Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/BLS-TJit-EHKXCZJM0SfDKJgDU0.roa
File: BLS-TJit-EHKXCZJM0SfDKJgDU0.roa (raw, json)
Hash identifier: QAlot9lNGzlR5IzdNlQlx7kvFrn5cj+bbamy5/7SCII=
Subject key identifier: 04:B4:BE:4C:98:AD:F8:41:CA:5C:26:49:33:44:9F:0C:A2:60:0D:4D
Certificate issuer: /CN=38ca3f38d8e5a301eaf6924b924fe8f57aac690d
Certificate serial: 0185B656EF90F14A1DDEAAA7A71B8E386F27
Authority key identifier: 38:CA:3F:38:D8:E5:A3:01:EA:F6:92:4B:92:4F:E8:F5:7A:AC:69:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OMo_ONjlowHq9pJLkk_o9XqsaQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/BLS-TJit-EHKXCZJM0SfDKJgDU0.roa
Signing time: Sun 15 Jan 2023 16:50:28 +0000
ROA not before: Sun 15 Jan 2023 16:50:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60268
IP address blocks: 193.19.97.0/24 maxlen: 24
193.19.96.0/24 maxlen: 24
185.97.132.0/22 maxlen: 24
185.97.132.0/24 maxlen: 24
185.97.133.0/24 maxlen: 24
185.97.134.0/24 maxlen: 24
185.97.135.0/24 maxlen: 24
193.19.72.0/24 maxlen: 24
193.19.73.0/24 maxlen: 24
185.33.168.0/24 maxlen: 24
185.33.171.0/24 maxlen: 24
2a00:cee0::/29 maxlen: 29
2a00:cee6::/32 maxlen: 48
2a00:cee3::/32 maxlen: 48
2a00:cee0::/32 maxlen: 48
2a00:cee1::/32 maxlen: 48
2a00:cee2::/32 maxlen: 48
2a00:cee5::/32 maxlen: 48
2a00:cee4::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 16 Jan 2023 09:08:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b6:56:ef:90:f1:4a:1d:de:aa:a7:a7:1b:8e:38:6f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38ca3f38d8e5a301eaf6924b924fe8f57aac690d
Validity
Not Before: Jan 15 16:50:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04b4be4c98adf841ca5c264933449f0ca2600d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f8:bc:6f:3d:22:cd:c1:43:bf:e9:81:55:bc:
14:6a:49:a7:33:b2:67:7f:55:ab:6b:11:e3:d6:4d:
2b:d1:7a:e4:a4:0e:7b:cc:75:88:ac:8c:01:e4:4b:
20:f3:21:e7:9d:b1:a0:2f:88:91:be:44:ed:3e:8e:
d4:35:f7:45:e2:a2:25:0e:d1:40:07:3e:8d:14:d2:
a1:d8:ed:6e:72:64:9d:6e:ba:18:a4:f8:d2:7a:19:
73:c1:d7:59:12:6a:f9:22:fb:d5:6b:d4:6c:d1:77:
46:33:30:c3:3e:89:70:66:fe:37:ea:4c:33:c8:86:
d3:23:68:ca:49:94:17:03:8a:f8:76:94:fc:56:80:
24:96:5f:b8:de:28:79:a5:60:49:81:69:03:d1:67:
69:d0:1c:76:ff:04:26:ee:29:d2:a5:31:6a:3e:80:
8e:bb:04:60:c5:51:0d:a5:89:9b:68:f8:f8:61:c7:
de:fb:d4:60:a3:7a:6d:af:68:d3:d0:c5:0c:df:b2:
cb:d6:ff:c7:b2:91:26:55:a2:f1:11:a4:60:c5:0b:
6b:32:e2:e7:e1:6a:65:55:8e:5d:9d:f1:94:e7:ae:
50:b2:fe:ee:36:3c:bf:55:57:d9:db:5a:4b:65:34:
f7:d0:40:f3:c2:6e:b6:bc:db:1a:66:e3:60:ee:94:
15:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B4:BE:4C:98:AD:F8:41:CA:5C:26:49:33:44:9F:0C:A2:60:0D:4D
X509v3 Authority Key Identifier:
keyid:38:CA:3F:38:D8:E5:A3:01:EA:F6:92:4B:92:4F:E8:F5:7A:AC:69:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OMo_ONjlowHq9pJLkk_o9XqsaQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/BLS-TJit-EHKXCZJM0SfDKJgDU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.168.0/24
185.33.171.0/24
185.97.132.0/22
193.19.72.0/23
193.19.96.0/23
IPv6:
2a00:cee0::/29
Signature Algorithm: sha256WithRSAEncryption
46:66:e5:06:a0:6f:1e:e9:b6:45:b0:03:f8:6c:19:70:09:04:
47:91:b2:5e:2c:b9:8a:79:15:52:de:d8:72:19:ba:82:c9:de:
ae:02:dd:28:a3:38:f5:53:c0:c1:b9:6a:f1:c7:69:33:f9:2e:
f5:32:51:af:44:3e:91:fb:5c:e0:9e:b5:b4:f1:74:e3:b6:7c:
e8:41:99:17:9d:19:ab:e3:e3:02:d4:fa:42:1e:ac:69:fe:31:
49:4c:ae:b0:6b:ee:55:26:be:74:53:6c:51:2a:20:e0:6c:86:
e2:24:d1:d6:84:ac:ca:87:1b:5e:31:4b:b6:f1:cf:ca:43:6f:
c2:34:20:00:95:c0:81:e4:cb:29:54:01:73:84:5e:c9:22:66:
10:9b:66:b9:77:ba:81:9e:31:77:69:10:2e:d8:38:31:54:4e:
49:17:0b:72:4b:4b:e7:dd:03:a9:85:cf:9b:bb:45:11:71:6b:
b4:4e:16:16:1b:ae:99:43:cf:59:3f:de:b7:46:c9:21:26:de:
a8:e8:b4:34:e9:9c:9f:47:49:04:b4:d9:73:6f:0c:ec:7b:41:
2f:6a:70:91:ad:33:09:6e:0d:a5:7c:da:46:48:52:bc:b3:94:
fd:e9:b0:11:5c:26:da:cc:1a:ae:63:2e:4e:93:7e:9b:07:c5:
4e:37:46:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:14 2024 by rpki-client on console-fra.rpki-client.org