Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/frueZYdhCCQjGZUB04kfHcGiGYU.roa
File: frueZYdhCCQjGZUB04kfHcGiGYU.roa (raw, json)
Hash identifier: RN2HbCmlQCxR6APVX75uNTqLP8m9StKKZHygYQy5WY0=
Subject key identifier: 7E:BB:9E:65:87:61:08:24:23:19:95:01:D3:89:1F:1D:C1:A2:19:85
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 0191AE4D3C652F053FA4F240C6A657BB5013
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/frueZYdhCCQjGZUB04kfHcGiGYU.roa
Signing time: Sun 01 Sep 2024 15:56:22 +0000
ROA not before: Sun 01 Sep 2024 15:56:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 46.233.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ae:4d:3c:65:2f:05:3f:a4:f2:40:c6:a6:57:bb:50:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Sep 1 15:56:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ebb9e658761082423199501d3891f1dc1a21985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8e:a0:1f:5d:b0:d3:82:b9:e0:bf:19:58:2c:
9c:43:32:73:ee:7c:c2:c4:9e:5f:c2:77:6f:37:86:
56:fd:18:cd:fd:1c:4a:af:22:6a:6b:50:91:15:cb:
45:31:83:0e:83:79:ed:85:a4:0f:f3:ac:7c:a3:74:
b6:e3:54:4e:e1:6a:c1:8c:5e:66:66:cb:9f:ed:47:
95:56:c6:2b:7e:59:b5:ce:ab:73:3c:bf:d2:58:7f:
0f:c6:c7:41:0e:4f:54:b7:2b:5f:59:15:96:22:0a:
a2:05:34:c8:6a:53:a4:a0:f5:23:3c:3e:83:e1:70:
52:f4:a3:bf:d1:14:fa:7d:dd:07:ee:60:4a:28:e1:
4f:2b:1e:00:77:51:51:eb:0b:83:ec:d0:1c:9f:6f:
55:99:6a:15:5f:18:d0:d8:4f:27:d3:6c:c3:9b:79:
46:64:11:ab:63:4a:54:63:20:15:12:0a:34:e5:28:
82:90:36:08:45:16:38:9d:7c:e8:cc:f3:b7:31:ee:
fe:0d:d6:17:76:fe:58:40:b5:50:b1:cf:32:90:f9:
bc:b4:68:8f:ec:e1:65:6c:a4:e5:50:4a:a0:22:26:
f5:57:be:c9:f3:f3:d2:5d:16:0a:c2:82:64:7c:2a:
ff:37:1f:94:6f:e5:0c:41:88:c5:f5:63:54:1a:5f:
6a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BB:9E:65:87:61:08:24:23:19:95:01:D3:89:1F:1D:C1:A2:19:85
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/frueZYdhCCQjGZUB04kfHcGiGYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.43.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:e3:ea:72:7b:18:ae:d9:34:eb:27:ad:06:17:2c:53:38:02:
81:6e:30:75:a7:ab:66:56:8b:b3:64:47:66:91:b2:76:9b:3c:
e7:3c:07:78:93:25:44:05:1d:bc:82:c5:86:ca:97:21:1f:ed:
ff:f9:2f:69:47:de:a4:5d:d9:cc:87:67:70:3b:96:fd:1b:01:
ef:48:99:82:5a:84:f7:6d:39:75:86:f7:3a:3a:4f:ba:42:32:
57:48:c2:f1:41:c3:5a:dc:b1:23:1b:a5:5e:0e:9a:ac:a4:1c:
c7:94:ed:be:f2:6f:1f:ec:ca:c9:ae:95:64:e9:3d:22:0a:c8:
e3:70:6b:9e:e5:6c:2e:47:5d:09:77:63:e9:f2:ad:46:56:39:
69:6d:32:af:eb:de:02:4f:67:84:11:f3:a8:ad:1a:2d:86:40:
a3:83:75:91:f2:eb:06:6b:83:fd:84:ad:2b:6d:e5:ae:14:e1:
cf:88:6b:f3:5b:31:a3:5a:ea:71:27:bd:72:43:e2:18:76:81:
b2:12:a4:69:61:34:b1:36:32:c1:ae:7d:53:71:3d:7e:99:26:
20:63:39:0f:66:c1:11:7e:88:e9:33:b1:72:f1:ca:f8:cb:a4:
7c:cf:cd:2c:72:00:ac:5a:ce:0f:fd:65:1f:9c:26:e9:61:06:
06:63:43:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:41:13 2025 by rpki-client