Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/pkU3Ruhwjys22wpjDCiAmPNt0HQ.roa
File: pkU3Ruhwjys22wpjDCiAmPNt0HQ.roa (raw, json)
Hash identifier: f055A6cXrIxFKSgDAx2iPRt40XAjPgtAP0XtuaklJ7Y=
Subject key identifier: A6:45:37:46:E8:70:8F:2B:36:DB:0A:63:0C:28:80:98:F3:6D:D0:74
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 01919D18A19C9E9B3009B446CA94AEB43359
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/pkU3Ruhwjys22wpjDCiAmPNt0HQ.roa
Signing time: Thu 29 Aug 2024 07:45:22 +0000
ROA not before: Thu 29 Aug 2024 07:45:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 46.233.38.0/24 maxlen: 24
46.233.42.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 01 Sep 2024 15:56:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9d:18:a1:9c:9e:9b:30:09:b4:46:ca:94:ae:b4:33:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Aug 29 07:45:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6453746e8708f2b36db0a630c288098f36dd074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:36:0f:5b:5a:c7:f1:64:14:95:db:bf:c1:2e:
22:5d:06:73:cf:37:b5:68:1a:c5:18:4a:ae:cb:5b:
4d:7e:b2:24:52:f1:59:49:94:28:be:b4:ac:b9:bf:
97:38:05:e0:8d:7c:95:9d:09:19:06:6e:b8:9c:b8:
62:b4:9b:60:1c:5d:88:a4:2e:8d:34:bf:38:9b:90:
39:b9:bb:80:ba:cb:92:6f:b2:ec:49:0e:88:59:81:
e4:6d:c4:60:da:26:fe:20:ae:30:5d:3e:c8:fe:03:
39:66:e6:3b:db:e9:e7:8b:38:d0:48:28:0a:f4:fe:
66:d2:25:60:b0:3b:ba:a2:60:81:c0:a3:39:9c:79:
8c:d9:39:32:2f:73:91:88:46:2a:37:81:b9:c1:60:
b2:6e:d2:a0:74:d1:7b:39:e3:54:a6:23:16:ec:50:
64:21:f1:94:c8:be:54:36:b7:d8:1b:8a:35:f3:48:
75:d3:8f:4a:a3:8f:0e:ad:e7:52:a9:78:f8:ea:4a:
55:41:ec:03:7b:5b:4e:eb:c2:37:3e:27:1d:39:02:
a4:20:fc:47:4d:b5:1d:15:ca:ec:de:08:19:82:77:
aa:56:10:97:87:55:c0:21:4d:d3:05:55:85:8b:35:
79:a4:8c:0e:81:d8:de:35:b9:df:74:61:3e:5b:9b:
ab:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:45:37:46:E8:70:8F:2B:36:DB:0A:63:0C:28:80:98:F3:6D:D0:74
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/pkU3Ruhwjys22wpjDCiAmPNt0HQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.38.0/24
46.233.42.0/23
Signature Algorithm: sha256WithRSAEncryption
21:72:20:5b:52:b6:5f:67:73:7d:59:fa:06:61:f9:28:70:20:
57:74:5c:ae:d8:6a:ed:88:c2:98:ee:58:89:dc:48:0f:04:13:
e3:71:c0:1a:43:b4:ee:a0:fa:ca:e4:8c:6c:b9:45:88:c3:26:
7f:ac:85:c4:0f:c2:af:8c:bb:f9:59:32:ee:5b:5e:a1:63:39:
c7:88:70:01:33:2f:28:30:c4:07:0b:86:bd:5b:ae:8a:1f:d4:
c8:22:72:4c:27:77:e2:2b:a6:25:6b:37:10:39:ff:95:b7:46:
6e:ba:29:83:49:4c:9b:60:ce:ad:8e:c1:0a:0f:3f:81:bc:94:
eb:b6:22:4b:d5:65:78:a8:66:84:3f:b5:ad:86:b8:35:e3:ef:
f0:c9:31:34:50:cb:0b:93:95:3c:da:00:87:e6:c9:58:1d:5a:
9e:57:d2:c7:bb:f4:21:84:a5:4e:98:71:d8:5d:42:7b:e4:41:
39:5f:4f:76:9e:28:37:ee:2b:f0:04:12:93:9f:2a:1a:19:92:
a2:4c:c6:71:d8:dc:a3:ff:78:0f:17:85:f7:28:3b:e7:1e:cc:
5d:f4:5d:3c:5a:40:23:be:96:77:63:e7:01:32:0e:31:96:15:
41:d1:2b:c2:1a:23:49:32:c9:9b:8a:75:b3:9e:cc:71:f7:48:
72:18:84:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 1 16:40:29 2024 by rpki-client on console-fra.rpki-client.org