Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/bl_EaMw0jw5lXQORi0nfgi75Tc0.roa
File: bl_EaMw0jw5lXQORi0nfgi75Tc0.roa (raw, json)
Hash identifier: f6pk9o/x5SFp7x/TlWoL3uuVgTSl59Np9XkyiQ3wKvI=
Subject key identifier: 6E:5F:C4:68:CC:34:8F:0E:65:5D:03:91:8B:49:DF:82:2E:F9:4D:CD
Certificate issuer: /CN=4ce74cf63723c0269d5283b1065821af384a9a26
Certificate serial: 018CC26D52C825AF67DB96F621900C3745D0
Authority key identifier: 4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/bl_EaMw0jw5lXQORi0nfgi75Tc0.roa
Signing time: Mon 01 Jan 2024 00:29:53 +0000
ROA not before: Mon 01 Jan 2024 00:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 188.227.198.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 16 Feb 2024 02:52:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:52:c8:25:af:67:db:96:f6:21:90:0c:37:45:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce74cf63723c0269d5283b1065821af384a9a26
Validity
Not Before: Jan 1 00:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e5fc468cc348f0e655d03918b49df822ef94dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:71:06:10:ad:80:e6:1a:3c:c8:b0:2f:e9:b3:
ef:d2:48:ca:01:2b:3f:f1:7b:0d:99:17:d5:49:a9:
f0:4c:53:c1:7c:2f:0f:12:c9:fe:ed:8c:25:dc:c0:
d2:f5:38:c3:b7:df:7e:5f:70:cd:c5:66:3d:6c:53:
b5:fb:a5:fc:df:23:ee:db:a9:43:28:22:aa:c8:19:
85:0c:1d:8e:23:43:8e:b1:95:2d:0b:d0:f2:02:e4:
d2:94:8a:7d:fc:2e:21:ef:46:af:0c:d6:c8:33:b3:
62:b9:ab:ab:60:c2:17:d5:79:c8:76:bc:f2:e4:d5:
10:98:3b:b1:62:06:fe:45:33:f2:ee:4f:0a:c8:a9:
8c:c4:9e:d2:84:7f:23:a5:f1:bb:c7:72:e3:a0:17:
b6:10:cc:09:75:59:48:11:37:4c:a9:6c:8e:39:82:
70:86:53:4e:e4:77:f4:2c:3d:79:2a:bb:e2:a2:81:
a3:2d:26:be:9d:8a:df:cb:9c:22:96:7d:83:6d:81:
15:b8:b1:4f:63:10:83:d2:3d:6c:90:36:ed:91:ec:
7c:87:44:9c:d4:93:13:10:09:54:2c:57:84:ad:ff:
9d:b1:93:62:24:18:b1:5f:7f:86:05:0b:ab:12:17:
c0:87:38:f5:da:fe:6e:7e:bf:2b:7e:3f:04:af:a7:
18:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5F:C4:68:CC:34:8F:0E:65:5D:03:91:8B:49:DF:82:2E:F9:4D:CD
X509v3 Authority Key Identifier:
keyid:4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/bl_EaMw0jw5lXQORi0nfgi75Tc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.227.198.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:ca:73:1f:08:06:5f:f2:ed:a0:42:dd:ce:c1:3f:21:ff:05:
e1:90:3f:78:9f:4e:14:0b:7c:42:b3:76:49:ca:ad:1a:6e:d7:
95:0c:f1:2e:69:f7:2f:87:d2:74:0b:f9:5a:ef:0b:f0:a7:82:
a6:41:a6:9c:ed:23:c4:38:b3:22:8a:88:04:40:bd:fa:5c:e7:
18:a5:d6:0e:60:b1:a4:94:39:c3:e9:a4:bf:8a:27:b3:c1:f6:
d3:5d:fd:9e:d8:ce:ac:45:93:7e:7a:73:af:b1:3f:3d:f7:70:
bf:11:ba:c3:91:33:16:01:c5:b0:86:db:95:34:4b:c5:61:4a:
d6:1f:ab:74:e6:da:e3:1c:15:7e:01:cf:88:2b:ee:62:cd:7f:
e7:80:45:ab:ca:72:70:ac:68:3a:56:2e:87:5a:49:67:23:0f:
ea:96:1b:c3:6c:38:43:ca:18:76:5c:fc:fd:b4:02:ac:c1:34:
ec:a8:12:49:82:6f:4a:1f:a4:65:7b:63:b3:aa:61:20:05:f7:
64:11:11:89:60:0c:f2:ee:95:3f:3c:85:53:3b:3b:9b:83:c7:
5c:bc:68:e1:bb:6e:22:81:d2:65:fe:1e:85:55:35:d0:1f:77:
30:4b:e7:df:a6:54:ae:0c:04:c6:a2:18:fc:69:7c:8c:23:b8:
2d:23:a4:47
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbVLIJa9n25b2IZAMN0XQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZTc0Y2Y2MzcyM2MwMjY5ZDUyODNiMTA2NTgyMWFmMzg0
YTlhMjYwHhcNMjQwMTAxMDAyOTUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTVmYzQ2OGNjMzQ4ZjBlNjU1ZDAzOTE4YjQ5ZGY4MjJlZjk0ZGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXEGEK2A5ho8yLAv6bPv0kjKASs/
8XsNmRfVSanwTFPBfC8PEsn+7Ywl3MDS9TjDt99+X3DNxWY9bFO1+6X83yPu26lD
KCKqyBmFDB2OI0OOsZUtC9DyAuTSlIp9/C4h70avDNbIM7NiuaurYMIX1XnIdrzy
5NUQmDuxYgb+RTPy7k8KyKmMxJ7ShH8jpfG7x3LjoBe2EMwJdVlIETdMqWyOOYJw
hlNO5Hf0LD15KrviooGjLSa+nYrfy5wiln2DbYEVuLFPYxCD0j1skDbtkex8h0Sc
1JMTEAlULFeErf+dsZNiJBixX3+GBQurEhfAhzj12v5ufr8rfj8Er6cYoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG5fxGjMNI8OZV0DkYtJ34Iu+U3NMB8GA1UdIwQY
MBaAFEznTPY3I8AmnVKDsQZYIa84SpomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE9kTTlqY2p3Q2FkVW9PeEJsZ2hyemhLbWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81YTBmODEtMzFlMi00ZGIyLTgzMzkt
OTI0MWZmNmVjM2JmLzEvYmxfRWFNdzBqdzVsWFFPUmkwbmZnaTc1VGMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81YTBmODEtMzFlMi00ZGIyLTgzMzktOTI0MWZmNmVjM2Jm
LzEvVE9kTTlqY2p3Q2FkVW9PeEJsZ2hyemhLbWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvOPGMA0G
CSqGSIb3DQEBCwUAA4IBAQClynMfCAZf8u2gQt3OwT8h/wXhkD94n04UC3xCs3ZJ
yq0abteVDPEuafcvh9J0C/la7wvwp4KmQaac7SPEOLMiiogEQL36XOcYpdYOYLGk
lDnD6aS/iiezwfbTXf2e2M6sRZN+enOvsT8993C/EbrDkTMWAcWwhtuVNEvFYUrW
H6t05trjHBV+Ac+IK+5izX/ngEWrynJwrGg6Vi6HWklnIw/qlhvDbDhDyhh2XPz9
tAKswTTsqBJJgm9KH6Rle2OzqmEgBfdkERGJYAzy7pU/PIVTOzubg8dcvGjhu24i
gdJl/h6FVTXQH3cwS+ffplSuDATGohj8aXyMI7gtI6RH
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:24 2024 by rpki-client on console-fra.rpki-client.org