Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/A6xq_5X7gp0vMUcsogrCi-xrqmw.roa
File: A6xq_5X7gp0vMUcsogrCi-xrqmw.roa (raw, json)
Hash identifier: 6U8rS2F3rzVbYEIlOkPkAxc5A0BO3twCU00/kMaybd0=
Subject key identifier: 03:AC:6A:FF:95:FB:82:9D:2F:31:47:2C:A2:0A:C2:8B:EC:6B:AA:6C
Certificate issuer: /CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Certificate serial: 018CC2DB618D525D6D21A3F75AAA66838663
Authority key identifier: 0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/A6xq_5X7gp0vMUcsogrCi-xrqmw.roa
Signing time: Mon 01 Jan 2024 02:30:06 +0000
ROA not before: Mon 01 Jan 2024 02:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202503
IP address blocks: 193.111.54.0/23 maxlen: 23
193.111.52.0/22 maxlen: 22
193.111.52.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 03 Apr 2024 16:41:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:61:8d:52:5d:6d:21:a3:f7:5a:aa:66:83:86:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Validity
Not Before: Jan 1 02:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03ac6aff95fb829d2f31472ca20ac28bec6baa6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:11:2d:d6:53:fa:b5:9e:80:7e:a2:aa:2c:12:
16:08:ce:a1:c9:ea:53:49:e2:1c:cd:99:49:a8:d8:
09:7f:7d:f3:ff:cf:27:24:f4:76:a7:b4:04:f5:6d:
b3:9c:b4:c7:83:32:bd:80:1c:1c:79:ec:76:31:25:
f1:0e:06:36:33:28:a4:e8:9c:3a:e8:ce:a1:2d:06:
98:99:63:25:38:d1:11:9b:90:81:44:ed:a4:c6:8e:
d1:6a:71:71:a8:9d:b5:ab:02:49:8a:83:d8:3d:d8:
e0:47:f1:1f:76:53:0e:d6:f3:00:df:f0:a3:59:d9:
0c:cc:fd:67:8c:d3:20:96:7a:07:c5:7d:02:c9:ee:
58:ae:e7:10:a4:67:dc:9c:49:59:88:e0:0c:dd:3d:
4f:3c:b3:cc:ee:66:be:3d:13:df:12:8c:37:51:55:
41:12:00:f6:e7:d3:b0:2e:c7:ee:12:00:f7:81:2b:
99:4c:0b:10:99:c1:f3:54:96:75:21:81:29:bd:c0:
26:cb:38:5b:d1:88:ff:2f:61:65:8e:1b:b6:f8:3c:
1f:b5:ee:04:ce:33:1d:f1:81:4c:b1:2e:28:12:b9:
b7:c4:4c:87:7a:29:ce:66:f3:75:47:82:47:e8:32:
03:02:28:01:c6:ce:f9:c0:57:9f:4e:a2:dc:9c:9c:
45:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AC:6A:FF:95:FB:82:9D:2F:31:47:2C:A2:0A:C2:8B:EC:6B:AA:6C
X509v3 Authority Key Identifier:
keyid:0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/A6xq_5X7gp0vMUcsogrCi-xrqmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.52.0/22
Signature Algorithm: sha256WithRSAEncryption
05:67:b3:48:8e:d7:3d:4a:6c:71:98:c1:09:58:69:87:0b:ff:
e3:f4:26:47:08:73:a0:ba:47:14:86:80:7b:88:32:57:17:c9:
b4:06:36:a6:49:95:f5:df:9c:9d:fc:43:08:47:08:00:74:80:
79:99:c4:c9:80:7b:9c:da:1a:73:80:05:d4:7b:ab:0e:82:54:
4e:03:35:f3:2b:8f:2e:b1:1e:56:05:81:a4:05:9b:82:e7:f7:
e2:a6:cf:04:e0:8c:52:37:38:d7:09:1b:98:4f:40:2f:13:57:
6e:d6:b2:9b:a9:e4:3f:40:87:e3:21:9b:63:f4:f7:bb:fb:74:
c2:f2:72:9d:22:bd:0b:32:c3:53:94:20:d3:96:97:e3:69:ac:
8e:4e:c2:04:12:46:bd:7a:43:81:74:8e:81:3c:1a:0f:f0:ce:
f6:74:58:f0:cb:8d:6b:fb:94:ea:02:e3:df:f9:69:2d:7a:eb:
d4:46:34:c7:64:cf:fa:51:df:e4:30:04:f9:5a:7c:1c:7e:ec:
e5:03:f2:80:83:59:69:8c:06:b4:85:e8:9e:91:8b:3e:ac:31:
a0:ea:9d:e5:b1:72:e3:c0:ea:24:3b:f4:1a:97:04:18:a9:14:
56:c2:d7:d2:f8:3c:91:57:bb:af:80:08:cc:6e:5f:1b:63:0d:
42:03:51:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:55 2024 by rpki-client on console-ams.rpki-client.org