Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/07BYUEONuAmI2vDzxVmluGyrxe8.roa
File: 07BYUEONuAmI2vDzxVmluGyrxe8.roa (raw, json)
Hash identifier: XhqcWFuHQ4Dsorzv4BLh/iNYHHx4T1ehaQJb9b/Vafo=
Subject key identifier: D3:B0:58:50:43:8D:B8:09:88:DA:F0:F3:C5:59:A5:B8:6C:AB:C5:EF
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 0196CFD5FF2B89594B397ED3297B1191123B
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/07BYUEONuAmI2vDzxVmluGyrxe8.roa
Signing time: Wed 14 May 2025 17:27:10 +0000
ROA not before: Wed 14 May 2025 17:27:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48309
IP address blocks: 37.191.64.0/20 maxlen: 24
37.191.92.0/22 maxlen: 24
188.136.128.0/24 maxlen: 24
188.136.129.0/24 maxlen: 24
188.136.130.0/24 maxlen: 24
188.136.131.0/24 maxlen: 24
188.136.132.0/24 maxlen: 24
188.136.133.0/24 maxlen: 24
188.136.134.0/24 maxlen: 24
188.136.135.0/24 maxlen: 24
188.136.140.0/22 maxlen: 24
188.136.141.0/24 maxlen: 24
188.136.142.0/24 maxlen: 24
188.136.143.0/24 maxlen: 24
188.136.144.0/22 maxlen: 22
188.136.144.0/24 maxlen: 24
188.136.145.0/24 maxlen: 24
188.136.146.0/24 maxlen: 24
188.136.147.0/24 maxlen: 24
188.136.149.0/24 maxlen: 24
188.136.150.0/24 maxlen: 24
188.136.151.0/24 maxlen: 24
188.136.152.0/24 maxlen: 24
188.136.153.0/24 maxlen: 24
188.136.154.0/24 maxlen: 24
188.136.155.0/24 maxlen: 24
188.136.156.0/24 maxlen: 24
188.136.157.0/24 maxlen: 24
188.136.159.0/24 maxlen: 24
188.136.160.0/24 maxlen: 24
188.136.161.0/24 maxlen: 24
188.136.162.0/24 maxlen: 24
188.136.163.0/24 maxlen: 24
188.136.164.0/24 maxlen: 24
188.136.165.0/24 maxlen: 24
188.136.166.0/24 maxlen: 24
188.136.167.0/24 maxlen: 24
188.136.168.0/24 maxlen: 24
188.136.169.0/24 maxlen: 24
188.136.170.0/24 maxlen: 24
188.136.171.0/24 maxlen: 24
188.136.172.0/24 maxlen: 24
188.136.173.0/24 maxlen: 24
188.136.187.0/24 maxlen: 24
188.136.189.0/24 maxlen: 24
188.136.190.0/24 maxlen: 24
188.136.191.0/24 maxlen: 24
188.136.196.0/24 maxlen: 24
188.136.210.0/24 maxlen: 24
188.136.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 May 2025 09:13:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:d5:ff:2b:89:59:4b:39:7e:d3:29:7b:11:91:12:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: May 14 17:27:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3b05850438db80988daf0f3c559a5b86cabc5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:57:56:84:86:f9:dc:f7:9f:52:2f:41:2a:ec:
c8:97:1e:63:5e:c3:fc:f5:38:25:ad:7c:78:79:c9:
d7:69:bc:fd:e5:10:8a:a4:52:88:d1:e7:0e:e8:76:
ae:2b:f8:b4:c0:d1:97:4f:31:34:e7:47:2d:be:27:
d8:06:d8:49:55:ae:b9:18:cf:78:39:6c:a3:17:af:
20:09:cb:3a:a3:ca:9c:53:7f:1b:fd:d5:a5:8a:b0:
80:2e:7f:df:4f:d4:f7:a8:e4:c6:3c:c9:2b:48:d3:
1d:32:b1:43:df:e1:1c:ff:85:09:0b:bb:40:ed:f4:
15:e2:3b:45:af:33:54:df:3d:db:dc:ad:62:cc:55:
44:73:08:12:bd:44:b9:4e:18:2b:b8:5b:61:b6:f7:
20:6e:c9:60:bf:79:9c:06:6a:43:15:a2:3e:d3:d0:
13:ac:08:da:93:26:a5:ae:08:ec:e8:0a:74:59:d4:
dd:85:6b:14:09:af:9d:d1:07:62:10:53:5a:69:dd:
e2:7d:78:08:8e:32:eb:88:fd:bb:cb:47:ec:3a:a3:
a3:ad:80:a3:e6:c4:2a:62:d5:54:10:55:76:7f:55:
05:f1:8b:23:87:2a:da:f2:8d:72:5a:20:9d:2f:3b:
4f:12:ce:c8:b0:57:23:a7:b6:81:1b:e5:e5:99:35:
79:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B0:58:50:43:8D:B8:09:88:DA:F0:F3:C5:59:A5:B8:6C:AB:C5:EF
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/07BYUEONuAmI2vDzxVmluGyrxe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.191.64.0/20
37.191.92.0/22
188.136.128.0/21
188.136.140.0-188.136.147.255
188.136.149.0-188.136.157.255
188.136.159.0-188.136.173.255
188.136.187.0/24
188.136.189.0-188.136.191.255
188.136.196.0/24
188.136.210.0/23
Signature Algorithm: sha256WithRSAEncryption
75:34:5b:83:5d:cd:c4:87:3f:ae:b0:34:2b:64:f9:ff:9b:92:
fc:5c:ce:a3:eb:a1:5c:e1:23:01:e5:e2:8e:32:f3:55:b6:91:
53:59:cb:4e:aa:00:38:77:57:79:88:fe:b4:c1:cc:7e:e6:a4:
d0:d8:de:70:8f:57:f3:9d:48:35:b7:33:25:97:88:50:6f:02:
12:f0:5d:dd:c1:63:e0:76:fd:b6:f1:aa:20:78:5c:46:a8:fd:
9f:40:cb:8a:2b:0c:78:2e:d1:be:d5:1c:ef:01:19:8a:4b:0e:
a0:85:ac:bc:af:b4:fe:01:4b:c3:49:1b:9a:9a:6c:ca:11:e1:
2c:18:70:95:4a:9a:32:d1:5b:4f:c8:6d:2a:36:19:fc:9c:a2:
c8:6f:96:2e:25:06:f1:3f:2f:fa:2c:6d:c5:52:84:38:8c:b7:
64:1a:39:21:4d:e1:4f:e1:3c:fe:9b:5f:35:88:5c:cb:c4:f2:
e5:36:64:07:58:19:48:8e:50:f4:03:93:fb:4d:35:47:0f:cd:
8f:19:fa:f1:43:90:1f:07:85:04:df:00:cc:06:72:71:f1:7e:
92:c5:03:9b:40:4b:02:fc:f2:a7:22:0d:85:0e:f2:50:26:7f:
eb:5e:f5:f1:ea:c3:b0:98:15:1a:6a:05:af:b0:91:b8:a1:b9:
18:19:8f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:52:39 2025 by rpki-client