Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/nuLx3X6bbgeCne2n1MtwYA48ilA.roa
File: nuLx3X6bbgeCne2n1MtwYA48ilA.roa (raw, json)
Hash identifier: NwzWc8zyqzKjbDqawcDklQg2dMMzPG24Qo9mBjf+n/Q=
Subject key identifier: 9E:E2:F1:DD:7E:9B:6E:07:82:9D:ED:A7:D4:CB:70:60:0E:3C:8A:50
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 01880240028B954166F58A422A77C4A23F5E
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/nuLx3X6bbgeCne2n1MtwYA48ilA.roa
Signing time: Tue 09 May 2023 20:42:09 +0000
ROA not before: Tue 09 May 2023 20:42:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 46.233.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 May 2023 12:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:02:40:02:8b:95:41:66:f5:8a:42:2a:77:c4:a2:3f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: May 9 20:42:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ee2f1dd7e9b6e07829deda7d4cb70600e3c8a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:02:43:f6:89:b3:fe:be:70:68:05:9b:61:6b:
0a:0f:24:36:21:19:24:ff:35:b4:c7:d3:6a:f7:3b:
2c:bd:df:6a:dd:17:2e:db:a5:c1:dd:26:44:aa:6c:
d4:b4:ba:e3:03:bb:7a:ac:2e:cb:5e:1a:2f:58:73:
b6:25:37:59:11:53:47:2b:70:f2:cb:43:ea:cd:5a:
16:51:5a:d3:18:5f:f9:ea:b3:f6:dd:56:4f:78:01:
3c:47:4b:21:21:5c:b0:45:e2:d9:41:11:74:f8:ac:
7a:3b:ce:a7:6d:94:a9:a6:49:20:70:cf:01:53:58:
bc:0a:72:1c:fd:2c:af:f4:4d:31:8c:f2:7d:9c:30:
f1:c8:36:e4:c1:53:b9:19:f4:6f:12:5a:4c:98:9b:
3f:a7:f7:40:91:6c:35:66:69:55:09:2d:c2:e1:0c:
4a:1c:49:1c:43:05:63:79:8e:97:22:f9:20:b1:c6:
0f:8c:19:a8:80:2f:63:a1:a4:36:19:6d:a6:d1:40:
20:f6:56:d1:c7:af:11:39:d2:af:07:ef:4e:06:d8:
46:c7:b8:b8:aa:58:61:e2:9d:42:94:cb:37:94:77:
96:e4:fd:58:8d:93:67:c7:17:4f:36:f1:e3:f7:ab:
ca:57:16:77:b9:1f:ec:a3:93:2e:ad:ab:80:37:18:
60:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E2:F1:DD:7E:9B:6E:07:82:9D:ED:A7:D4:CB:70:60:0E:3C:8A:50
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/nuLx3X6bbgeCne2n1MtwYA48ilA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.42.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:53:62:3c:57:e7:bb:a5:23:fe:eb:53:fb:e0:f1:5e:21:cc:
db:97:74:11:9a:36:25:aa:12:de:68:f0:41:4f:4c:9c:72:ab:
f8:a8:94:3f:0e:07:36:1f:05:b8:9b:3d:a1:7d:b1:6c:9f:e0:
ae:2e:4e:08:e8:e8:a2:3c:bb:03:73:92:7a:26:ad:d2:25:65:
4a:d9:76:a4:58:dc:9d:17:16:8a:f0:8f:79:23:f4:54:86:31:
bf:ac:ee:56:00:c7:88:e3:94:99:3a:97:ff:a7:3a:b1:cc:3f:
ae:09:b6:8c:24:65:96:95:fb:f1:07:c2:44:7d:fa:68:88:b3:
00:c8:1f:a1:bd:2c:88:05:e3:0e:c9:32:da:1e:26:3d:89:7a:
ce:99:a1:35:ac:6e:3b:9b:d7:34:7a:a9:5b:65:43:49:6a:dc:
a8:f8:4e:e5:58:6f:80:1c:ed:46:76:0e:e0:f8:db:35:2b:1d:
87:db:40:00:6e:bd:e9:9a:1e:a2:2c:30:04:71:5a:c9:77:7a:
da:17:9b:b6:81:f4:a0:15:a3:23:bf:07:a5:c8:cb:fe:cf:1d:
1c:a0:22:50:73:6c:f1:59:e5:b3:1d:d8:07:ae:a2:4d:00:b2:
28:d9:21:6c:f7:f8:b9:49:c8:0e:98:73:62:95:66:d1:bf:f1:
62:e5:6a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:37 2024 by rpki-client on console-fra.rpki-client.org