Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/XwytCvut1LqFuy7cMfYrv_XjU0U.roa
File: XwytCvut1LqFuy7cMfYrv_XjU0U.roa (raw, json)
Hash identifier: WnZyI3ohNPAFCdVtblIDD2wq7us08vuUQ/Eu75yDriQ=
Subject key identifier: 5F:0C:AD:0A:FB:AD:D4:BA:85:BB:2E:DC:31:F6:2B:BF:F5:E3:53:45
Certificate issuer: /CN=53a125890a4af092455abc7bb5abfe48cd852c06
Certificate serial: 018CC26D5F8A8320CF8B9591A79462794EDE
Authority key identifier: 53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/XwytCvut1LqFuy7cMfYrv_XjU0U.roa
Signing time: Mon 01 Jan 2024 00:29:56 +0000
ROA not before: Mon 01 Jan 2024 00:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201869
IP address blocks: 156.51.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Feb 2024 12:04:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:5f:8a:83:20:cf:8b:95:91:a7:94:62:79:4e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a125890a4af092455abc7bb5abfe48cd852c06
Validity
Not Before: Jan 1 00:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f0cad0afbadd4ba85bb2edc31f62bbff5e35345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a8:e3:af:b2:85:7d:9c:7f:7e:fc:2f:2e:b4:
1c:fb:1b:ec:12:25:54:c0:e0:e8:b4:80:6a:4b:f8:
13:55:64:72:1e:8e:f4:43:fb:15:6d:dd:cf:51:b7:
35:72:46:f5:6a:e1:35:52:d7:4e:9e:50:5e:93:8e:
e4:9c:5b:82:53:54:a1:74:07:c6:b5:d4:c2:b1:2e:
40:58:d7:a8:95:2d:fd:81:b8:be:e3:fb:a8:97:df:
2d:82:3f:eb:fe:2f:7f:3e:80:cf:f1:a8:93:aa:d4:
79:b8:0e:fe:c3:77:7f:43:e6:d4:c5:b0:35:4c:27:
e0:6c:9a:2d:e1:73:be:1d:f0:f5:cc:82:bc:1c:df:
1d:42:a7:a2:5a:ae:97:7d:54:86:1b:56:d5:a5:dc:
a5:57:bb:a3:47:8d:9e:3b:52:c3:d2:31:aa:fe:d2:
50:1b:cc:e9:1e:08:c6:ed:1a:12:25:e6:74:0a:42:
b3:77:54:c5:49:dc:58:b3:a3:7d:3c:4b:ba:d7:ad:
68:da:5f:63:57:6c:fe:b1:ed:6f:ec:1f:c9:98:87:
78:c9:e9:81:8b:07:a7:fe:8f:c1:24:92:1e:bb:52:
2d:9e:11:fa:fa:91:34:68:74:e5:db:ab:23:19:ae:
c2:ee:a6:85:de:62:91:46:56:3a:2f:02:1c:8f:c3:
fb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0C:AD:0A:FB:AD:D4:BA:85:BB:2E:DC:31:F6:2B:BF:F5:E3:53:45
X509v3 Authority Key Identifier:
keyid:53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/XwytCvut1LqFuy7cMfYrv_XjU0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.51.200.0/24
Signature Algorithm: sha256WithRSAEncryption
26:2b:58:e7:66:27:4e:ae:bb:3e:4c:49:b1:a4:76:36:af:04:
86:a3:7e:6c:1a:2e:c1:51:45:20:99:23:ec:fd:e3:4b:66:1c:
e6:1b:c7:c0:f5:55:7b:85:2f:a8:46:56:3d:7c:45:bc:e8:36:
70:b1:2b:78:7d:d7:30:63:1c:33:44:02:72:a5:45:50:ee:51:
81:58:a8:ff:42:2a:18:6c:ed:27:59:94:e4:ad:1e:10:03:e3:
1f:75:21:33:01:74:36:58:8c:01:94:50:b2:1b:4d:2f:f2:eb:
e2:98:c1:08:bc:88:5e:e7:8c:16:26:f4:99:d4:10:81:c8:c2:
75:2c:9d:5c:44:87:9b:d1:df:53:3a:fe:49:2b:be:b3:74:57:
42:32:03:07:f6:5e:23:f4:37:2a:45:16:42:06:b4:01:f0:b9:
de:98:6b:1d:f6:e8:1a:ed:e3:73:02:32:b9:08:61:16:15:13:
22:88:e9:22:34:bd:6a:82:ee:f7:a6:4e:16:1b:ef:36:13:c6:
ff:c6:75:a9:24:2e:af:a7:82:29:8f:d5:06:c2:cd:ba:49:8a:
40:0d:54:da:17:46:fa:b2:03:94:76:2c:f5:87:02:ca:73:fd:
c0:39:f9:e1:a4:7f:9f:30:a4:e1:d5:1c:45:a0:2e:2b:76:5a:
46:72:b6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:52 2024 by rpki-client on console-fra.rpki-client.org