Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/eFzoVgYUiJ-Q8wmcq-TUCzpeq7g.roa
File: eFzoVgYUiJ-Q8wmcq-TUCzpeq7g.roa (raw, json)
Hash identifier: i4FS4vIsUchQOTMDvAO0jJNvX8Ze5k8YfdqVL4K9XDI=
Subject key identifier: 78:5C:E8:56:06:14:88:9F:90:F3:09:9C:AB:E4:D4:0B:3A:5E:AB:B8
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 0189B18787CE0D033BC2CDC79238F36B257E
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/eFzoVgYUiJ-Q8wmcq-TUCzpeq7g.roa
Signing time: Tue 01 Aug 2023 14:36:36 +0000
ROA not before: Tue 01 Aug 2023 14:36:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.233.38.0/24 maxlen: 24
46.233.42.0/23 maxlen: 23
46.233.43.0/24 maxlen: 24
46.233.44.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Aug 2023 06:39:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b1:87:87:ce:0d:03:3b:c2:cd:c7:92:38:f3:6b:25:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Aug 1 14:36:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=785ce8560614889f90f3099cabe4d40b3a5eabb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b5:c9:26:c7:5b:a8:f6:4c:09:0e:dd:ad:d4:
76:d8:30:21:cc:4f:97:5f:73:4b:9d:ab:d2:62:be:
1e:6e:8a:32:58:53:7b:45:1d:dc:f0:c9:94:f3:7c:
ba:0b:29:16:ac:03:93:a2:15:36:a2:b6:76:00:34:
36:17:5c:d6:e2:56:b7:e1:52:78:ab:4d:3b:f3:a0:
03:0d:0f:61:ea:b2:dc:b7:69:45:a6:90:bf:29:f6:
1c:d3:3e:10:b4:a2:08:2a:02:36:55:9c:49:44:83:
30:0c:3a:04:b2:57:a1:46:ae:36:f9:8e:7c:80:34:
64:b8:3e:1c:b6:28:39:61:80:84:55:cc:06:88:b5:
02:51:4b:f5:bd:06:6f:6d:6d:a4:dc:5c:34:a5:84:
58:18:b8:b8:98:f6:a2:d0:f1:c3:48:21:a3:02:a6:
42:57:3c:6c:95:a2:1f:cc:dd:37:1b:51:be:ee:63:
d0:65:4a:e5:4b:8e:f7:6e:bc:d9:ab:f9:c9:bd:20:
72:fa:ac:9a:85:b0:84:64:13:0e:88:09:5e:b5:0e:
93:ab:1e:31:6b:1a:c1:79:76:ec:39:6e:12:47:f0:
c4:90:f9:c8:d7:50:0c:22:d0:92:87:c6:50:53:64:
e7:11:d7:f1:19:9b:c5:dd:44:aa:76:07:ed:89:96:
15:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5C:E8:56:06:14:88:9F:90:F3:09:9C:AB:E4:D4:0B:3A:5E:AB:B8
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/eFzoVgYUiJ-Q8wmcq-TUCzpeq7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.38.0/24
46.233.42.0-46.233.45.255
Signature Algorithm: sha256WithRSAEncryption
33:02:15:ea:77:09:c1:e2:b9:20:82:41:5f:51:2c:fc:18:4b:
7e:93:7d:dd:5f:0d:63:b0:2b:40:88:49:88:22:fc:51:f7:5c:
f5:cb:bc:75:33:75:dc:bc:23:1c:58:0a:3c:32:4b:70:26:b1:
af:a5:a6:25:08:63:7d:fd:42:9e:f5:a6:95:bb:c7:69:9f:c8:
d7:42:7d:15:7d:11:3e:00:2f:0c:9d:fd:cb:53:f2:a9:6c:f7:
9c:32:c6:6f:82:13:e7:44:83:44:6d:75:2c:fa:16:ba:d7:dc:
d6:2c:dc:82:35:2b:01:be:7d:87:66:d3:38:bf:9a:b8:18:4a:
b8:02:01:90:f9:7b:54:ac:be:2a:48:c9:ab:99:16:cf:27:69:
4e:74:12:a9:c2:29:d1:c6:bd:84:0c:d0:7b:29:14:58:97:48:
a6:56:01:25:9a:96:8f:cf:8c:9d:16:43:61:3b:24:f1:12:94:
71:f2:2f:94:7e:1a:cc:80:7d:ee:8b:fc:3c:dc:9f:af:1c:09:
94:5e:63:18:f6:18:ee:60:a9:e1:7e:03:35:c0:2b:6a:6d:4e:
c3:ef:18:db:84:5a:b6:6d:ba:49:84:da:71:13:21:97:70:12:
2b:a4:cb:d1:da:1a:0e:80:13:e1:dd:12:17:dd:f5:ff:30:46:
6f:4c:a5:fd
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYmxh4fODQM7ws3HkjjzayV+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1
ZDU2ZjUwHhcNMjMwODAxMTQzNjM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODVjZTg1NjA2MTQ4ODlmOTBmMzA5OWNhYmU0ZDQwYjNhNWVhYmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7XJJsdbqPZMCQ7drdR22DAhzE+X
X3NLnavSYr4ebooyWFN7RR3c8MmU83y6CykWrAOTohU2orZ2ADQ2F1zW4la34VJ4
q00786ADDQ9h6rLct2lFppC/KfYc0z4QtKIIKgI2VZxJRIMwDDoEslehRq42+Y58
gDRkuD4ctig5YYCEVcwGiLUCUUv1vQZvbW2k3Fw0pYRYGLi4mPai0PHDSCGjAqZC
VzxslaIfzN03G1G+7mPQZUrlS473brzZq/nJvSBy+qyahbCEZBMOiAletQ6Tqx4x
axrBeXbsOW4SR/DEkPnI11AMItCSh8ZQU2TnEdfxGZvF3USqdgftiZYVLwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFHhc6FYGFIifkPMJnKvk1As6Xqu4MB8GA1UdIwQY
MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt
M2MxNmZmODQxYWIyLzEvZUZ6b1ZnWVVpSi1ROHdtY3EtVFVDenBlcTdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy
LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQALukmMAwD
BAEu6SoDBAEu6SwwDQYJKoZIhvcNAQELBQADggEBADMCFep3CcHiuSCCQV9RLPwY
S36Tfd1fDWOwK0CISYgi/FH3XPXLvHUzddy8IxxYCjwyS3Amsa+lpiUIY339Qp71
ppW7x2mfyNdCfRV9ET4ALwyd/ctT8qls95wyxm+CE+dEg0RtdSz6FrrX3NYs3II1
KwG+fYdm0zi/mrgYSrgCAZD5e1SsvipIyauZFs8naU50EqnCKdHGvYQM0HspFFiX
SKZWASWalo/PjJ0WQ2E7JPESlHHyL5R+GsyAfe6L/Dzcn68cCZReYxj2GO5gqeF+
AzXAK2ptTsPvGNuEWrZtukmE2nETIZdwEiuky9HaGg6AE+HdEhfd9f8wRm9Mpf0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:09 2024 by rpki-client on console-ams.rpki-client.org