Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/65bcff-ba01-498c-b54d-84026bc852f0/1/CzbAQK0zOk6DCjIsVRu4oaeWaLQ.roa
File: CzbAQK0zOk6DCjIsVRu4oaeWaLQ.roa (raw, json)
Hash identifier: E7axKitB3AMC7LRoV/hfRDAa6BTNNRTjWFGnzG03JBc=
Subject key identifier: 0B:36:C0:40:AD:33:3A:4E:83:0A:32:2C:55:1B:B8:A1:A7:96:68:B4
Certificate issuer: /CN=b54ddf6f03331cd773c7e7abb15429ba8d20bd78
Certificate serial: 0192B2C3EB7B7373CEF78C3AC824A83D17FE
Authority key identifier: B5:4D:DF:6F:03:33:1C:D7:73:C7:E7:AB:B1:54:29:BA:8D:20:BD:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tU3fbwMzHNdzx-ersVQpuo0gvXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bcff-ba01-498c-b54d-84026bc852f0/1/CzbAQK0zOk6DCjIsVRu4oaeWaLQ.roa
Signing time: Tue 22 Oct 2024 05:47:16 +0000
ROA not before: Tue 22 Oct 2024 05:47:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210197
IP address blocks: 81.30.101.0/24 maxlen: 24
85.204.38.0/24 maxlen: 24
2a13:f400::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b2:c3:eb:7b:73:73:ce:f7:8c:3a:c8:24:a8:3d:17:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b54ddf6f03331cd773c7e7abb15429ba8d20bd78
Validity
Not Before: Oct 22 05:47:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b36c040ad333a4e830a322c551bb8a1a79668b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c5:c0:71:fa:54:9d:15:d0:10:31:0f:99:f9:
0c:f3:1e:60:49:b2:ef:37:d0:24:a5:b8:a5:9d:41:
7d:54:91:b3:b2:d5:b8:44:30:5d:25:5b:0c:d8:06:
48:57:b8:16:97:a9:30:7e:df:49:64:aa:58:e3:b4:
95:78:3b:4f:da:65:21:d8:7a:93:fd:86:ae:3a:c4:
de:06:44:c1:be:ee:0d:6c:8b:35:e7:af:0f:b7:11:
a8:8c:59:9c:77:d7:ce:8b:7e:86:13:0a:9e:bf:2c:
7c:c5:58:63:3a:3f:9f:77:30:b0:5b:2b:b4:d0:74:
13:65:18:52:31:67:55:a1:67:1e:46:4d:5c:37:25:
33:3d:1d:0b:5f:e5:d7:ad:86:39:ea:a0:0b:88:14:
60:86:d2:00:93:5e:f0:91:77:7d:59:1d:a2:51:f5:
4b:75:3b:05:fa:52:3b:9f:95:f3:fb:bd:71:cf:5c:
eb:c5:29:8e:16:f9:2c:3b:e7:19:0d:40:cf:3b:df:
be:2a:13:11:c5:34:d2:95:e4:27:a8:c7:34:d3:af:
8a:c1:dc:6c:d0:bf:eb:33:25:1f:eb:18:8d:9b:f2:
86:c3:e5:57:e7:e6:dd:de:9e:fc:79:7d:f1:b6:79:
b7:c4:86:51:a5:0a:19:a3:44:4b:ae:18:cb:07:9e:
a7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:36:C0:40:AD:33:3A:4E:83:0A:32:2C:55:1B:B8:A1:A7:96:68:B4
X509v3 Authority Key Identifier:
keyid:B5:4D:DF:6F:03:33:1C:D7:73:C7:E7:AB:B1:54:29:BA:8D:20:BD:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tU3fbwMzHNdzx-ersVQpuo0gvXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bcff-ba01-498c-b54d-84026bc852f0/1/CzbAQK0zOk6DCjIsVRu4oaeWaLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bcff-ba01-498c-b54d-84026bc852f0/1/tU3fbwMzHNdzx-ersVQpuo0gvXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.101.0/24
85.204.38.0/24
IPv6:
2a13:f400::/29
Signature Algorithm: sha256WithRSAEncryption
8a:18:53:21:4f:2b:d5:8f:8d:4f:df:f4:63:97:2e:0d:6a:ef:
37:ff:9b:a5:d2:2b:b7:4d:9b:c5:d1:cb:ed:bd:76:b9:88:60:
be:7e:14:ad:5c:2f:00:52:80:ea:1f:15:bc:fc:e9:c8:8e:5a:
b0:0b:d8:a5:c1:90:b1:91:ae:36:72:e4:dd:1f:c2:05:de:03:
cd:db:85:bd:aa:a5:fb:1c:38:21:3c:45:80:48:02:5e:7d:0d:
61:bf:82:f8:a4:2c:d7:51:af:b5:e3:fe:71:99:b0:38:3e:73:
66:2a:fa:e4:1b:cd:31:11:96:b4:59:7b:02:c7:a2:32:42:81:
f4:ed:44:8e:fa:df:78:ec:07:21:e3:a2:71:7e:27:da:64:17:
a2:c9:88:4b:bc:fa:b6:dd:90:45:11:21:da:ac:a2:a7:95:5d:
cd:18:49:31:2e:fc:3c:05:64:81:fe:37:a5:dc:55:9a:56:7b:
1b:30:59:8b:07:c3:07:bb:57:53:8d:d9:e1:ba:dd:54:d4:f9:
32:0f:f4:84:98:67:e8:b0:82:d0:45:d6:2d:de:4f:7c:ad:a2:
3d:19:85:1a:8a:ae:bd:ff:74:b0:6e:59:28:ff:f2:44:88:7b:
e3:62:69:d2:d5:43:8e:fe:47:71:51:11:14:1c:13:e9:20:3b:
94:cc:04:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:11:04 2025 by rpki-client