Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/i46a1LLLooeVXYXU3fDEri64gDk.roa
File: i46a1LLLooeVXYXU3fDEri64gDk.roa (raw, json)
Hash identifier: F2nn0YzDoW6TdiXLGC9oVRGicuDwH26rGjrcUMSP8OA=
Subject key identifier: 8B:8E:9A:D4:B2:CB:A2:87:95:5D:85:D4:DD:F0:C4:AE:2E:B8:80:39
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 018A59F2E2E889F0EE7F65FD15BDF11691CF
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/i46a1LLLooeVXYXU3fDEri64gDk.roa
Signing time: Sun 03 Sep 2023 07:30:04 +0000
ROA not before: Sun 03 Sep 2023 07:30:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.233.38.0/24 maxlen: 24
46.233.42.0/23 maxlen: 23
46.233.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Oct 2023 16:19:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:59:f2:e2:e8:89:f0:ee:7f:65:fd:15:bd:f1:16:91:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Sep 3 07:30:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b8e9ad4b2cba287955d85d4ddf0c4ae2eb88039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:17:55:46:79:a0:37:0d:0b:55:04:98:fe:3b:
db:54:08:05:de:9a:a7:ec:d0:fd:a2:1e:22:85:33:
55:1f:33:85:f1:72:b8:d6:d8:b9:8e:b4:41:07:fc:
49:e0:4b:96:13:52:57:ed:95:cb:d0:3b:e0:57:4b:
b8:01:76:e8:9f:6e:c8:2f:42:33:bf:82:39:1f:1f:
e8:9c:9c:de:37:bc:30:36:f9:a0:18:4a:f9:69:3c:
f0:5b:af:5d:5c:c3:89:7b:6a:cd:ff:90:ad:e1:b6:
62:9c:ea:93:12:d8:46:32:96:e1:47:e5:e2:e4:cf:
e5:5e:01:5b:d7:d8:60:85:59:41:5f:5e:58:42:a7:
f7:8d:de:7a:ea:e8:79:81:ec:4a:f6:52:a1:95:7e:
66:99:0e:ea:fc:29:16:9f:17:1c:50:f4:4d:ff:86:
03:bd:e1:ae:f1:de:23:fc:bf:de:4b:ce:08:66:4f:
b7:3c:ae:64:f6:08:81:9c:b0:e1:64:92:15:2d:67:
3a:32:05:7a:2b:11:c9:a1:1a:b9:b3:53:35:d1:28:
02:32:f5:d9:03:14:49:8b:00:b6:f6:c3:ce:45:b5:
22:ce:34:25:ae:3f:24:4b:bd:bb:6f:f4:ed:2a:73:
f8:c9:38:c7:09:97:35:a7:6e:83:1d:99:23:b8:15:
0f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8E:9A:D4:B2:CB:A2:87:95:5D:85:D4:DD:F0:C4:AE:2E:B8:80:39
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/i46a1LLLooeVXYXU3fDEri64gDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.38.0/24
46.233.42.0/23
Signature Algorithm: sha256WithRSAEncryption
75:ed:89:7d:70:5f:b5:13:50:3e:3e:06:ac:ff:d3:ed:d9:e2:
5e:88:e9:f0:c6:d7:e1:72:3b:f0:c5:ea:9c:b7:8e:18:3b:d0:
92:92:8b:8f:57:ef:95:8e:06:e0:00:d2:fa:fc:12:21:1e:8c:
2c:2d:04:d8:fd:a6:cb:e6:0e:98:ae:91:b2:67:e2:41:9c:90:
62:05:72:66:0f:59:0a:f4:e9:9a:f7:cb:2f:29:0a:bd:ee:b3:
f9:8e:f7:ab:52:2a:74:33:8e:11:92:97:01:a6:17:57:8c:35:
43:c5:71:e5:e5:88:af:2c:c9:5f:24:6c:d8:9f:78:fc:1d:f9:
44:e8:8a:82:46:30:d2:e8:11:48:62:09:20:eb:39:17:85:9a:
5c:f3:6d:24:c8:d8:dc:74:d3:c8:4e:55:ad:39:33:5c:88:d4:
25:8f:46:49:18:9b:29:bf:14:69:00:df:21:34:c0:05:a5:11:
7f:e1:69:9e:63:b4:05:6d:48:bd:dd:9f:f6:ba:82:a2:08:6c:
b4:ee:ce:d0:8f:e0:1d:21:fb:13:3e:ab:a4:a5:72:bd:5e:d1:
17:30:ac:48:48:53:f2:33:89:c1:c1:6c:7e:3b:23:de:a0:0c:
c0:d2:9d:15:4e:71:af:01:31:80:f8:99:a3:fc:35:10:45:90:
71:62:98:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:09 2024 by rpki-client on console-ams.rpki-client.org