Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/HuWjp9TWtsPVsZtBC2J8-4fdt0w.roa
File: HuWjp9TWtsPVsZtBC2J8-4fdt0w.roa (raw, json)
Hash identifier: 8h5b7rH17WpGLGM4kCsu+p7BQpKTocjjk9lyCHyyoW0=
Subject key identifier: 1E:E5:A3:A7:D4:D6:B6:C3:D5:B1:9B:41:0B:62:7C:FB:87:DD:B7:4C
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 01942745CED090281C960352D8B8916CDC14
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/HuWjp9TWtsPVsZtBC2J8-4fdt0w.roa
Signing time: Thu 02 Jan 2025 13:47:53 +0000
ROA not before: Thu 02 Jan 2025 13:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51559
IP address blocks: 31.192.208.0/24 maxlen: 24
31.192.209.0/24 maxlen: 24
31.192.210.0/24 maxlen: 24
31.192.213.0/24 maxlen: 24
31.192.215.0/24 maxlen: 24
89.43.28.0/24 maxlen: 24
89.43.29.0/24 maxlen: 24
89.43.30.0/24 maxlen: 24
89.43.31.0/24 maxlen: 24
89.43.64.0/24 maxlen: 24
89.43.65.0/24 maxlen: 24
89.43.66.0/24 maxlen: 24
89.43.67.0/24 maxlen: 24
89.252.128.0/24 maxlen: 24
89.252.129.0/24 maxlen: 24
89.252.130.0/24 maxlen: 24
89.252.131.0/24 maxlen: 24
89.252.134.0/24 maxlen: 24
89.252.135.0/24 maxlen: 24
89.252.136.0/24 maxlen: 24
89.252.137.0/24 maxlen: 24
89.252.139.0/24 maxlen: 24
89.252.140.0/24 maxlen: 24
89.252.143.0/24 maxlen: 24
89.252.144.0/24 maxlen: 24
89.252.145.0/24 maxlen: 24
89.252.146.0/24 maxlen: 24
89.252.147.0/24 maxlen: 24
89.252.148.0/24 maxlen: 24
89.252.149.0/24 maxlen: 24
89.252.150.0/24 maxlen: 24
89.252.155.0/24 maxlen: 24
89.252.156.0/24 maxlen: 24
89.252.158.0/24 maxlen: 24
89.252.160.0/24 maxlen: 24
89.252.161.0/24 maxlen: 24
89.252.162.0/24 maxlen: 24
89.252.163.0/24 maxlen: 24
89.252.164.0/24 maxlen: 24
89.252.165.0/24 maxlen: 24
89.252.166.0/24 maxlen: 24
89.252.167.0/24 maxlen: 24
89.252.168.0/24 maxlen: 24
89.252.169.0/24 maxlen: 24
89.252.170.0/24 maxlen: 24
89.252.171.0/24 maxlen: 24
89.252.172.0/24 maxlen: 24
89.252.173.0/24 maxlen: 24
89.252.173.119/32 maxlen: 32
89.252.174.0/24 maxlen: 24
89.252.175.0/24 maxlen: 24
89.252.176.0/24 maxlen: 24
89.252.177.0/24 maxlen: 24
93.113.60.0/24 maxlen: 24
93.113.61.0/24 maxlen: 24
93.113.62.0/24 maxlen: 24
93.113.63.0/24 maxlen: 24
93.115.76.0/24 maxlen: 24
93.115.78.0/24 maxlen: 24
93.115.79.0/24 maxlen: 24
94.102.0.0/24 maxlen: 24
94.102.1.0/24 maxlen: 24
94.102.2.0/24 maxlen: 24
94.102.3.0/24 maxlen: 24
94.102.4.0/24 maxlen: 24
94.102.5.0/24 maxlen: 24
94.102.6.0/24 maxlen: 24
94.102.7.0/24 maxlen: 24
94.102.8.0/24 maxlen: 24
94.102.9.0/24 maxlen: 24
94.102.10.0/24 maxlen: 24
94.102.11.0/24 maxlen: 24
94.102.13.0/24 maxlen: 24
94.102.14.0/24 maxlen: 24
94.102.15.0/24 maxlen: 24
95.173.160.0/24 maxlen: 24
95.173.161.0/24 maxlen: 24
95.173.162.0/24 maxlen: 24
95.173.163.0/24 maxlen: 24
95.173.164.0/24 maxlen: 24
95.173.165.0/24 maxlen: 24
95.173.166.0/24 maxlen: 24
95.173.167.0/24 maxlen: 24
95.173.168.0/24 maxlen: 24
