Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/PGAJyeY7_JDrDIh1aw5fwYX0Do0.roa
File: PGAJyeY7_JDrDIh1aw5fwYX0Do0.roa (raw, json)
Hash identifier: +JL9PwYw0ahuh0bR6x4kT0FA5QG5HhkACVXs4E1aMHE=
Subject key identifier: 3C:60:09:C9:E6:3B:FC:90:EB:0C:88:75:6B:0E:5F:C1:85:F4:0E:8D
Certificate issuer: /CN=c373fae99d651298845d22f89d8d2b2e1d13bc04
Certificate serial: 019427B54FB5D448DE1C1659BF0F451F2B08
Authority key identifier: C3:73:FA:E9:9D:65:12:98:84:5D:22:F8:9D:8D:2B:2E:1D:13:BC:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/PGAJyeY7_JDrDIh1aw5fwYX0Do0.roa
Signing time: Thu 02 Jan 2025 15:49:41 +0000
ROA not before: Thu 02 Jan 2025 15:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 188.190.0.0/24 maxlen: 24
188.190.1.0/24 maxlen: 24
188.190.2.0/24 maxlen: 24
188.190.6.0/24 maxlen: 24
188.190.7.0/24 maxlen: 24
188.190.8.0/24 maxlen: 24
188.190.9.0/24 maxlen: 24
188.190.12.0/24 maxlen: 24
188.190.13.0/24 maxlen: 24
188.190.14.0/24 maxlen: 24
188.190.15.0/24 maxlen: 24
188.190.16.0/24 maxlen: 24
188.190.17.0/24 maxlen: 24
188.190.18.0/24 maxlen: 24
188.190.19.0/24 maxlen: 24
188.190.20.0/24 maxlen: 24
188.190.21.0/24 maxlen: 24
188.190.22.0/24 maxlen: 24
188.190.23.0/24 maxlen: 24
188.190.24.0/24 maxlen: 24
188.190.25.0/24 maxlen: 24
188.190.26.0/24 maxlen: 24
188.190.27.0/24 maxlen: 24
188.190.28.0/24 maxlen: 24
188.190.29.0/24 maxlen: 24
188.190.30.0/24 maxlen: 24
188.190.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Jan 2025 18:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:4f:b5:d4:48:de:1c:16:59:bf:0f:45:1f:2b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c373fae99d651298845d22f89d8d2b2e1d13bc04
Validity
Not Before: Jan 2 15:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c6009c9e63bfc90eb0c88756b0e5fc185f40e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:59:4f:56:35:07:96:1d:4f:23:bd:42:3d:22:
d3:c1:74:05:b1:9c:e1:2d:ee:09:41:75:3d:47:f1:
52:33:c6:88:e1:15:0b:21:af:85:d1:8e:5c:e5:34:
ac:34:31:ff:8f:73:75:7d:3e:1e:b7:f4:37:00:06:
14:10:50:34:3a:bb:0e:9d:c9:a6:2b:4b:63:4c:29:
e2:02:73:e3:44:9f:b1:44:2d:87:72:1a:bf:93:e2:
7c:22:ab:cc:0f:fb:98:0f:77:4f:13:83:43:12:91:
2b:df:62:80:46:cb:49:81:4e:5b:69:a0:f8:da:11:
62:36:b8:41:4d:a8:34:95:36:eb:a9:81:75:21:8a:
1f:df:a5:f3:b9:4c:e8:08:94:d0:1a:3b:bf:c0:c0:
f1:6d:69:7d:fe:6d:c8:63:59:65:a5:d8:54:df:98:
65:62:7f:24:5e:56:34:2b:79:5f:34:98:1e:1d:a8:
14:ee:2c:a3:57:cc:03:6b:02:b8:17:17:dd:c2:87:
f0:f2:ff:2a:2f:e0:78:ad:c8:9a:57:9e:dd:d4:bb:
a5:9d:2f:a0:2d:10:6f:0a:07:dd:21:56:17:1b:7e:
5f:3e:3e:b2:80:db:e5:8c:64:51:df:7f:c6:ed:a7:
9a:db:0a:67:87:fe:31:55:09:92:a3:ed:25:7e:a9:
2a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:60:09:C9:E6:3B:FC:90:EB:0C:88:75:6B:0E:5F:C1:85:F4:0E:8D
X509v3 Authority Key Identifier:
