Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/CsJolUKPAKDNy1KcLpLhR3tuSdk.roa
File: CsJolUKPAKDNy1KcLpLhR3tuSdk.roa (raw, json)
Hash identifier: sIH3zpsSjeIlWnxi8kN5tTCXCFBIRKCDeUWKdAfj29s=
Subject key identifier: 0A:C2:68:95:42:8F:00:A0:CD:CB:52:9C:2E:92:E1:47:7B:6E:49:D9
Certificate issuer: /CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Certificate serial: 0194266A23A7F74A291D632BDFA5941DB623
Authority key identifier: B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/CsJolUKPAKDNy1KcLpLhR3tuSdk.roa
Signing time: Thu 02 Jan 2025 09:47:57 +0000
ROA not before: Thu 02 Jan 2025 09:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51200
IP address blocks: 193.242.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Mar 2025 11:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:23:a7:f7:4a:29:1d:63:2b:df:a5:94:1d:b6:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Validity
Not Before: Jan 2 09:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ac26895428f00a0cdcb529c2e92e1477b6e49d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:67:f4:e8:f1:cb:88:95:26:d8:8c:eb:44:31:
da:a5:d1:3a:80:6d:43:e2:8a:cf:1f:ec:55:48:47:
f0:6d:f3:cc:5a:93:64:67:e5:2c:cc:ca:4d:3f:49:
9f:1f:99:36:ae:35:83:7f:52:e2:13:c4:f8:30:ea:
99:2a:5a:cc:35:2c:4f:f0:18:67:0e:f9:89:6b:3f:
49:a9:80:6d:91:4a:2d:05:7c:cc:60:d8:d1:5d:9c:
84:23:cc:78:0c:b4:e7:cc:c6:3f:35:d1:93:bc:4d:
97:61:33:d1:cb:2f:e5:11:ec:79:19:9a:65:ad:e8:
76:0e:29:e0:94:d2:53:5e:2a:1c:44:f6:4b:f0:cc:
67:6f:fb:33:ea:fd:a8:8b:68:fc:62:ef:f4:a4:64:
b2:8b:1a:3f:25:52:c1:85:20:48:34:c3:84:7d:51:
cb:3d:7c:a4:fe:f5:4a:ee:28:33:ee:90:49:fd:36:
34:11:1b:73:e8:d4:ce:ee:de:20:7b:0d:ac:23:3a:
25:0d:fd:3b:1b:e3:4e:19:c5:ec:27:4d:01:54:8d:
b2:4e:f0:dc:cd:bf:5c:cb:0f:12:91:96:f4:dd:9e:
54:9e:f7:e6:2d:b4:b2:6d:87:88:b0:81:6e:c8:c5:
c4:4c:12:3d:67:cc:6f:52:bc:97:07:bd:5a:d6:c4:
f7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C2:68:95:42:8F:00:A0:CD:CB:52:9C:2E:92:E1:47:7B:6E:49:D9
X509v3 Authority Key Identifier:
keyid:B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/CsJolUKPAKDNy1KcLpLhR3tuSdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.242.105.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:e7:65:40:20:b6:1b:1d:35:99:c6:f4:d7:6d:8a:33:de:1b:
01:59:09:c0:65:0e:e3:11:eb:09:01:c3:1b:c0:70:26:15:d9:
f1:60:47:50:64:6f:0b:2c:5e:d9:37:7c:aa:ca:ce:57:1c:7c:
45:e9:8a:6f:5f:a7:90:54:87:1f:42:9d:e8:e4:bc:a1:b3:5b:
9e:8a:a6:9d:50:95:67:18:ad:8a:a4:83:2a:7f:2e:c5:f1:3f:
b5:ea:0f:18:b3:44:1d:3f:c0:fb:ee:7f:f2:2a:81:4e:89:bd:
39:0f:00:80:11:e2:b6:e6:29:59:71:f2:14:96:80:98:4e:ab:
be:78:a3:75:4c:04:55:46:d9:0c:4a:39:6a:47:ba:ed:a0:17:
08:9e:d0:8c:ec:b2:5d:d6:d9:04:59:c2:f6:30:77:b7:b8:d3:
d5:2f:3a:31:e2:ce:b5:83:e4:2e:bc:cf:df:39:2b:c0:36:a0:
a6:54:ca:90:e6:60:54:b4:6c:92:89:5d:cf:c5:23:bb:d7:4e:
55:e1:3d:2c:d9:c9:34:77:a2:1d:3c:1e:41:52:fe:d4:1a:3c:
ae:25:78:0d:6e:0a:9b:80:1d:86:55:d1:52:e7:67:d2:35:ea:
f9:f9:85:17:4f:9c:92:bc:25:56:ee:99:23:57:c4:2a:85:62:
c9:54:2f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:47:03 2025 by rpki-client