Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/G9NpI4PyKpB54VQyke7WkrhtpTM.roa
File: G9NpI4PyKpB54VQyke7WkrhtpTM.roa (raw, json)
Hash identifier: koLUJOGjy5Lv+P0jykPSaZJj8iIDqUv2nTbNELxExtc=
Subject key identifier: 1B:D3:69:23:83:F2:2A:90:79:E1:54:32:91:EE:D6:92:B8:6D:A5:33
Certificate issuer: /CN=c373fae99d651298845d22f89d8d2b2e1d13bc04
Certificate serial: 0189F466D8B338A1FADE5026128E9C24DEBC
Authority key identifier: C3:73:FA:E9:9D:65:12:98:84:5D:22:F8:9D:8D:2B:2E:1D:13:BC:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/G9NpI4PyKpB54VQyke7WkrhtpTM.roa
Signing time: Mon 14 Aug 2023 14:15:28 +0000
ROA not before: Mon 14 Aug 2023 14:15:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 188.190.26.0/24 maxlen: 24
188.190.25.0/24 maxlen: 24
188.190.30.0/24 maxlen: 24
188.190.29.0/24 maxlen: 24
188.190.28.0/24 maxlen: 24
188.190.27.0/24 maxlen: 24
188.190.31.0/24 maxlen: 24
188.190.2.0/24 maxlen: 24
188.190.1.0/24 maxlen: 24
188.190.0.0/24 maxlen: 24
188.190.4.0/24 maxlen: 24
188.190.3.0/24 maxlen: 24
188.190.9.0/24 maxlen: 24
188.190.8.0/24 maxlen: 24
188.190.7.0/24 maxlen: 24
188.190.11.0/24 maxlen: 24
188.190.10.0/24 maxlen: 24
188.190.6.0/24 maxlen: 24
188.190.5.0/24 maxlen: 24
188.190.13.0/24 maxlen: 24
188.190.12.0/24 maxlen: 24
188.190.16.0/24 maxlen: 24
188.190.15.0/24 maxlen: 24
188.190.14.0/24 maxlen: 24
188.190.17.0/24 maxlen: 24
188.190.23.0/24 maxlen: 24
188.190.22.0/24 maxlen: 24
188.190.21.0/24 maxlen: 24
188.190.24.0/24 maxlen: 24
188.190.20.0/24 maxlen: 24
188.190.19.0/24 maxlen: 24
188.190.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:31:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f4:66:d8:b3:38:a1:fa:de:50:26:12:8e:9c:24:de:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c373fae99d651298845d22f89d8d2b2e1d13bc04
Validity
Not Before: Aug 14 14:15:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bd3692383f22a9079e1543291eed692b86da533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:da:ca:b1:13:6f:ba:1c:ce:53:37:e0:98:4d:
5c:b9:bf:6a:64:b8:5d:c3:7b:d3:be:ee:42:b0:d6:
29:f4:b2:42:d1:ce:82:d3:d8:e6:61:8b:5e:61:ad:
99:95:bd:37:0b:9f:b0:1e:45:c3:70:3e:e8:b1:02:
66:f8:58:b1:00:7f:37:17:83:88:3c:37:71:b9:ef:
b0:19:0f:d6:0d:cc:1a:3b:04:9d:a4:d3:dc:38:4f:
4d:2e:2a:91:7a:8c:20:71:c0:84:b1:27:e3:36:f8:
c6:ed:61:a0:b2:05:d4:3c:46:2a:ba:4e:ff:f0:a4:
5d:b1:c0:29:c2:5e:52:79:db:6f:53:f8:ea:72:22:
ae:7a:6d:4a:61:b2:07:a9:16:16:0d:c1:f6:3b:9a:
27:38:d1:25:49:c5:5e:8d:b9:2e:a0:af:6d:5b:6e:
c0:1e:93:9c:c0:9d:e5:ec:8a:e7:c6:e4:43:51:12:
a9:68:a1:14:ba:e1:26:d5:1b:6c:7e:39:7e:8e:a0:
ff:96:6f:96:77:0c:f9:76:95:1e:e1:fd:bd:53:47:
08:e9:3b:ed:b2:b8:59:bc:70:67:26:bb:09:cc:8c:
49:3b:ac:0d:96:29:00:98:ad:e4:2e:0e:69:81:c6:
74:c6:59:78:12:93:05:f9:2c:82:a7:fa:1f:6e:30:
cd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D3:69:23:83:F2:2A:90:79:E1:54:32:91:EE:D6:92:B8:6D:A5:33
X509v3 Authority Key Identifier:
keyid:C3:73:FA:E9:9D:65:12:98:84:5D:22:F8:9D:8D:2B:2E:1D:13:BC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/G9NpI4PyKpB54VQyke7WkrhtpTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.190.0.0/19
Signature Algorithm: sha256WithRSAEncryption
62:76:08:e7:ec:1d:05:5f:2a:00:96:ee:df:97:3a:7a:e5:ed:
cb:2a:09:51:cb:e0:3d:d3:5a:51:87:10:e1:8c:5b:0a:d4:a8:
37:20:c8:ba:87:7f:4a:94:9c:b4:8e:2f:d8:ea:51:82:05:81:
11:77:f4:47:21:72:69:76:bf:15:95:a4:cb:ff:8b:cf:71:39:
a0:e5:fd:5f:3c:34:39:57:6f:e7:34:43:1d:fe:0e:a2:f9:52:
85:86:fd:82:e0:6b:27:4a:eb:14:28:e4:ca:c8:b5:4f:8f:c2:
2b:6a:c2:39:3c:37:7b:43:c4:dd:ab:7b:64:18:4b:c0:6c:fe:
99:cf:a7:b5:1f:12:02:f4:f1:94:df:31:df:d6:ac:d8:1c:1d:
28:c5:f2:11:1b:12:f4:fb:f8:2b:e8:34:71:9f:25:f7:9d:9b:
6b:f4:30:8b:dc:cb:8e:88:20:0b:29:07:13:c3:54:b3:50:09:
e3:23:c5:73:d5:cd:a2:21:bb:0e:c7:af:0d:5f:ac:c6:f1:16:
17:77:72:f2:7a:97:92:66:fb:a4:2f:76:52:87:e2:5a:23:85:
94:da:d4:98:4a:b6:7e:76:14:2a:8e:05:ee:99:ee:a9:06:a1:
e6:04:10:96:4a:a6:6e:82:9e:a3:22:11:34:cb:28:86:02:fa:
9f:e4:ae:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:21 2024 by rpki-client on console-ams.rpki-client.org