91:F8:9B:FB:A5:4C
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/OGev6x7tUzCAwhBpbwuR-Jv7pUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.39.0/24
Signature Algorithm: sha256WithRSAEncryption
75:eb:48:e5:e5:9c:cc:6c:f4:97:12:89:72:bb:e3:6e:1c:af:
ee:e5:22:9e:f8:4f:5d:a3:3a:18:0f:2b:54:f0:36:57:98:00:
0c:26:f3:70:bc:97:17:17:d0:35:1e:de:97:c3:3b:e3:46:37:
78:26:21:6f:ee:85:fe:b6:1b:2e:27:9e:53:2d:ce:d9:a9:36:
d2:28:87:e1:da:3d:7d:70:fe:56:b0:3f:ad:b7:b1:21:88:a7:
1a:51:56:9d:a1:9a:79:60:fb:54:93:80:ab:70:15:25:3a:95:
34:be:db:82:7c:ff:4e:f0:23:7d:e7:ea:fe:6d:1d:71:ef:a3:
99:c8:80:a6:96:20:a4:fd:7c:d2:e6:14:65:5e:4b:a3:ac:45:
5a:0e:35:8e:16:08:e0:d7:6f:5d:aa:72:56:06:1e:30:51:4e:
c2:35:c5:d0:f4:25:71:63:55:39:19:86:e6:4a:96:6f:40:01:
6a:64:70:43:4b:23:b3:78:d9:5c:6c:59:30:78:b8:75:ce:bd:
42:4d:98:b9:e6:97:5b:f6:b8:aa:39:ae:a7:11:b9:bd:d4:6e:
4d:83:ee:8b:73:c8:f6:1b:8b:4d:0b:b5:99:d8:a0:5d:65:f5:
06:71:87:77:33:5c:0d:1b:f5:e2:5f:bf:0d:02:2d:97:c2:b4:
f6:fc:47:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:45 2024 by rpki-client on console-fra.rpki-client.org