Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/iN3Ph7C7Yr0K3mgaZqu4oWaBVg4.roa
File: iN3Ph7C7Yr0K3mgaZqu4oWaBVg4.roa (raw, json)
Hash identifier: R8ZO0X5/ir+zzLt7007emz9fGCbnuXfyDGb/mHkjWRk=
Subject key identifier: 88:DD:CF:87:B0:BB:62:BD:0A:DE:68:1A:66:AB:B8:A1:66:81:56:0E
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 0188AFE3DB04B9B1DB563C235C17A831BF2D
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/iN3Ph7C7Yr0K3mgaZqu4oWaBVg4.roa
Signing time: Mon 12 Jun 2023 13:55:25 +0000
ROA not before: Mon 12 Jun 2023 13:55:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 46.233.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Jun 2023 18:17:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:af:e3:db:04:b9:b1:db:56:3c:23:5c:17:a8:31:bf:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Jun 12 13:55:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88ddcf87b0bb62bd0ade681a66abb8a16681560e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4f:df:e7:01:95:1b:ad:73:20:6c:97:94:3c:
32:19:3c:72:91:07:16:ba:22:79:38:eb:69:26:a6:
02:73:ba:04:d9:a0:a5:88:77:6e:cb:27:2a:78:0f:
7b:b0:0b:96:cb:1d:cd:cb:c9:6d:fb:46:9c:39:9f:
7d:3b:e3:a7:ae:b8:9a:ee:d6:5e:9a:20:be:1f:fc:
f2:c4:68:54:9b:4d:ce:04:09:5c:9f:77:24:34:f8:
25:26:55:b0:27:05:31:a9:78:02:9a:a1:4e:37:0c:
93:66:fc:08:d0:ae:79:c7:fe:fb:51:9a:ea:66:e8:
d0:eb:b2:c3:ae:b9:74:a1:1f:94:a1:74:67:48:8d:
92:9b:b9:a9:f8:0f:1e:2c:4e:d4:27:02:97:f4:ab:
a9:cd:fb:b6:2a:d8:5a:ec:e1:6f:c2:a2:e5:ee:19:
37:5a:97:e1:17:52:b0:67:e3:d1:ca:71:27:82:45:
79:64:30:8f:7c:bc:60:9c:8b:06:9c:14:51:81:46:
aa:f3:2a:75:1a:de:cb:24:12:e5:a3:bd:01:57:93:
1f:33:8b:24:fe:68:5b:3b:45:15:45:5b:7b:14:ff:
e5:49:c8:6c:5d:97:48:65:fa:61:bc:f8:3f:53:be:
75:bb:4a:22:9a:f6:46:03:69:88:09:d9:16:0f:a2:
3e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DD:CF:87:B0:BB:62:BD:0A:DE:68:1A:66:AB:B8:A1:66:81:56:0E
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/iN3Ph7C7Yr0K3mgaZqu4oWaBVg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.43.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:24:95:b5:37:d1:d5:b8:32:79:e8:09:26:99:a8:31:26:38:
2e:9b:5d:56:10:e1:94:fe:94:0f:d6:d7:c8:94:ed:86:3c:c2:
da:ea:64:a1:a3:e6:a3:2b:c8:2c:20:f7:cf:8c:6f:43:57:b3:
fc:e4:b4:7e:20:21:10:74:0a:5c:b3:1b:d2:5d:af:53:36:d9:
e4:aa:d4:33:f5:e2:ba:61:2a:1a:3f:7d:2a:b4:1f:2f:cb:d1:
f6:fa:e8:ed:ed:35:eb:61:e9:f1:32:57:b3:53:a6:e3:5f:67:
d5:39:8a:17:4c:08:17:b6:7b:cc:17:02:04:47:a7:ef:ae:d7:
1a:11:55:dd:5d:7b:ad:00:03:a2:66:88:3b:5f:35:4d:12:53:
39:5a:ec:08:b4:25:7d:8a:aa:12:ed:5c:2c:d2:d3:5f:e5:0f:
46:e7:7e:a8:d0:71:41:87:db:81:3b:0d:b6:3d:35:c8:85:46:
91:41:35:fd:da:a8:c7:60:5c:45:cc:ba:a9:22:1d:aa:81:d7:
69:42:7e:1d:78:1a:72:07:ac:ae:b9:2d:5f:11:61:47:df:0b:
41:5a:f3:22:69:d1:d1:3b:b2:c5:fc:4e:b3:4d:b6:08:d7:33:
52:72:35:0a:4e:f4:b6:29:5a:c4:11:48:e4:ae:c1:58:9c:5d:
e9:ab:a8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:37 2024 by rpki-client on console-fra.rpki-client.org