Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/3FkypFDmvzd1oC9FapUGjkYveBY.roa
File: 3FkypFDmvzd1oC9FapUGjkYveBY.roa (raw, json)
Hash identifier: VMJW9HpwMrB6YcSUxDUWcPw/oc0jYGGPY3rkAutkh1M=
Subject key identifier: DC:59:32:A4:50:E6:BF:37:75:A0:2F:45:6A:95:06:8E:46:2F:78:16
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 0193CF67E52C74F373F6DFC92566C46BA857
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/3FkypFDmvzd1oC9FapUGjkYveBY.roa
Signing time: Mon 16 Dec 2024 12:18:32 +0000
ROA not before: Mon 16 Dec 2024 12:18:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51559
IP address blocks: 31.192.208.0/24 maxlen: 24
31.192.209.0/24 maxlen: 24
31.192.210.0/24 maxlen: 24
31.192.213.0/24 maxlen: 24
31.192.215.0/24 maxlen: 24
89.43.28.0/24 maxlen: 24
89.43.29.0/24 maxlen: 24
89.43.30.0/24 maxlen: 24
89.43.31.0/24 maxlen: 24
89.43.64.0/24 maxlen: 24
89.43.65.0/24 maxlen: 24
89.43.66.0/24 maxlen: 24
89.43.67.0/24 maxlen: 24
89.252.128.0/24 maxlen: 24
89.252.129.0/24 maxlen: 24
89.252.130.0/24 maxlen: 24
89.252.131.0/24 maxlen: 24
89.252.134.0/24 maxlen: 24
89.252.135.0/24 maxlen: 24
89.252.136.0/24 maxlen: 24
89.252.137.0/24 maxlen: 24
89.252.139.0/24 maxlen: 24
89.252.140.0/24 maxlen: 24
89.252.143.0/24 maxlen: 24
89.252.144.0/24 maxlen: 24
89.252.145.0/24 maxlen: 24
89.252.146.0/24 maxlen: 24
89.252.147.0/24 maxlen: 24
89.252.148.0/24 maxlen: 24
89.252.149.0/24 maxlen: 24
89.252.150.0/24 maxlen: 24
89.252.155.0/24 maxlen: 24
89.252.156.0/24 maxlen: 24
89.252.158.0/24 maxlen: 24
89.252.160.0/24 maxlen: 24
89.252.161.0/24 maxlen: 24
89.252.162.0/24 maxlen: 24
89.252.163.0/24 maxlen: 24
89.252.164.0/24 maxlen: 24
89.252.165.0/24 maxlen: 24
89.252.166.0/24 maxlen: 24
89.252.167.0/24 maxlen: 24
89.252.168.0/24 maxlen: 24
89.252.169.0/24 maxlen: 24
89.252.170.0/24 maxlen: 24
89.252.171.0/24 maxlen: 24
89.252.172.0/24 maxlen: 24
89.252.173.0/24 maxlen: 24
89.252.173.119/32 maxlen: 32
89.252.174.0/24 maxlen: 24
89.252.175.0/24 maxlen: 24
89.252.176.0/24 maxlen: 24
89.252.177.0/24 maxlen: 24
93.113.60.0/24 maxlen: 24
93.113.61.0/24 maxlen: 24
93.113.62.0/24 maxlen: 24
93.113.63.0/24 maxlen: 24
93.115.76.0/24 maxlen: 24
93.115.78.0/24 maxlen: 24
93.115.79.0/24 maxlen: 24
94.102.0.0/24 maxlen: 24
94.102.1.0/24 maxlen: 24
94.102.2.0/24 maxlen: 24
94.102.3.0/24 maxlen: 24
94.102.4.0/24 maxlen: 24
94.102.5.0/24 maxlen: 24
94.102.6.0/24 maxlen: 24
94.102.7.0/24 maxlen: 24
94.102.8.0/24 maxlen: 24
94.102.9.0/24 maxlen: 24
94.102.10.0/24 maxlen: 24
94.102.11.0/24 maxlen: 24
94.102.13.0/24 maxlen: 24
94.102.14.0/24 maxlen: 24
94.102.15.0/24 maxlen: 24
95.173.160.0/24 maxlen: 24
95.173.161.0/24 maxlen: 24
95.173.162.0/24 maxlen: 24
95.173.163.0/24 maxlen: 24
95.173.164.0/24 maxlen: 24
95.173.165.0/24 maxlen: 24
95.173.166.0/24 maxlen: 24
95.173.167.0/24 maxlen: 24
