Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/XYU2eVmV6M9kNFfR-YcRHxWKMwA.roa
File: XYU2eVmV6M9kNFfR-YcRHxWKMwA.roa (raw, json)
Hash identifier: nBqX/aprSZlAlO535VhxVvufVBCvbleeEhkSWEhsxms=
Subject key identifier: 5D:85:36:79:59:95:E8:CF:64:34:57:D1:F9:87:11:1F:15:8A:33:00
Certificate issuer: /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial: 01856E01F97AE28872837707E133CE8EA7F2
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/XYU2eVmV6M9kNFfR-YcRHxWKMwA.roa
Signing time: Sun 01 Jan 2023 15:45:01 +0000
ROA not before: Sun 01 Jan 2023 15:45:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62563
IP address blocks: 178.236.225.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:f9:7a:e2:88:72:83:77:07:e1:33:ce:8e:a7:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Validity
Not Before: Jan 1 15:45:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d8536795995e8cf643457d1f987111f158a3300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:69:d5:b7:39:36:4b:f4:b7:d3:c6:62:c4:a7:
1f:e2:e8:e1:17:76:c7:1f:18:92:8e:6a:95:ed:48:
cf:9b:14:57:64:95:25:a7:fd:59:50:ee:73:67:cf:
d0:ad:20:83:50:ed:26:31:de:1c:c5:fe:cf:9f:6b:
b6:17:6d:95:36:5d:7a:37:77:1f:26:20:7f:19:7a:
d5:2d:64:79:9b:d0:1c:4d:6f:b5:91:d0:4e:0c:a8:
75:a5:75:66:bb:79:6d:9c:94:d4:0b:a7:24:bc:fb:
69:e8:fb:07:df:e3:7a:9b:db:51:07:e3:05:23:c8:
1f:41:ef:5b:27:a2:31:5b:aa:de:0a:d7:e9:bb:5a:
15:4b:f2:0e:3b:59:4e:ad:a3:fa:14:fb:9e:64:48:
a1:d6:f6:13:c9:06:9f:ca:09:62:d6:c7:54:23:9c:
ab:92:d3:93:53:ae:10:ca:16:49:8d:61:bf:e1:b7:
e4:d7:3d:81:14:cb:dd:d7:bb:44:a1:d9:eb:4a:2b:
26:1a:d6:75:26:d0:55:ee:84:4a:33:67:71:1d:3f:
70:23:22:56:02:ab:49:ea:0c:06:9e:15:37:e2:7f:
0a:f3:d3:51:43:6f:7d:0c:c5:78:fe:2e:3d:aa:36:
50:f3:8a:eb:5c:3e:0b:10:9f:af:b0:c7:63:82:ec:
20:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:85:36:79:59:95:E8:CF:64:34:57:D1:F9:87:11:1F:15:8A:33:00
X509v3 Authority Key Identifier:
keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/XYU2eVmV6M9kNFfR-YcRHxWKMwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.225.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:bf:2e:a0:0d:20:4e:17:43:74:33:ab:ba:4e:c6:71:20:8d:
09:6c:4a:4f:23:c4:dd:db:8c:25:52:0d:b2:cc:27:2a:a8:fd:
c3:73:c7:61:0e:1b:05:3b:64:72:13:d2:cb:6d:5a:fc:59:12:
b1:91:a1:6a:6a:ba:26:54:b6:1b:55:93:5c:6e:9d:91:66:b0:
7f:92:63:86:65:fb:4b:15:4f:37:d7:16:fc:85:41:e4:4b:e4:
f1:26:94:20:a4:5f:ed:3d:fc:da:63:23:76:ff:9a:13:23:72:
eb:f8:41:65:09:a9:ca:0d:b3:82:88:71:a2:05:31:22:b9:cb:
fc:7f:d0:6a:bc:fe:56:3e:82:66:c8:10:80:86:4c:07:61:53:
af:7a:eb:6b:82:75:e9:25:6d:bc:84:76:8d:aa:4e:7c:5e:0d:
59:29:8a:b7:46:67:3f:bb:52:b1:61:20:5e:f9:ae:aa:99:75:
0b:21:29:d2:13:2e:13:11:5c:4f:5c:5d:35:cf:e3:2a:9e:6d:
f0:3e:ab:91:e8:fa:42:33:bb:be:85:dd:c0:fb:92:bb:90:b4:
2b:d1:c4:46:a4:df:b0:42:4e:77:da:88:ee:7b:05:d6:02:32:
ca:0a:ee:b3:92:b6:eb:c9:b8:85:5c:ec:b1:d1:15:95:46:44:
15:e3:64:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:21 2023 by rpki-client on console-ams.rpki-client.org