Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/jZvjMaXM5c1Ct_EwR8dqTmT8hS4.roa
File: jZvjMaXM5c1Ct_EwR8dqTmT8hS4.roa (raw, json)
Hash identifier: /tycXsBvbHSRtlPrbVWAKCxgoz2CnyFceKZ8jk5XIT4=
Subject key identifier: 8D:9B:E3:31:A5:CC:E5:CD:42:B7:F1:30:47:C7:6A:4E:64:FC:85:2E
Certificate issuer: /CN=c373fae99d651298845d22f89d8d2b2e1d13bc04
Certificate serial: 0189F3CFF49631241EA1838179EE8CE64229
Authority key identifier: C3:73:FA:E9:9D:65:12:98:84:5D:22:F8:9D:8D:2B:2E:1D:13:BC:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/jZvjMaXM5c1Ct_EwR8dqTmT8hS4.roa
Signing time: Mon 14 Aug 2023 11:30:39 +0000
ROA not before: Mon 14 Aug 2023 11:30:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 188.190.26.0/24 maxlen: 24
188.190.25.0/24 maxlen: 24
188.190.30.0/24 maxlen: 24
188.190.29.0/24 maxlen: 24
188.190.28.0/24 maxlen: 24
188.190.27.0/24 maxlen: 24
188.190.31.0/24 maxlen: 24
188.190.2.0/24 maxlen: 24
188.190.1.0/24 maxlen: 24
188.190.0.0/24 maxlen: 24
188.190.4.0/24 maxlen: 24
188.190.3.0/24 maxlen: 24
188.190.9.0/24 maxlen: 24
188.190.8.0/24 maxlen: 24
188.190.7.0/24 maxlen: 24
188.190.10.0/24 maxlen: 24
188.190.6.0/24 maxlen: 24
188.190.5.0/24 maxlen: 24
188.190.13.0/24 maxlen: 24
188.190.12.0/24 maxlen: 24
188.190.16.0/24 maxlen: 24
188.190.15.0/24 maxlen: 24
188.190.14.0/24 maxlen: 24
188.190.17.0/24 maxlen: 24
188.190.23.0/24 maxlen: 24
188.190.22.0/24 maxlen: 24
188.190.21.0/24 maxlen: 24
188.190.24.0/24 maxlen: 24
188.190.20.0/24 maxlen: 24
188.190.19.0/24 maxlen: 24
188.190.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Aug 2023 14:15:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f3:cf:f4:96:31:24:1e:a1:83:81:79:ee:8c:e6:42:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c373fae99d651298845d22f89d8d2b2e1d13bc04
Validity
Not Before: Aug 14 11:30:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d9be331a5cce5cd42b7f13047c76a4e64fc852e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:61:b2:f6:1e:1c:fe:4e:7b:80:53:ee:1c:a3:
80:ad:5f:9c:bd:91:43:ab:b3:c4:92:57:b9:0d:de:
48:a7:68:91:1a:c7:e1:23:05:7e:b3:72:d3:45:83:
ab:1d:a3:50:45:a6:d8:a8:97:7e:18:42:79:55:fb:
f5:7a:a8:b7:82:63:c4:8c:21:6f:af:22:43:3e:8c:
12:92:de:51:76:5b:29:32:b0:18:d5:94:87:78:40:
88:06:b4:c7:26:21:22:57:d1:34:86:66:ef:38:7d:
86:21:27:66:bb:aa:a0:fe:72:f9:1d:87:40:60:82:
7e:e2:2f:a1:08:16:96:c2:c3:c4:ce:6d:54:3a:de:
86:fe:75:ab:51:b7:71:98:3d:09:85:00:48:24:71:
3a:42:f1:02:43:84:2e:3d:43:5c:f6:a8:04:7f:ca:
b1:73:61:b9:c7:52:49:4c:5f:3a:f1:59:c5:b8:6b:
92:1d:00:f4:eb:44:91:58:c7:cb:24:7f:ba:d2:74:
44:bf:0e:ea:d0:e9:28:d0:ee:29:a5:e5:a1:fc:25:
02:b7:26:77:98:4a:12:89:7f:62:e0:a4:36:f5:b0:
c2:8f:17:86:e7:7a:06:0b:5d:44:90:9d:51:9b:08:
56:3b:58:39:9d:f3:22:d1:58:60:14:ee:61:fc:bc:
14:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9B:E3:31:A5:CC:E5:CD:42:B7:F1:30:47:C7:6A:4E:64:FC:85:2E
X509v3 Authority Key Identifier:
keyid:C3:73:FA:E9:9D:65:12:98:84:5D:22:F8:9D:8D:2B:2E:1D:13:BC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/jZvjMaXM5c1Ct_EwR8dqTmT8hS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.190.0.0-188.190.10.255
188.190.12.0-188.190.31.255
Signature Algorithm: sha256WithRSAEncryption
14:c7:45:24:94:35:8a:49:5f:fd:df:97:b2:25:ca:a0:7d:85:
ad:be:c7:e3:fd:4f:c3:35:5d:76:25:88:54:64:ae:ad:8d:89:
d6:bb:77:b7:07:3f:93:1e:ec:77:65:e3:10:7f:ad:e2:e4:a1:
74:70:2e:78:c5:ce:b1:b5:a8:89:1a:08:74:3e:f9:3e:cb:b8:
21:f0:24:43:84:8a:81:0e:c0:b7:5d:04:b7:27:18:5d:3c:ea:
62:38:87:1c:5e:0e:58:91:e1:68:68:56:cc:71:2c:0a:9f:1b:
58:0c:6a:1b:d3:af:54:67:e4:b9:3c:c1:a9:25:97:43:38:a4:
e7:58:b4:82:62:5b:79:b6:a8:fc:8f:8c:e8:3f:74:2a:13:d5:
ff:55:e8:8b:06:0d:60:6a:84:ac:35:90:8b:fe:9f:1b:62:0a:
28:e1:7c:59:6b:2b:ab:b5:99:73:d7:9c:f8:b5:14:76:c4:d8:
51:35:d6:51:d9:b7:f8:c6:9c:d1:43:c9:f3:87:0f:2a:95:53:
e3:76:f1:56:e2:04:e5:87:00:a6:32:4b:56:3c:ea:3e:04:2e:
ae:81:30:a8:f7:bd:bb:74:25:45:8a:58:c2:21:9c:63:5a:6d:
27:32:25:86:13:7c:c4:8c:28:79:22:95:a1:32:e0:ea:ca:6c:
94:4c:d3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:00 2024 by rpki-client on console-fra.rpki-client.org