Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/BLXPDBA4WGOnfoCuISo0rex9UnA.roa
File: BLXPDBA4WGOnfoCuISo0rex9UnA.roa (raw, json)
Hash identifier: oApiz8HjATL0IHOPlenmh6xpTlUgk35zW9/KFg3sq2Y=
Subject key identifier: 04:B5:CF:0C:10:38:58:63:A7:7E:80:AE:21:2A:34:AD:EC:7D:52:70
Certificate issuer: /CN=002fa6e19056838905bc32b53ab0d1047d78e4d4
Certificate serial: 0189783088A248BC7FC593A310B4D4B563BA
Authority key identifier: 00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/BLXPDBA4WGOnfoCuISo0rex9UnA.roa
Signing time: Fri 21 Jul 2023 11:23:13 +0000
ROA not before: Fri 21 Jul 2023 11:23:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39049
IP address blocks: 94.231.32.0/22 maxlen: 22
195.66.136.0/24 maxlen: 24
195.66.136.0/23 maxlen: 23
195.66.137.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:78:30:88:a2:48:bc:7f:c5:93:a3:10:b4:d4:b5:63:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002fa6e19056838905bc32b53ab0d1047d78e4d4
Validity
Not Before: Jul 21 11:23:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04b5cf0c10385863a77e80ae212a34adec7d5270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ce:c1:4a:5e:cc:ee:ab:65:ed:08:b1:61:e6:
60:62:db:4f:60:f9:5a:c1:f9:03:49:7a:ec:98:cc:
4b:59:fe:f0:c4:8f:10:1c:86:ac:95:9f:f4:d3:2f:
7d:a5:b1:46:32:b1:67:fd:b1:05:c8:d6:42:49:30:
e1:0d:b5:f6:2a:33:7a:fe:21:f0:78:ab:27:36:45:
92:3f:64:39:33:77:f0:ba:46:de:be:41:aa:dd:ce:
17:e3:99:52:bc:73:d4:2f:d0:87:b4:2f:81:82:eb:
f5:17:f9:e5:71:cc:7d:7e:a3:a0:28:70:eb:13:0b:
c5:95:7f:a8:88:22:4e:3f:44:d1:9f:af:ad:1b:ae:
1b:5b:4a:a1:a5:10:45:a5:c0:f3:99:d6:bc:6c:60:
92:36:dc:4d:c4:b2:90:08:3a:e5:a5:6b:c2:7e:a7:
9f:de:a2:3c:d3:14:8f:71:a8:ba:c5:f0:2d:34:a9:
25:e4:75:21:29:b8:4d:49:25:a6:07:52:bf:2d:28:
48:79:12:0e:bb:fc:89:34:5f:8f:76:77:39:53:e2:
1a:38:37:a0:25:c5:3f:06:7c:ac:85:3a:34:f0:a0:
68:e3:52:c2:16:48:a6:80:ac:0b:2d:e2:fa:5f:f3:
15:6a:dc:ea:6c:48:01:4f:66:c2:bf:9b:cd:21:d0:
a4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B5:CF:0C:10:38:58:63:A7:7E:80:AE:21:2A:34:AD:EC:7D:52:70
X509v3 Authority Key Identifier:
keyid:00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/BLXPDBA4WGOnfoCuISo0rex9UnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.32.0/22
195.66.136.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:06:f2:f9:2a:9f:43:91:ea:30:97:9a:cf:35:64:4c:79:8e:
18:fa:d1:9f:b3:ac:91:1c:64:c2:5a:6b:ff:dd:ff:c4:33:61:
