Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/TzCXI_frJ3upYVLUnmAse9n_K44.roa
File: TzCXI_frJ3upYVLUnmAse9n_K44.roa (raw, json)
Hash identifier: IptITIA16jMJsotAHq2nnLZg6/0lrlYohQPKhssFx6E=
Subject key identifier: 4F:30:97:23:F7:EB:27:7B:A9:61:52:D4:9E:60:2C:7B:D9:FF:2B:8E
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 018C813F4453181F3BF32B1A0B2B2CC90C04
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/TzCXI_frJ3upYVLUnmAse9n_K44.roa
Signing time: Tue 19 Dec 2023 08:44:16 +0000
ROA not before: Tue 19 Dec 2023 08:44:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197992
IP address blocks: 46.233.32.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:81:3f:44:53:18:1f:3b:f3:2b:1a:0b:2b:2c:c9:0c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Dec 19 08:44:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f309723f7eb277ba96152d49e602c7bd9ff2b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b8:cd:df:36:97:83:54:67:d0:0c:aa:af:f0:
7a:4c:0a:ac:4f:bb:e4:43:65:13:50:f3:b9:b2:e2:
43:f0:55:d9:b9:f1:9f:f4:7e:e0:10:ed:de:57:1f:
e5:c8:25:6c:2f:3e:35:5d:cd:45:16:96:df:01:a6:
d4:47:19:9f:a0:4a:0a:b8:a7:fb:fd:07:5a:a9:0a:
cb:eb:49:12:8b:41:b4:5c:c6:27:1c:d3:fa:32:e9:
45:a4:2b:2f:9b:62:4e:04:b9:9e:1e:38:0b:35:13:
d7:ba:e6:85:f3:4c:70:26:24:1b:63:e7:72:76:0d:
90:f8:be:71:41:8c:99:6c:e9:b2:79:56:d2:ab:f0:
79:d0:f3:9f:1a:45:5e:f8:2d:d4:2c:a6:76:7c:08:
99:bf:38:d7:f5:0e:78:93:90:18:6a:05:8c:76:31:
79:d9:7b:d5:c8:74:15:46:f9:49:75:01:04:1e:80:
5c:7a:ee:68:6d:0a:59:b5:f6:ce:9e:00:d4:08:da:
17:cc:7d:cd:56:6b:89:b7:fe:ef:8e:b5:63:c1:3f:
54:31:2d:1c:a4:97:b7:b0:b5:83:54:0c:a9:f0:19:
72:80:de:1e:70:88:8b:3d:55:7b:8a:19:e1:a5:67:
00:d0:88:87:d5:76:fe:92:46:d6:ae:29:fe:f1:7d:
d0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:30:97:23:F7:EB:27:7B:A9:61:52:D4:9E:60:2C:7B:D9:FF:2B:8E
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/TzCXI_frJ3upYVLUnmAse9n_K44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.32.0/22
Signature Algorithm: sha256WithRSAEncryption
19:ca:98:dd:2e:de:b1:98:a7:52:ee:65:a1:f9:e7:c9:11:af:
85:d0:78:d7:ee:81:19:bf:36:24:fa:a8:46:76:f1:f2:ce:5a:
81:85:54:9f:ee:89:72:16:b8:13:94:68:73:5c:53:7b:3a:5f:
25:d0:8d:19:85:ad:37:f8:ea:81:2f:78:2a:20:b9:74:89:32:
1b:0e:ae:ef:e1:f4:a1:98:e9:2f:b7:31:9d:a5:07:14:bd:98:
25:11:66:15:46:d2:fb:62:d1:32:84:8b:35:07:92:9d:01:12:
96:36:b3:72:ec:e2:3a:b7:e0:82:26:f9:40:1e:9c:a4:be:3c:
62:b7:6f:b5:f9:59:9d:e4:c3:62:56:e2:67:96:5b:5d:ab:a0:
c0:29:3d:34:54:c8:80:48:23:43:3d:68:b6:14:a8:a0:19:01:
13:3c:88:3e:8d:2b:eb:86:ad:2a:1e:e0:16:c1:42:ab:b6:91:
33:5b:e8:30:d9:6f:37:13:81:81:10:6d:ef:bd:0b:c6:9e:65:
99:25:ef:d0:ce:32:27:0e:25:fc:85:9d:ea:38:6d:78:f5:91:
5f:5d:56:03:be:4b:f4:fb:59:c6:b4:aa:67:40:0c:82:42:86:
9f:0b:d1:9f:e9:fd:35:c1:68:c5:c7:89:d5:f8:0c:29:cd:9f:
d1:af:4c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:23:14 2024 by rpki-client on console-ams.rpki-client.org