Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/nDWzS2zLAyrVzrsPTkuXb_ZhN7A.roa
File: nDWzS2zLAyrVzrsPTkuXb_ZhN7A.roa (raw, json)
Hash identifier: CqjbIlbjJ7f8vB3HeoNQXQmhnek0bOtu/0J5YpNaBNQ=
Subject key identifier: 9C:35:B3:4B:6C:CB:03:2A:D5:CE:BB:0F:4E:4B:97:6F:F6:61:37:B0
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 0189B4F92F53A2E6E56967131E37F1DE0617
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/nDWzS2zLAyrVzrsPTkuXb_ZhN7A.roa
Signing time: Wed 02 Aug 2023 06:39:36 +0000
ROA not before: Wed 02 Aug 2023 06:39:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.233.38.0/24 maxlen: 24
46.233.39.0/24 maxlen: 24
46.233.42.0/23 maxlen: 23
46.233.43.0/24 maxlen: 24
46.233.44.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Aug 2023 06:05:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b4:f9:2f:53:a2:e6:e5:69:67:13:1e:37:f1:de:06:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Aug 2 06:39:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c35b34b6ccb032ad5cebb0f4e4b976ff66137b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:07:39:22:54:2d:47:35:bc:ca:47:84:06:97:
70:2b:c3:58:1f:71:c6:9e:ca:e2:2f:ba:03:f7:a4:
98:09:85:22:f2:e0:84:73:25:c8:99:18:10:52:43:
5e:30:cd:f9:e6:14:6e:a0:1b:8a:3b:3a:f0:02:f4:
f8:9d:fa:56:27:97:28:d1:c7:2b:61:22:af:f4:97:
8a:7c:4c:67:f7:10:0f:30:ff:19:d0:7d:38:69:93:
2f:e4:4a:3b:46:94:f9:99:3b:ab:c4:f8:dc:35:7c:
5a:92:9e:ef:0a:cc:e4:de:32:7d:98:15:b1:cd:b9:
eb:0f:61:94:8a:92:a1:e0:89:cc:38:50:aa:e7:95:
fe:cd:da:af:58:f4:4f:08:35:11:14:52:a7:cb:a5:
d8:8c:68:6f:8b:96:83:62:4b:08:a1:2d:10:5a:bf:
2b:ae:54:fe:ba:59:2b:25:d5:01:cc:b0:c5:b6:60:
47:0b:0c:95:18:db:e0:8e:18:8a:96:d7:93:4f:4d:
9c:80:83:db:56:45:d3:39:86:09:ae:be:a5:6c:64:
c6:35:6c:c6:81:7a:5c:54:dc:62:72:57:91:5a:82:
e1:02:f9:d3:63:dc:7d:e6:75:8b:42:82:b0:0c:fa:
a4:76:4e:1f:a2:4f:0a:76:6a:75:db:e1:6c:08:06:
77:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:35:B3:4B:6C:CB:03:2A:D5:CE:BB:0F:4E:4B:97:6F:F6:61:37:B0
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/nDWzS2zLAyrVzrsPTkuXb_ZhN7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.38.0/23
46.233.42.0-46.233.45.255
Signature Algorithm: sha256WithRSAEncryption
73:5b:65:25:d2:a2:8e:bb:d4:e9:d7:dc:21:d6:46:96:53:e0:
a9:7d:db:cb:2c:74:7c:2b:cc:55:c4:53:5f:7e:a3:62:93:96:
19:d4:0a:dd:17:ac:0a:9f:84:cd:64:09:54:d6:cd:65:11:21:
71:b8:55:15:38:ab:c3:ef:e7:9c:21:e4:95:ce:90:dc:89:c4:
44:3c:d2:5e:79:a4:4e:4d:52:a7:c8:c5:4b:29:14:b1:e6:6f:
16:1c:18:c6:ca:19:92:ca:3d:ef:b3:4e:f8:15:6c:49:ff:cb:
b4:c3:f5:7d:63:82:1d:58:2c:50:1b:74:9e:bb:8c:6f:89:83:
44:6e:53:67:36:06:43:80:a0:1c:6b:f0:de:c7:be:67:bf:48:
28:38:53:3b:5b:dd:72:77:ab:45:b6:26:e0:d7:10:99:ec:9c:
26:0d:fb:79:0b:c7:5e:ec:3b:d7:00:97:d2:80:07:57:7f:4e:
6c:b2:23:cd:fb:31:22:bd:2a:3c:33:79:6b:66:a7:ad:39:7f:
09:39:88:30:6f:9b:e6:b8:7b:ac:29:e4:eb:2f:9e:03:1a:fb:
c9:73:b9:49:7e:8a:25:e0:7f:08:4a:e1:36:14:f8:18:70:15:
b4:c6:8f:9c:17:48:42:2b:9f:91:8f:53:13:bb:8a:dd:d2:8e:
2d:68:74:51
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:09 2024 by rpki-client on console-ams.rpki-client.org