keyid:C3:73:FA:E9:9D:65:12:98:84:5D:22:F8:9D:8D:2B:2E:1D:13:BC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/PGAJyeY7_JDrDIh1aw5fwYX0Do0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.190.0.0-188.190.2.255
188.190.6.0-188.190.9.255
188.190.12.0-188.190.31.255
Signature Algorithm: sha256WithRSAEncryption
26:c1:0f:eb:b4:6b:b2:bf:5f:7c:7d:40:d6:67:b6:53:db:4e:
08:20:cb:88:48:fe:93:f3:0d:e3:44:ba:26:59:25:35:03:72:
25:92:c0:05:2c:6c:5f:78:a0:1d:44:cb:c7:c7:d5:71:c9:07:
d6:15:88:2c:69:95:90:6a:d3:b7:dd:56:fa:0c:2e:12:42:f7:
27:ac:4d:b0:bf:8a:79:b3:47:e7:f8:26:4c:80:d1:ec:98:01:
21:09:9f:b7:f6:b8:84:24:bb:7f:ce:67:29:d6:a3:b0:22:06:
72:de:32:7a:12:c3:19:de:6c:55:99:0a:27:3c:4a:b4:8c:0a:
bc:4a:0c:56:be:30:52:15:0c:25:53:17:c5:32:70:62:8f:3e:
c1:29:82:8e:ef:d4:a2:02:1a:b7:b5:a4:3d:14:33:99:dd:bf:
f0:4a:50:94:b9:94:82:07:29:ab:c9:e4:23:c5:22:00:b3:e0:
b2:cb:28:3d:89:56:4a:45:d2:b1:f5:60:9e:06:3e:24:ac:53:
3a:6d:c3:23:98:00:6b:4d:5d:99:19:11:ed:41:a3:ef:25:84:
0c:93:96:a9:5d:88:de:a0:e1:ff:2f:6c:58:03:cf:7a:1f:3c:
a5:59:c3:45:97:d8:fb:32:67:55:4e:7e:72:09:50:f4:c4:a9:
86:08:ea:67
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAZQntU+11EjeHBZZvw9FHysIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNzNmYWU5OWQ2NTEyOTg4NDVkMjJmODlkOGQyYjJlMWQx
M2JjMDQwHhcNMjUwMTAyMTU0OTQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzYwMDljOWU2M2JmYzkwZWIwYzg4NzU2YjBlNWZjMTg1ZjQwZThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVlPVjUHlh1PI71CPSLTwXQFsZzh
Le4JQXU9R/FSM8aI4RULIa+F0Y5c5TSsNDH/j3N1fT4et/Q3AAYUEFA0OrsOncmm
K0tjTCniAnPjRJ+xRC2Hchq/k+J8IqvMD/uYD3dPE4NDEpEr32KARstJgU5baaD4
2hFiNrhBTag0lTbrqYF1IYof36XzuUzoCJTQGju/wMDxbWl9/m3IY1llpdhU35hl
Yn8kXlY0K3lfNJgeHagU7iyjV8wDawK4Fxfdwofw8v8qL+B4rciaV57d1LulnS+g
LRBvCgfdIVYXG35fPj6ygNvljGRR33/G7aea2wpnh/4xVQmSo+0lfqkqQQIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFDxgCcnmO/yQ6wyIdWsOX8GF9A6NMB8GA1UdIwQY
MBaAFMNz+umdZRKYhF0i+J2NKy4dE7wEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzNQNjZaMWxFcGlFWFNMNG5ZMHJMaDBUdkFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC84Y2U3OTUtM2ZhOS00Y2I3LTgzMWEt
MWRlNTZlNDc1ZmJmLzEvUEdBSnllWTdfSkRyREloMWF3NWZ3WVgwRG8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC84Y2U3OTUtM2ZhOS00Y2I3LTgzMWEtMWRlNTZlNDc1ZmJm
LzEvdzNQNjZaMWxFcGlFWFNMNG5ZMHJMaDBUdkFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAvBAIAATApMAsDAwG8vgME
ALy+AjAMAwQBvL4GAwQBvL4IMAwDBAK8vgwDBAW8vgAwDQYJKoZIhvcNAQELBQAD
ggEBACbBD+u0a7K/X3x9QNZntlPbTgggy4hI/pPzDeNEuiZZJTUDciWSwAUsbF94
oB1Ey8fH1XHJB9YViCxplZBq07fdVvoMLhJC9yesTbC/inmzR+f4JkyA0eyYASEJ
n7f2uIQku3/OZynWo7AiBnLeMnoSwxnebFWZCic8SrSMCrxKDFa+MFIVDCVTF8Uy
cGKPPsEpgo7v1KICGre1pD0UM5ndv/BKUJS5lIIHKavJ5CPFIgCz4LLLKD2JVkpF
0rH1YJ4GPiSsUzptwyOYAGtNXZkZEe1Bo+8lhAyTlqldiN6g4f8vbFgDz3ofPKVZ
w0WX2PsyZ1VOfnIJUPTEqYYI6mc=
-----END CERTIFICATE-----
Generated at Wed Apr 9 05:34:50 2025 by rpki-client