Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/f2Ir1Yoffdtfv1FhM4K3T5JgyJA.roa
File: f2Ir1Yoffdtfv1FhM4K3T5JgyJA.roa (raw, json)
Hash identifier: ydRq27tgvwj7Uqb3DawIUG9XK71S9/0zwEcWSw96gZA=
Subject key identifier: 7F:62:2B:D5:8A:1F:7D:DB:5F:BF:51:61:33:82:B7:4F:92:60:C8:90
Certificate issuer: /CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Certificate serial: 018C67D38BBD5A355AD03B6B0FAE4611B287
Authority key identifier: A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/f2Ir1Yoffdtfv1FhM4K3T5JgyJA.roa
Signing time: Thu 14 Dec 2023 10:16:06 +0000
ROA not before: Thu 14 Dec 2023 10:16:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51964
IP address blocks: 149.238.32.0/19 maxlen: 24
149.238.64.0/19 maxlen: 24
149.238.96.0/19 maxlen: 24
149.238.0.0/19 maxlen: 24
149.238.128.0/19 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Dec 2023 10:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:67:d3:8b:bd:5a:35:5a:d0:3b:6b:0f:ae:46:11:b2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Validity
Not Before: Dec 14 10:16:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f622bd58a1f7ddb5fbf51613382b74f9260c890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7c:bd:75:1c:72:ed:85:4d:a8:b2:f6:fe:6e:
e8:4f:e0:cb:e6:2e:1d:c7:eb:7f:51:c9:01:28:3b:
73:ab:3f:e9:9f:8e:b1:b2:5f:a5:5f:35:a9:ea:75:
40:bb:ce:3e:3b:66:28:40:05:78:f7:6b:a7:df:ee:
24:17:e0:a3:94:db:d0:6c:07:fb:69:2e:27:bc:3c:
7e:be:13:dc:5b:57:bc:e3:a8:1b:d9:15:65:4b:33:
c5:fa:d7:2e:62:87:d0:17:73:aa:03:60:5c:ef:c6:
ff:cc:65:44:a2:91:eb:96:db:e6:75:50:68:6a:87:
16:66:03:94:c6:1b:56:dd:04:db:79:17:40:dd:d7:
40:6f:49:56:0b:43:a2:d6:34:3e:e7:85:21:93:90:
75:0f:8f:54:c0:3b:88:d3:af:89:aa:27:db:8a:38:
08:f4:81:fc:4a:07:33:f2:f5:9e:44:70:97:ae:2b:
22:14:05:23:1c:f7:70:cb:73:5f:f3:39:b4:73:96:
5f:8b:45:dc:49:6b:08:3f:85:54:94:46:6d:f1:82:
6e:c2:39:a2:de:86:4f:00:81:ea:f7:e6:6c:da:c0:
0c:bd:c7:b5:50:a9:4d:d0:9c:0d:72:43:88:de:88:
f8:74:aa:ce:b4:2a:d5:19:52:0b:6e:66:2d:97:3d:
e3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:62:2B:D5:8A:1F:7D:DB:5F:BF:51:61:33:82:B7:4F:92:60:C8:90
X509v3 Authority Key Identifier:
keyid:A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/f2Ir1Yoffdtfv1FhM4K3T5JgyJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.238.0.0-149.238.159.255
Signature Algorithm: sha256WithRSAEncryption
d2:35:92:01:ae:8f:35:1e:cf:b4:2c:55:78:87:1d:21:f6:7f:
