Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/hGBjjUaHpisnHgGsgITAAEnfnYE.roa
File: hGBjjUaHpisnHgGsgITAAEnfnYE.roa (raw, json)
Hash identifier: 0i03O+vh65BltU9o7tDgnoN6pXpdSmI/AcsWALoGWIg=
Subject key identifier: 84:60:63:8D:46:87:A6:2B:27:1E:01:AC:80:84:C0:00:49:DF:9D:81
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 0188D7BB6CEE16BD1D2C924BA3A1F1BF7FC9
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/hGBjjUaHpisnHgGsgITAAEnfnYE.roa
Signing time: Tue 20 Jun 2023 07:36:04 +0000
ROA not before: Tue 20 Jun 2023 07:36:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 46.233.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Jul 2023 15:54:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d7:bb:6c:ee:16:bd:1d:2c:92:4b:a3:a1:f1:bf:7f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Jun 20 07:36:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8460638d4687a62b271e01ac8084c00049df9d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:07:60:2e:8c:19:1e:b2:17:fa:92:a0:79:e0:
cf:f8:a9:2d:0a:2f:47:f6:ab:9e:e8:7d:38:2b:e5:
bd:5d:7a:2b:30:b0:f8:ec:bc:8a:2a:43:8e:ba:bd:
33:10:f3:fa:92:e1:00:00:74:77:8c:7c:b3:50:c0:
56:3e:cf:d9:93:26:ae:04:78:0f:5d:a1:52:5e:12:
af:90:50:3e:b5:b7:a4:9a:fa:4a:1a:3c:12:ea:66:
1d:2e:99:98:46:69:6d:38:96:96:41:9c:4c:7c:d4:
2c:38:08:b8:42:4b:29:42:49:25:ba:44:c8:8f:5a:
82:33:d5:e9:12:e2:18:4a:f7:dc:09:b3:04:11:20:
ea:c7:fc:20:8d:15:70:f3:8c:ee:62:4f:12:6b:fa:
04:4c:5f:d0:85:df:cf:40:5b:3c:61:32:d7:45:dd:
d4:69:68:c2:a4:ae:7b:dd:fb:b0:cf:d9:ad:c3:15:
50:61:a0:3c:83:3a:2b:c7:0c:57:ba:20:70:c9:9c:
ea:0d:59:ec:c1:7d:fd:bf:9e:ec:09:f5:49:7f:1d:
be:9c:1e:ac:ff:3d:cf:01:74:55:7f:87:d2:bb:7d:
5c:a3:98:20:1c:66:74:1c:19:12:2f:8e:9b:f6:93:
60:36:c9:aa:f1:ef:6f:3f:07:79:f5:73:94:20:a0:
1b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:60:63:8D:46:87:A6:2B:27:1E:01:AC:80:84:C0:00:49:DF:9D:81
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/hGBjjUaHpisnHgGsgITAAEnfnYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.42.0/24
Signature Algorithm: sha256WithRSAEncryption
02:1d:b6:79:08:59:2c:1e:cf:71:2e:16:b5:d7:1b:60:ff:25:
5d:38:9b:55:36:26:e3:60:9f:b3:66:b7:dc:f3:0d:71:d9:4b:
ce:e5:cf:2c:ce:86:23:ec:64:f3:ec:dc:2d:da:2f:b9:06:80:
db:f6:82:e5:03:62:92:36:a5:ef:b5:37:e4:31:3a:1f:28:d2:
ba:10:79:f8:52:b9:44:02:e6:b4:55:8c:7f:3e:a9:a9:58:c8:
dc:f9:ee:45:c4:13:81:09:c3:67:67:0c:ba:42:7a:25:eb:e2:
9e:23:61:45:7b:c6:b1:64:93:36:85:b2:47:dd:cf:f1:73:65:
a5:c2:1a:00:87:8f:74:ee:b7:9e:85:4b:c7:24:b2:7f:c5:68:
87:47:ad:f2:2b:5b:ea:8b:1e:85:1c:15:88:d3:74:1f:ae:da:
01:41:87:d8:90:a1:3a:d6:aa:24:97:57:5d:0f:df:d5:54:bc:
c4:09:14:ac:37:bd:a9:61:f6:81:19:17:00:06:2d:46:93:83:
14:96:3c:b6:90:61:f0:37:40:77:a9:82:63:0f:7f:42:3a:7b:
09:ad:a1:6d:43:87:14:7c:ef:19:c9:a6:50:a0:5b:b8:86:8b:
32:2c:f6:cd:36:6a:71:e6:1b:7b:fd:a4:72:7c:97:1e:77:c1:
fa:a0:94:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjXu2zuFr0dLJJLo6Hxv3/JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1
ZDU2ZjUwHhcNMjMwNjIwMDczNjA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDYwNjM4ZDQ2ODdhNjJiMjcxZTAxYWM4MDg0YzAwMDQ5ZGY5ZDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwdgLowZHrIX+pKgeeDP+KktCi9H
9que6H04K+W9XXorMLD47LyKKkOOur0zEPP6kuEAAHR3jHyzUMBWPs/ZkyauBHgP
XaFSXhKvkFA+tbekmvpKGjwS6mYdLpmYRmltOJaWQZxMfNQsOAi4QkspQkklukTI
j1qCM9XpEuIYSvfcCbMEESDqx/wgjRVw84zuYk8Sa/oETF/Qhd/PQFs8YTLXRd3U
aWjCpK573fuwz9mtwxVQYaA8gzorxwxXuiBwyZzqDVnswX39v57sCfVJfx2+nB6s
/z3PAXRVf4fSu31co5ggHGZ0HBkSL46b9pNgNsmq8e9vPwd59XOUIKAbNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIRgY41Gh6YrJx4BrICEwABJ352BMB8GA1UdIwQY
MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt
M2MxNmZmODQxYWIyLzEvaEdCampVYUhwaXNuSGdHc2dJVEFBRW5mbllFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy
LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALukqMA0G
CSqGSIb3DQEBCwUAA4IBAQACHbZ5CFksHs9xLha11xtg/yVdOJtVNibjYJ+zZrfc
8w1x2UvO5c8szoYj7GTz7Nwt2i+5BoDb9oLlA2KSNqXvtTfkMTofKNK6EHn4UrlE
Aua0VYx/PqmpWMjc+e5FxBOBCcNnZwy6Qnol6+KeI2FFe8axZJM2hbJH3c/xc2Wl
whoAh4907reehUvHJLJ/xWiHR63yK1vqix6FHBWI03QfrtoBQYfYkKE61qokl1dd
D9/VVLzECRSsN72pYfaBGRcABi1Gk4MUljy2kGHwN0B3qYJjD39COnsJraFtQ4cU
fO8ZyaZQoFu4hosyLPbNNmpx5ht7/aRyfJced8H6oJRv
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:37 2024 by rpki-client on console-fra.rpki-client.org