Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/jXTalMB68O6Xe9XIbNshU2cd9AE.roa
File: jXTalMB68O6Xe9XIbNshU2cd9AE.roa (raw, json)
Hash identifier: FFUFcQ8m2Qvd5o3sjqyiaIaKxo/eu63TBAFJNg8oGA4=
Subject key identifier: 8D:74:DA:94:C0:7A:F0:EE:97:7B:D5:C8:6C:DB:21:53:67:1D:F4:01
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 019367828FB89B3C12260169438AE1199002
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/jXTalMB68O6Xe9XIbNshU2cd9AE.roa
Signing time: Tue 26 Nov 2024 08:07:09 +0000
ROA not before: Tue 26 Nov 2024 08:07:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48309
IP address blocks: 31.25.104.0/22 maxlen: 22
31.25.108.0/24 maxlen: 24
31.25.109.0/24 maxlen: 24
31.25.110.0/23 maxlen: 23
37.191.64.0/20 maxlen: 24
37.191.80.0/22 maxlen: 24
37.191.84.0/23 maxlen: 24
37.191.86.0/24 maxlen: 24
37.191.88.0/23 maxlen: 24
37.191.92.0/22 maxlen: 24
188.136.128.0/24 maxlen: 24
188.136.129.0/24 maxlen: 24
188.136.130.0/24 maxlen: 24
188.136.131.0/24 maxlen: 24
188.136.132.0/24 maxlen: 24
188.136.133.0/24 maxlen: 24
188.136.134.0/24 maxlen: 24
188.136.135.0/24 maxlen: 24
188.136.140.0/22 maxlen: 24
188.136.141.0/24 maxlen: 24
188.136.142.0/24 maxlen: 24
188.136.143.0/24 maxlen: 24
188.136.144.0/22 maxlen: 22
188.136.144.0/24 maxlen: 24
188.136.145.0/24 maxlen: 24
188.136.146.0/24 maxlen: 24
188.136.147.0/24 maxlen: 24
188.136.149.0/24 maxlen: 24
188.136.150.0/24 maxlen: 24
188.136.151.0/24 maxlen: 24
188.136.152.0/24 maxlen: 24
188.136.153.0/24 maxlen: 24
188.136.154.0/24 maxlen: 24
188.136.155.0/24 maxlen: 24
188.136.156.0/24 maxlen: 24
188.136.157.0/24 maxlen: 24
188.136.158.0/24 maxlen: 24
188.136.159.0/24 maxlen: 24
188.136.160.0/24 maxlen: 24
188.136.161.0/24 maxlen: 24
188.136.162.0/24 maxlen: 24
188.136.163.0/24 maxlen: 24
188.136.164.0/24 maxlen: 24
188.136.165.0/24 maxlen: 24
188.136.166.0/24 maxlen: 24
188.136.167.0/24 maxlen: 24
188.136.168.0/24 maxlen: 24
188.136.169.0/24 maxlen: 24
188.136.170.0/24 maxlen: 24
188.136.171.0/24 maxlen: 24
188.136.172.0/24 maxlen: 24
188.136.173.0/24 maxlen: 24
188.136.175.0/24 maxlen: 24
188.136.185.0/24 maxlen: 24
188.136.187.0/24 maxlen: 24
188.136.189.0/24 maxlen: 24
188.136.190.0/24 maxlen: 24
188.136.191.0/24 maxlen: 24
188.136.192.0/23 maxlen: 23
188.136.194.0/24 maxlen: 24
188.136.196.0/24 maxlen: 24
188.136.200.0/24 maxlen: 24
188.136.209.0/24 maxlen: 24
188.136.210.0/24 maxlen: 24