95.173.168.0/24 maxlen: 24
95.173.169.0/24 maxlen: 24
95.173.170.0/24 maxlen: 24
95.173.171.0/24 maxlen: 24
95.173.172.0/24 maxlen: 24
95.173.177.0/24 maxlen: 24
95.173.178.0/24 maxlen: 24
95.173.179.0/24 maxlen: 24
95.173.180.0/24 maxlen: 24
95.173.181.0/24 maxlen: 24
95.173.184.0/24 maxlen: 24
95.173.185.0/24 maxlen: 24
95.173.186.0/24 maxlen: 24
95.173.187.0/24 maxlen: 24
95.173.188.0/24 maxlen: 24
95.173.189.0/24 maxlen: 24
95.173.190.0/24 maxlen: 24
95.173.191.0/24 maxlen: 24
159.253.32.0/24 maxlen: 24
159.253.33.0/24 maxlen: 24
159.253.34.0/24 maxlen: 24
159.253.35.0/24 maxlen: 24
159.253.36.0/24 maxlen: 24
159.253.38.0/24 maxlen: 24
159.253.39.0/24 maxlen: 24
159.253.40.0/24 maxlen: 24
159.253.41.0/24 maxlen: 24
159.253.42.0/24 maxlen: 24
159.253.43.0/24 maxlen: 24
159.253.44.0/24 maxlen: 24
159.253.45.0/24 maxlen: 24
159.253.46.0/24 maxlen: 24
159.253.47.0/24 maxlen: 24
185.95.84.0/24 maxlen: 24
185.95.85.0/24 maxlen: 24
185.95.86.0/24 maxlen: 24
185.95.87.0/24 maxlen: 24
2a02:f80::/32 maxlen: 32
2a03:2100::/32 maxlen: 48
2a03:2100:1::/48 maxlen: 48
2a03:2100:2::/48 maxlen: 48
2a03:2100:3::/48 maxlen: 48
2a03:2100:4::/48 maxlen: 48
2a03:2100:5::/48 maxlen: 48
2a03:2100:6::/48 maxlen: 48
2a03:2100:7::/48 maxlen: 48
2a03:2100:8::/48 maxlen: 48
2a03:2100:9::/48 maxlen: 48
2a03:2100:a::/48 maxlen: 48
2a03:2100:b::/48 maxlen: 48
2a03:2100:c::/48 maxlen: 48
2a03:2100:d::/48 maxlen: 48
2a03:2100:e::/48 maxlen: 48
2a03:2100:f::/48 maxlen: 48
2a03:2100:10::/48 maxlen: 48
2a03:2100:11::/48 maxlen: 48
2a03:2100:12::/48 maxlen: 48
2a03:2100:13::/48 maxlen: 48
2a03:2100:14::/48 maxlen: 48
2a03:2100:15::/48 maxlen: 48
2a03:2100:16::/48 maxlen: 48
2a03:2100:17::/48 maxlen: 48
2a03:2100:18::/48 maxlen: 48
2a03:2100:19::/48 maxlen: 48
2a03:2100:1b::/48 maxlen: 48
2a03:2100:1c::/48 maxlen: 48
2a03:2100:1d::/48 maxlen: 48
2a03:2100:1e::/48 maxlen: 48
2a03:2100:1f::/48 maxlen: 48
2a03:2100:20::/48 maxlen: 48
2a03:2100:21::/48 maxlen: 48
2a03:2100:22::/48 maxlen: 48
2a03:2100:23::/48 maxlen: 48
2a03:2100:24::/48 maxlen: 48
2a03:2100:25::/48 maxlen: 48
2a03:2100:26::/48 maxlen: 48
2a03:2100:27::/48 maxlen: 48
2a03:2100:28::/48 maxlen: 48
2a03:2100:29::/48 maxlen: 48
2a03:2100:2a::/48 maxlen: 48
2a03:2100:2b::/48 maxlen: 48
2a03:2100:2c::/48 maxlen: 48
2a03:2100:2d::/48 maxlen: 48
2a03:2100:2e::/48 maxlen: 48
2a03:2100:2f::/48 maxlen: 48
2a03:2100:32::/48 maxlen: 48
2a03:2100:33::/48 maxlen: 48
2a03:2100:34::/48 maxlen: 48
2a03:2100:35::/48 maxlen: 48
2a03:2100:36::/48 maxlen: 48
2a03:2100:37::/48 maxlen: 48
2a03:2100:38::/48 maxlen: 48
2a03:2100:39::/48 maxlen: 48
2a03:2100:3a::/48 maxlen: 48
2a03:2100:3b::/48 maxlen: 48
2a03:2100:3c::/48 maxlen: 48
2a03:2100:3d::/48 maxlen: 48
2a03:2100:3e::/48 maxlen: 48
2a03:2100:3f::/48 maxlen: 48
2a03:2100:40::/48 maxlen: 48
