Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/INiKs6SBZOJUzJS_RGtSENPAGqk.roa
File: INiKs6SBZOJUzJS_RGtSENPAGqk.roa (raw, json)
Hash identifier: 2IPAaGsN0lPTx1iNgEc92XBfEn5Hx4dY38v4EJGP0PE=
Subject key identifier: 20:D8:8A:B3:A4:81:64:E2:54:CC:94:BF:44:6B:52:10:D3:C0:1A:A9
Certificate issuer: /CN=28bac185b83f6de39abadcff3dfe4873d883c488
Certificate serial: 0194221FB6B34428B6FEF6150906A8183937
Authority key identifier: 28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/INiKs6SBZOJUzJS_RGtSENPAGqk.roa
Signing time: Wed 01 Jan 2025 13:48:11 +0000
ROA not before: Wed 01 Jan 2025 13:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207279
IP address blocks: 193.38.34.0/24 maxlen: 32
Validation: Failed, certificate revoked on Tue 11 Mar 2025 13:12:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:b6:b3:44:28:b6:fe:f6:15:09:06:a8:18:39:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bac185b83f6de39abadcff3dfe4873d883c488
Validity
Not Before: Jan 1 13:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20d88ab3a48164e254cc94bf446b5210d3c01aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c5:02:93:99:b1:e1:28:64:f1:fe:c6:20:48:
d9:9d:5d:f3:a8:ca:8e:82:61:31:6c:ba:6f:8e:96:
36:0f:86:c2:20:7a:b6:59:a2:a6:81:fd:3f:40:f7:
68:d4:5d:c3:f5:65:ca:61:57:39:5e:a1:9d:4d:bf:
fa:7e:a3:37:d5:09:1c:dd:7f:aa:a3:e2:5b:55:74:
04:ff:6d:63:6c:a0:a1:c4:d4:8e:56:3d:1d:f3:17:
c8:53:b8:3a:0d:ec:c5:98:01:7f:0b:8d:80:03:2c:
cb:b9:dd:f7:ae:60:7c:7c:d3:71:5a:82:93:7a:3b:
ee:6d:8f:9a:65:a1:3d:be:9c:78:08:de:c5:97:6f:
f6:91:07:ee:68:8f:7d:66:ad:2c:79:e2:3e:48:ac:
c6:4d:f4:86:dc:1b:db:9f:1c:bf:48:0a:6e:b2:12:
d8:dc:ed:60:70:67:51:79:9a:13:63:52:cf:79:17:
20:ae:06:07:3f:bd:f8:26:8c:c3:62:be:68:6e:19:
ee:b6:60:a7:84:2c:eb:36:38:83:e9:d0:66:7a:1e:
e0:d0:5b:f1:8d:09:22:fb:cd:0b:fe:2b:8a:07:38:
f9:50:b3:08:d1:a8:64:5b:44:8c:81:b8:fd:4c:6c:
2a:0c:35:e9:25:46:96:9d:8c:e0:e1:b1:83:c7:8c:
e4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D8:8A:B3:A4:81:64:E2:54:CC:94:BF:44:6B:52:10:D3:C0:1A:A9
X509v3 Authority Key Identifier:
keyid:28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/INiKs6SBZOJUzJS_RGtSENPAGqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.34.0/24
Signature Algorithm: sha256WithRSAEncryption
84:83:72:f4:a7:a1:e1:91:f1:6c:d4:66:82:96:78:fb:48:31:
c3:93:4e:50:4c:48:dc:e7:ce:8b:e9:86:21:ef:e9:ea:fb:77:
4e:b1:35:b2:26:f6:40:3b:83:99:c6:da:45:8e:67:a4:d6:3c:
1d:6a:9a:47:f6:06:de:cc:7f:5d:9f:a8:02:73:af:22:db:b0:
17:48:31:58:dc:67:03:72:5d:fc:cf:7e:f0:a8:29:da:e8:61:
bc:2c:6f:1c:3f:97:7f:f6:a9:6a:92:e8:e8:e2:20:41:b8:de:
24:75:37:6b:62:d4:28:e1:cc:ad:8d:0e:a4:c8:07:4e:2d:d7:
fe:ff:d7:22:80:ad:36:a1:b0:16:4e:a9:0d:6d:c4:a2:62:d0:
c3:99:e1:e9:8d:45:fc:db:2c:b8:55:f9:96:51:c2:88:02:2d:
b9:06:66:67:8e:15:7d:3f:e8:99:62:3e:44:45:55:bb:11:7b:
2a:86:7f:d1:dc:03:53:7e:e2:a0:2f:ad:82:b0:ce:1d:fd:f6:
f5:26:ea:29:22:f9:cf:cd:24:64:8d:90:c4:ec:c9:14:ac:fd:
7a:cc:91:42:57:0d:49:e4:20:02:bb:7c:dc:39:48:e0:15:ab:
3e:fa:54:5b:d2:cc:8f:79:40:59:12:db:d1:14:85:cd:10:c3:
60:a4:b0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:53:24 2025 by rpki-client