7d:bb:15:bf:c7:be:39:69:85:5d:51:ad:f5:fd:84:60:42:50:
0f:4e:6f:94:e9:a2:02:79:e2:66:4f:64:2c:7b:1a:70:1a:f3:
4a:11:19:ba:db:99:e5:0b:e4:63:b3:9d:70:99:bd:d6:8c:83:
d2:55:c3:14:78:8e:50:b4:ee:f5:9f:c3:ad:23:74:7d:95:8c:
3c:ae:50:47:e6:de:82:3e:80:d5:10:5a:54:45:ee:28:c7:1f:
ea:b6:49:b4:1f:f1:77:86:bb:95:3e:66:a9:ad:72:3d:5e:be:
d0:ef:4e:33:8f:b8:66:37:1f:ec:84:21:f9:c4:7e:92:5c:c6:
90:e7:98:2d:31:23:98:16:b8:52:1a:20:80:24:a7:4e:eb:77:
2c:4d:2a:64:e0:b4:e3:e8:31:2c:27:5d:bc:f4:11:15:74:02:
f0:ba:50:46:d8:ea:ea:71:1d:bf:ef:a9:b5:c3:80:a1:c4:5f:
91:16:4b:6f:d8:f0:d8:61:47:fe:b1:ba:2d:49:b1:45:4c:33:
3d:63:7a:02:e0:95:94:82:6c:6c:aa:3c:72:49:d4:9e:71:10:
ca:ec:cf:1a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYl4MIiiSLx/xZOjELTUtWO6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMmZhNmUxOTA1NjgzODkwNWJjMzJiNTNhYjBkMTA0N2Q3
OGU0ZDQwHhcNMjMwNzIxMTEyMzEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNGI1Y2YwYzEwMzg1ODYzYTc3ZTgwYWUyMTJhMzRhZGVjN2Q1MjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh87BSl7M7qtl7QixYeZgYttPYPla
wfkDSXrsmMxLWf7wxI8QHIaslZ/00y99pbFGMrFn/bEFyNZCSTDhDbX2KjN6/iHw
eKsnNkWSP2Q5M3fwukbevkGq3c4X45lSvHPUL9CHtC+Bguv1F/nlccx9fqOgKHDr
EwvFlX+oiCJOP0TRn6+tG64bW0qhpRBFpcDzmda8bGCSNtxNxLKQCDrlpWvCfqef
3qI80xSPcai6xfAtNKkl5HUhKbhNSSWmB1K/LShIeRIOu/yJNF+Pdnc5U+IaODeg
JcU/BnyshTo08KBo41LCFkimgKwLLeL6X/MVatzqbEgBT2bCv5vNIdCkhQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAS1zwwQOFhjp36AriEqNK3sfVJwMB8GA1UdIwQY
MBaAFAAvpuGQVoOJBbwytTqw0QR9eOTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUMtbTRaQldnNGtGdkRLMU9yRFJCSDE0NU5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny84NjZiNmItZjU2Yy00YTJmLTkwMmQt
ZmJjMzZlNDM0OGY1LzEvQkxYUERCQTRXR09uZm9DdUlTbzByZXg5VW5BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny84NjZiNmItZjU2Yy00YTJmLTkwMmQtZmJjMzZlNDM0OGY1
LzEvQUMtbTRaQldnNGtGdkRLMU9yRFJCSDE0NU5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCXucgAwQB
w0KIMA0GCSqGSIb3DQEBCwUAA4IBAQB/BvL5Kp9Dkeowl5rPNWRMeY4Y+tGfs6yR
HGTCWmv/3f/EM2F9uxW/x745aYVdUa31/YRgQlAPTm+U6aICeeJmT2QsexpwGvNK
ERm625nlC+Rjs51wmb3WjIPSVcMUeI5QtO71n8OtI3R9lYw8rlBH5t6CPoDVEFpU
Re4oxx/qtkm0H/F3hruVPmaprXI9Xr7Q704zj7hmNx/shCH5xH6SXMaQ55gtMSOY
FrhSGiCAJKdO63csTSpk4LTj6DEsJ1289BEVdALwulBG2OrqcR2/76m1w4ChxF+R
Fktv2PDYYUf+sbotSbFFTDM9Y3oC4JWUgmxsqjxySdSecRDK7M8a
-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:44 2024 by rpki-client on console-fra.rpki-client.org