Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/Z67XuTahkDVr8d_7epNr5v9MWcc.roa
File: Z67XuTahkDVr8d_7epNr5v9MWcc.roa (raw, json)
Hash identifier: ruI6wOylfRwGMHuk7+w3yXTeCWB5ppj8ZEc6bbPa/0Y=
Subject key identifier: 67:AE:D7:B9:36:A1:90:35:6B:F1:DF:FB:7A:93:6B:E6:FF:4C:59:C7
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 0189551CB65DF345DCF5EF6CCA2A6A3D9A22
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/Z67XuTahkDVr8d_7epNr5v9MWcc.roa
Signing time: Fri 14 Jul 2023 15:54:52 +0000
ROA not before: Fri 14 Jul 2023 15:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.233.38.0/24 maxlen: 24
46.233.39.0/24 maxlen: 24
46.233.42.0/24 maxlen: 24
46.233.42.0/23 maxlen: 23
46.233.43.0/24 maxlen: 24
46.233.44.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Aug 2023 06:09:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:55:1c:b6:5d:f3:45:dc:f5:ef:6c:ca:2a:6a:3d:9a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Jul 14 15:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67aed7b936a190356bf1dffb7a936be6ff4c59c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:09:b8:7b:f2:0a:35:0d:00:60:09:c5:89:3e:
08:05:c4:69:a7:9a:b5:18:75:19:2e:1f:e4:da:33:
49:82:d0:73:b6:19:8d:04:78:88:e6:7c:25:94:a1:
a8:cf:51:42:a4:72:20:d8:7b:1e:ba:8b:f0:ba:0a:
a1:4d:10:16:38:9a:4e:27:83:99:8e:5d:c3:5a:6b:
32:b4:91:9f:47:9c:97:c5:13:20:ec:35:65:68:b3:
01:16:b2:a2:27:4b:8e:6a:ed:62:95:ec:9a:f2:bf:
f8:e8:49:46:50:bd:5b:99:16:f8:c1:14:f7:41:49:
1e:2a:81:51:f5:9b:5f:d5:55:c4:5d:86:75:1b:36:
73:ad:ed:ef:0b:0e:f9:df:5b:9f:01:e3:2b:c2:06:
30:ae:94:0a:6c:72:8a:0d:28:a1:20:4d:81:72:e3:
e8:be:c4:af:80:f1:23:b3:53:a8:a2:97:b3:1f:3e:
d2:41:79:07:38:ff:1f:db:52:33:17:bb:bc:94:d5:
8e:89:6f:98:7b:15:7a:8d:0d:3b:4f:a7:f2:11:81:
45:17:59:59:3d:fb:c2:20:23:eb:db:69:ca:0f:42:
77:93:55:a1:b5:dc:50:9c:66:15:d1:5a:71:96:06:
42:2e:58:1d:6c:67:1a:da:8c:85:83:a0:2b:62:af:
1f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AE:D7:B9:36:A1:90:35:6B:F1:DF:FB:7A:93:6B:E6:FF:4C:59:C7
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/Z67XuTahkDVr8d_7epNr5v9MWcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.38.0/23
46.233.42.0-46.233.45.255
Signature Algorithm: sha256WithRSAEncryption
25:0c:6d:a9:a2:41:75:4f:70:bc:63:7f:5d:ad:0f:b6:74:a4:
1c:13:37:48:7c:35:db:19:92:88:2b:7b:4e:71:13:dd:ea:46:
f7:8c:20:55:06:e6:e3:26:3b:41:87:27:79:fc:64:e3:3b:66:
74:ab:c9:7d:8e:82:36:61:fe:f0:a8:f1:40:b5:6c:d8:3a:d8:
8d:60:b8:55:00:00:6a:59:36:88:fd:20:5c:81:08:0d:a3:e9:
46:17:e9:1e:06:75:94:f2:e6:b4:e7:29:6f:29:1c:cb:e8:f8:
d8:41:36:2c:7b:f8:aa:f1:99:ac:65:a2:7a:59:30:c2:aa:de:
26:58:33:8b:56:65:8a:37:dd:e4:7a:ba:d8:b5:11:6d:cb:e5:
e2:7b:a1:23:c9:99:7b:d1:01:6a:33:09:b6:a6:64:e8:dd:2d:
bd:d3:ac:9e:ec:67:6d:3a:37:19:f8:cd:af:ea:d0:df:1c:ef:
c3:45:54:79:b9:a7:20:12:21:89:9a:19:c0:06:08:fd:93:92:
4a:a8:2f:17:9e:85:a0:7e:bf:2a:a1:52:cd:8a:10:26:04:3b:
9d:69:8c:dc:90:c9:4f:70:7e:a2:55:bf:62:6c:b8:40:d4:7b:
cc:1e:35:69:36:ad:0e:3d:9b:33:35:d1:3a:2a:36:05:5c:89:
a8:ec:d9:cf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:37 2024 by rpki-client on console-fra.rpki-client.org