Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/jigtLf3lM-Z0KrLR4ytjsRG7j5k.roa
File: jigtLf3lM-Z0KrLR4ytjsRG7j5k.roa (raw, json)
Hash identifier: x0HW1k6zX8TOm6C46zKiuiD73zzkk4W9oD7Iza4lLcQ=
Subject key identifier: 8E:28:2D:2D:FD:E5:33:E6:74:2A:B2:D1:E3:2B:63:B1:11:BB:8F:99
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 0186BC618EB78C9B9A490DA490011BCBA1B7
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/jigtLf3lM-Z0KrLR4ytjsRG7j5k.roa
Signing time: Tue 07 Mar 2023 14:02:35 +0000
ROA not before: Tue 07 Mar 2023 14:02:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 46.233.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Apr 2023 10:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bc:61:8e:b7:8c:9b:9a:49:0d:a4:90:01:1b:cb:a1:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Mar 7 14:02:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e282d2dfde533e6742ab2d1e32b63b111bb8f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:94:71:1f:61:b8:ff:8e:4f:19:57:6c:37:c1:
7e:4a:d3:bf:0e:ad:cd:0e:ee:49:73:c9:6a:c1:4f:
bb:d1:50:26:d4:22:66:f6:7a:38:d8:f6:75:e3:3f:
eb:50:e3:13:cf:ca:5b:32:58:b7:2c:9a:29:97:e0:
48:0b:95:17:a3:b7:6d:17:d8:23:0a:07:d2:76:40:
e5:8a:e9:83:76:84:a3:04:f1:54:b5:ad:45:b1:c9:
08:77:73:65:c7:17:dd:a3:3f:64:28:fc:d1:81:92:
73:5e:bb:12:52:e3:1a:a1:3d:17:fa:ed:87:b1:7e:
59:b2:ac:bc:d1:90:bf:a4:54:ef:4c:a4:3b:f6:8e:
f5:5d:7d:e2:a3:3c:02:98:1e:4e:8d:89:63:0a:47:
38:f3:20:b0:69:5a:8c:be:e3:ba:bc:a7:61:4e:f0:
1f:79:d7:9a:06:7f:a5:1c:63:ba:c6:f5:eb:55:f5:
d9:b6:c6:32:75:6e:be:07:ba:13:2a:dd:d1:31:5e:
18:fe:45:5b:23:e4:50:0c:fb:bc:5a:fc:28:c4:1d:
12:dc:ea:6f:70:e3:8f:05:8f:e5:af:a1:ed:ee:76:
0c:a1:77:fb:75:5b:68:1a:d9:a2:bd:7f:f8:93:c8:
17:49:0c:fd:bf:d1:94:d1:ed:45:71:d5:ed:26:2f:
59:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:28:2D:2D:FD:E5:33:E6:74:2A:B2:D1:E3:2B:63:B1:11:BB:8F:99
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/jigtLf3lM-Z0KrLR4ytjsRG7j5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.44.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:fd:2d:61:12:db:91:27:d0:b2:38:00:f8:a1:7c:46:9f:52:
8d:53:4a:6b:54:12:4f:d4:14:1e:57:76:2d:fb:0e:18:a9:ad:
df:3d:e0:cc:fa:a5:13:d3:0f:a2:cc:73:45:0a:7d:a2:d0:cf:
a7:66:90:8f:cb:8f:65:2f:24:d0:5d:62:49:c3:8d:8e:c8:d4:
46:f5:0c:77:98:ea:4c:b1:76:19:8e:6e:82:11:6b:12:1e:a3:
7d:77:4b:de:92:f3:0a:85:bf:b8:6f:96:77:35:08:e9:2f:06:
bd:27:2d:23:1d:4b:55:61:9c:6a:d9:f3:4f:9c:9c:75:7f:50:
35:ea:d4:a9:98:31:70:2f:07:6a:06:4f:5b:cf:d4:81:8a:3b:
ff:f9:09:11:1d:ce:98:89:cc:fd:2e:49:38:09:5b:24:ef:dd:
23:b9:ad:a6:84:71:1f:a4:32:de:1d:f4:50:1b:54:fb:c6:5a:
a9:ff:6f:08:1a:ef:5e:f2:78:d4:c5:c1:6c:cc:09:53:39:f2:
e5:11:38:b9:9e:79:0f:ab:4d:05:f4:6b:77:3b:89:92:d6:08:
e0:9a:b0:db:27:2a:69:35:74:22:26:9c:d7:26:00:be:7b:84:
58:83:9a:52:74:8e:38:45:d1:8e:dc:c5:06:9d:a7:97:54:ef:
20:2e:63:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:09 2024 by rpki-client on console-ams.rpki-client.org