Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/GnjnnCotnoP2R3_PBXGXH0X1Fw4.roa
File: GnjnnCotnoP2R3_PBXGXH0X1Fw4.roa (raw, json)
Hash identifier: vJqhLe/1gUzi3XkvAZ9lEulmL8iXaGMQMJukJr1XQtY=
Subject key identifier: 1A:78:E7:9C:2A:2D:9E:83:F6:47:7F:CF:05:71:97:1F:45:F5:17:0E
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 018CC500369847CE5162BC81F399B1A2E1DD
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/GnjnnCotnoP2R3_PBXGXH0X1Fw4.roa
Signing time: Mon 01 Jan 2024 12:29:34 +0000
ROA not before: Mon 01 Jan 2024 12:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51559
IP address blocks: 95.173.178.0/24 maxlen: 24
95.173.177.0/24 maxlen: 24
95.173.179.0/24 maxlen: 24
95.173.185.0/24 maxlen: 24
95.173.184.0/24 maxlen: 24
95.173.186.0/24 maxlen: 24
95.173.181.0/24 maxlen: 24
95.173.183.0/24 maxlen: 24
95.173.180.0/24 maxlen: 24
95.173.189.0/24 maxlen: 24
95.173.188.0/24 maxlen: 24
95.173.190.0/24 maxlen: 24
95.173.187.0/24 maxlen: 24
95.173.191.0/24 maxlen: 24
93.113.62.0/24 maxlen: 24
93.113.61.0/24 maxlen: 24
93.113.63.0/24 maxlen: 24
93.113.60.0/24 maxlen: 24
95.173.161.0/24 maxlen: 24
95.173.160.0/24 maxlen: 24
95.173.163.0/24 maxlen: 24
95.173.162.0/24 maxlen: 24
95.173.164.0/24 maxlen: 24
95.173.166.0/24 maxlen: 24
95.173.165.0/24 maxlen: 24
95.173.171.0/24 maxlen: 24
95.173.172.0/24 maxlen: 24
95.173.168.0/24 maxlen: 24
95.173.167.0/24 maxlen: 24
95.173.170.0/24 maxlen: 24
95.173.169.0/24 maxlen: 24
31.192.215.0/24 maxlen: 24
89.252.160.0/24 maxlen: 24
89.252.161.0/24 maxlen: 24
89.252.166.0/24 maxlen: 24
89.252.163.0/24 maxlen: 24
89.252.162.0/24 maxlen: 24
89.252.165.0/24 maxlen: 24
89.252.164.0/24 maxlen: 24
89.252.170.0/24 maxlen: 24
89.252.169.0/24 maxlen: 24
89.252.172.0/24 maxlen: 24
89.252.171.0/24 maxlen: 24
89.252.168.0/24 maxlen: 24
89.252.167.0/24 maxlen: 24
89.252.173.0/24 maxlen: 24
89.252.175.0/24 maxlen: 24
89.252.174.0/24 maxlen: 24
89.252.177.0/24 maxlen: 24
89.252.176.0/24 maxlen: 24
31.192.208.0/24 maxlen: 24
31.192.213.0/24 maxlen: 24
31.192.210.0/24 maxlen: 24
31.192.209.0/24 maxlen: 24
159.253.38.0/24 maxlen: 24
159.253.36.0/24 maxlen: 24
159.253.35.0/24 maxlen: 24
159.253.32.0/24 maxlen: 24
159.253.34.0/24 maxlen: 24
159.253.33.0/24 maxlen: 24
159.253.43.0/24 maxlen: 24
159.253.42.0/24 maxlen: 24
159.253.44.0/24 maxlen: 24
159.253.39.0/24 maxlen: 24
159.253.41.0/24 maxlen: 24
159.253.40.0/24 maxlen: 24
159.253.46.0/24 maxlen: 24
159.253.45.0/24 maxlen: 24
159.253.47.0/24 maxlen: 24
89.43.64.0/24 maxlen: 24
89.43.67.0/24 maxlen: 24
89.43.66.0/24 maxlen: 24
89.43.65.0/24 maxlen: 24
89.252.173.119/32 maxlen: 32
89.43.30.0/24 maxlen: 24
89.43.29.0/24 maxlen: 24
89.43.31.0/24 maxlen: 24
89.43.28.0/24 maxlen: 24
89.252.131.0/24 maxlen: 24
89.252.128.0/24 maxlen: 24
89.252.130.0/24 maxlen: 24
89.252.129.0/24 maxlen: 24
89.252.139.0/24 maxlen: 24