83:c0:59:6d:ca:9c:38:98:bf:7a:cb:57:0a:66:f3:54:d3:5b:
e3:a8:4f:c6:1c:90:af:58:bf:07:48:75:a1:b9:39:83:67:2e:
5b:e9:17:c6:22:14:b7:8c:fa:1f:42:d3:a5:69:30:cd:9d:67:
21:dc:79:a4:a4:25:c1:99:c1:56:24:27:0c:4b:ec:2d:d2:2c:
c0:58:20:55:6a:25:60:d7:c7:82:09:d6:cd:e3:96:ee:db:90:
d2:3c:cb:ba:cf:af:fd:93:e5:99:78:c4:0d:5b:83:70:86:fa:
e8:60:39:3e:b8:e8:a1:9a:42:79:d7:ae:2c:77:31:14:f8:01:
c9:34:f0:5a:f5:b3:76:7c:45:a6:ca:18:69:7d:a5:c3:1d:3b:
cc:30:29:18:38:06:5a:62:e0:64:e2:89:91:89:23:dc:26:96:
1d:88:d7:39:61:26:f6:32:53:37:3b:fd:6f:46:53:72:41:2c:
d9:4f:50:d9:06:e5:c8:e5:97:fa:2e:a8:e5:2e:22:3e:f8:db:
1a:84:95:31:c4:fa:b0:4f:6d:f5:3b:13:f2:47:f3:22:b2:f3:
af:8b:1d:97:07:93:0d:5b:f8:33:b6:00:26:6d:36:02:e9:23:
00:ff:46:ba
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAYxn04u9WjVa0DtrD65GEbKHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MzI3YzU2ZTk0MTE3MWVhM2JlYmEyNmViYjllMjNmNGRm
NWJjZjMwHhcNMjMxMjE0MTAxNjA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjYyMmJkNThhMWY3ZGRiNWZiZjUxNjEzMzgyYjc0ZjkyNjBjODkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3y9dRxy7YVNqLL2/m7oT+DL5i4d
x+t/UckBKDtzqz/pn46xsl+lXzWp6nVAu84+O2YoQAV492un3+4kF+CjlNvQbAf7
aS4nvDx+vhPcW1e846gb2RVlSzPF+tcuYofQF3OqA2Bc78b/zGVEopHrltvmdVBo
aocWZgOUxhtW3QTbeRdA3ddAb0lWC0Oi1jQ+54Uhk5B1D49UwDuI06+JqifbijgI
9IH8Sgcz8vWeRHCXrisiFAUjHPdwy3Nf8zm0c5Zfi0XcSWsIP4VUlEZt8YJuwjmi
3oZPAIHq9+Zs2sAMvce1UKlN0JwNckOI3oj4dKrOtCrVGVILbmYtlz3j6QIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFH9iK9WKH33bX79RYTOCt0+SYMiQMB8GA1UdIwQY
MBaAFKQyfFbpQRceo766Juu54j9N9bzzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS85YTQ4MzMtNmRhNC00ZGRhLWI3YWIt
MjhjMzQzY2U5ZDVkLzEvZjJJcjFZb2ZmZHRmdjFGaE00SzNUNUpneUpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS85YTQ4MzMtNmRhNC00ZGRhLWI3YWItMjhjMzQzY2U5ZDVk
LzEvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwGV7gME
BZXugDANBgkqhkiG9w0BAQsFAAOCAQEA0jWSAa6PNR7PtCxVeIcdIfZ/g8BZbcqc
OJi/estXCmbzVNNb46hPxhyQr1i/B0h1obk5g2cuW+kXxiIUt4z6H0LTpWkwzZ1n
Idx5pKQlwZnBViQnDEvsLdIswFggVWolYNfHggnWzeOW7tuQ0jzLus+v/ZPlmXjE
DVuDcIb66GA5PrjooZpCedeuLHcxFPgByTTwWvWzdnxFpsoYaX2lwx07zDApGDgG
WmLgZOKJkYkj3CaWHYjXOWEm9jJTNzv9b0ZTckEs2U9Q2QblyOWX+i6o5S4iPvjb
GoSVMcT6sE9t9TsT8kfzIrLzr4sdlweTDVv4M7YAJm02AukjAP9Gug==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:22 2024 by rpki-client on console-fra.rpki-client.org