Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/lWBE-hUS_lSr16F15_3DHlkn9Do.roa
File: lWBE-hUS_lSr16F15_3DHlkn9Do.roa (raw, json)
Hash identifier: mH77u2FwJwsQ7EbrktNppw/vAN6kvZWgbe1f1/qPImU=
Subject key identifier: 95:60:44:FA:15:12:FE:54:AB:D7:A1:75:E7:FD:C3:1E:59:27:F4:3A
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 0186BC970AD8CAC56A799C2EFFD24E0EA1C0
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/lWBE-hUS_lSr16F15_3DHlkn9Do.roa
Signing time: Tue 07 Mar 2023 15:01:00 +0000
ROA not before: Tue 07 Mar 2023 15:01:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212953
IP address blocks: 46.233.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Apr 2023 06:41:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bc:97:0a:d8:ca:c5:6a:79:9c:2e:ff:d2:4e:0e:a1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Mar 7 15:01:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=956044fa1512fe54abd7a175e7fdc31e5927f43a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:cd:5d:27:98:7d:f9:67:70:7e:3c:9b:b1:38:
34:24:0d:e8:16:54:3d:8a:19:0d:9f:ff:d1:f7:bd:
80:70:a8:0b:c7:6a:2d:67:34:98:1c:c4:a5:4c:65:
87:69:8c:ce:70:5e:e0:34:f2:bf:0f:02:b8:00:da:
ee:31:cb:40:1e:1e:2d:ac:c9:30:50:18:07:9b:d8:
1d:db:78:d2:01:cc:42:63:65:ea:da:b6:07:80:f9:
ff:ca:d0:ac:92:b3:53:80:bf:57:85:f0:e2:41:9e:
95:28:75:3d:9a:39:e8:13:a4:9d:83:d3:df:27:ab:
10:20:a3:c6:a3:be:0d:6c:2f:2e:94:d9:e6:07:c0:
0b:87:8c:f1:58:33:04:e4:29:4d:e3:7b:16:02:4c:
7c:c4:a2:11:1b:22:57:95:f4:16:64:b1:bb:e8:7a:
31:01:ed:dc:2c:cd:4b:44:4a:c3:a5:93:73:90:6b:
f5:95:4c:91:c5:76:ed:81:cf:62:37:af:58:3d:36:
75:54:08:ad:33:62:f9:3e:46:95:dd:ce:3a:5a:e6:
7d:d5:2b:8b:3e:57:eb:79:8c:60:e3:1e:9e:ae:f1:
e2:73:48:3b:55:a6:24:7e:d1:f3:8a:0b:05:8d:ea:
c2:a7:09:46:21:ba:5a:5a:d8:5d:e3:ce:4b:00:40:
5f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:60:44:FA:15:12:FE:54:AB:D7:A1:75:E7:FD:C3:1E:59:27:F4:3A
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/lWBE-hUS_lSr16F15_3DHlkn9Do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.45.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:6f:e5:b9:be:7a:33:64:54:5e:b9:d2:7e:1e:21:7c:25:80:
45:3b:7b:07:da:1b:30:95:fc:66:f9:86:9e:74:c3:b3:ae:dd:
d6:30:5f:fb:72:f1:0f:e6:86:f3:73:a7:33:69:53:bd:36:27:
7f:07:91:9b:ef:56:78:57:3a:fa:c3:ff:fb:f9:47:95:bf:3c:
62:34:da:c0:73:2d:4d:30:f9:af:49:50:9b:9c:e1:74:7b:0e:
9c:75:eb:f6:55:b0:cb:eb:68:9f:c1:39:47:2b:43:cc:b4:1e:
d9:28:91:3b:0b:95:4a:6f:2d:88:fc:25:76:fc:b3:7a:e5:17:
3b:51:6b:06:a4:9f:24:28:02:0b:df:cc:ee:7e:59:90:bc:3c:
49:5b:79:27:af:84:9d:18:8f:76:6f:9c:c8:bc:de:98:25:47:
23:66:06:7d:c0:bf:e0:c8:01:64:03:97:69:dd:35:a2:7f:6a:
3e:af:38:38:a1:d1:b6:3e:31:35:2a:f9:2d:10:a9:ad:27:d7:
d6:17:5e:6b:d4:47:3f:b9:72:59:11:e3:e0:bd:18:29:60:11:
88:62:72:34:99:a4:11:3c:ea:91:80:d3:32:a0:0c:1b:1e:f2:
81:0e:ba:2f:91:0e:7c:df:aa:f6:09:e1:a7:3e:45:48:df:e3:
b8:46:7d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:37 2024 by rpki-client on console-fra.rpki-client.org