Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BLEKnlDfbe_ji_J9_AKIxRIFXPI.roa
File: BLEKnlDfbe_ji_J9_AKIxRIFXPI.roa (raw, json)
Hash identifier: 9MXPB0HCkzPMpjIHAJVudZzGvy7kx4KVbx8W27/420c=
Subject key identifier: 04:B1:0A:9E:50:DF:6D:EF:E3:8B:F2:7D:FC:02:88:C5:12:05:5C:F2
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018800FEAA5E579837387C8308C1738F5F4D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BLEKnlDfbe_ji_J9_AKIxRIFXPI.roa
Signing time: Tue 09 May 2023 14:51:09 +0000
ROA not before: Tue 09 May 2023 14:51:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213236
IP address blocks: 163.5.199.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:00:fe:aa:5e:57:98:37:38:7c:83:08:c1:73:8f:5f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 9 14:51:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04b10a9e50df6defe38bf27dfc0288c512055cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3d:1f:33:5c:f1:32:8e:ed:96:8a:e0:e9:43:
0d:9c:8c:ba:93:33:4f:f5:84:14:5b:89:3c:4a:42:
08:16:7c:75:9b:34:47:dd:5c:66:8f:35:0c:6c:12:
d2:4c:72:df:68:38:2c:6c:b5:b6:a1:a4:52:7a:e1:
c4:15:fd:fd:fc:e5:ff:c0:0a:e8:09:36:b0:24:51:
88:12:5e:f7:08:21:68:a9:20:0c:ca:81:66:1d:8e:
0d:65:20:30:f8:8d:71:0a:e1:99:ea:6d:49:f6:c7:
05:c3:03:e8:08:c2:dd:b5:00:33:69:1a:9a:9a:8e:
4e:3b:7a:e0:88:9c:f5:2d:2f:d5:f8:bf:cf:7c:80:
76:9b:40:9f:e7:76:84:01:35:0b:21:44:75:3c:6d:
94:02:b9:5b:ff:d3:77:3c:05:41:73:91:d1:28:1d:
33:d7:45:6a:08:68:00:55:15:5e:61:60:81:ef:6c:
8a:ba:02:9f:e8:9e:03:0b:5b:a1:79:94:dd:a1:6d:
0a:e0:24:df:09:ef:e5:aa:1f:65:ff:27:e3:3c:5f:
8e:33:c8:64:7a:00:e3:79:ec:2b:0b:78:59:a0:cf:
fb:d0:27:9d:8b:07:2c:4d:73:a7:09:f6:dd:7c:6d:
e0:1f:ba:8e:ee:26:1c:ff:58:55:af:12:40:a1:6c:
2d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B1:0A:9E:50:DF:6D:EF:E3:8B:F2:7D:FC:02:88:C5:12:05:5C:F2
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BLEKnlDfbe_ji_J9_AKIxRIFXPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.199.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:93:a8:e0:18:32:3b:67:43:f8:3c:83:11:4d:c7:b8:2c:4f:
53:67:12:23:32:40:e1:19:ec:db:04:5f:a3:e8:68:1e:99:cc:
1b:c5:32:86:dc:9e:f7:ee:fe:27:3d:c7:b3:7a:3b:fa:57:2d:
d0:eb:29:c0:ef:5f:29:4e:48:ee:80:0e:36:ca:76:92:cd:5b:
84:98:32:56:e4:73:77:d7:12:d8:90:85:64:b2:7a:0f:91:f2:
32:f3:8a:33:ac:53:01:d4:ef:70:2b:65:8e:7a:03:b6:a8:7f:
34:90:b5:90:2d:27:3f:46:d6:59:d9:44:47:cd:ff:fe:2c:8b:
f1:b9:b2:1f:49:0d:d4:7b:5a:a1:04:c1:1d:6a:8e:3d:70:2a:
6d:3b:02:b5:d5:d1:ee:09:dd:fe:42:dc:65:5f:cd:a1:12:14:
a1:73:a0:ca:eb:aa:60:2e:53:c7:b1:3d:fa:34:5c:67:76:4e:
e6:42:6f:fc:5f:d2:98:00:55:c6:2f:c1:6b:16:4f:26:a8:e7:
16:98:bd:1c:c5:e6:66:4e:1e:2d:5b:a7:ae:d3:f8:c7:bd:a0:
ef:32:f1:7e:ab:48:7e:d6:4d:43:fe:9f:68:4a:6b:ba:b9:98:
b9:11:43:69:c2:50:13:bb:aa:36:eb:81:c4:ea:1d:0e:1f:a8:
ed:48:80:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgA/qpeV5g3OHyDCMFzj19NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwNTA5MTQ1MTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNGIxMGE5ZTUwZGY2ZGVmZTM4YmYyN2RmYzAyODhjNTEyMDU1Y2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj0fM1zxMo7tlorg6UMNnIy6kzNP
9YQUW4k8SkIIFnx1mzRH3VxmjzUMbBLSTHLfaDgsbLW2oaRSeuHEFf39/OX/wAro
CTawJFGIEl73CCFoqSAMyoFmHY4NZSAw+I1xCuGZ6m1J9scFwwPoCMLdtQAzaRqa
mo5OO3rgiJz1LS/V+L/PfIB2m0Cf53aEATULIUR1PG2UArlb/9N3PAVBc5HRKB0z
10VqCGgAVRVeYWCB72yKugKf6J4DC1uheZTdoW0K4CTfCe/lqh9l/yfjPF+OM8hk
egDjeewrC3hZoM/70CediwcsTXOnCfbdfG3gH7qO7iYc/1hVrxJAoWwtFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFASxCp5Q323v44vyffwCiMUSBVzyMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvQkxFS25sRGZiZV9qaV9KOV9BS0l4UklGWFBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowXHMA0G
CSqGSIb3DQEBCwUAA4IBAQCqk6jgGDI7Z0P4PIMRTce4LE9TZxIjMkDhGezbBF+j
6GgemcwbxTKG3J737v4nPcezejv6Vy3Q6ynA718pTkjugA42ynaSzVuEmDJW5HN3
1xLYkIVksnoPkfIy84ozrFMB1O9wK2WOegO2qH80kLWQLSc/RtZZ2URHzf/+LIvx
ubIfSQ3Ue1qhBMEdao49cCptOwK11dHuCd3+QtxlX82hEhShc6DK66pgLlPHsT36
NFxndk7mQm/8X9KYAFXGL8FrFk8mqOcWmL0cxeZmTh4tW6eu0/jHvaDvMvF+q0h+
1k1D/p9oSmu6uZi5EUNpwlATu6o264HE6h0OH6jtSIBM
-----END CERTIFICATE-----
Generated at Fri Nov 10 03:57:02 2023 by rpki-client on console-fra.rpki-client.org