Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/BLQAwHe6vWJieWuDH0-geDz_iyU.roa
File: BLQAwHe6vWJieWuDH0-geDz_iyU.roa (raw, json)
Hash identifier: KUuPqjvS4KLb902HSusiCZ16RiMfexyjGuE35RgodpQ=
Subject key identifier: 04:B4:00:C0:77:BA:BD:62:62:79:6B:83:1F:4F:A0:78:3C:FF:8B:25
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 01927B6864B2DD9254CC884351C4A20B41E2
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/BLQAwHe6vWJieWuDH0-geDz_iyU.roa
Signing time: Fri 11 Oct 2024 11:48:11 +0000
ROA not before: Fri 11 Oct 2024 11:48:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48133
IP address blocks: 45.146.244.0/22 maxlen: 22
94.228.80.0/20 maxlen: 20
2a03:f040::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7b:68:64:b2:dd:92:54:cc:88:43:51:c4:a2:0b:41:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Oct 11 11:48:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04b400c077babd6262796b831f4fa0783cff8b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a2:ad:6c:27:bf:07:bd:bb:63:55:2a:50:36:
b2:bb:54:37:c9:16:e7:98:a8:39:0c:96:b8:57:69:
3b:44:51:fe:7d:ac:d7:71:5e:64:e1:f4:72:db:7e:
58:a5:50:24:a1:41:bc:cf:b1:30:ad:59:10:9a:fe:
5e:89:1e:08:36:da:e8:e4:7f:e5:62:5e:2d:ce:cf:
26:4e:1b:72:aa:a8:f4:8f:6a:36:27:ce:de:76:7e:
1d:9e:47:12:83:ed:f6:bf:a6:6d:b8:6d:86:35:5f:
50:31:b5:2e:c1:d4:1e:f4:86:43:60:5b:5f:35:05:
11:25:87:ae:34:96:29:85:15:0b:af:77:22:90:30:
12:e2:72:d8:16:c2:91:99:9f:14:59:16:c5:42:62:
15:bf:a9:5f:ec:24:d8:16:8a:82:ff:47:7d:8e:ce:
68:89:37:88:40:df:54:3e:2d:9f:c7:ab:ad:70:36:
0c:af:6b:65:a5:65:63:e7:ff:78:35:b9:a1:36:df:
77:c9:fd:d7:75:2e:19:05:5a:9d:9f:74:4e:9e:1f:
ce:7f:7a:16:70:9e:e3:1c:fe:91:aa:f3:db:94:67:
2c:94:28:9c:40:a8:31:a2:13:6d:52:16:36:14:05:
b0:c0:89:7d:d3:bc:5e:b4:ec:ac:33:a9:e2:8c:73:
6a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B4:00:C0:77:BA:BD:62:62:79:6B:83:1F:4F:A0:78:3C:FF:8B:25
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/BLQAwHe6vWJieWuDH0-geDz_iyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.244.0/22
94.228.80.0/20
IPv6:
2a03:f040::/32
Signature Algorithm: sha256WithRSAEncryption
2c:90:cb:ca:2b:b9:8a:8d:f8:b8:b9:a1:fd:9d:1a:12:b9:f9:
d2:a8:61:34:29:d8:a2:29:43:06:82:60:49:b7:dc:df:e3:e7:
06:c2:35:f6:9e:4d:6c:eb:45:7d:9d:d8:29:b5:e4:37:05:78:
35:d8:51:e9:bf:08:62:37:42:1c:b2:9d:a4:0c:61:48:e0:f2:
d5:65:05:9f:f0:4a:1d:c8:70:e8:05:cc:c2:97:7b:bf:9c:79:
eb:a4:60:c0:d6:e7:8c:2e:b4:38:9d:34:8f:38:7b:6c:7e:d9:
43:00:57:4f:74:25:27:fc:75:1a:7c:75:de:14:f2:fc:d5:46:
9a:e2:2f:36:28:3a:e1:cc:f9:92:da:43:49:51:bb:54:13:0b:
bb:76:28:99:72:69:bf:b6:8e:92:81:72:81:23:b0:d7:b9:0b:
ef:a3:7a:dd:76:e3:a8:41:f2:05:92:00:51:73:47:bb:62:33:
e6:6a:6b:b2:7f:ac:10:77:40:6a:35:e1:e6:c1:93:5c:91:69:
0b:c8:2d:7c:3a:4b:16:5f:44:4b:bd:7f:ef:88:14:15:f5:a1:
c5:a6:36:60:ca:2d:50:a5:f2:88:e2:e9:6f:fa:d3:31:d7:8d:
b4:b5:58:b6:5f:2f:06:ab:a1:da:73:d4:ed:03:25:0c:1e:ba:
13:1f:57:78
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZJ7aGSy3ZJUzIhDUcSiC0HiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Zjg4MTQwMWFiYWNjODhjOTQxZmRmNzQwZjFhYjE1MzZm
MDVkYmEwHhcNMjQxMDExMTE0ODExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNGI0MDBjMDc3YmFiZDYyNjI3OTZiODMxZjRmYTA3ODNjZmY4YjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aKtbCe/B727Y1UqUDayu1Q3yRbn
mKg5DJa4V2k7RFH+fazXcV5k4fRy235YpVAkoUG8z7EwrVkQmv5eiR4INtro5H/l
Yl4tzs8mThtyqqj0j2o2J87edn4dnkcSg+32v6ZtuG2GNV9QMbUuwdQe9IZDYFtf
NQURJYeuNJYphRULr3cikDAS4nLYFsKRmZ8UWRbFQmIVv6lf7CTYFoqC/0d9js5o
iTeIQN9UPi2fx6utcDYMr2tlpWVj5/94NbmhNt93yf3XdS4ZBVqdn3ROnh/Of3oW
cJ7jHP6RqvPblGcslCicQKgxohNtUhY2FAWwwIl907xetOysM6nijHNqAQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFAS0AMB3ur1iYnlrgx9PoHg8/4slMB8GA1UdIwQY
MBaAFOf4gUAausyIyUH990DxqxU28F26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmIt
ZTJmYmMzYTY4ODAwLzEvQkxRQXdIZTZ2V0ppZVd1REgwLWdlRHpfaXlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmItZTJmYmMzYTY4ODAw
LzEvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLZL0AwQE
XuRQMA0EAgACMAcDBQAqA/BAMA0GCSqGSIb3DQEBCwUAA4IBAQAskMvKK7mKjfi4
uaH9nRoSufnSqGE0KdiiKUMGgmBJt9zf4+cGwjX2nk1s60V9ndgpteQ3BXg12FHp
vwhiN0Icsp2kDGFI4PLVZQWf8EodyHDoBczCl3u/nHnrpGDA1ueMLrQ4nTSPOHts
ftlDAFdPdCUn/HUafHXeFPL81Uaa4i82KDrhzPmS2kNJUbtUEwu7diiZcmm/to6S
gXKBI7DXuQvvo3rdduOoQfIFkgBRc0e7YjPmamuyf6wQd0BqNeHmwZNckWkLyC18
OksWX0RLvX/viBQV9aHFpjZgyi1QpfKI4ulv+tMx1420tVi2Xy8Gq6Hac9TtAyUM
HroTH1d4
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:17:29 2025 by rpki-client