Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/OQfRuKGTUhDWnAQch2JvPfIYoCs.roa
File: OQfRuKGTUhDWnAQch2JvPfIYoCs.roa (raw, json)
Hash identifier: VlamK+XtlR3vt19Fpo3gn6uiM9wjYmNeGn7fPqXL3LE=
Subject key identifier: 39:07:D1:B8:A1:93:52:10:D6:9C:04:1C:87:62:6F:3D:F2:18:A0:2B
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 0192334B58D99575F51676F316D489667519
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/OQfRuKGTUhDWnAQch2JvPfIYoCs.roa
Signing time: Fri 27 Sep 2024 11:43:48 +0000
ROA not before: Fri 27 Sep 2024 11:43:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51559
IP address blocks: 31.192.208.0/24 maxlen: 24
31.192.209.0/24 maxlen: 24
31.192.210.0/24 maxlen: 24
31.192.213.0/24 maxlen: 24
31.192.215.0/24 maxlen: 24
89.43.28.0/24 maxlen: 24
89.43.29.0/24 maxlen: 24
89.43.30.0/24 maxlen: 24
89.43.31.0/24 maxlen: 24
89.43.64.0/24 maxlen: 24
89.43.65.0/24 maxlen: 24
89.43.66.0/24 maxlen: 24
89.43.67.0/24 maxlen: 24
89.252.128.0/24 maxlen: 24
89.252.129.0/24 maxlen: 24
89.252.130.0/24 maxlen: 24
89.252.131.0/24 maxlen: 24
89.252.134.0/24 maxlen: 24
89.252.135.0/24 maxlen: 24
89.252.136.0/24 maxlen: 24
89.252.137.0/24 maxlen: 24
89.252.139.0/24 maxlen: 24
89.252.140.0/24 maxlen: 24
89.252.143.0/24 maxlen: 24
89.252.145.0/24 maxlen: 24
89.252.146.0/24 maxlen: 24
89.252.148.0/24 maxlen: 24
89.252.155.0/24 maxlen: 24
89.252.158.0/24 maxlen: 24
89.252.160.0/24 maxlen: 24
89.252.161.0/24 maxlen: 24
89.252.162.0/24 maxlen: 24
89.252.163.0/24 maxlen: 24
89.252.164.0/24 maxlen: 24
89.252.165.0/24 maxlen: 24
89.252.166.0/24 maxlen: 24
89.252.167.0/24 maxlen: 24
89.252.168.0/24 maxlen: 24
89.252.169.0/24 maxlen: 24
89.252.170.0/24 maxlen: 24
89.252.171.0/24 maxlen: 24
89.252.172.0/24 maxlen: 24
89.252.173.0/24 maxlen: 24
89.252.173.119/32 maxlen: 32
89.252.174.0/24 maxlen: 24
89.252.175.0/24 maxlen: 24
89.252.176.0/24 maxlen: 24
89.252.177.0/24 maxlen: 24
93.113.60.0/24 maxlen: 24
93.113.61.0/24 maxlen: 24
93.113.62.0/24 maxlen: 24
93.113.63.0/24 maxlen: 24
93.115.76.0/24 maxlen: 24
93.115.77.0/24 maxlen: 24
93.115.78.0/24 maxlen: 24
93.115.79.0/24 maxlen: 24
94.102.0.0/24 maxlen: 24
94.102.1.0/24 maxlen: 24
94.102.2.0/24 maxlen: 24
94.102.3.0/24 maxlen: 24
94.102.4.0/24 maxlen: 24
94.102.5.0/24 maxlen: 24
94.102.6.0/24 maxlen: 24
94.102.7.0/24 maxlen: 24
94.102.8.0/24 maxlen: 24
94.102.9.0/24 maxlen: 24
94.102.11.0/24 maxlen: 24
94.102.13.0/24 maxlen: 24
94.102.14.0/24 maxlen: 24
94.102.15.0/24 maxlen: 24
95.173.160.0/24 maxlen: 24
95.173.161.0/24 maxlen: 24
95.173.162.0/24 maxlen: 24
95.173.163.0/24 maxlen: 24
95.173.164.0/24 maxlen: 24
95.173.165.0/24 maxlen: 24
95.173.166.0/24 maxlen: 24
95.173.167.0/24 maxlen: 24
95.173.168.0/24 maxlen: 24
95.173.169.0/24 maxlen: 24
95.173.170.0/24 maxlen: 24
95.173.171.0/24 maxlen: 24
95.173.172.0/24 maxlen: 24
95.173.177.0/24 maxlen: 24
