
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/Rr9fGMqofbKmcJ3UZBBN4e2Xxcg.roa
File: Rr9fGMqofbKmcJ3UZBBN4e2Xxcg.roa (raw, json)
Hash identifier: iYYvBAkMM12a1ndymeJAtGyUfu6iYv+EAXj4FzMWMfI=
Subject key identifier: 46:BF:5F:18:CA:A8:7D:B2:A6:70:9D:D4:64:10:4D:E1:ED:97:C5:C8
Certificate issuer: /CN=c373fae99d651298845d22f89d8d2b2e1d13bc04
Certificate serial: 0191F2AE838678274C7B13DCE5319B3340EF
Authority key identifier: C3:73:FA:E9:9D:65:12:98:84:5D:22:F8:9D:8D:2B:2E:1D:13:BC:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/Rr9fGMqofbKmcJ3UZBBN4e2Xxcg.roa
Signing time: Sat 14 Sep 2024 22:36:48 +0000
ROA not before: Sat 14 Sep 2024 22:36:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 188.190.0.0/24 maxlen: 24
188.190.1.0/24 maxlen: 24
188.190.2.0/24 maxlen: 24
188.190.3.0/24 maxlen: 24
188.190.4.0/24 maxlen: 24
188.190.5.0/24 maxlen: 24
188.190.6.0/24 maxlen: 24
188.190.7.0/24 maxlen: 24
188.190.8.0/24 maxlen: 24
188.190.9.0/24 maxlen: 24
188.190.11.0/24 maxlen: 24
188.190.12.0/24 maxlen: 24
188.190.13.0/24 maxlen: 24
188.190.14.0/24 maxlen: 24
188.190.15.0/24 maxlen: 24
188.190.16.0/24 maxlen: 24
188.190.17.0/24 maxlen: 24
188.190.18.0/24 maxlen: 24
188.190.19.0/24 maxlen: 24
188.190.20.0/24 maxlen: 24
188.190.21.0/24 maxlen: 24
188.190.22.0/24 maxlen: 24
188.190.23.0/24 maxlen: 24
188.190.24.0/24 maxlen: 24
188.190.25.0/24 maxlen: 24
188.190.26.0/24 maxlen: 24
188.190.27.0/24 maxlen: 24
188.190.28.0/24 maxlen: 24
188.190.29.0/24 maxlen: 24
188.190.30.0/24 maxlen: 24
188.190.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Sep 2024 07:14:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f2:ae:83:86:78:27:4c:7b:13:dc:e5:31:9b:33:40:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c373fae99d651298845d22f89d8d2b2e1d13bc04
Validity
Not Before: Sep 14 22:36:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46bf5f18caa87db2a6709dd464104de1ed97c5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:af:7d:02:ff:6c:4f:6a:68:1e:75:e9:bb:5c:
2a:33:0c:4a:3f:e3:ff:91:59:32:1f:0b:ca:df:2c:
c2:2c:13:65:f5:db:b0:9d:38:93:9d:42:9c:a8:b4:
c4:d2:f4:e8:8f:7b:68:02:42:d0:b6:ab:f8:e1:91:
b4:bc:83:09:42:eb:b9:d1:4d:3a:bf:87:6b:59:b4:
12:ff:29:2f:b0:c9:aa:97:66:b6:f7:3a:9f:0f:45:
7a:6b:c3:02:52:fd:e6:63:91:6a:38:ae:77:03:96:
8a:53:ba:ae:f8:c9:6a:11:34:81:4c:e3:0d:5d:fc:
cb:3e:a1:c4:14:3c:b7:d0:04:28:07:2e:85:e0:de:
26:cf:59:07:89:2c:dc:51:83:e0:ae:e1:dd:e7:24:
ab:e1:9c:f4:32:b4:67:2a:93:4b:54:83:fe:80:a5:
d0:f6:84:d6:12:18:b7:ec:67:0d:8f:03:49:14:75:
ba:37:93:19:b9:4c:ba:26:52:e5:dc:59:41:e5:12:
6a:26:df:30:23:e1:f4:5a:76:db:36:01:fc:29:da:
1f:30:e6:1e:f7:48:15:e7:60:5b:7a:5c:0c:22:d8:
19:70:69:fa:37:83:73:0c:f8:59:89:af:99:bd:1f:
44:0c:80:7e:9d:f2:e5:42:af:6d:1f:b5:18:4e:e2:
9a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BF:5F:18:CA:A8:7D:B2:A6:70:9D:D4:64:10:4D:E1:ED:97:C5:C8
X509v3 Authority Key Identifier:
keyid:C3:73:FA:E9:9D:65:12:98:84:5D:22:F8:9D:8D:2B:2E:1D:13:BC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/Rr9fGMqofbKmcJ3UZBBN4e2Xxcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.190.0.0-188.190.9.255
188.190.11.0-188.190.31.255
Signature Algorithm: sha256WithRSAEncryption
53:e4:42:e8:8b:67:79:4f:44:13:29:00:10:36:8c:97:04:c2:
8a:73:8b:02:61:4f:0f:51:7f:07:35:c3:c0:8c:4b:61:79:be:
d0:7f:84:b8:f8:aa:30:dd:45:76:48:8c:43:6f:34:72:bc:e6:
1e:00:6e:15:02:fa:94:16:fc:22:d1:fc:63:91:74:fb:35:03:
26:59:3a:b5:a7:30:d1:89:66:0f:78:0c:97:36:d5:f5:48:61:
24:57:a9:41:00:dd:7b:1b:28:a0:cf:9e:f9:bd:15:1f:bc:22:
39:1b:be:25:62:9a:a6:12:42:bb:42:9c:18:7e:39:f8:f0:b1:
b1:80:af:34:2a:26:8a:38:bc:71:42:63:c7:9a:1a:8f:03:c3:
8b:7c:04:9c:a8:f7:32:ee:53:cd:5a:09:f0:f9:5a:57:2d:38:
55:8b:4f:ca:e9:51:11:67:29:e3:7a:4d:a7:a7:dc:a4:0a:8f:
58:78:b3:72:78:ba:ba:f2:10:bd:6a:e1:3a:45:d5:3b:e3:3d:
e0:b3:4b:07:25:fa:7d:49:90:18:ea:24:3d:de:07:56:6c:05:
b5:0c:5c:2d:60:6c:6e:72:19:14:f2:1d:64:81:ce:f1:ea:57:
13:d2:4f:f4:59:b9:e8:04:7d:8d:c5:26:02:e6:8c:28:b0:c2:
22:96:8c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:16:49 2025 by rpki-client