188.136.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Nov 2024 08:55:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:82:8f:b8:9b:3c:12:26:01:69:43:8a:e1:19:90:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Nov 26 08:07:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d74da94c07af0ee977bd5c86cdb2153671df401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e6:73:d8:73:da:ed:e5:c6:5c:90:aa:95:8a:
15:1d:c4:c7:23:5c:61:2c:f5:ba:bb:49:7c:01:ca:
de:2d:8b:80:a3:9f:63:65:83:f1:41:14:d7:ce:3e:
a3:a2:7e:f9:bb:8e:7c:21:c0:0c:7f:c4:9e:67:81:
29:95:81:4e:b8:44:05:65:70:52:7d:e4:78:5a:35:
01:b8:87:bb:0d:f0:10:f7:c7:02:74:8f:2f:b7:69:
55:9f:68:a3:c3:e0:9a:66:67:ec:cd:27:40:78:a6:
16:dc:55:30:24:16:72:28:31:27:fa:7c:d4:db:14:
7c:e0:a0:56:20:7a:4d:3a:cb:02:a6:a6:61:0d:76:
c5:7a:da:85:f6:21:a3:57:3d:64:63:7f:57:d0:e2:
5e:0c:77:0e:9a:49:43:83:6b:a8:68:71:91:26:47:
49:1d:9d:50:fb:33:22:47:32:52:d7:d6:70:10:1e:
4a:80:a5:c0:6f:db:8e:15:2d:55:c8:b4:cc:c5:7c:
50:09:7b:a5:4b:4a:20:f8:97:90:1d:ba:59:32:d1:
fb:64:b4:1c:83:c8:04:65:95:ec:41:c7:61:df:56:
03:9b:c4:bc:c8:64:63:50:89:29:2a:62:31:0a:da:
f8:32:5c:ac:0e:df:59:de:22:d1:0f:bc:36:fb:ae:
1b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:74:DA:94:C0:7A:F0:EE:97:7B:D5:C8:6C:DB:21:53:67:1D:F4:01
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/jXTalMB68O6Xe9XIbNshU2cd9AE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.104.0/21
37.191.64.0-37.191.86.255
37.191.88.0/23
37.191.92.0/22
188.136.128.0/21
188.136.140.0-188.136.147.255
188.136.149.0-188.136.173.255
188.136.175.0/24
188.136.185.0/24
188.136.187.0/24
188.136.189.0-188.136.194.255
188.136.196.0/24
188.136.200.0/24
188.136.209.0-188.136.211.255
Signature Algorithm: sha256WithRSAEncryption
28:3c:b9:43:80:c4:d6:67:8d:3e:58:5e:cf:a1:de:ca:f4:ca:
88:50:7e:7f:02:fe:ee:35:7f:3a:dd:ac:69:63:4b:8e:f1:48:
cd:5b:9f:b1:48:b9:99:24:fc:54:ef:54:cb:29:ba:5a:ec:d0:
10:8a:43:d0:78:b5:8b:99:ca:12:32:11:5e:19:35:2b:d9:f5:
de:4a:38:28:2a:76:72:a2:5b:35:a4:f4:cf:ff:70:b5:c2:c0:
9f:93:73:91:a5:10:ea:72:98:8a:06:ea:2e:43:2c:8a:42:d5:
2b:92:75:a5:a6:4b:c9:37:93:d1:4b:6a:7e:b7:a5:08:38:4f:
3f:b4:5b:d0:60:ff:95:11:f2:62:bd:be:29:cf:70:74:35:52:
ce:4f:ba:03:63:45:ce:54:ad:c3:a1:03:0f:ee:29:b1:06:f9:
89:0e:42:57:52:75:e0:99:09:dd:77:41:25:3d:e2:ee:bf:d4:
60:dc:9c:11:45:fa:5e:7e:2f:61:1e:17:9b:03:21:21:2d:38:
da:60:11:d6:5c:4c:4b:3c:4a:be:92:e0:42:ac:a7:dc:21:c8:
ab:24:2d:05:f7:0e:6b:5b:28:dd:bc:f1:2c:6d:06:4f:97:2f:
9a:22:f3:70:fb:91:7f:fd:cb:b1:d3:52:79:e6:d0:1e:11:67:
80:8b:5c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:36:24 2025 by rpki-client