Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/mVESvql6KPjq_69_dJLMSMNnIlU.roa
File: mVESvql6KPjq_69_dJLMSMNnIlU.roa (raw, json)
Hash identifier: 04qN/pHiDKWruyLCQ4sdgY06YLw0bjG3Bad5qNauD7k=
Subject key identifier: 99:51:12:BE:A9:7A:28:F8:EA:FF:AF:7F:74:92:CC:48:C3:67:22:55
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 01922293411108087B3D69D8F7D26BF9F68D
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/mVESvql6KPjq_69_dJLMSMNnIlU.roa
Signing time: Tue 24 Sep 2024 05:48:48 +0000
ROA not before: Tue 24 Sep 2024 05:48:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 46.233.42.0/23 maxlen: 23
46.233.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Sep 2024 06:14:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:22:93:41:11:08:08:7b:3d:69:d8:f7:d2:6b:f9:f6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Sep 24 05:48:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=995112bea97a28f8eaffaf7f7492cc48c3672255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5e:42:02:cb:3f:ce:32:6e:c2:f3:a6:42:f7:
74:ba:b9:39:f9:db:9e:56:b5:42:1b:1d:91:41:ce:
46:05:ad:3c:f5:ba:24:b8:05:ad:28:59:20:ec:89:
be:6c:8d:fb:0b:29:58:5d:dd:d6:88:ba:39:c3:5e:
81:3c:33:1b:94:8c:d0:24:9c:26:61:67:68:5a:b3:
ac:cd:24:74:e9:56:8c:97:e1:84:6c:d2:43:73:1f:
c0:ef:fa:e3:f4:fb:b8:b1:02:51:6c:c3:cf:e1:6a:
71:b7:79:c1:f3:3e:83:b1:0c:c8:f2:b2:99:7d:8a:
80:44:84:20:7b:50:e7:d0:94:df:4a:da:5f:83:90:
36:e2:fb:f1:8e:cc:3d:07:52:78:81:f3:47:70:49:
fa:14:0f:9c:63:d8:d7:20:2a:41:34:5e:a9:28:63:
d3:5e:08:04:50:d7:cf:1a:26:59:41:da:fd:3d:36:
ae:7c:aa:f8:a3:3e:ed:8d:f2:26:4f:61:47:8e:2b:
40:d4:a3:62:5e:df:cd:76:b2:f0:6c:d0:7c:53:4b:
2e:bf:17:85:b3:96:f4:04:d6:a8:2f:d9:37:c6:7b:
05:6a:69:56:9a:8b:c7:85:fb:ea:2e:41:e0:cd:8f:
1e:50:18:60:bb:28:f6:fc:86:82:63:4c:02:fe:65:
52:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:51:12:BE:A9:7A:28:F8:EA:FF:AF:7F:74:92:CC:48:C3:67:22:55
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/mVESvql6KPjq_69_dJLMSMNnIlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.42.0/23
Signature Algorithm: sha256WithRSAEncryption
84:0c:dd:80:ad:f1:d3:59:9f:ad:3b:7e:7c:61:d9:97:32:d7:
a6:70:3e:17:38:d1:62:4c:f6:1a:ce:70:ad:b6:d8:a3:32:36:
21:cd:a9:dd:aa:49:6c:f1:30:90:61:80:b1:c6:70:da:54:ef:
50:d5:71:48:e0:cb:77:7a:b6:62:e8:37:b2:b9:71:e2:fc:10:
98:67:8a:f0:46:43:e5:f9:ae:32:36:07:f5:44:57:63:e7:aa:
1b:94:be:c5:78:eb:58:0b:65:95:fa:05:2f:c7:93:a2:9f:34:
96:f3:3c:fd:3f:f6:2f:44:fb:ae:b6:04:e3:e6:1e:6d:da:07:
2f:b5:42:b5:1f:12:46:20:8b:60:96:5f:16:02:d7:c1:7a:26:
27:69:0e:3f:83:d2:b8:de:47:bc:7f:7c:ce:52:e0:d6:b1:0d:
15:2e:dd:9c:10:a3:3a:25:6b:2d:91:5e:87:3e:6d:df:f9:7e:
12:ea:a9:ed:b1:40:6c:1a:cf:f8:46:66:5d:a5:8b:ee:2c:7c:
33:69:36:40:2c:b0:c8:10:d1:77:15:e9:a1:47:c5:d2:dc:a6:
8f:fc:4f:13:79:25:d3:b1:63:0e:53:a3:4f:4d:f1:b2:a3:0a:
3d:8c:2c:6b:25:6c:db:3c:fe:d3:45:25:19:87:65:e4:12:d0:
09:e6:1b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 08:13:25 2024 by rpki-client on console-fra.rpki-client.org