Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/rMnBEm0iE-iKq99CsLJWs8cLs5U.roa
File: rMnBEm0iE-iKq99CsLJWs8cLs5U.roa (raw, json)
Hash identifier: /Ly3o+mNmqUnqSDxsQWklcdRDgMUeEYyqCuwatGkm5o=
Subject key identifier: AC:C9:C1:12:6D:22:13:E8:8A:AB:DF:42:B0:B2:56:B3:C7:0B:B3:95
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 0193D8A3A14622E341CAE237CC6F0ECD9547
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/rMnBEm0iE-iKq99CsLJWs8cLs5U.roa
Signing time: Wed 18 Dec 2024 07:20:22 +0000
ROA not before: Wed 18 Dec 2024 07:20:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48309
IP address blocks: 31.25.104.0/22 maxlen: 22
31.25.108.0/24 maxlen: 24
31.25.109.0/24 maxlen: 24
31.25.110.0/23 maxlen: 23
37.191.64.0/20 maxlen: 24
37.191.80.0/22 maxlen: 24
37.191.84.0/23 maxlen: 24
37.191.86.0/24 maxlen: 24
37.191.88.0/22 maxlen: 22
37.191.88.0/23 maxlen: 24
37.191.92.0/22 maxlen: 24
188.136.128.0/24 maxlen: 24
188.136.129.0/24 maxlen: 24
188.136.130.0/24 maxlen: 24
188.136.131.0/24 maxlen: 24
188.136.132.0/24 maxlen: 24
188.136.133.0/24 maxlen: 24
188.136.134.0/24 maxlen: 24
188.136.135.0/24 maxlen: 24
188.136.140.0/22 maxlen: 24
188.136.141.0/24 maxlen: 24
188.136.142.0/24 maxlen: 24
188.136.143.0/24 maxlen: 24
188.136.144.0/22 maxlen: 22
188.136.144.0/24 maxlen: 24
188.136.145.0/24 maxlen: 24
188.136.146.0/24 maxlen: 24
188.136.147.0/24 maxlen: 24
188.136.149.0/24 maxlen: 24
188.136.150.0/24 maxlen: 24
188.136.151.0/24 maxlen: 24
188.136.152.0/24 maxlen: 24
188.136.153.0/24 maxlen: 24
188.136.154.0/24 maxlen: 24
188.136.155.0/24 maxlen: 24
188.136.156.0/24 maxlen: 24
188.136.157.0/24 maxlen: 24
188.136.159.0/24 maxlen: 24
188.136.160.0/24 maxlen: 24
188.136.161.0/24 maxlen: 24
188.136.162.0/24 maxlen: 24
188.136.163.0/24 maxlen: 24
188.136.164.0/24 maxlen: 24
188.136.165.0/24 maxlen: 24
188.136.166.0/24 maxlen: 24
188.136.167.0/24 maxlen: 24
188.136.168.0/24 maxlen: 24
188.136.169.0/24 maxlen: 24
188.136.170.0/24 maxlen: 24
188.136.171.0/24 maxlen: 24
188.136.172.0/24 maxlen: 24
188.136.173.0/24 maxlen: 24
188.136.175.0/24 maxlen: 24
188.136.185.0/24 maxlen: 24
188.136.187.0/24 maxlen: 24
188.136.189.0/24 maxlen: 24
188.136.190.0/24 maxlen: 24
188.136.191.0/24 maxlen: 24
188.136.192.0/23 maxlen: 23
188.136.194.0/24 maxlen: 24
188.136.196.0/24 maxlen: 24
188.136.200.0/24 maxlen: 24
188.136.209.0/24 maxlen: 24
188.136.210.0/24 maxlen: 24