95.173.169.0/24 maxlen: 24
95.173.170.0/24 maxlen: 24
95.173.171.0/24 maxlen: 24
95.173.172.0/24 maxlen: 24
95.173.177.0/24 maxlen: 24
95.173.178.0/24 maxlen: 24
95.173.179.0/24 maxlen: 24
95.173.180.0/24 maxlen: 24
95.173.181.0/24 maxlen: 24
95.173.184.0/24 maxlen: 24
95.173.185.0/24 maxlen: 24
95.173.186.0/24 maxlen: 24
95.173.187.0/24 maxlen: 24
95.173.188.0/24 maxlen: 24
95.173.189.0/24 maxlen: 24
95.173.190.0/24 maxlen: 24
95.173.191.0/24 maxlen: 24
159.253.32.0/24 maxlen: 24
159.253.33.0/24 maxlen: 24
159.253.34.0/24 maxlen: 24
159.253.35.0/24 maxlen: 24
159.253.36.0/24 maxlen: 24
159.253.38.0/24 maxlen: 24
159.253.39.0/24 maxlen: 24
159.253.40.0/24 maxlen: 24
159.253.41.0/24 maxlen: 24
159.253.42.0/24 maxlen: 24
159.253.43.0/24 maxlen: 24
159.253.44.0/24 maxlen: 24
159.253.45.0/24 maxlen: 24
159.253.46.0/24 maxlen: 24
159.253.47.0/24 maxlen: 24
185.95.84.0/24 maxlen: 24
185.95.85.0/24 maxlen: 24
185.95.86.0/24 maxlen: 24
185.95.87.0/24 maxlen: 24
2a02:f80::/32 maxlen: 32
2a03:2100::/32 maxlen: 48
2a03:2100:1::/48 maxlen: 48
2a03:2100:2::/48 maxlen: 48
2a03:2100:3::/48 maxlen: 48
2a03:2100:4::/48 maxlen: 48
2a03:2100:5::/48 maxlen: 48
2a03:2100:6::/48 maxlen: 48
2a03:2100:7::/48 maxlen: 48
2a03:2100:8::/48 maxlen: 48
2a03:2100:9::/48 maxlen: 48
2a03:2100:a::/48 maxlen: 48
2a03:2100:b::/48 maxlen: 48
2a03:2100:c::/48 maxlen: 48
2a03:2100:d::/48 maxlen: 48
2a03:2100:e::/48 maxlen: 48
2a03:2100:f::/48 maxlen: 48
2a03:2100:10::/48 maxlen: 48
2a03:2100:11::/48 maxlen: 48
2a03:2100:12::/48 maxlen: 48
2a03:2100:13::/48 maxlen: 48
2a03:2100:14::/48 maxlen: 48
2a03:2100:15::/48 maxlen: 48
2a03:2100:16::/48 maxlen: 48
2a03:2100:17::/48 maxlen: 48
2a03:2100:18::/48 maxlen: 48
2a03:2100:19::/48 maxlen: 48
2a03:2100:1b::/48 maxlen: 48
2a03:2100:1c::/48 maxlen: 48
2a03:2100:1d::/48 maxlen: 48
2a03:2100:1e::/48 maxlen: 48
2a03:2100:1f::/48 maxlen: 48
2a03:2100:20::/48 maxlen: 48
2a03:2100:21::/48 maxlen: 48
2a03:2100:22::/48 maxlen: 48
2a03:2100:23::/48 maxlen: 48
2a03:2100:24::/48 maxlen: 48
2a03:2100:25::/48 maxlen: 48
2a03:2100:26::/48 maxlen: 48
2a03:2100:27::/48 maxlen: 48
2a03:2100:28::/48 maxlen: 48
2a03:2100:29::/48 maxlen: 48
2a03:2100:2a::/48 maxlen: 48
2a03:2100:2b::/48 maxlen: 48
2a03:2100:2c::/48 maxlen: 48
2a03:2100:2d::/48 maxlen: 48
2a03:2100:2e::/48 maxlen: 48
2a03:2100:2f::/48 maxlen: 48
2a03:2100:32::/48 maxlen: 48
2a03:2100:33::/48 maxlen: 48
2a03:2100:34::/48 maxlen: 48
2a03:2100:35::/48 maxlen: 48
2a03:2100:36::/48 maxlen: 48
2a03:2100:37::/48 maxlen: 48
2a03:2100:38::/48 maxlen: 48
2a03:2100:39::/48 maxlen: 48
2a03:2100:3a::/48 maxlen: 48
2a03:2100:3b::/48 maxlen: 48
2a03:2100:3c::/48 maxlen: 48
2a03:2100:3d::/48 maxlen: 48
2a03:2100:3e::/48 maxlen: 48
2a03:2100:3f::/48 maxlen: 48
2a03:2100:40::/48 maxlen: 48
2a03:2100:44::/48 maxlen: 48
