Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/TZqfY7PiJ3bbX6FIrIOV6PmkOJc.roa
File: TZqfY7PiJ3bbX6FIrIOV6PmkOJc.roa (raw, json)
Hash identifier: qQlMG68BUxIaZ3Gy0CR5QfoqDZldiwqjA6vqfAlkpro=
Subject key identifier: 4D:9A:9F:63:B3:E2:27:76:DB:5F:A1:48:AC:83:95:E8:F9:A4:38:97
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 0189B1878868CE9CD583DE6BB80F1582CA69
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/TZqfY7PiJ3bbX6FIrIOV6PmkOJc.roa
Signing time: Tue 01 Aug 2023 14:36:36 +0000
ROA not before: Tue 01 Aug 2023 14:36:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 46.233.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Oct 2023 16:19:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b1:87:88:68:ce:9c:d5:83:de:6b:b8:0f:15:82:ca:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Aug 1 14:36:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d9a9f63b3e22776db5fa148ac8395e8f9a43897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:63:3a:4c:56:57:be:43:4e:ba:fd:79:04:7f:
e5:15:f5:bd:ff:47:f6:15:2f:0e:2c:76:6c:d6:f3:
80:6a:01:1e:9b:39:bb:1a:16:3b:f0:5e:c2:cf:22:
a8:11:4f:75:6e:ee:25:18:cc:59:b0:44:85:2c:bf:
43:be:4b:05:6c:b9:e3:98:4e:66:cc:74:22:33:38:
13:78:4e:98:29:dc:da:67:d4:2a:b3:8c:23:67:1d:
ef:2d:b0:c8:93:09:e2:6f:c0:7c:0c:7e:cd:c4:46:
94:87:ab:07:07:e7:97:27:f3:7f:76:03:3a:13:10:
cd:5e:15:0e:ad:1c:cd:cd:6f:42:ad:c3:8c:2f:90:
2d:70:29:fb:a6:90:74:79:61:ca:a2:be:5c:df:bc:
6c:5b:1d:8a:7b:4a:ab:cf:5c:bd:cb:d7:59:3b:d3:
b0:3a:a9:10:6c:ef:8f:28:d0:e5:45:36:26:68:af:
cd:f7:8c:e3:71:b5:b8:4c:c2:56:0c:3b:b4:c0:85:
ad:e0:87:f5:e7:3f:9e:ad:15:59:6c:7f:e8:87:89:
14:f4:75:77:2d:d2:77:c9:f2:61:22:b7:c0:44:96:
25:4b:aa:af:28:5c:13:12:9c:de:be:c7:86:e2:7e:
36:14:d5:74:d4:bf:66:dd:42:b6:a9:42:5f:e7:ca:
2e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9A:9F:63:B3:E2:27:76:DB:5F:A1:48:AC:83:95:E8:F9:A4:38:97
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/TZqfY7PiJ3bbX6FIrIOV6PmkOJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.42.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:10:4b:e1:6a:43:b6:40:67:48:b9:2b:78:84:ac:32:90:8c:
0e:3c:68:c7:ce:45:17:35:9d:6e:74:84:59:9c:3a:b8:f1:2f:
39:ea:43:6e:5e:2e:f6:f2:8d:bd:84:26:c2:f9:92:47:62:7b:
11:ea:c9:c6:b6:c6:c1:5b:ce:c8:f9:e9:81:a1:59:36:c0:82:
e7:5c:69:ef:85:9b:f7:c2:14:7f:1c:79:78:d4:60:e6:4e:d4:
cd:30:b4:a3:0e:36:d0:a0:33:76:42:5b:fa:01:44:64:67:c4:
77:c2:bd:7f:5a:8e:b7:1f:28:ba:8d:cc:f7:d2:74:dd:a0:db:
ab:20:c8:1e:35:db:15:c4:d1:d7:37:29:af:2f:5d:44:b6:f3:
6e:7c:b9:7c:9c:f9:b9:ec:35:32:f1:1f:62:c6:6e:fe:fd:17:
41:4a:41:6d:49:0d:8f:03:fd:42:9d:b5:20:2f:3a:5c:1f:31:
d7:e5:5f:eb:61:ea:5d:1d:66:68:96:e4:18:cb:de:be:7f:27:
95:38:a7:4c:0e:84:11:b7:e2:5d:10:12:f5:7a:ba:90:4a:64:
d3:5e:12:3e:bd:ac:5f:97:54:b7:54:50:79:0d:d4:4a:0a:77:
79:05:73:10:61:ed:e7:10:d3:12:cf:0f:9e:e6:13:51:e0:a6:
aa:ad:bf:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:09 2024 by rpki-client on console-ams.rpki-client.org