Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/sir7DmHTdESRKqcNwH11JaZq_1E.roa
File: sir7DmHTdESRKqcNwH11JaZq_1E.roa (raw, json)
Hash identifier: rSZjU5jwAIlzlhJG0CXF77JwKQOspz7lyc09L4sRzsQ=
Subject key identifier: B2:2A:FB:0E:61:D3:74:44:91:2A:A7:0D:C0:7D:75:25:A6:6A:FF:51
Certificate issuer: /CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Certificate serial: 018C67E9A8CABE418726B7676DCDA946B275
Authority key identifier: A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/sir7DmHTdESRKqcNwH11JaZq_1E.roa
Signing time: Thu 14 Dec 2023 10:40:15 +0000
ROA not before: Thu 14 Dec 2023 10:40:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51964
IP address blocks: 149.238.32.0/19 maxlen: 24
149.238.160.0/19 maxlen: 24
149.238.64.0/19 maxlen: 24
193.33.52.0/23 maxlen: 24
192.112.208.0/24 maxlen: 24
192.77.114.0/23 maxlen: 24
149.238.192.0/19 maxlen: 24
149.238.96.0/19 maxlen: 24
149.238.0.0/19 maxlen: 24
149.238.224.0/19 maxlen: 24
149.238.128.0/19 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:67:e9:a8:ca:be:41:87:26:b7:67:6d:cd:a9:46:b2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Validity
Not Before: Dec 14 10:40:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b22afb0e61d37444912aa70dc07d7525a66aff51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cd:8b:2c:50:f2:ce:7a:c8:93:2d:96:4a:e9:
2e:2b:1f:d4:f7:ed:fd:3d:44:b0:dd:29:96:e8:19:
95:e0:c2:89:bb:c9:9a:0c:0d:7e:e7:37:46:aa:d1:
31:90:9d:31:ad:a3:81:64:9d:a4:5d:8c:6d:99:f9:
0b:38:9f:60:70:65:65:57:74:9f:e4:c9:8a:76:42:
6e:0f:d8:48:62:3c:0a:ac:1d:c6:7c:1c:ef:29:59:
1a:ce:d8:a1:f5:b3:9b:39:f1:93:72:35:e9:b8:6c:
88:8e:0f:d6:fc:df:89:73:9c:a3:e5:a9:e9:b7:8e:
fe:f2:2e:cb:10:82:ff:ad:bd:a1:74:80:70:76:51:
e6:b8:0d:65:b5:34:48:6c:ce:d8:00:87:77:63:fc:
da:5f:67:79:bc:7c:df:6c:3e:8c:6e:53:5b:09:63:
8d:b3:f4:80:b9:dc:45:50:1d:7e:32:b3:bc:35:a7:
13:1a:07:50:81:2c:28:26:22:d9:64:9e:18:0a:5c:
08:d6:bd:29:db:fe:cb:89:9f:ba:cf:20:52:fd:e3:
b1:9c:27:05:bf:0a:57:03:ff:c6:51:88:38:90:16:
e7:d3:a6:4b:8b:e4:b9:a4:34:db:ff:61:b6:d0:79:
32:ad:04:1f:0b:64:09:f3:a3:93:93:79:32:cd:d9:
8e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2A:FB:0E:61:D3:74:44:91:2A:A7:0D:C0:7D:75:25:A6:6A:FF:51
X509v3 Authority Key Identifier:
keyid:A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/sir7DmHTdESRKqcNwH11JaZq_1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.238.0.0/16
192.77.114.0/23
192.112.208.0/24
193.33.52.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:68:3f:49:a3:6f:32:a3:03:ad:80:1f:3f:e3:f4:a0:2f:fa:
67:7f:ed:e1:b5:c7:84:ae:6c:0a:60:23:2d:f0:49:f8:0a:f2:
d3:fb:53:12:e2:53:bc:db:59:f6:d2:c8:50:71:6b:6a:e6:9c:
e6:92:83:a5:1b:d6:d0:90:35:48:ef:1d:12:3a:d9:e0:86:4f:
0b:fc:f8:8f:0c:b0:4e:f8:d2:17:01:33:a0:cc:d5:09:9d:da:
f9:57:e8:da:a2:7b:df:7d:21:c3:25:b3:36:3c:b5:c1:db:4d:
ea:50:ba:f8:64:55:18:e3:88:f4:04:6d:db:2b:fa:eb:92:c9:
d8:ba:99:57:e0:39:87:30:94:e0:69:ea:d3:33:d2:6d:03:8d:
5b:6b:ad:64:b6:40:c6:e5:0c:a1:4f:33:39:b2:ce:df:21:ba:
b8:7e:c5:f6:75:a2:6e:f5:49:37:b7:b7:86:66:45:ea:4a:3d:
49:66:45:34:d7:60:f8:02:f6:8a:83:b0:f6:31:10:46:b4:ca:
23:95:c7:e3:8b:95:6c:f6:52:61:25:53:3f:2d:d0:05:79:7a:
75:71:44:e0:53:53:64:73:54:f1:ff:5e:5f:24:68:6e:ae:27:
63:dd:41:24:51:88:32:58:d9:97:37:1f:8f:e0:4b:e5:e3:3a:
40:c9:7e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:00 2024 by rpki-client on console-ams.rpki-client.org