Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/P3bvuqDmUscvmLwxfCBrs3G4Jww.roa
File: P3bvuqDmUscvmLwxfCBrs3G4Jww.roa (raw, json)
Hash identifier: A/U7mtMjSRfYxQ69IDKG9bfKH7wwGB3328rnljBX2v4=
Subject key identifier: 3F:76:EF:BA:A0:E6:52:C7:2F:98:BC:31:7C:20:6B:B3:71:B8:27:0C
Certificate issuer: /CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Certificate serial: 018C67B9E8F72DF89D1F9BED33A24AAB7D20
Authority key identifier: A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/P3bvuqDmUscvmLwxfCBrs3G4Jww.roa
Signing time: Thu 14 Dec 2023 09:48:06 +0000
ROA not before: Thu 14 Dec 2023 09:48:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51964
IP address blocks: 149.238.32.0/19 maxlen: 24
149.238.64.0/19 maxlen: 19
149.238.96.0/19 maxlen: 24
149.238.0.0/19 maxlen: 24
149.238.128.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:67:b9:e8:f7:2d:f8:9d:1f:9b:ed:33:a2:4a:ab:7d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Validity
Not Before: Dec 14 09:48:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f76efbaa0e652c72f98bc317c206bb371b8270c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e8:5d:0d:09:8f:02:42:a3:ef:1d:f4:11:a6:
e6:16:d3:b3:b0:69:fe:49:7e:87:33:d0:16:64:0c:
fc:8b:86:bc:ab:e1:7a:8e:49:83:c1:78:6f:3a:61:
84:ec:7b:79:95:c7:6a:cb:67:3f:b8:c3:ae:d6:bd:
87:ab:e4:0d:54:90:b5:79:0f:ab:f6:4d:33:e6:fc:
1b:0f:79:47:2d:a0:53:58:43:b1:2b:59:ee:f6:4d:
9e:38:0a:c8:d5:18:9f:56:a7:fa:bb:94:f8:a2:79:
d8:3b:2b:32:ea:73:1a:8c:f8:b3:13:16:d1:a4:d6:
43:91:18:6b:94:0f:62:8a:e7:75:8a:5f:df:88:74:
4f:10:64:e1:6f:eb:1d:6a:c6:df:dd:e3:bc:8c:d3:
4c:22:b6:cd:72:92:d6:f5:8d:2e:99:5b:9d:88:84:
b1:83:a5:62:b5:90:76:0b:42:b6:b3:8c:7f:4b:da:
f9:fa:60:17:cd:b6:43:fa:24:13:b6:f0:41:48:e2:
d5:37:2a:ec:db:ee:da:4f:78:37:66:b7:66:17:8d:
14:a4:f4:b8:da:11:53:75:e9:73:67:4f:cb:ad:a4:
15:e5:4c:68:f2:25:c9:89:41:f5:05:34:17:62:07:
d8:9d:d7:31:cc:c0:a5:43:44:31:8b:c3:a6:8b:ff:
63:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:76:EF:BA:A0:E6:52:C7:2F:98:BC:31:7C:20:6B:B3:71:B8:27:0C
X509v3 Authority Key Identifier:
keyid:A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/P3bvuqDmUscvmLwxfCBrs3G4Jww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.238.0.0-149.238.159.255
Signature Algorithm: sha256WithRSAEncryption
8e:8b:e0:8f:5a:f7:c9:d1:f0:6e:9d:f4:13:41:f2:0d:21:18:
88:9e:b2:02:e6:52:1a:f3:24:42:e2:1a:ca:05:5c:8b:a2:0f:
1a:a7:9f:8e:f6:10:56:2a:92:99:ba:0c:a1:63:ce:47:cf:6f:
43:6e:2c:b4:82:d3:02:72:7d:a8:cb:7a:88:8f:b3:8b:56:e9:
4f:f9:13:9b:22:26:b8:f4:47:a4:3a:a8:5b:9c:24:c8:89:18:
a1:f0:b5:3f:3c:de:0e:54:78:78:7b:c5:0f:34:9b:5f:4d:1a:
ec:7f:b4:92:ab:dc:1c:2f:cf:f2:25:d3:cd:a4:1c:83:6a:90:
59:9e:c0:c5:68:33:a8:30:1f:38:27:88:61:df:d6:b9:a1:0b:
dd:f7:1c:18:83:20:a5:8f:55:15:52:20:73:d5:7c:7c:88:08:
ac:6b:85:fc:de:e5:42:a1:52:ac:86:02:d2:e2:95:39:32:bd:
f2:1c:0e:4c:0d:06:b6:0e:7b:b6:73:2e:25:c0:eb:30:f1:35:
a4:2d:b5:35:3d:c2:4f:42:82:61:51:33:5c:71:ba:76:f5:9c:
19:b6:fd:a2:68:ca:1e:53:f4:de:a1:1d:02:91:5b:d3:a9:98:
bd:3f:64:6d:12:b6:12:9d:be:d3:d9:07:fb:09:1c:6b:0b:0e:
f1:32:fe:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 10:48:37 2023 by rpki-client on console-fra.rpki-client.org