Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/xOyUThkiVqT9qw39ZUFpYy0cnBA.roa
File: xOyUThkiVqT9qw39ZUFpYy0cnBA.roa (raw, json)
Hash identifier: 19Yy5TAtnJxv2u8AAcmXyttB8a+igwYFIbyetughvA4=
Subject key identifier: C4:EC:94:4E:19:22:56:A4:FD:AB:0D:FD:65:41:69:63:2D:1C:9C:10
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 018BE2E860A3EF9A44F883B67674204640BF
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/xOyUThkiVqT9qw39ZUFpYy0cnBA.roa
Signing time: Sat 18 Nov 2023 14:49:21 +0000
ROA not before: Sat 18 Nov 2023 14:49:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 46.233.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Dec 2023 08:27:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e2:e8:60:a3:ef:9a:44:f8:83:b6:76:74:20:46:40:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Nov 18 14:49:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4ec944e192256a4fdab0dfd654169632d1c9c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ed:51:0c:45:02:2b:4a:96:31:d4:17:64:c1:
30:aa:f8:ae:85:b1:3b:a6:6e:3c:01:f1:0b:4d:60:
0a:b0:8d:25:35:d2:fc:30:91:76:43:fd:3d:43:c6:
ec:18:e9:3c:4d:3f:cf:91:8f:76:40:e7:e4:e0:4d:
3f:62:4c:a6:63:73:27:bb:f9:5e:a6:2e:eb:51:a4:
86:a1:ad:89:08:13:76:ed:0d:57:31:cc:62:81:dc:
88:af:8e:3c:f5:77:75:e5:e9:89:d6:d6:83:f1:1a:
08:30:41:53:26:21:b9:79:f8:c9:c6:a7:bc:e2:72:
06:7f:18:79:26:6a:b9:da:26:b6:58:17:a9:3c:57:
e3:aa:90:db:74:82:d2:7d:07:e7:ab:fe:88:a6:43:
d9:42:95:c4:bc:d0:80:e0:b1:0e:bb:8e:63:0b:27:
0c:a3:7a:07:05:cd:da:d7:f0:07:91:d4:e5:3f:62:
17:bb:2d:0a:d9:30:19:31:09:60:ba:e2:30:c1:04:
fd:57:66:7f:4c:c1:0f:f5:97:b7:34:98:15:ca:49:
e0:c3:75:cb:38:0c:ea:5e:b5:6c:ce:bf:9b:db:7b:
c5:53:fe:fa:8c:43:65:6f:91:2a:96:53:ee:3b:a8:
84:30:ae:51:05:e4:65:a9:87:6b:82:75:5b:8d:f0:
1b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EC:94:4E:19:22:56:A4:FD:AB:0D:FD:65:41:69:63:2D:1C:9C:10
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/xOyUThkiVqT9qw39ZUFpYy0cnBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.32.0/24
Signature Algorithm: sha256WithRSAEncryption
66:54:0e:e2:98:03:8a:07:4a:9d:1d:f7:a2:bb:ef:fd:19:9f:
4b:64:f7:b5:57:53:ad:37:c1:c5:79:b5:67:f4:39:a7:03:61:
06:5d:b6:11:1f:cf:18:bd:f1:2c:a4:f7:b8:26:98:2d:f2:b6:
7f:68:fb:ee:14:69:06:1d:77:6d:22:2f:de:89:15:11:7d:b0:
bc:3b:bc:cf:25:c7:20:a0:ff:95:b2:31:b5:ec:01:7d:3b:32:
b3:df:7d:07:42:9c:86:fc:20:82:da:37:08:d3:1a:d9:fd:61:
6a:94:8d:cb:58:d3:96:39:e6:93:9c:83:28:01:13:db:24:a7:
6c:c8:48:11:53:df:cd:45:a6:28:b7:38:db:60:87:13:59:d8:
24:80:ad:28:e2:3e:8e:2c:72:7b:31:07:1e:c5:9b:ba:4f:a7:
df:3e:e6:9d:cd:ef:d0:44:3c:bd:c9:3b:d7:22:f0:c2:61:b7:
c1:92:6d:54:6e:07:9f:ab:76:b7:4b:40:74:78:be:d5:a6:b0:
56:f5:c1:05:5c:bc:ba:82:eb:a8:98:59:27:80:46:e1:34:6d:
18:e2:d1:15:96:a6:2b:44:a0:56:5e:02:f6:55:95:92:f4:d7:
b0:ce:e4:1f:e4:f5:fb:13:8f:24:82:93:9a:04:7f:0a:0f:ca:
1a:f3:b2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:09 2024 by rpki-client on console-ams.rpki-client.org