89.252.135.0/24 maxlen: 24
89.252.134.0/24 maxlen: 24
89.252.137.0/24 maxlen: 24
89.252.136.0/24 maxlen: 24
89.252.145.0/24 maxlen: 24
89.252.143.0/24 maxlen: 24
89.252.140.0/24 maxlen: 24
89.252.146.0/24 maxlen: 24
89.252.149.0/24 maxlen: 24
89.252.148.0/24 maxlen: 24
89.252.150.0/24 maxlen: 24
89.252.155.0/24 maxlen: 24
89.252.158.0/24 maxlen: 24
94.102.2.0/24 maxlen: 24
94.102.1.0/24 maxlen: 24
94.102.4.0/24 maxlen: 24
94.102.3.0/24 maxlen: 24
94.102.0.0/24 maxlen: 24
94.102.6.0/24 maxlen: 24
94.102.5.0/24 maxlen: 24
94.102.7.0/24 maxlen: 24
94.102.9.0/24 maxlen: 24
94.102.8.0/24 maxlen: 24
94.102.11.0/24 maxlen: 24
94.102.10.0/24 maxlen: 24
185.95.85.0/24 maxlen: 24
185.95.84.0/24 maxlen: 24
94.102.15.0/24 maxlen: 24
94.102.13.0/24 maxlen: 24
94.102.14.0/24 maxlen: 24
185.95.87.0/24 maxlen: 24
185.95.86.0/24 maxlen: 24
93.115.78.0/24 maxlen: 24
93.115.77.0/24 maxlen: 24
93.115.76.0/24 maxlen: 24
93.115.79.0/24 maxlen: 24
2a03:2100:28::/48 maxlen: 48
2a03:2100:3::/48 maxlen: 48
2a03:2100:39::/48 maxlen: 48
2a03:2100:3c::/48 maxlen: 48
2a03:2100:17::/48 maxlen: 48
2a03:2100::/48 maxlen: 48
2a03:2100:36::/48 maxlen: 48
2a03:2100:11::/48 maxlen: 48
2a03:2100:14::/48 maxlen: 48
2a03:2100:25::/48 maxlen: 48
2a03:2100:33::/48 maxlen: 48
2a03:2100:e::/48 maxlen: 48
2a03:2100:22::/48 maxlen: 48
2a03:2100:b::/48 maxlen: 48
2a03:2100:44::/48 maxlen: 48
2a03:2100:1f::/48 maxlen: 48
2a03:2100:8::/48 maxlen: 48
2a03:2100:3e::/48 maxlen: 48
2a03:2100:19::/48 maxlen: 48
2a03:2100:1c::/48 maxlen: 48
2a03:2100:2d::/48 maxlen: 48
2a03:2100:3b::/48 maxlen: 48
2a03:2100:16::/48 maxlen: 48
2a03:2100:2a::/48 maxlen: 48
2a03:2100:5::/48 maxlen: 48
2a03:2100::/32 maxlen: 48
2a03:2100:38::/48 maxlen: 48
2a03:2100:13::/48 maxlen: 48
2a03:2100:27::/48 maxlen: 48
2a03:2100:2::/48 maxlen: 48
2a03:2100:10::/48 maxlen: 48
2a03:2100:21::/48 maxlen: 48
2a03:2100:24::/48 maxlen: 48
2a03:2100:35::/48 maxlen: 48
2a03:2100:1e::/48 maxlen: 48
2a03:2100:32::/48 maxlen: 48
2a03:2100:d::/48 maxlen: 48
2a03:2100:40::/48 maxlen: 48
2a03:2100:1b::/48 maxlen: 48
2a03:2100:2f::/48 maxlen: 48
2a03:2100:a::/48 maxlen: 48
2a03:2100:18::/48 maxlen: 48
2a03:2100:29::/48 maxlen: 48
2a03:2100:2c::/48 maxlen: 48
2a03:2100:7::/48 maxlen: 48
2a03:2100:3d::/48 maxlen: 48
2a03:2100:26::/48 maxlen: 48
2a03:2100:1::/48 maxlen: 48
2a03:2100:4::/48 maxlen: 48
2a03:2100:3a::/48 maxlen: 48
2a03:2100:15::/48 maxlen: 48
2a03:2100:23::/48 maxlen: 48
2a03:2100:37::/48 maxlen: 48
2a03:2100:12::/48 maxlen: 48
2a03:2100:20::/48 maxlen: 48
2a03:2100:34::/48 maxlen: 48
2a03:2100:f::/48 maxlen: 48
2a03:2102:1::/48 maxlen: 48
2a03:2100:2e::/48 maxlen: 48
2a03:2100:9::/48 maxlen: 48
2a03:2100:c::/48 maxlen: 48
2a03:2100:1d::/48 maxlen: 48
2a03:2100:2b::/48 maxlen: 48
2a03:2100:6::/48 maxlen: 48
2a02:f80::/32 maxlen: 32