2a03:2100:44::/48 maxlen: 48
2a03:2102:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cf:67:e5:2c:74:f3:73:f6:df:c9:25:66:c4:6b:a8:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Dec 16 12:18:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc5932a450e6bf3775a02f456a95068e462f7816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d0:95:ee:29:70:d8:0e:1c:01:c5:70:1b:5e:
82:ca:57:c6:0f:99:87:0e:80:01:2f:01:c8:26:ec:
ba:90:d8:c3:8d:78:4e:8d:50:94:9b:e8:d2:9c:f2:
74:3e:64:9a:c6:c4:5c:bc:78:df:1b:cf:b4:02:49:
a7:69:cf:aa:33:c7:2b:14:7d:a5:af:1e:83:af:b7:
d5:5a:0c:4d:b0:6c:ed:ba:01:79:57:00:ba:66:5d:
cf:aa:0e:7a:db:d2:0a:26:7a:2e:af:db:2c:85:fd:
65:ea:c8:1d:d0:17:a4:e0:ee:28:9a:d9:bd:4f:03:
c5:ca:19:90:0f:21:97:4c:3e:5f:5e:a9:dc:0f:c1:
1b:54:41:c1:4a:c1:b1:db:ac:b9:29:80:5e:a3:ba:
d9:e4:17:87:99:83:5c:85:a9:44:8e:30:35:46:84:
18:b3:b3:94:ad:ce:2c:6b:b7:57:c7:46:37:07:64:
82:c8:69:6e:a8:8c:92:f7:99:8e:04:5a:89:7b:43:
36:99:11:3d:e0:31:2d:c9:86:06:47:d2:10:7f:61:
df:71:30:ad:0f:6b:bb:02:c8:37:a5:23:d7:bc:c5:
03:2e:d4:d5:26:3b:ce:3a:c8:4e:fd:09:a3:4c:f9:
f7:37:76:f3:57:a7:9b:8a:be:c2:49:46:de:74:5e:
8f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:59:32:A4:50:E6:BF:37:75:A0:2F:45:6A:95:06:8E:46:2F:78:16
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/3FkypFDmvzd1oC9FapUGjkYveBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.208.0-31.192.210.255
31.192.213.0/24
31.192.215.0/24
89.43.28.0/22
89.43.64.0/22
89.252.128.0/22
89.252.134.0-89.252.137.255
89.252.139.0-89.252.140.255
89.252.143.0-89.252.150.255
89.252.155.0-89.252.156.255
89.252.158.0/24
89.252.160.0-89.252.177.255
93.113.60.0/22
93.115.76.0/24
93.115.78.0/23
94.102.0.0-94.102.11.255
94.102.13.0-94.102.15.255
95.173.160.0-95.173.172.255
95.173.177.0-95.173.181.255
95.173.184.0/21
159.253.32.0-159.253.36.255
159.253.38.0-159.253.47.255
185.95.84.0/22
IPv6:
2a02:f80::/32
2a03:2100::/32
2a03:2102:1::/48
Signature Algorithm: sha256WithRSAEncryption
9e:f3:af:ae:3a:9a:75:1e:68:39:a3:14:8f:54:98:4e:74:9b:
05:b0:f8:4d:47:10:8d:6d:78:d6:27:75:73:7c:04:46:ab:82:
8a:fd:d1:79:fa:9f:35:be:07:64:38:ed:a5:fb:a9:a9:91:50:
8d:3c:42:63:76:51:d3:80:fa:09:ac:7f:ff:c5:42:44:15:c6:
e5:e9:cf:01:52:eb:7b:66:8c:64:79:be:86:4a:42:ca:60:40:
ba:36:6f:3a:9b:39:18:19:f8:f7:78:40:6f:7a:6d:c6:df:41:
ef:7d:5f:42:04:a6:48:c8:9f:ce:7c:a9:77:92:86:2e:77:26:
32:22:44:9c:c2:32:a8:11:20:e1:33:6a:7e:47:0c:33:32:e8:
07:8e:8a:0a:7a:b9:36:9e:fa:16:e7:d8:6b:46:53:38:7c:d8:
d2:bc:8e:3a:0e:92:f7:69:61:8d:22:0a:bd:c8:de:80:53:c0:
0f:85:f8:e7:6e:c7:99:10:c1:24:c8:88:34:df:16:57:84:16:
e9:42:22:a4:9e:ee:cf:ec:19:59:66:6e:c9:ef:55:df:f5:9b:
3e:53:eb:98:f1:61:8e:0c:69:f7:f7:39:00:6c:27:37:cf:30:
c0:c7:ae:14:f7:5a:90:14:a8:f1:13:35:36:24:c1:df:42:f8:
87:6d:4a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 17:55:31 2025 by rpki-client