Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/u5juHotCMmKk3D4tePWu-O8jm7M.roa
File: u5juHotCMmKk3D4tePWu-O8jm7M.roa (raw, json)
Hash identifier: aqQRjw251EpNFGRnC4FUV19z6WaWWAfxpOssbSup0ak=
Subject key identifier: BB:98:EE:1E:8B:42:32:62:A4:DC:3E:2D:78:F5:AE:F8:EF:23:9B:B3
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 0187EA755A7D7CAC31F30410157C1F6B740B
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/u5juHotCMmKk3D4tePWu-O8jm7M.roa
Signing time: Fri 05 May 2023 05:49:32 +0000
ROA not before: Fri 05 May 2023 05:49:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.233.38.0/24 maxlen: 24
46.233.39.0/24 maxlen: 24
46.233.42.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 08 Jun 2023 14:53:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ea:75:5a:7d:7c:ac:31:f3:04:10:15:7c:1f:6b:74:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: May 5 05:49:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb98ee1e8b423262a4dc3e2d78f5aef8ef239bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:89:bc:5e:08:f4:55:ca:f1:d0:ce:74:23:41:
b0:55:63:48:42:b1:34:4b:09:c4:d8:9c:ee:b2:eb:
46:b8:44:f1:d8:b7:6c:2a:2a:ec:e9:78:0e:4d:2b:
21:23:c2:3e:30:9f:ff:3c:7c:f4:f7:e8:c1:30:a2:
1b:7f:a3:40:a7:9f:b6:03:13:35:b6:d5:8c:5f:d5:
04:81:54:4d:af:d1:1e:a0:ed:e6:cb:c7:74:a9:8f:
42:d3:e6:e9:45:51:52:c6:51:9e:e0:8d:54:6d:93:
c2:ba:0e:d5:23:71:bc:5e:61:50:77:1a:ae:5c:53:
17:18:71:b9:9e:df:16:27:cc:7c:d2:48:1d:73:81:
df:3c:f5:11:86:a7:f9:97:4a:2a:07:b4:dd:9e:a7:
d1:a5:3b:59:62:e5:de:3f:84:91:a2:d8:52:ae:3a:
56:07:1b:dd:a7:78:70:9c:c5:6e:3d:92:7b:3d:aa:
49:db:40:07:da:21:a6:af:bb:00:3a:f9:2b:bf:29:
4a:80:28:94:fb:c4:78:50:d9:84:ec:92:1c:51:49:
36:d9:6c:d0:30:32:27:86:a0:13:49:af:08:a4:df:
7e:9f:da:ed:00:3b:6b:f2:4d:de:ad:3c:5e:43:2b:
a2:a0:48:1e:39:a4:3a:e5:0d:b4:13:ae:79:cb:19:
3f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:98:EE:1E:8B:42:32:62:A4:DC:3E:2D:78:F5:AE:F8:EF:23:9B:B3
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/u5juHotCMmKk3D4tePWu-O8jm7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.38.0/23
46.233.42.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:57:bf:a1:4d:b4:4f:c7:16:e4:18:e3:e2:e9:ff:b0:11:dc:
a6:6c:f9:d3:f6:b2:35:a1:5b:11:85:55:9e:36:ab:6b:e5:95:
14:43:ce:bd:7e:b1:a2:3b:34:90:03:42:40:0a:89:f6:f0:5d:
68:b9:02:9b:25:2b:23:ed:50:13:79:31:bd:a1:db:32:e3:02:
c5:e9:6f:af:fd:07:69:41:5d:69:f5:75:92:12:47:bf:78:b9:
7e:c2:8b:4a:cb:92:50:c7:52:4f:64:c6:60:bd:8d:cb:18:1c:
9b:d4:4e:61:00:f7:d3:7c:e3:e8:c1:78:49:ae:d6:0d:d0:91:
73:a9:a3:ec:ed:b9:40:66:d4:73:68:9b:67:dd:51:d1:ed:8f:
f0:3f:85:93:d5:f0:7a:11:59:7f:0e:83:c8:27:56:c8:f7:2c:
e8:ee:e8:d7:a7:9f:ee:5a:46:50:0e:fd:31:7d:5f:e8:aa:22:
df:ed:43:52:e2:74:36:cf:85:02:bf:97:01:21:11:06:3b:85:
f8:f7:ff:25:09:27:31:4c:0c:f0:87:bd:e9:2b:ad:99:a0:93:
4c:ef:e2:6c:5e:ce:a7:db:da:38:ca:6c:8d:9f:74:ad:f7:29:
9a:c1:d3:6b:02:9a:5d:8d:fb:3d:46:c5:04:b8:5c:52:d6:62:
cb:6a:42:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:09 2024 by rpki-client on console-ams.rpki-client.org