Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/N4ikWzDbb8qBidxAr3LABrH_wIg.roa
File: N4ikWzDbb8qBidxAr3LABrH_wIg.roa (raw, json)
Hash identifier: iyXY/J38J2wXyEF+1fvj9qU9WK0VEv5TEjHNno5964w=
Subject key identifier: 37:88:A4:5B:30:DB:6F:CA:81:89:DC:40:AF:72:C0:06:B1:FF:C0:88
Certificate issuer: /CN=c373fae99d651298845d22f89d8d2b2e1d13bc04
Certificate serial: 01940424F7E63D5D2C2C05AFF9820DA06F98
Authority key identifier: C3:73:FA:E9:9D:65:12:98:84:5D:22:F8:9D:8D:2B:2E:1D:13:BC:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/N4ikWzDbb8qBidxAr3LABrH_wIg.roa
Signing time: Thu 26 Dec 2024 18:05:19 +0000
ROA not before: Thu 26 Dec 2024 18:05:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200195
IP address blocks: 188.190.10.0/24 maxlen: 24
188.190.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:04:24:f7:e6:3d:5d:2c:2c:05:af:f9:82:0d:a0:6f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c373fae99d651298845d22f89d8d2b2e1d13bc04
Validity
Not Before: Dec 26 18:05:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3788a45b30db6fca8189dc40af72c006b1ffc088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:be:02:ee:e9:b1:b8:3f:9b:8f:ee:e6:ca:13:
3b:30:0e:ef:e8:05:c9:0f:0e:26:61:9e:e3:af:9b:
b3:9b:0a:e3:9c:db:de:cc:f5:b4:d2:07:01:42:ee:
e7:40:d1:5c:ce:99:dd:45:58:3e:49:84:6f:21:8c:
d5:52:63:4f:af:2c:c8:31:b9:06:fe:61:d8:5c:59:
82:48:43:7a:55:c1:f1:72:9f:63:d0:d1:6f:38:18:
71:6c:f0:f4:e6:f5:e5:a1:6e:26:24:9c:6a:16:c0:
5c:38:6d:e9:92:bb:4f:e6:85:07:37:9b:44:15:3c:
04:3d:03:f8:be:a9:7a:5a:91:11:67:11:de:c2:14:
3b:6e:2f:d6:73:4c:ed:85:dc:84:0d:fe:2e:8e:bc:
bc:1b:26:82:87:1a:f5:92:81:8b:02:35:7d:cf:51:
b6:1d:7c:60:0e:aa:e1:35:f9:a2:55:29:4f:58:8d:
67:fd:2a:e4:5a:b7:27:84:8c:44:e4:52:98:41:a3:
0f:6b:8e:7b:63:d8:95:da:bb:d8:2d:25:9b:27:17:
bb:f7:ec:f9:55:0d:1a:54:9c:f1:e7:6e:c6:63:5c:
7c:63:56:cf:ba:da:f3:f5:35:8b:63:a9:ca:98:52:
25:11:36:7d:ed:62:0b:57:5d:8a:53:71:e6:9e:1f:
4d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:88:A4:5B:30:DB:6F:CA:81:89:DC:40:AF:72:C0:06:B1:FF:C0:88
X509v3 Authority Key Identifier:
keyid:C3:73:FA:E9:9D:65:12:98:84:5D:22:F8:9D:8D:2B:2E:1D:13:BC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/N4ikWzDbb8qBidxAr3LABrH_wIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.190.10.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:93:cc:5e:62:99:01:13:a0:0e:57:32:a2:aa:4e:ab:8a:a2:
c7:ec:d2:66:7f:90:7e:3c:b3:59:15:d6:b5:d9:33:27:56:1a:
70:43:62:c4:31:54:32:ec:7d:e7:be:cd:e7:31:ec:35:cb:3c:
99:e8:43:f6:b8:ed:48:ed:c8:c6:2e:b2:ca:96:e2:75:6a:97:
08:57:a7:ab:8c:5f:84:cb:e7:e3:ad:4a:e7:38:c4:4e:d0:0a:
24:3b:a1:7f:d8:1d:99:dd:54:8a:d8:42:3d:1e:5a:af:76:37:
4e:26:e7:15:81:dc:e6:27:82:ea:56:87:2a:b4:85:78:95:1a:
03:fe:a9:e8:f8:0b:8f:13:4a:cd:e8:51:a6:09:b2:24:2a:ec:
a5:39:18:f8:67:0c:b0:8b:ae:77:35:6c:63:5d:5c:a0:5f:f7:
25:1c:80:27:50:3b:70:4b:e9:e7:84:ad:3c:11:5d:9d:4f:6a:
eb:a5:ce:8f:2a:02:1c:59:9a:b2:26:10:ca:57:df:4c:d0:0a:
32:d2:73:43:d6:a0:df:17:ab:f9:90:5a:91:b1:da:d9:cd:c6:
6c:f5:78:0a:ec:62:7e:84:b7:e5:81:48:e4:d0:66:3d:cd:8f:
47:f5:36:c1:e7:60:4b:55:8c:4b:ca:ea:c1:40:32:18:c4:ba:
55:fe:10:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:57:50 2025 by rpki-client