Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/NBRWSnSDVex7Hbci_LaOeiRZKTI.roa
File: NBRWSnSDVex7Hbci_LaOeiRZKTI.roa (raw, json)
Hash identifier: HWp/R5NEeaB6dF2Jwj9jPmR/HT7bwnB/bzpY4+VN/zE=
Subject key identifier: 34:14:56:4A:74:83:55:EC:7B:1D:B7:22:FC:B6:8E:7A:24:59:29:32
Certificate issuer: /CN=c373fae99d651298845d22f89d8d2b2e1d13bc04
Certificate serial: 0192B30C3E75809F5C1DC0D33EFA668D9A0E
Authority key identifier: C3:73:FA:E9:9D:65:12:98:84:5D:22:F8:9D:8D:2B:2E:1D:13:BC:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/NBRWSnSDVex7Hbci_LaOeiRZKTI.roa
Signing time: Tue 22 Oct 2024 07:06:16 +0000
ROA not before: Tue 22 Oct 2024 07:06:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 188.190.0.0/24 maxlen: 24
188.190.1.0/24 maxlen: 24
188.190.2.0/24 maxlen: 24
188.190.6.0/24 maxlen: 24
188.190.7.0/24 maxlen: 24
188.190.8.0/24 maxlen: 24
188.190.9.0/24 maxlen: 24
188.190.11.0/24 maxlen: 24
188.190.12.0/24 maxlen: 24
188.190.13.0/24 maxlen: 24
188.190.14.0/24 maxlen: 24
188.190.15.0/24 maxlen: 24
188.190.16.0/24 maxlen: 24
188.190.17.0/24 maxlen: 24
188.190.18.0/24 maxlen: 24
188.190.19.0/24 maxlen: 24
188.190.20.0/24 maxlen: 24
188.190.21.0/24 maxlen: 24
188.190.22.0/24 maxlen: 24
188.190.23.0/24 maxlen: 24
188.190.24.0/24 maxlen: 24
188.190.25.0/24 maxlen: 24
188.190.26.0/24 maxlen: 24
188.190.27.0/24 maxlen: 24
188.190.28.0/24 maxlen: 24
188.190.29.0/24 maxlen: 24
188.190.30.0/24 maxlen: 24
188.190.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Nov 2024 21:14:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b3:0c:3e:75:80:9f:5c:1d:c0:d3:3e:fa:66:8d:9a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c373fae99d651298845d22f89d8d2b2e1d13bc04
Validity
Not Before: Oct 22 07:06:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3414564a748355ec7b1db722fcb68e7a24592932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:84:b7:09:09:15:c7:2f:93:af:7c:6f:4f:7a:
40:c6:f3:39:ca:cb:4b:eb:54:5a:f3:f7:9e:07:4e:
6e:5c:01:fd:aa:f5:c0:3e:a9:05:de:6f:4f:ae:a9:
d3:a3:63:3f:94:98:49:5e:0d:70:e4:58:f2:cc:eb:
46:45:8e:58:b1:9a:58:75:fd:90:a7:a3:58:14:19:
8f:ab:57:41:65:f9:51:32:4f:f0:31:8d:5d:78:19:
e4:71:24:23:28:fb:45:77:20:cc:ee:16:2b:a4:57:
42:69:5c:4a:8d:5b:f9:5c:86:91:27:80:5f:13:19:
fd:26:2f:2a:a9:36:57:f9:4b:ca:ef:3c:9e:20:9b:
c0:3a:67:fa:6c:c9:d4:bf:67:7e:ba:b9:bb:f8:fc:
f8:df:0f:6e:35:93:cf:4e:c0:08:c2:b2:bb:78:6c:
38:3a:bf:82:00:df:a9:81:60:43:ae:5b:5c:f5:8a:
01:2c:c0:43:97:1a:fa:51:d8:a7:f6:2a:2f:b8:e5:
e2:a1:3a:43:9a:1c:03:e5:40:ca:ff:0f:4b:44:5c:
ea:5d:5b:ce:b2:15:8a:52:10:c5:50:02:fd:72:65:
c4:dc:95:2e:fb:71:80:8d:7a:4b:75:53:45:dd:ac:
c0:4d:e2:5d:7d:59:55:bd:38:21:20:42:98:df:8d:
97:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:14:56:4A:74:83:55:EC:7B:1D:B7:22:FC:B6:8E:7A:24:59:29:32
X509v3 Authority Key Identifier:
keyid:C3:73:FA:E9:9D:65:12:98:84:5D:22:F8:9D:8D:2B:2E:1D:13:BC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/NBRWSnSDVex7Hbci_LaOeiRZKTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.190.0.0-188.190.2.255
188.190.6.0-188.190.9.255
188.190.11.0-188.190.31.255
Signature Algorithm: sha256WithRSAEncryption
4a:f5:f3:a2:ba:94:44:78:32:6d:f0:e6:89:bd:68:9e:b5:19:
ac:65:1e:d4:9e:10:99:4b:22:e2:5b:3a:c6:a4:51:58:94:c5:
52:c9:ab:9c:b2:6a:dc:bd:81:cb:9c:39:47:a8:c4:d9:0c:af:
37:73:f5:77:91:be:0a:33:16:c6:d5:a0:95:ba:9c:38:7e:0c:
22:38:6d:8b:24:d8:6b:28:48:02:1c:aa:17:8a:74:4f:96:3b:
cf:b6:82:cd:a6:c5:08:ee:85:18:4f:78:6e:bf:7d:63:20:dd:
0b:f2:f9:af:a9:fe:6b:e8:f3:f7:ce:37:b8:9f:5a:13:5b:6d:
78:ea:4e:3f:98:ee:0e:dc:53:83:46:ec:7c:cb:68:b3:29:27:
d2:28:0a:a7:b3:a2:3c:f1:e1:98:f4:1f:a2:95:02:89:67:a4:
b1:41:fb:9e:18:63:c8:3f:be:56:6d:f5:7d:e9:57:81:7f:5d:
5d:c5:14:5a:e8:60:5e:71:2a:f3:32:b8:eb:84:14:7f:3a:34:
b1:58:1e:b3:d5:b2:77:6e:7e:28:f1:60:e0:9d:e9:46:43:d4:
45:84:ec:09:35:83:54:36:15:b3:47:73:a1:06:32:bf:63:d6:
13:21:02:f0:03:9a:4d:bb:44:a8:00:40:23:ce:0e:f9:f5:04:
43:1b:70:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:17:11 2025 by rpki-client