188.136.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Dec 2024 07:52:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d8:a3:a1:46:22:e3:41:ca:e2:37:cc:6f:0e:cd:95:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Dec 18 07:20:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=acc9c1126d2213e88aabdf42b0b256b3c70bb395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1c:99:fc:77:87:6f:33:07:21:8f:70:85:9f:
b0:8e:70:2c:00:c5:d7:81:87:7f:79:56:a5:72:00:
f0:55:d3:7c:68:36:bf:49:45:c5:2a:88:bc:7e:56:
8f:c7:0e:3a:b0:5c:67:35:1b:54:70:01:62:45:58:
26:2d:bb:d9:e7:ba:ab:b6:39:ac:16:2f:9f:cf:6c:
05:18:a9:fe:21:c9:ff:d6:f5:57:94:01:52:3b:ff:
1d:8a:28:2d:46:12:bc:e6:88:3b:1f:46:78:6c:dc:
5c:63:c7:fc:91:bc:64:04:c3:d3:db:5f:fd:c1:f0:
89:60:c7:96:4d:bb:f5:8e:a3:8f:39:35:fd:cf:1d:
62:32:57:c2:8e:03:70:fc:f2:6b:f7:72:83:2b:2c:
f1:de:6a:c2:dd:2a:a8:e0:52:e2:dc:70:49:2e:65:
a1:d9:09:34:94:80:27:4c:00:3c:25:3a:3b:2f:55:
fa:22:42:ab:9b:42:73:a9:74:93:8b:0e:b1:26:3b:
39:0e:c9:bf:c2:fe:07:d6:fb:05:02:e1:da:0f:7e:
6f:c9:94:d6:c3:57:f2:ef:39:3a:0a:c9:5e:6f:9a:
9f:59:b3:ae:ce:ab:0c:49:1e:ef:f9:67:1e:d7:21:
d2:17:d7:a2:ae:84:52:40:2b:f6:8b:c0:24:f2:3b:
51:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C9:C1:12:6D:22:13:E8:8A:AB:DF:42:B0:B2:56:B3:C7:0B:B3:95
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/rMnBEm0iE-iKq99CsLJWs8cLs5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.104.0/21
37.191.64.0-37.191.86.255
37.191.88.0/21
188.136.128.0/21
188.136.140.0-188.136.147.255
188.136.149.0-188.136.157.255
188.136.159.0-188.136.173.255
188.136.175.0/24
188.136.185.0/24
188.136.187.0/24
188.136.189.0-188.136.194.255
188.136.196.0/24
188.136.200.0/24
188.136.209.0-188.136.211.255
Signature Algorithm: sha256WithRSAEncryption
a8:5a:12:6e:5b:b3:ac:c3:f1:54:e0:0b:66:b6:1d:14:74:cc:
7a:b8:de:dd:59:a1:b1:10:1a:c7:f9:4b:84:67:ca:a2:86:f5:
bd:94:ed:fe:08:94:a8:ea:d3:66:4d:1e:f5:92:6c:54:53:f3:
01:21:02:76:a6:d8:4d:52:64:5e:fa:09:3c:04:5a:6f:86:ba:
6c:8d:3d:b1:32:2c:07:8c:16:63:60:e1:c0:25:83:51:33:6f:
a7:fe:61:51:a6:02:fa:de:b3:d2:e0:eb:61:34:fb:c0:5e:19:
de:4e:be:69:15:ec:32:43:d8:7f:52:16:a1:6f:44:93:dc:2f:
d8:68:7b:8f:df:0b:88:64:a4:50:13:c7:f0:21:18:11:07:64:
e7:9c:99:0e:09:80:33:6a:0b:82:5a:bb:f4:e1:f3:77:87:5c:
3f:62:e3:85:75:2b:9c:d8:84:70:4b:06:4e:85:3a:ca:e7:91:
2f:77:c5:cc:04:aa:e8:de:36:5e:70:3c:e7:ad:66:a9:56:5d:
40:a6:59:0a:d3:b5:5a:83:28:7c:da:30:c1:23:ab:2d:e0:d2:
81:e2:85:a5:92:09:bc:a9:fe:cf:5b:e9:d2:2c:6e:c2:dd:1e:
68:6f:ab:15:eb:c5:a2:a1:7c:ba:59:66:d1:9d:02:3e:f5:f9:
0d:b9:50:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:30:02 2025 by rpki-client