Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/XsyWPk2RbIbiszzRtFGx_OaQgVc.roa
File: XsyWPk2RbIbiszzRtFGx_OaQgVc.roa (raw, json)
Hash identifier: 0CxlJzYjrFMtmB6HgFDBK+k30p62kqmfuofJ08cHlOs=
Subject key identifier: 5E:CC:96:3E:4D:91:6C:86:E2:B3:3C:D1:B4:51:B1:FC:E6:90:81:57
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 0193D8C0EE188EB5D9C69B4A06536D810B34
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/XsyWPk2RbIbiszzRtFGx_OaQgVc.roa
Signing time: Wed 18 Dec 2024 07:52:22 +0000
ROA not before: Wed 18 Dec 2024 07:52:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48309
IP address blocks: 31.25.104.0/22 maxlen: 22
31.25.108.0/24 maxlen: 24
31.25.109.0/24 maxlen: 24
31.25.110.0/23 maxlen: 23
37.191.64.0/20 maxlen: 24
37.191.80.0/22 maxlen: 24
37.191.84.0/23 maxlen: 24
37.191.86.0/24 maxlen: 24
37.191.88.0/22 maxlen: 22
37.191.88.0/23 maxlen: 24
37.191.92.0/22 maxlen: 24
188.136.128.0/24 maxlen: 24
188.136.129.0/24 maxlen: 24
188.136.130.0/24 maxlen: 24
188.136.131.0/24 maxlen: 24
188.136.132.0/24 maxlen: 24
188.136.133.0/24 maxlen: 24
188.136.134.0/24 maxlen: 24
188.136.135.0/24 maxlen: 24
188.136.140.0/22 maxlen: 24
188.136.141.0/24 maxlen: 24
188.136.142.0/24 maxlen: 24
188.136.143.0/24 maxlen: 24
188.136.144.0/22 maxlen: 22
188.136.144.0/24 maxlen: 24
188.136.145.0/24 maxlen: 24
188.136.146.0/24 maxlen: 24
188.136.147.0/24 maxlen: 24
188.136.149.0/24 maxlen: 24
188.136.150.0/24 maxlen: 24
188.136.151.0/24 maxlen: 24
188.136.152.0/24 maxlen: 24
188.136.153.0/24 maxlen: 24
188.136.154.0/24 maxlen: 24
188.136.155.0/24 maxlen: 24
188.136.156.0/24 maxlen: 24
188.136.157.0/24 maxlen: 24
188.136.159.0/24 maxlen: 24
188.136.160.0/24 maxlen: 24
188.136.161.0/24 maxlen: 24
188.136.162.0/24 maxlen: 24
188.136.163.0/24 maxlen: 24
188.136.164.0/24 maxlen: 24
188.136.165.0/24 maxlen: 24
188.136.166.0/24 maxlen: 24
188.136.167.0/24 maxlen: 24
188.136.168.0/24 maxlen: 24
188.136.169.0/24 maxlen: 24
188.136.170.0/24 maxlen: 24
188.136.171.0/24 maxlen: 24
188.136.172.0/24 maxlen: 24
188.136.173.0/24 maxlen: 24
188.136.175.0/24 maxlen: 24
188.136.185.0/24 maxlen: 24
188.136.187.0/24 maxlen: 24
188.136.189.0/24 maxlen: 24
188.136.190.0/24 maxlen: 24
188.136.191.0/24 maxlen: 24
188.136.196.0/24 maxlen: 24
188.136.200.0/24 maxlen: 24
188.136.209.0/24 maxlen: 24
188.136.210.0/24 maxlen: 24
