Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/jGIVnTJCtpCWlauvJcPvJDm_cag.roa
File: jGIVnTJCtpCWlauvJcPvJDm_cag.roa (raw, json)
Hash identifier: To/SBVQ5b3zihvZQeP6JaxjOZg541LIg1vj6ODu6KaM=
Subject key identifier: 8C:62:15:9D:32:42:B6:90:96:95:AB:AF:25:C3:EF:24:39:BF:71:A8
Certificate issuer: /CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Certificate serial: 018CC3493DDF7016531BEC163EFB382F0270
Authority key identifier: A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/jGIVnTJCtpCWlauvJcPvJDm_cag.roa
Signing time: Mon 01 Jan 2024 04:30:06 +0000
ROA not before: Mon 01 Jan 2024 04:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21263
IP address blocks: 149.238.32.0/19 maxlen: 24
149.238.160.0/19 maxlen: 24
193.33.52.0/23 maxlen: 24
192.77.114.0/23 maxlen: 24
192.112.208.0/24 maxlen: 24
149.238.192.0/19 maxlen: 24
149.238.0.0/19 maxlen: 24
149.238.224.0/19 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 15:14:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:3d:df:70:16:53:1b:ec:16:3e:fb:38:2f:02:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Validity
Not Before: Jan 1 04:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c62159d3242b6909695abaf25c3ef2439bf71a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:13:00:bc:43:d0:77:17:5e:10:72:80:fa:40:
37:62:22:c3:bb:15:f4:9f:a9:a2:76:68:69:89:7e:
ec:9b:d2:c4:ea:5a:1c:7a:eb:a7:01:c2:fe:c4:b7:
f3:2e:2d:82:c3:05:66:f3:2a:13:f6:16:8c:79:88:
44:9f:ff:f1:55:37:27:64:9d:4b:bf:8c:f0:d7:63:
4b:02:9f:06:00:ba:df:ae:aa:43:5a:eb:c5:7d:b4:
eb:bd:7d:c6:88:af:f3:5b:e7:d8:af:c4:30:08:3b:
f5:7b:61:b3:38:da:68:ee:b9:75:72:43:b4:d0:9a:
39:78:3c:9b:7c:d0:71:c5:59:7a:8f:3b:9f:38:15:
d5:31:be:a4:eb:74:eb:56:70:d6:4a:ad:49:85:b8:
f6:1a:79:c1:c6:f9:97:ed:4c:eb:b3:83:26:f8:87:
9d:8d:26:38:e1:84:4b:7e:6f:2a:33:92:48:13:e6:
08:9b:b6:96:89:c9:90:98:2d:bc:b5:46:82:32:d1:
37:bb:82:c1:22:7c:7a:aa:66:2d:30:ff:33:87:a1:
04:4d:92:9d:34:3e:c6:56:60:62:ab:62:fe:0d:1f:
e2:db:99:9d:d9:81:72:45:38:71:57:84:10:df:2a:
df:e4:a6:a0:05:96:bd:00:96:d5:e6:2e:b0:e3:23:
71:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:62:15:9D:32:42:B6:90:96:95:AB:AF:25:C3:EF:24:39:BF:71:A8
X509v3 Authority Key Identifier:
keyid:A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/jGIVnTJCtpCWlauvJcPvJDm_cag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.238.0.0/18
149.238.160.0-149.238.255.255
192.77.114.0/23
192.112.208.0/24
193.33.52.0/23
Signature Algorithm: sha256WithRSAEncryption