2a03:2100:3f::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 22 Jan 2024 08:41:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:36:98:47:ce:51:62:bc:81:f3:99:b1:a2:e1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Jan 1 12:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a78e79c2a2d9e83f6477fcf0571971f45f5170e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4c:45:b1:40:2c:b8:f9:04:2f:1a:13:b4:58:
56:42:87:37:c7:b5:d9:d7:98:8e:d4:a7:de:b8:bc:
3d:10:7f:9f:76:c9:ce:81:ec:73:fb:78:0b:95:bf:
d8:dd:52:4e:51:e9:69:7d:92:44:fa:23:cb:1d:c7:
97:e2:58:a4:65:9d:cc:53:42:ff:b4:c0:31:02:2c:
08:53:30:f5:21:d1:f2:f8:63:a7:12:54:e1:17:23:
7e:a8:38:62:58:4d:6c:80:20:f0:7a:3a:ad:0a:bc:
7a:84:98:1e:c8:d0:92:c3:79:e6:af:e8:fa:01:70:
ac:32:94:ea:09:31:2c:d4:ee:2f:8b:4f:ae:29:34:
fd:94:1a:b7:18:a0:e9:95:72:6a:8b:92:c3:ca:af:
e9:71:e5:5f:40:72:2a:b0:c3:9f:64:23:dd:91:75:
9f:b4:5e:a7:fb:52:28:67:f5:b4:94:68:54:84:e5:
12:df:13:20:83:96:1e:8e:2a:37:f1:48:05:7a:2b:
1b:d2:64:69:4f:36:84:86:d8:21:03:91:87:d6:82:
c5:8e:91:45:4c:99:1c:96:31:de:46:64:05:40:56:
69:c2:a6:7b:ab:d3:53:82:f6:ea:40:80:54:c1:b8:
91:89:40:c5:9b:f9:b1:44:8d:c5:f8:c7:e7:8d:6b:
d7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:78:E7:9C:2A:2D:9E:83:F6:47:7F:CF:05:71:97:1F:45:F5:17:0E
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/GnjnnCotnoP2R3_PBXGXH0X1Fw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.208.0-31.192.210.255
31.192.213.0/24
31.192.215.0/24
89.43.28.0/22
89.43.64.0/22
89.252.128.0/22
89.252.134.0-89.252.137.255
89.252.139.0-89.252.140.255
89.252.143.0/24
89.252.145.0-89.252.146.255
89.252.148.0-89.252.150.255
89.252.155.0/24
89.252.158.0/24
89.252.160.0-89.252.177.255
93.113.60.0/22
93.115.76.0/22
94.102.0.0-94.102.11.255
94.102.13.0-94.102.15.255
95.173.160.0-95.173.172.255
95.173.177.0-95.173.181.255
95.173.183.0-95.173.191.255
159.253.32.0-159.253.36.255
159.253.38.0-159.253.47.255
185.95.84.0/22
IPv6:
2a02:f80::/32
2a03:2100::/32
2a03:2102:1::/48
Signature Algorithm: sha256WithRSAEncryption
af:63:e1:f3:59:0d:34:93:d7:d0:6a:b1:37:bf:76:0f:69:48:
fc:12:cf:8a:f7:dd:5f:a2:7e:b4:1f:ea:a2:2e:01:84:22:a6:
b7:45:da:ef:21:25:9a:bd:de:43:85:7f:97:c5:fc:ab:3e:d7:
75:ed:b5:02:0c:82:02:62:94:50:f1:4d:a7:4b:a6:d5:36:a4:
13:c7:c1:d3:8c:f8:f0:ae:bf:4c:23:7a:87:5b:86:a8:9e:81:
f4:a1:c7:c1:9d:4d:23:1d:b6:ae:0e:7f:3f:89:4b:41:33:1f:
26:84:6a:25:e0:22:ac:a0:82:f2:d8:18:cb:d6:52:5b:c7:14:
d1:00:ce:75:13:60:19:55:e8:69:f7:99:a4:0e:d7:70:ca:51:
31:f7:bf:65:72:3f:35:98:51:a5:37:e4:a5:d5:ca:93:12:2d:
59:ac:8e:b8:74:a0:a7:14:a8:1c:dd:01:4d:d5:52:ff:0b:df:
fc:b8:bb:48:88:57:56:eb:c5:04:5e:ed:36:25:f0:28:de:a6:
22:f2:42:2e:ec:84:6f:c9:a9:d4:36:d6:76:fc:b3:dd:f4:d8:
5d:29:b5:75:2b:6a:98:83:d0:9a:0b:98:5d:ab:f6:ea:3e:9e:
73:b0:48:33:d6:03:99:ce:ca:2c:0a:58:2f:5f:fa:40:a0:06:
ea:8f:fb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:51 2024 by rpki-client on console-fra.rpki-client.org