95.173.178.0/24 maxlen: 24
95.173.179.0/24 maxlen: 24
95.173.180.0/24 maxlen: 24
95.173.181.0/24 maxlen: 24
95.173.183.0/24 maxlen: 24
95.173.184.0/24 maxlen: 24
95.173.185.0/24 maxlen: 24
95.173.186.0/24 maxlen: 24
95.173.187.0/24 maxlen: 24
95.173.188.0/24 maxlen: 24
95.173.189.0/24 maxlen: 24
95.173.190.0/24 maxlen: 24
95.173.191.0/24 maxlen: 24
159.253.32.0/24 maxlen: 24
159.253.33.0/24 maxlen: 24
159.253.34.0/24 maxlen: 24
159.253.35.0/24 maxlen: 24
159.253.36.0/24 maxlen: 24
159.253.38.0/24 maxlen: 24
159.253.39.0/24 maxlen: 24
159.253.40.0/24 maxlen: 24
159.253.41.0/24 maxlen: 24
159.253.42.0/24 maxlen: 24
159.253.43.0/24 maxlen: 24
159.253.44.0/24 maxlen: 24
159.253.45.0/24 maxlen: 24
159.253.46.0/24 maxlen: 24
159.253.47.0/24 maxlen: 24
185.95.84.0/24 maxlen: 24
185.95.85.0/24 maxlen: 24
185.95.86.0/24 maxlen: 24
185.95.87.0/24 maxlen: 24
2a02:f80::/32 maxlen: 32
2a03:2100::/32 maxlen: 48
2a03:2100:1::/48 maxlen: 48
2a03:2100:2::/48 maxlen: 48
2a03:2100:3::/48 maxlen: 48
2a03:2100:4::/48 maxlen: 48
2a03:2100:5::/48 maxlen: 48
2a03:2100:6::/48 maxlen: 48
2a03:2100:7::/48 maxlen: 48
2a03:2100:8::/48 maxlen: 48
2a03:2100:9::/48 maxlen: 48
2a03:2100:a::/48 maxlen: 48
2a03:2100:b::/48 maxlen: 48
2a03:2100:c::/48 maxlen: 48
2a03:2100:d::/48 maxlen: 48
2a03:2100:e::/48 maxlen: 48
2a03:2100:f::/48 maxlen: 48
2a03:2100:10::/48 maxlen: 48
2a03:2100:11::/48 maxlen: 48
2a03:2100:12::/48 maxlen: 48
2a03:2100:13::/48 maxlen: 48
2a03:2100:14::/48 maxlen: 48
2a03:2100:15::/48 maxlen: 48
2a03:2100:16::/48 maxlen: 48
2a03:2100:17::/48 maxlen: 48
2a03:2100:18::/48 maxlen: 48
2a03:2100:19::/48 maxlen: 48
2a03:2100:1b::/48 maxlen: 48
2a03:2100:1c::/48 maxlen: 48
2a03:2100:1d::/48 maxlen: 48
2a03:2100:1e::/48 maxlen: 48
2a03:2100:1f::/48 maxlen: 48
2a03:2100:20::/48 maxlen: 48
2a03:2100:21::/48 maxlen: 48
2a03:2100:22::/48 maxlen: 48
2a03:2100:23::/48 maxlen: 48
2a03:2100:24::/48 maxlen: 48
2a03:2100:25::/48 maxlen: 48
2a03:2100:26::/48 maxlen: 48
2a03:2100:27::/48 maxlen: 48
2a03:2100:28::/48 maxlen: 48
2a03:2100:29::/48 maxlen: 48
2a03:2100:2a::/48 maxlen: 48
2a03:2100:2b::/48 maxlen: 48
2a03:2100:2c::/48 maxlen: 48
2a03:2100:2d::/48 maxlen: 48
2a03:2100:2e::/48 maxlen: 48
2a03:2100:2f::/48 maxlen: 48
2a03:2100:32::/48 maxlen: 48
2a03:2100:33::/48 maxlen: 48
2a03:2100:34::/48 maxlen: 48
2a03:2100:35::/48 maxlen: 48
2a03:2100:36::/48 maxlen: 48
2a03:2100:37::/48 maxlen: 48
2a03:2100:38::/48 maxlen: 48
2a03:2100:39::/48 maxlen: 48
2a03:2100:3a::/48 maxlen: 48
2a03:2100:3b::/48 maxlen: 48
2a03:2100:3c::/48 maxlen: 48
2a03:2100:3d::/48 maxlen: 48
2a03:2100:3e::/48 maxlen: 48
2a03:2100:3f::/48 maxlen: 48
2a03:2100:40::/48 maxlen: 48
2a03:2100:44::/48 maxlen: 48