2a03:2102:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 22 Jan 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:45:ce:d0:90:28:1c:96:03:52:d8:b8:91:6c:dc:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Jan 2 13:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ee5a3a7d4d6b6c3d5b19b410b627cfb87ddb74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3d:cf:a7:b0:ed:44:4e:af:ca:32:80:c3:95:
39:48:94:21:95:20:18:b9:71:4e:21:3a:2b:b9:02:
ec:cb:bb:84:94:31:75:d1:9d:c2:9c:7f:41:f6:f8:
1d:a6:3f:49:ef:d7:7b:57:11:6a:91:7d:20:f2:c5:
ef:9b:5c:b4:60:c4:b3:06:eb:e3:42:33:82:a2:7e:
48:99:57:9f:e7:36:20:c8:0f:b4:44:f1:c2:ff:d6:
2c:50:38:99:09:6f:32:42:82:62:46:0b:94:26:7b:
24:34:21:9f:06:8d:93:4f:59:a0:09:e3:8b:2b:ad:
63:94:2e:bd:65:95:09:34:c3:02:2d:af:3b:17:29:
af:a3:58:18:54:4a:b9:16:a7:92:6f:ea:53:8e:5d:
00:ad:ff:81:2b:6f:7b:89:af:01:69:94:05:ad:c7:
04:f8:46:58:f9:70:42:c5:73:75:06:60:3d:68:5d:
5c:4e:81:cc:de:d4:a3:e4:0c:77:77:18:bc:9f:05:
d8:29:15:61:32:3b:eb:5a:22:02:64:71:bb:ce:fd:
37:a8:18:e4:fa:10:2a:36:30:e3:38:34:21:de:b8:
44:8f:0c:78:f5:6b:11:c5:97:63:e0:b7:4c:8f:ad:
15:4f:ef:af:bb:f7:c5:ec:92:e6:e3:f4:88:dd:5a:
db:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E5:A3:A7:D4:D6:B6:C3:D5:B1:9B:41:0B:62:7C:FB:87:DD:B7:4C
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/HuWjp9TWtsPVsZtBC2J8-4fdt0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.208.0-31.192.210.255
31.192.213.0/24
31.192.215.0/24
89.43.28.0/22
89.43.64.0/22
89.252.128.0/22
89.252.134.0-89.252.137.255
89.252.139.0-89.252.140.255
89.252.143.0-89.252.150.255
89.252.155.0-89.252.156.255
89.252.158.0/24
89.252.160.0-89.252.177.255
93.113.60.0/22
93.115.76.0/24
93.115.78.0/23
94.102.0.0-94.102.11.255
94.102.13.0-94.102.15.255
95.173.160.0-95.173.172.255
95.173.177.0-95.173.181.255
95.173.184.0/21
159.253.32.0-159.253.36.255
159.253.38.0-159.253.47.255
185.95.84.0/22
IPv6:
2a02:f80::/32
2a03:2100::/32
2a03:2102:1::/48
Signature Algorithm: sha256WithRSAEncryption
23:b7:65:59:03:2a:33:f3:41:b1:43:3c:9c:ff:be:98:4a:97:
a6:69:e1:1f:41:2f:57:3e:2f:08:0c:46:d9:76:7e:c0:8a:09:
df:a5:a5:bb:71:0c:b4:56:d2:7f:ce:cb:09:c2:ed:a2:9d:1f:
56:64:d0:a8:dc:bd:42:28:d6:3f:1d:5c:6d:f5:36:7a:cf:12:
17:af:66:65:27:11:3b:a6:de:61:43:8e:15:bb:61:e1:c1:6b:
51:ba:f0:9f:e1:be:66:07:50:7d:8f:ff:a0:19:ff:8f:81:34:
17:be:9e:68:af:35:4a:af:b4:5b:8c:d5:4c:6f:8d:f4:e2:e9:
8a:1e:11:8b:ee:2b:3e:8d:64:c7:ed:b3:59:6b:0c:4a:ee:6f:
15:a9:bd:20:81:2c:37:20:fb:a4:cc:e6:de:1b:6e:32:ca:46:
be:76:8a:18:3c:3e:2e:dc:3d:84:46:dd:b4:b0:f3:85:d5:cb:
db:e7:c2:1a:b2:78:d9:65:8c:8c:87:7f:21:ab:8a:8b:b9:89:
53:0d:0a:1a:83:5d:e0:c3:3d:98:8e:81:5d:b3:f6:af:f2:c8:
41:bd:eb:b6:5b:50:9f:e3:ea:8c:5f:01:1f:7d:a0:c0:60:96:
85:3f:fb:a7:6c:29:38:0f:80:2f:46:2a:62:5b:45:12:f6:5a:
1b:01:81:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:29:55 2025 by rpki-client