90:77:47:95:e5:5b:12:9b:fa:33:d1:09:da:cf:d8:3f:db:70:
97:fd:97:78:f6:97:6b:3a:be:af:6d:a7:c7:07:ef:5c:13:16:
83:83:c4:ab:33:67:a4:cd:44:91:ad:41:9c:95:63:39:8b:3b:
12:d2:e8:1e:1d:dd:68:db:30:b4:d5:a7:da:32:e8:45:39:13:
2a:01:46:1c:60:22:dc:3c:40:b7:41:b6:af:49:b5:0f:4e:4b:
4e:a7:0b:78:ab:14:45:50:bc:5e:50:51:d0:62:13:49:08:25:
90:b3:9a:b4:bf:63:6d:0a:0d:24:ce:39:4c:78:a4:91:ef:a9:
0a:89:2e:f6:20:ef:86:38:3e:3d:7b:e4:3c:77:77:29:88:13:
ee:72:07:d8:e1:31:b1:d2:21:54:ce:0b:bc:3e:0a:43:77:41:
b1:20:65:22:d5:32:42:62:64:c5:28:fe:94:33:dd:29:9b:1f:
24:06:d6:06:1d:bd:ab:90:08:56:f5:12:8f:5d:e8:ea:3b:d9:
03:4b:14:40:b0:e0:a4:5b:c5:ef:9c:47:9c:5d:52:c9:16:1d:
6b:e2:fc:e7:56:16:8b:db:d7:45:f4:5c:0e:08:b0:ee:13:14:
f5:3e:9f:1f:fe:fc:27:24:8d:22:b1:82:a5:26:6e:1a:86:c3:
fb:c0:fa:4c
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgISAYzDST3fcBZTG+wWPvs4LwJwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MzI3YzU2ZTk0MTE3MWVhM2JlYmEyNmViYjllMjNmNGRm
NWJjZjMwHhcNMjQwMTAxMDQzMDA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzYyMTU5ZDMyNDJiNjkwOTY5NWFiYWYyNWMzZWYyNDM5YmY3MWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxMAvEPQdxdeEHKA+kA3YiLDuxX0
n6midmhpiX7sm9LE6loceuunAcL+xLfzLi2CwwVm8yoT9haMeYhEn//xVTcnZJ1L
v4zw12NLAp8GALrfrqpDWuvFfbTrvX3GiK/zW+fYr8QwCDv1e2GzONpo7rl1ckO0
0Jo5eDybfNBxxVl6jzufOBXVMb6k63TrVnDWSq1Jhbj2GnnBxvmX7Uzrs4Mm+Ied
jSY44YRLfm8qM5JIE+YIm7aWicmQmC28tUaCMtE3u4LBInx6qmYtMP8zh6EETZKd
ND7GVmBiq2L+DR/i25md2YFyRThxV4QQ3yrf5KagBZa9AJbV5i6w4yNxQQIDAQAB
o4ICKDCCAiQwHQYDVR0OBBYEFIxiFZ0yQraQlpWrryXD7yQ5v3GoMB8GA1UdIwQY
MBaAFKQyfFbpQRceo766Juu54j9N9bzzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS85YTQ4MzMtNmRhNC00ZGRhLWI3YWIt
MjhjMzQzY2U5ZDVkLzEvakdJVm5USkN0cENXbGF1dkpjUHZKRG1fY2FnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS85YTQ4MzMtNmRhNC00ZGRhLWI3YWItMjhjMzQzY2U5ZDVk
LzEvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTArBAIAATAlAwQGle4AMAsD
BAWV7qADAwCV7gMEAcBNcgMEAMBw0AMEAcEhNDANBgkqhkiG9w0BAQsFAAOCAQEA
kHdHleVbEpv6M9EJ2s/YP9twl/2XePaXazq+r22nxwfvXBMWg4PEqzNnpM1Eka1B
nJVjOYs7EtLoHh3daNswtNWn2jLoRTkTKgFGHGAi3DxAt0G2r0m1D05LTqcLeKsU
RVC8XlBR0GITSQglkLOatL9jbQoNJM45THikke+pCoku9iDvhjg+PXvkPHd3KYgT
7nIH2OExsdIhVM4LvD4KQ3dBsSBlItUyQmJkxSj+lDPdKZsfJAbWBh29q5AIVvUS
j13o6jvZA0sUQLDgpFvF75xHnF1SyRYda+L851YWi9vXRfRcDgiw7hMU9T6fH/78
JySNIrGCpSZuGobD+8D6TA==
-----END CERTIFICATE-----
Generated at Mon Mar 11 18:17:02 2024 by rpki-client on console-ams.rpki-client.org