Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/TavXHbjEy8uBL6sn6UiJxrKNZWQ.roa
File: TavXHbjEy8uBL6sn6UiJxrKNZWQ.roa (raw, json)
Hash identifier: U/TRsiHQbnuERPPreQy+X9yVzJStUhzujlHuWFooHxk=
Subject key identifier: 4D:AB:D7:1D:B8:C4:CB:CB:81:2F:AB:27:E9:48:89:C6:B2:8D:65:64
Certificate issuer: /CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Certificate serial: 018C67B9E926BA49A05811413AD8995618FE
Authority key identifier: A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/TavXHbjEy8uBL6sn6UiJxrKNZWQ.roa
Signing time: Thu 14 Dec 2023 09:48:06 +0000
ROA not before: Thu 14 Dec 2023 09:48:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216134
IP address blocks: 149.238.32.0/19 maxlen: 24
149.238.159.0/24 maxlen: 24
149.238.0.0/19 maxlen: 24
2a13:cb40::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:67:b9:e9:26:ba:49:a0:58:11:41:3a:d8:99:56:18:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Validity
Not Before: Dec 14 09:48:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4dabd71db8c4cbcb812fab27e94889c6b28d6564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fe:51:75:7c:28:d0:ac:1b:44:01:c0:3a:03:
ae:2b:b5:7c:c1:c9:b5:a8:ad:85:e7:30:fb:98:3b:
51:03:e3:38:ff:74:9b:7b:59:ac:30:0d:23:60:dd:
cd:be:18:ef:f8:39:c3:94:7c:fe:b9:42:b6:4b:6d:
7e:78:af:dc:22:d3:f8:63:80:96:6c:78:da:ec:c8:
ff:be:c3:42:83:26:d6:c8:e2:29:ec:1c:da:7a:5b:
56:9f:69:e8:74:07:55:3d:06:00:a8:6a:12:68:f4:
c6:a5:ab:5d:41:9e:41:b4:35:26:7a:6b:0c:58:90:
c0:9f:9d:8a:b4:0b:df:27:87:f0:84:8b:09:29:02:
2c:6e:5a:93:fd:48:45:cd:2d:17:f1:7a:59:31:9d:
f1:17:ab:fd:5c:80:d7:c0:4b:b2:79:2e:b7:9d:20:
44:09:35:2d:0b:c7:ee:c9:ea:06:e4:4d:ee:56:7c:
c7:c0:c2:fa:30:ff:0d:19:47:1b:3b:de:57:d9:14:
5d:e4:15:5f:bf:3d:56:a1:8d:2b:c9:ac:8c:04:46:
b7:ad:41:b6:61:7d:45:71:26:b2:57:59:b2:3c:04:
59:d9:82:97:bf:19:3c:5b:32:4a:95:06:a3:46:6b:
ca:05:36:28:61:3d:f7:d4:33:04:ef:ee:06:16:ae:
74:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AB:D7:1D:B8:C4:CB:CB:81:2F:AB:27:E9:48:89:C6:B2:8D:65:64
X509v3 Authority Key Identifier:
keyid:A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/TavXHbjEy8uBL6sn6UiJxrKNZWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.238.0.0/18
149.238.159.0/24
IPv6:
2a13:cb40::/29
Signature Algorithm: sha256WithRSAEncryption
80:43:6d:c1:58:9e:c8:1b:95:42:73:e8:91:d4:5f:de:ac:36:
2b:4c:78:80:36:9a:74:ba:e6:5b:cf:63:16:59:34:46:09:40:
9b:f5:a8:aa:19:98:c7:78:7a:43:d1:a8:48:92:db:bc:00:0d:
fa:ec:fd:db:34:68:a7:da:6c:66:ce:66:2d:20:07:ec:48:2a:
37:2a:48:49:2e:87:cc:79:1f:9d:ac:2e:cd:16:22:f2:21:8e:
e9:3e:81:e1:d4:79:95:69:94:22:12:7e:10:12:1b:cf:a4:27:
86:98:72:72:cd:7c:e6:66:fe:79:8a:3f:4d:1a:d5:bd:05:9f:
6c:21:a5:02:bd:20:0a:20:67:c9:fa:e3:8c:69:c7:6b:5b:0b:
93:d6:cd:49:1a:48:3e:b0:30:61:f4:92:6a:db:c9:78:23:86:
2d:28:1a:1b:10:32:44:c9:f3:e3:21:09:dc:2b:7a:78:bc:bb:
20:88:ce:e0:36:d9:41:11:82:a6:ab:39:47:60:4b:fa:6e:6a:
2d:de:f2:44:03:47:fa:ee:8e:e6:c6:76:1d:c6:1f:4d:93:80:
42:1c:87:2e:be:eb:93:1a:71:8a:f4:1e:35:96:9f:b1:1f:58:
92:1c:18:08:9d:5e:4b:61:4b:6e:54:2f:7a:96:8b:81:43:36:
7c:37:e8:52
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYxnuekmukmgWBFBOtiZVhj+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MzI3YzU2ZTk0MTE3MWVhM2JlYmEyNmViYjllMjNmNGRm
NWJjZjMwHhcNMjMxMjE0MDk0ODA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGFiZDcxZGI4YzRjYmNiODEyZmFiMjdlOTQ4ODljNmIyOGQ2NTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/5RdXwo0KwbRAHAOgOuK7V8wcm1
qK2F5zD7mDtRA+M4/3Sbe1msMA0jYN3Nvhjv+DnDlHz+uUK2S21+eK/cItP4Y4CW
bHja7Mj/vsNCgybWyOIp7BzaeltWn2nodAdVPQYAqGoSaPTGpatdQZ5BtDUmemsM
WJDAn52KtAvfJ4fwhIsJKQIsblqT/UhFzS0X8XpZMZ3xF6v9XIDXwEuyeS63nSBE
CTUtC8fuyeoG5E3uVnzHwML6MP8NGUcbO95X2RRd5BVfvz1WoY0ryayMBEa3rUG2
YX1FcSayV1myPARZ2YKXvxk8WzJKlQajRmvKBTYoYT331DME7+4GFq50pwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFE2r1x24xMvLgS+rJ+lIicayjWVkMB8GA1UdIwQY
MBaAFKQyfFbpQRceo766Juu54j9N9bzzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS85YTQ4MzMtNmRhNC00ZGRhLWI3YWIt
MjhjMzQzY2U5ZDVkLzEvVGF2WEhiakV5OHVCTDZzbjZVaUp4cktOWldRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS85YTQ4MzMtNmRhNC00ZGRhLWI3YWItMjhjMzQzY2U5ZDVk
LzEvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQGle4AAwQA
le6fMA0EAgACMAcDBQMqE8tAMA0GCSqGSIb3DQEBCwUAA4IBAQCAQ23BWJ7IG5VC
c+iR1F/erDYrTHiANpp0uuZbz2MWWTRGCUCb9aiqGZjHeHpD0ahIktu8AA367P3b
NGin2mxmzmYtIAfsSCo3KkhJLofMeR+drC7NFiLyIY7pPoHh1HmVaZQiEn4QEhvP
pCeGmHJyzXzmZv55ij9NGtW9BZ9sIaUCvSAKIGfJ+uOMacdrWwuT1s1JGkg+sDBh
9JJq28l4I4YtKBobEDJEyfPjIQncK3p4vLsgiM7gNtlBEYKmqzlHYEv6bmot3vJE
A0f67o7mxnYdxh9Nk4BCHIcuvuuTGnGK9B41lp+xH1iSHBgInV5LYUtuVC96louB
QzZ8N+hS
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:34 2023 by rpki-client on console.sobornost.net