Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/WDEtsxAhp-2j9ZMr4JAu7NJxe6E.roa
File: WDEtsxAhp-2j9ZMr4JAu7NJxe6E.roa (raw, json)
Hash identifier: wHWXFZlEyz2JgfiP2YDZ9iYwREjX76DNvGt9A9fFtVQ=
Subject key identifier: 58:31:2D:B3:10:21:A7:ED:A3:F5:93:2B:E0:90:2E:EC:D2:71:7B:A1
Certificate issuer: /CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Certificate serial: 018DC542211CBA5591F57E52332B94BD51D8
Authority key identifier: A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/WDEtsxAhp-2j9ZMr4JAu7NJxe6E.roa
Signing time: Tue 20 Feb 2024 06:44:21 +0000
ROA not before: Tue 20 Feb 2024 06:44:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216134
IP address blocks: 149.238.0.0/16 maxlen: 24
149.238.0.0/19 maxlen: 24
149.238.32.0/19 maxlen: 24
149.238.64.0/19 maxlen: 24
149.238.96.0/19 maxlen: 24
149.238.128.0/19 maxlen: 24
149.238.159.0/24 maxlen: 24
149.238.160.0/19 maxlen: 24
149.238.192.0/19 maxlen: 24
149.238.224.0/19 maxlen: 24
192.77.114.0/23 maxlen: 24
192.112.208.0/24 maxlen: 24
193.33.52.0/23 maxlen: 24
2a13:cb40::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 14 May 2024 15:20:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c5:42:21:1c:ba:55:91:f5:7e:52:33:2b:94:bd:51:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Validity
Not Before: Feb 20 06:44:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58312db31021a7eda3f5932be0902eecd2717ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:90:d4:1c:de:8e:e7:9e:9e:4b:8d:ff:ac:e6:
33:2b:65:06:05:89:88:af:72:6a:61:c3:9b:7e:cf:
c5:17:ea:d6:c2:6c:2c:5e:e1:3a:fb:67:0a:03:88:
eb:8f:85:e9:29:2e:91:56:cb:ef:a5:b9:41:41:2e:
8f:e5:4c:91:fe:65:94:c6:36:ef:84:5c:4d:20:dc:
ca:32:94:48:5b:97:3d:77:ba:2d:ad:97:16:5e:24:
06:a8:42:65:76:1b:75:4b:04:ef:eb:90:28:8b:44:
a2:e7:ab:45:ae:7a:c4:36:97:05:ce:1b:54:7e:da:
ad:f8:bb:bf:a8:50:bc:57:47:4f:15:45:4f:34:7c:
b5:a7:84:72:17:29:12:ac:ba:4f:2d:a4:1b:35:b3:
8a:18:7f:2a:1a:53:7a:8e:fd:ab:40:92:a5:87:49:
87:b8:c5:6c:ec:9a:90:d9:81:9f:24:d9:bb:8a:ea:
6c:8e:28:21:e7:58:1b:2a:a4:48:f2:34:81:87:ec:
cb:68:b1:b9:0d:39:6a:04:1c:14:c6:fe:0c:f3:0b:
09:7f:9d:50:95:73:00:03:9e:14:a3:2d:33:b4:b9:
82:62:0c:08:87:ec:b6:38:27:52:51:8a:63:9e:3d:
9f:f6:2b:25:05:97:61:03:ce:05:f1:93:9f:eb:78:
ac:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:31:2D:B3:10:21:A7:ED:A3:F5:93:2B:E0:90:2E:EC:D2:71:7B:A1
X509v3 Authority Key Identifier:
keyid:A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/WDEtsxAhp-2j9ZMr4JAu7NJxe6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.238.0.0/16
192.77.114.0/23
192.112.208.0/24
193.33.52.0/23
IPv6:
2a13:cb40::/29
Signature Algorithm: sha256WithRSAEncryption
61:41:29:09:91:1e:4b:c6:bc:69:1c:e3:f4:4b:72:2f:66:47:
2d:2b:36:77:b8:0f:d6:c2:3e:ef:b5:c6:82:96:b5:4b:3d:8c:
a2:c6:52:04:c7:63:80:f9:dc:f0:c3:77:a9:3f:cf:9f:3f:ed:
10:6e:70:af:24:8e:74:bd:81:5b:3c:cf:64:0a:3d:50:bc:08:
f5:4c:63:a3:dd:77:7c:b7:58:b4:cf:6d:03:fb:c0:80:e6:9f:
c9:e9:e1:c9:a6:a7:f7:1c:ca:e3:cb:d9:56:24:7a:0e:44:1d:
1c:ed:ff:9d:4f:6c:42:bc:f5:ac:21:88:ba:8e:89:be:b9:7c:
41:e0:60:99:ce:54:8b:8a:ec:35:f8:ee:ad:08:9b:9e:fe:a1:
59:8b:3c:0b:8f:15:5b:06:0f:fc:df:53:3e:a4:38:92:db:e0:
94:62:d7:c6:16:80:af:47:cb:44:b5:47:90:4a:32:12:12:ef:
59:f1:bd:56:2e:c1:f3:57:5a:a1:2d:73:03:fe:7e:4a:fc:e0:
18:e1:c3:8d:30:e8:8d:13:1c:d9:74:07:b1:26:c7:5d:3d:4d:
bf:66:7b:78:e7:03:e2:1b:01:08:c5:f4:79:f0:a0:39:a2:ba:
dd:09:cc:b8:75:d2:fd:b0:82:aa:84:c2:91:5c:38:df:e8:68:
1d:29:b9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:22 2024 by rpki-client on console-fra.rpki-client.org