188.136.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d8:c0:ee:18:8e:b5:d9:c6:9b:4a:06:53:6d:81:0b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Dec 18 07:52:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ecc963e4d916c86e2b33cd1b451b1fce6908157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:05:14:2b:33:ad:16:38:33:e8:fb:c4:b0:dc:
1a:10:ad:00:19:51:f3:55:f0:97:d3:a9:e2:48:6d:
43:a9:a4:60:84:b2:4b:99:48:5f:33:6d:ef:e2:45:
5e:34:ac:b5:d5:cf:87:42:d9:c5:65:9e:28:8e:39:
ea:4c:a0:df:bd:cf:99:2b:ca:fa:fd:23:11:80:65:
41:e8:07:fb:f2:d2:d6:72:91:7d:3c:3a:0b:19:5a:
af:53:ac:85:2b:40:27:f3:01:de:69:39:f3:00:c4:
ee:71:44:51:92:fb:78:25:e4:ff:1c:b3:90:19:72:
f5:cc:87:0e:98:6c:6a:7c:dc:8a:d9:a6:bf:8f:96:
4b:85:2f:c6:26:3e:77:b1:6b:bc:a8:a7:cc:a1:2d:
7a:e5:45:58:ab:b4:e6:97:b1:73:d1:20:0a:63:ee:
09:92:66:e1:4f:37:7c:8b:f4:7a:49:68:a1:ba:75:
60:bb:b0:50:c7:e9:7e:a0:9b:9f:68:f8:1b:b5:ce:
43:eb:f4:dc:0a:2e:78:4c:d2:a4:82:18:97:04:98:
c6:8a:98:2c:35:82:42:b9:30:71:da:55:96:6c:24:
3f:03:0a:e2:c1:50:7b:5d:3f:1c:45:cd:61:35:44:
94:df:74:fe:ca:6f:45:de:2e:30:f0:35:10:bb:e4:
46:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CC:96:3E:4D:91:6C:86:E2:B3:3C:D1:B4:51:B1:FC:E6:90:81:57
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/XsyWPk2RbIbiszzRtFGx_OaQgVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.104.0/21
37.191.64.0-37.191.86.255
37.191.88.0/21
188.136.128.0/21
188.136.140.0-188.136.147.255
188.136.149.0-188.136.157.255
188.136.159.0-188.136.173.255
188.136.175.0/24
188.136.185.0/24
188.136.187.0/24
188.136.189.0-188.136.191.255
188.136.196.0/24
188.136.200.0/24
188.136.209.0-188.136.211.255
Signature Algorithm: sha256WithRSAEncryption
54:cf:62:65:e6:51:32:b9:56:58:a5:49:2f:f2:05:7d:53:f8:
b9:dd:8b:6a:55:05:02:a2:84:20:8a:f4:20:68:9b:92:03:3c:
51:04:b9:8b:fe:c3:f3:04:b6:d4:b0:fe:b3:34:88:ee:4b:dd:
eb:b6:99:fc:06:bc:43:ab:1d:d9:45:a5:72:87:43:8c:88:34:
a1:11:e8:cd:7d:01:f7:a5:b7:3b:a5:bc:03:d2:31:46:74:1b:
51:ad:cd:2d:dd:7a:e5:ff:55:8f:3b:c7:8c:cb:8d:a3:ae:9b:
d3:92:9b:4f:18:f9:fc:31:81:e5:d0:30:78:2b:da:2f:2f:1a:
04:0c:f7:03:fd:9c:3e:ac:be:1e:71:f7:48:07:fe:d7:79:6a:
23:20:eb:f2:80:5d:ce:6c:95:8a:04:a1:a8:21:08:80:f5:d2:
41:de:41:8a:48:86:f8:45:66:c9:2a:af:d7:c6:af:45:a3:e9:
d9:ca:e0:eb:f6:8e:56:52:ed:f7:cb:c9:c4:f7:dd:d0:63:05:
72:10:c4:42:47:55:15:2b:05:9c:b4:ce:aa:89:5c:d9:9f:db:
56:22:f8:8a:78:7a:0e:80:56:ae:e2:f8:49:25:c0:1f:b0:8a:
b8:fd:0e:cd:46:78:09:5e:9e:73:bd:75:7f:ed:0b:36:c7:c0:
4b:f8:b4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:36:25 2025 by rpki-client