Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/1jpNMATD5_ErJKSMmWXTx66JxJw.roa
File: 1jpNMATD5_ErJKSMmWXTx66JxJw.roa (raw, json)
Hash identifier: 1gvuB/0xJM2MA/y/JfUEcyI6juvHM7mejmrpduGI2yE=
Subject key identifier: D6:3A:4D:30:04:C3:E7:F1:2B:24:A4:8C:99:65:D3:C7:AE:89:C4:9C
Certificate issuer: /CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Certificate serial: 018C67B9E89726DD1FD52AE3CC2577C1A6C0
Authority key identifier: A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/1jpNMATD5_ErJKSMmWXTx66JxJw.roa
Signing time: Thu 14 Dec 2023 09:48:06 +0000
ROA not before: Thu 14 Dec 2023 09:48:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21263
IP address blocks: 149.238.32.0/19 maxlen: 24
149.238.160.0/19 maxlen: 19
193.33.52.0/23 maxlen: 23
192.112.208.0/24 maxlen: 24
192.77.114.0/23 maxlen: 23
149.238.192.0/19 maxlen: 19
149.238.0.0/19 maxlen: 24
149.238.224.0/19 maxlen: 19
Validation: Failed, certificate revoked on Thu 14 Dec 2023 10:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:67:b9:e8:97:26:dd:1f:d5:2a:e3:cc:25:77:c1:a6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Validity
Not Before: Dec 14 09:48:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d63a4d3004c3e7f12b24a48c9965d3c7ae89c49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:30:d8:e1:0f:62:99:7a:39:e7:5a:6f:2a:7a:
7a:31:39:63:ef:b6:91:20:e9:2c:a1:86:ab:29:7d:
3a:d8:b4:78:00:9d:fb:3c:f6:d0:8d:62:71:14:d4:
6c:eb:45:f1:cb:61:ac:36:78:dc:0a:be:91:fb:de:
5f:03:75:ae:11:0d:5e:34:05:96:4c:96:9f:70:2e:
4e:7f:0e:7c:a3:8c:fd:8c:d8:c2:0e:ca:b2:24:2e:
10:56:69:d0:fe:a1:5e:8a:1e:10:bf:54:90:72:9e:
4b:c9:35:80:37:d9:b5:7d:57:ba:46:61:11:a2:b3:
0d:c2:11:f0:c9:e1:96:62:24:5e:38:06:aa:bd:76:
7f:fa:99:5f:ec:04:47:f6:7e:94:2c:cc:4e:06:13:
f1:5e:f6:cf:57:e2:e2:6b:ab:fa:bb:8d:57:78:63:
1e:33:ba:c8:94:15:31:9b:03:8c:d6:97:b5:cd:2a:
94:93:2f:ff:8b:5e:a8:f8:79:be:91:d6:ad:58:14:
88:4d:67:6a:17:be:8b:31:c9:e8:aa:a0:fc:4d:71:
50:44:f6:17:d3:7f:58:18:4d:fb:52:ed:7f:7d:46:
31:ce:e4:3f:c5:43:cf:c5:1e:14:0d:cb:df:bd:80:
20:e9:e3:5a:48:39:ab:7a:dc:f3:e1:2a:49:26:05:
7b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3A:4D:30:04:C3:E7:F1:2B:24:A4:8C:99:65:D3:C7:AE:89:C4:9C
X509v3 Authority Key Identifier:
keyid:A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/1jpNMATD5_ErJKSMmWXTx66JxJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.238.0.0/18
149.238.160.0-149.238.255.255
192.77.114.0/23
192.112.208.0/24
193.33.52.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:a2:2d:bb:e2:b1:9f:e7:58:29:be:36:a8:fd:25:64:6e:53:
99:73:76:c4:4d:40:fd:e5:6f:d3:b1:9a:3e:7d:4c:de:98:51:
b5:61:60:4d:d0:7b:97:a1:73:3b:63:ff:0e:1c:1d:9d:a2:62:
46:49:e4:16:f8:2c:a0:9e:8f:dd:25:44:6c:d6:22:43:63:2e:
92:1a:69:ed:dc:28:00:6e:bc:09:55:bf:1f:9a:e5:f6:52:1b:
c9:aa:39:ca:8a:94:26:fe:9c:46:c2:1a:a0:e2:39:3c:30:87:
c3:c9:ca:d7:b9:52:42:c6:2e:a5:6b:61:f4:28:cc:18:3e:3e:
97:44:e3:29:37:5a:b0:d7:f3:72:2f:b9:f8:41:e3:7e:ec:88:
43:5a:7a:4f:43:09:73:69:0f:08:3a:43:30:14:28:93:56:67:
50:a1:a3:ef:b7:3d:71:8a:31:99:58:e8:32:f7:9a:b8:00:f6:
02:e1:cf:b8:5a:00:98:de:fb:78:be:79:84:4c:eb:08:57:fa:
42:8e:e8:bc:2b:70:c0:e2:01:e1:fa:40:ba:34:f2:fb:b1:82:
06:80:fa:ed:35:b2:ec:5c:de:fb:69:3f:5a:51:e3:cc:a2:0d:
36:47:96:fe:35:c0:c9:a9:94:c9:a5:1d:77:3c:20:2f:d0:ed:
9e:41:61:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:22 2024 by rpki-client on console-fra.rpki-client.org