Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/WItdPkCIP6LHGZKnvhkZuijJN-M.roa
File: WItdPkCIP6LHGZKnvhkZuijJN-M.roa (raw, json)
Hash identifier: ufM24LCxg7Gdya4NpUuk6grLJbhpW4vh0jVolZTEkX8=
Subject key identifier: 58:8B:5D:3E:40:88:3F:A2:C7:19:92:A7:BE:19:19:BA:28:C9:37:E3
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 0190649B9E7A95608E1547645A5888D2AB0B
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/WItdPkCIP6LHGZKnvhkZuijJN-M.roa
Signing time: Sat 29 Jun 2024 15:27:18 +0000
ROA not before: Sat 29 Jun 2024 15:27:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 46.233.42.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 29 Aug 2024 07:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:64:9b:9e:7a:95:60:8e:15:47:64:5a:58:88:d2:ab:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Jun 29 15:27:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=588b5d3e40883fa2c71992a7be1919ba28c937e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:46:59:c5:91:ed:33:86:bc:54:41:b4:d4:d6:
14:67:55:ea:62:aa:74:ea:d7:b2:5a:15:e2:ab:12:
d5:79:25:1e:4a:7f:fa:b8:9d:7a:ef:3d:51:a8:83:
b4:14:3e:11:5f:43:47:f4:9b:e6:29:60:a4:4a:be:
27:cb:61:38:40:bd:ee:94:ca:96:4b:15:97:8c:a1:
56:9c:d2:b7:59:5a:bc:c9:50:ba:70:07:c0:0f:52:
5d:f0:03:ff:5a:24:3e:c8:11:5e:dd:01:86:37:40:
f5:b5:09:39:d6:32:6c:ff:a6:2e:91:2d:e8:e5:eb:
c5:dd:21:b0:07:e8:af:3e:bf:a7:90:bc:2e:e6:38:
bd:97:a6:1d:ba:6a:79:49:55:e2:4c:ac:a1:8f:48:
9d:d6:d1:6d:63:da:ae:68:66:d9:68:28:95:46:7d:
53:35:25:4d:e5:a9:3a:93:d6:35:2b:cb:ff:db:40:
1e:d9:da:f0:cf:15:90:77:e4:5e:4f:06:f4:7b:4f:
f3:3b:ec:89:ca:ae:c0:4f:5e:d0:c6:7f:20:2e:61:
0c:17:ad:a0:a9:f0:0a:92:bd:89:8e:84:22:82:8e:
2d:db:fa:0b:9f:80:21:fe:34:9b:08:e2:78:c8:ff:
ad:c6:f9:0a:3e:0d:82:27:fa:e2:b4:41:db:b4:af:
a7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8B:5D:3E:40:88:3F:A2:C7:19:92:A7:BE:19:19:BA:28:C9:37:E3
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/WItdPkCIP6LHGZKnvhkZuijJN-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.42.0/23
Signature Algorithm: sha256WithRSAEncryption
32:15:c6:95:76:f1:dd:40:66:d3:c3:f6:d5:62:d7:b9:c8:98:
b8:d2:96:21:79:e8:d3:59:e8:40:67:34:3f:54:bd:84:8e:be:
ac:e3:6a:91:17:5a:4e:3f:3c:0d:d0:61:b8:96:d0:f3:5e:2d:
93:0c:04:95:97:ca:45:02:cc:8b:93:af:f2:f4:3d:28:d9:fc:
66:bf:06:2b:26:71:2f:7f:44:3d:1d:93:e7:d7:30:6e:37:15:
ab:cc:b8:90:a6:fd:ba:71:53:07:eb:2a:5d:3e:b4:17:a1:1f:
f0:c1:12:62:60:4c:0d:a5:43:38:71:22:e7:3c:b1:d2:4a:27:
b7:2c:9a:43:b3:eb:eb:c0:51:74:3d:7e:98:06:85:eb:0f:2c:
e5:be:5a:14:e2:40:ea:09:d2:7e:5c:a6:b0:58:ea:06:2e:77:
cd:2b:cc:6f:c0:de:56:8e:49:dd:ec:99:34:78:97:ab:bf:54:
f2:2a:80:eb:2f:08:87:1b:cc:cb:00:62:ba:a0:56:eb:85:cd:
7e:46:8c:4b:62:28:b2:62:54:bf:bd:b3:56:a5:2c:b7:b7:d8:
2e:03:40:8a:40:0b:db:1f:bd:f9:3f:8d:ea:c4:76:fa:a6:5c:
c5:95:6f:0e:44:67:ed:f1:02:61:95:33:62:05:12:15:8f:4f:
58:c4:ce:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 10:00:51 2024 by rpki-client on console-fra.rpki-client.org