Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/jFxBcUljUWEZbOLyI0C2TMoYidM.roa
File: jFxBcUljUWEZbOLyI0C2TMoYidM.roa (raw, json)
Hash identifier: EhCVdmCpjpfqmZMvly72EdEt11YZMb7IG0Q8tRTu/WQ=
Subject key identifier: 8C:5C:41:71:49:63:51:61:19:6C:E2:F2:23:40:B6:4C:CA:18:89:D3
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 0190649BA00247BD981EB92884AB3CA0EBB6
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/jFxBcUljUWEZbOLyI0C2TMoYidM.roa
Signing time: Sat 29 Jun 2024 15:27:18 +0000
ROA not before: Sat 29 Jun 2024 15:27:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 46.233.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Aug 2024 07:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:64:9b:a0:02:47:bd:98:1e:b9:28:84:ab:3c:a0:eb:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Jun 29 15:27:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c5c417149635161196ce2f22340b64cca1889d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ef:72:8a:82:63:07:ed:4f:34:72:02:e6:e7:
3a:af:5a:9d:49:af:38:33:42:73:de:25:eb:8e:7d:
31:08:92:57:36:cf:ab:98:6c:6a:d3:2e:6f:4e:53:
53:c1:1d:de:df:aa:3b:ff:e6:42:e7:27:ad:4c:2f:
49:26:67:83:f4:10:02:c1:8d:d0:6f:47:ca:ae:9a:
e1:a7:86:38:c8:38:ed:7c:f5:71:4c:0c:08:5a:65:
86:61:e5:47:c9:95:d7:f5:20:73:dd:45:42:72:d7:
7d:18:67:eb:4c:b9:b9:7d:06:42:51:f9:ad:ed:3f:
82:1f:8f:34:cb:43:56:8d:55:f1:c0:23:8e:11:77:
3b:57:65:c2:e3:96:02:9d:2d:8c:b4:a7:8f:7c:fe:
a7:8b:80:bb:27:9e:84:5c:6c:38:c4:b3:4b:0a:8b:
9f:49:b8:36:41:59:77:13:ca:85:d8:77:87:4e:a7:
f5:cd:26:3e:07:bd:56:58:a7:8a:3d:ab:e0:26:40:
7e:d9:06:c4:73:8d:9e:28:38:94:0c:74:5f:5b:43:
38:5a:7f:44:05:4b:53:4c:74:c4:e2:10:f4:45:57:
7f:ab:21:1f:f5:73:77:da:0e:9a:ec:c4:84:0a:ce:
15:5b:fa:b7:9c:05:ad:e2:de:17:0d:3c:54:69:aa:
61:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5C:41:71:49:63:51:61:19:6C:E2:F2:23:40:B6:4C:CA:18:89:D3
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/jFxBcUljUWEZbOLyI0C2TMoYidM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.38.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:1a:c5:f6:6b:d4:1f:e1:c4:25:04:93:9a:d3:71:53:a6:54:
d9:29:03:86:93:08:08:a9:74:6d:76:92:18:bf:5b:64:7b:a4:
8e:8d:1a:3e:cc:b6:54:3f:16:2d:da:f4:84:75:1a:db:cd:a4:
f1:23:4b:62:58:72:e5:07:93:93:af:1b:01:6d:d2:89:35:c7:
45:e4:4b:fb:53:a9:5a:02:27:ae:91:4c:90:be:f9:4a:7b:46:
3a:9d:fb:32:15:bc:50:ac:f7:ed:cb:95:ff:67:0f:94:57:0b:
94:ea:86:d4:0b:60:20:ff:c3:c1:91:3c:8e:94:37:56:2c:dd:
eb:ff:28:31:69:4f:0e:66:61:63:d2:2b:ec:cc:69:58:72:49:
01:e1:86:07:a5:13:09:7e:48:a5:4b:f0:19:47:9b:f2:0d:ee:
64:5c:7c:7b:d2:03:f8:ee:81:3b:76:fb:c7:2b:31:09:21:00:
33:f7:8c:e9:bf:26:62:78:9e:e9:8a:7b:ef:6d:92:5c:a2:98:
a1:0a:1a:54:ff:89:0f:6a:21:89:fb:47:3b:ca:53:ce:c4:d0:
22:73:ce:e7:51:30:b0:76:6d:00:9b:1b:cc:5f:c7:48:1a:17:
66:62:a0:53:ab:6a:43:28:77:f3:f4:85:18:56:d9:b0:7b:bc:
4a:27:5b:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZBkm6ACR72YHrkohKs8oOu2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1
ZDU2ZjUwHhcNMjQwNjI5MTUyNzE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzVjNDE3MTQ5NjM1MTYxMTk2Y2UyZjIyMzQwYjY0Y2NhMTg4OWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3u9yioJjB+1PNHIC5uc6r1qdSa84
M0Jz3iXrjn0xCJJXNs+rmGxq0y5vTlNTwR3e36o7/+ZC5yetTC9JJmeD9BACwY3Q
b0fKrprhp4Y4yDjtfPVxTAwIWmWGYeVHyZXX9SBz3UVCctd9GGfrTLm5fQZCUfmt
7T+CH480y0NWjVXxwCOOEXc7V2XC45YCnS2MtKePfP6ni4C7J56EXGw4xLNLCouf
Sbg2QVl3E8qF2HeHTqf1zSY+B71WWKeKPavgJkB+2QbEc42eKDiUDHRfW0M4Wn9E
BUtTTHTE4hD0RVd/qyEf9XN32g6a7MSECs4VW/q3nAWt4t4XDTxUaaphywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIxcQXFJY1FhGWzi8iNAtkzKGInTMB8GA1UdIwQY
MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt
M2MxNmZmODQxYWIyLzEvakZ4QmNVbGpVV0VaYk9MeUkwQzJUTW9ZaWRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy
LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALukmMA0G
CSqGSIb3DQEBCwUAA4IBAQCbGsX2a9Qf4cQlBJOa03FTplTZKQOGkwgIqXRtdpIY
v1tke6SOjRo+zLZUPxYt2vSEdRrbzaTxI0tiWHLlB5OTrxsBbdKJNcdF5Ev7U6la
AieukUyQvvlKe0Y6nfsyFbxQrPfty5X/Zw+UVwuU6obUC2Ag/8PBkTyOlDdWLN3r
/ygxaU8OZmFj0ivszGlYckkB4YYHpRMJfkilS/AZR5vyDe5kXHx70gP47oE7dvvH
KzEJIQAz94zpvyZieJ7pinvvbZJcopihChpU/4kPaiGJ+0c7ylPOxNAic87nUTCw
dm0AmxvMX8dIGhdmYqBTq2pDKHfz9IUYVtmwe7xKJ1tV
-----END CERTIFICATE-----
Generated at Thu Aug 29 10:18:12 2024 by rpki-client on console-ams.rpki-client.org