Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/BLXD5_RwdGEdvJxGrMcoWWYYc3o.roa
File: BLXD5_RwdGEdvJxGrMcoWWYYc3o.roa (raw, json)
Hash identifier: pSbtxkZ2M0ijuKGsxswaXFWYAuvLV7ELKAYSr1P1b8c=
Subject key identifier: 04:B5:C3:E7:F4:70:74:61:1D:BC:9C:46:AC:C7:28:59:66:18:73:7A
Certificate issuer: /CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Certificate serial: 018CC50101A168A4BCA31741A38739FC7A46
Authority key identifier: BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/BLXD5_RwdGEdvJxGrMcoWWYYc3o.roa
Signing time: Mon 01 Jan 2024 12:30:26 +0000
ROA not before: Mon 01 Jan 2024 12:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41488
IP address blocks: 185.214.80.0/24 maxlen: 24
185.214.83.0/24 maxlen: 24
185.214.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Jun 2024 19:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:01:a1:68:a4:bc:a3:17:41:a3:87:39:fc:7a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Validity
Not Before: Jan 1 12:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04b5c3e7f47074611dbc9c46acc728596618737a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fc:12:59:dd:0b:5a:54:13:df:26:dd:13:f1:
83:93:35:f3:cb:74:47:ee:bf:0a:85:29:8d:16:e8:
26:ab:2e:e6:ac:72:57:2e:bc:b4:81:50:ea:22:c6:
ba:90:4f:67:43:91:5d:3f:2b:46:a3:69:15:80:9d:
16:50:e7:0f:07:cb:5e:58:f4:7d:c3:ba:6f:60:cd:
5a:08:cd:ca:8e:96:b7:10:81:42:58:3e:13:e0:82:
8d:50:ce:e8:4e:e3:67:6e:eb:76:35:47:9d:d4:00:
0a:31:f8:db:45:ba:eb:36:f1:51:21:43:7c:01:1a:
64:4f:fb:30:8a:92:d6:6d:7e:f3:13:49:73:cc:81:
07:41:db:43:b0:21:27:9c:ef:e6:61:ce:e1:39:0e:
28:39:81:e8:ca:c8:07:12:64:39:b6:a0:87:7c:41:
87:7a:af:7d:40:37:45:f4:59:16:bf:af:73:b6:ed:
6a:75:3c:49:11:62:f9:f7:e3:67:d8:8f:2c:63:85:
dd:99:e2:72:ff:09:43:e3:76:eb:1e:18:53:8e:d8:
a7:4a:44:26:94:cc:32:09:06:0c:e4:91:5c:21:81:
49:93:bc:a9:4d:e2:3e:84:19:51:52:70:2b:23:3d:
12:99:eb:ee:25:fe:3e:bd:51:3f:2d:0a:56:6a:a7:
18:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B5:C3:E7:F4:70:74:61:1D:BC:9C:46:AC:C7:28:59:66:18:73:7A
X509v3 Authority Key Identifier:
keyid:BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/BLXD5_RwdGEdvJxGrMcoWWYYc3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.80.0/24
185.214.82.0/23
Signature Algorithm: sha256WithRSAEncryption
18:79:27:e7:f8:14:49:5f:9b:19:12:5b:bc:ef:ad:ab:78:b8:
32:51:51:78:d1:67:ae:3d:3f:d2:1f:3c:16:f7:5c:13:99:e3:
5f:8d:1f:2c:45:1e:34:f1:7b:fc:9a:cd:73:15:d2:f0:44:14:
8f:54:ec:45:aa:01:0b:96:3b:5c:63:9b:c3:83:d8:05:e0:32:
98:92:54:d0:fb:74:07:b3:6a:62:b2:3e:34:01:80:09:68:f2:
27:10:eb:21:e7:84:ac:02:eb:5c:d4:51:82:51:0b:b3:17:8a:
ce:8d:ca:61:7f:6b:29:56:06:22:65:a9:a8:fd:93:bb:83:02:
0d:b6:91:5e:2d:7a:3c:de:6c:58:82:f8:67:d7:0b:85:28:f6:
c0:3a:22:28:cb:3d:3f:e1:80:b5:0d:84:77:32:16:47:d3:fc:
6e:8d:12:e9:db:b4:c6:b3:9b:3e:cb:8b:3a:90:6a:e9:5d:c7:
3d:03:d2:95:86:77:9f:13:4e:9b:cc:66:9f:86:77:5e:aa:91:
ab:99:17:9f:df:4f:59:2d:27:b0:34:9c:10:a8:5c:ba:b8:11:
13:b6:51:fa:5c:a6:85:4c:82:95:1a:bd:96:a6:1c:15:36:7d:
e8:df:19:d9:ce:03:60:eb:3c:ad:7f:ba:da:f6:85:c2:50:f6:
33:4b:0f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 21:56:40 2024 by rpki-client on console-fra.rpki-client.org