Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/i9E9qX8H5X3AlD1pTKh298_zlys.roa
File: i9E9qX8H5X3AlD1pTKh298_zlys.roa (raw, json)
Hash identifier: Tl3XNuEWZZCZHvKi+51d1YG8QKkTjXdnQdpvaP7yGVE=
Subject key identifier: 8B:D1:3D:A9:7F:07:E5:7D:C0:94:3D:69:4C:A8:76:F7:CF:F3:97:2B
Certificate issuer: /CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
Certificate serial: 018CC493492F2898A7EF5B0CB3B13FDB0BA5
Authority key identifier: 04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/i9E9qX8H5X3AlD1pTKh298_zlys.roa
Signing time: Mon 01 Jan 2024 10:30:35 +0000
ROA not before: Mon 01 Jan 2024 10:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197512
IP address blocks: 195.20.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:48:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:49:2f:28:98:a7:ef:5b:0c:b3:b1:3f:db:0b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
Validity
Not Before: Jan 1 10:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8bd13da97f07e57dc0943d694ca876f7cff3972b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c8:ea:56:a9:a7:20:f0:00:fb:af:86:ca:b9:
52:e9:ec:7c:0d:96:1c:ce:33:b6:a5:e2:62:c0:89:
b4:f0:ca:46:f6:d3:a2:32:df:14:6b:b6:16:89:fc:
1e:49:fb:b3:a6:0f:d1:2d:89:74:a0:8b:92:61:97:
34:23:ac:fd:81:a3:00:b8:b7:bc:b5:64:1c:ec:ab:
a1:4f:ca:f6:e7:d2:3b:be:6a:ca:c1:7f:53:81:fa:
06:81:24:f3:30:c4:23:b1:98:98:63:94:93:02:ff:
6d:87:73:40:8c:aa:7a:bd:8e:5d:b3:07:1d:a4:fe:
22:1c:22:7d:7e:f6:8f:90:ab:c3:ed:00:19:ec:84:
ad:ef:3d:be:79:7a:0c:7b:a7:10:ec:41:79:62:c1:
e4:71:23:36:6e:fe:94:92:58:10:2c:0f:6e:53:7b:
2c:0e:91:b3:b5:35:60:b8:ab:25:47:d3:1a:96:82:
11:d9:77:36:f5:97:db:f9:0b:f0:aa:a0:5d:14:e0:
8b:4e:fc:f3:66:43:25:2b:14:82:1b:60:d6:d0:11:
c3:fc:30:df:a5:b8:11:10:73:b6:21:6b:c6:8d:e7:
7d:20:da:83:12:18:b3:6e:a0:a6:34:e3:d7:66:06:
0d:af:53:76:0f:b9:34:cf:39:8e:2d:3c:82:22:67:
58:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D1:3D:A9:7F:07:E5:7D:C0:94:3D:69:4C:A8:76:F7:CF:F3:97:2B
X509v3 Authority Key Identifier:
keyid:04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/i9E9qX8H5X3AlD1pTKh298_zlys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.20.130.0/24
Signature Algorithm: sha256WithRSAEncryption
66:44:84:44:56:12:ba:4c:7e:e1:15:8d:dc:4f:fa:4e:8d:ab:
05:73:fd:e4:58:ba:39:95:85:a9:c6:7a:06:df:30:21:0e:8a:
fe:33:30:7c:94:f9:8d:a8:b7:34:39:08:e5:8f:d6:76:fa:19:
7e:e3:d0:71:10:1f:f1:05:e3:87:3c:e4:17:b8:dd:e0:83:70:
d8:df:d7:2b:36:37:6a:e1:2d:5c:f8:57:e3:b8:95:20:15:15:
b3:f9:62:9e:7f:8a:5b:cb:ec:3f:6e:99:af:60:fe:53:d3:19:
75:e4:ef:5f:77:f3:70:f0:b3:d9:1d:30:a6:5a:bb:86:5a:13:
c7:c2:7c:fb:99:a9:bd:3f:95:e3:87:e9:50:b7:f9:de:85:4b:
73:06:6d:6e:27:9c:d3:18:23:6d:70:32:05:e3:64:06:d8:e0:
7a:d0:c3:6d:a0:4e:0e:36:b6:65:29:d3:aa:8b:b2:93:21:ba:
b7:c0:e0:37:49:c3:62:22:50:b4:ee:7a:b8:88:cd:a9:cc:25:
80:ad:18:0d:9e:68:88:84:8f:fa:15:25:81:c9:33:e6:5d:d2:
c1:7b:b3:1f:c6:e4:f8:53:21:0e:0f:ec:6b:a9:37:08:5a:e2:
c4:6a:a9:ce:81:2b:69:37:2e:31:80:ad:19:3b:3a:6f:c2:5c:
66:00:c5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:09:00 2025 by rpki-client