2a03:2102:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 11 Oct 2024 07:08:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:33:4b:58:d9:95:75:f5:16:76:f3:16:d4:89:66:75:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Sep 27 11:43:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3907d1b8a1935210d69c041c87626f3df218a02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7d:45:04:cf:0f:c9:b9:2a:52:dd:c9:2d:66:
98:42:cf:a8:f7:d1:91:f7:7d:a5:73:d8:81:61:a6:
46:8c:26:f7:dc:99:47:31:36:ea:c0:cf:15:ed:c6:
dd:93:04:66:18:48:d4:5c:f7:47:ec:95:b7:60:27:
6b:7e:5f:76:8f:86:98:a9:0a:0f:42:c4:88:b1:47:
cf:2e:10:d3:6c:bc:b8:17:a8:cd:a9:b5:3f:de:5e:
9c:50:7a:46:af:ac:c5:67:4d:eb:79:c4:73:86:9f:
1a:95:a1:81:6f:ce:f7:2d:64:72:4e:62:39:fe:5e:
94:96:41:d9:32:53:96:b7:07:75:85:50:2d:77:14:
67:90:e0:a1:4d:44:d5:c6:3c:c4:ee:4b:26:17:4e:
f7:89:0b:cd:7e:b5:95:29:2e:91:26:46:d6:76:01:
6e:65:20:5d:70:b9:79:8e:41:86:df:20:46:c3:a5:
68:09:78:db:e4:01:5c:12:79:fe:2b:89:10:9b:51:
77:8c:52:07:e7:6a:36:7c:7f:57:3f:82:5a:21:cf:
3d:70:ce:e7:2a:b3:b7:6e:c4:d3:48:76:bf:16:50:
33:10:6b:8e:6a:d7:69:ec:4e:cc:34:52:f4:4f:ea:
d5:fb:8c:c6:a9:de:67:25:49:f0:69:60:4c:0f:2f:
80:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:07:D1:B8:A1:93:52:10:D6:9C:04:1C:87:62:6F:3D:F2:18:A0:2B
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/OQfRuKGTUhDWnAQch2JvPfIYoCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.208.0-31.192.210.255
31.192.213.0/24
31.192.215.0/24
89.43.28.0/22
89.43.64.0/22
89.252.128.0/22
89.252.134.0-89.252.137.255
89.252.139.0-89.252.140.255
89.252.143.0/24
89.252.145.0-89.252.146.255
89.252.148.0/24
89.252.155.0/24
89.252.158.0/24
89.252.160.0-89.252.177.255
93.113.60.0/22
93.115.76.0/22
94.102.0.0-94.102.9.255
94.102.11.0/24
94.102.13.0-94.102.15.255
95.173.160.0-95.173.172.255
95.173.177.0-95.173.181.255
95.173.183.0-95.173.191.255
159.253.32.0-159.253.36.255
159.253.38.0-159.253.47.255
185.95.84.0/22
IPv6:
2a02:f80::/32
2a03:2100::/32
2a03:2102:1::/48
Signature Algorithm: sha256WithRSAEncryption
2b:26:75:df:00:76:1e:65:8f:e2:4c:96:42:e4:3b:c2:36:1e:
b1:9e:25:71:f1:39:aa:38:f7:6b:25:65:de:c9:f8:27:d6:97:
46:57:19:18:ef:34:8e:d7:d5:57:f6:eb:da:78:93:e8:8e:0c:
74:96:1f:8b:57:7b:5c:ec:4e:80:82:e8:53:7f:b4:0a:23:f9:
01:ae:65:5e:23:28:46:b6:29:30:64:cc:d0:2b:46:28:02:1b:
ea:29:08:2d:a6:28:35:cc:ef:be:00:d3:bc:b4:7f:ac:70:0c:
64:ce:df:8b:73:54:5f:26:a7:c9:75:77:76:97:15:08:18:33:
30:b1:6a:90:e1:e0:28:c1:1a:f1:f9:41:ea:f8:e0:4e:01:89:
b6:0a:95:b0:d5:6c:55:f9:a2:2a:68:44:a6:de:08:3f:7b:de:
0b:fc:46:09:9c:bb:fa:77:ff:70:90:bf:4b:3c:d3:aa:c0:4f:
17:be:32:03:b2:6a:d5:88:bb:e1:9b:7f:f7:da:54:ee:13:84:
be:8a:ca:aa:55:a4:37:cd:11:3f:34:de:9d:16:fc:ec:65:cd:
01:c8:74:90:4a:83:09:13:98:18:80:29:c9:db:7d:f0:fb:35:
5e:d9:8b:ec:83:81:e6:b3:8e:60:65:ab:6f:86:b4:bb:6f:b8:
e6:bd:a5:22
-----BEGIN CERTIFICATE-----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Generated at Fri Oct 11 09:41:01 2024 by rpki-client on console-ams.rpki-client.org