Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/cLG7iHsywZJ0qNrAj-6rWO58lqQ.roa
File: cLG7iHsywZJ0qNrAj-6rWO58lqQ.roa (raw, json)
Hash identifier: XD2bj450L+9y45biWQD9QpYqEZzOR3ILZFcaW4DJHjg=
Subject key identifier: 70:B1:BB:88:7B:32:C1:92:74:A8:DA:C0:8F:EE:AB:58:EE:7C:96:A4
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 018BF1911F4D2F864795BDB6EA06430929BB
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/cLG7iHsywZJ0qNrAj-6rWO58lqQ.roa
Signing time: Tue 21 Nov 2023 11:08:21 +0000
ROA not before: Tue 21 Nov 2023 11:08:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51559
IP address blocks: 95.173.178.0/24 maxlen: 24
95.173.177.0/24 maxlen: 24
95.173.179.0/24 maxlen: 24
95.173.185.0/24 maxlen: 24
95.173.184.0/24 maxlen: 24
95.173.186.0/24 maxlen: 24
95.173.181.0/24 maxlen: 24
95.173.183.0/24 maxlen: 24
95.173.180.0/24 maxlen: 24
95.173.189.0/24 maxlen: 24
95.173.188.0/24 maxlen: 24
95.173.190.0/24 maxlen: 24
95.173.187.0/24 maxlen: 24
95.173.191.0/24 maxlen: 24
93.113.62.0/24 maxlen: 24
93.113.61.0/24 maxlen: 24
93.113.63.0/24 maxlen: 24
93.113.60.0/24 maxlen: 24
95.173.161.0/24 maxlen: 24
95.173.160.0/24 maxlen: 24
95.173.163.0/24 maxlen: 24
95.173.162.0/24 maxlen: 24
95.173.164.0/24 maxlen: 24
95.173.166.0/24 maxlen: 24
95.173.165.0/24 maxlen: 24
95.173.171.0/24 maxlen: 24
95.173.172.0/24 maxlen: 24
95.173.168.0/24 maxlen: 24
95.173.167.0/24 maxlen: 24
95.173.170.0/24 maxlen: 24
95.173.169.0/24 maxlen: 24
31.192.215.0/24 maxlen: 24
89.252.160.0/24 maxlen: 24
89.252.161.0/24 maxlen: 24
89.252.166.0/24 maxlen: 24
89.252.163.0/24 maxlen: 24
89.252.162.0/24 maxlen: 24
89.252.165.0/24 maxlen: 24
89.252.164.0/24 maxlen: 24
89.252.170.0/24 maxlen: 24
89.252.169.0/24 maxlen: 24
89.252.172.0/24 maxlen: 24
89.252.171.0/24 maxlen: 24
89.252.168.0/24 maxlen: 24
89.252.167.0/24 maxlen: 24
89.252.173.0/24 maxlen: 24
89.252.175.0/24 maxlen: 24
89.252.174.0/24 maxlen: 24
89.252.177.0/24 maxlen: 24
89.252.176.0/24 maxlen: 24
31.192.208.0/24 maxlen: 24
31.192.213.0/24 maxlen: 24
31.192.210.0/24 maxlen: 24
31.192.209.0/24 maxlen: 24
159.253.38.0/24 maxlen: 24
159.253.36.0/24 maxlen: 24
159.253.35.0/24 maxlen: 24
159.253.32.0/24 maxlen: 24
159.253.34.0/24 maxlen: 24
159.253.33.0/24 maxlen: 24
159.253.43.0/24 maxlen: 24
159.253.42.0/24 maxlen: 24
159.253.44.0/24 maxlen: 24
159.253.39.0/24 maxlen: 24
159.253.41.0/24 maxlen: 24
159.253.40.0/24 maxlen: 24
159.253.46.0/24 maxlen: 24
159.253.45.0/24 maxlen: 24
159.253.47.0/24 maxlen: 24
89.43.64.0/24 maxlen: 24
89.43.67.0/24 maxlen: 24
89.43.66.0/24 maxlen: 24
89.43.65.0/24 maxlen: 24
89.252.173.119/32 maxlen: 32
89.43.30.0/24 maxlen: 24
89.43.29.0/24 maxlen: 24
89.43.31.0/24 maxlen: 24
89.43.28.0/24 maxlen: 24
89.252.131.0/24 maxlen: 24
89.252.128.0/24 maxlen: 24
89.252.130.0/24 maxlen: 24
89.252.129.0/24 maxlen: 24
89.252.139.0/24 maxlen: 24
89.252.135.0/24 maxlen: 24
89.252.134.0/24 maxlen: 24
89.252.137.0/24 maxlen: 24
89.252.136.0/24 maxlen: 24
89.252.145.0/24 maxlen: 24
89.252.144.0/24 maxlen: 24
89.252.143.0/24 maxlen: 24
89.252.140.0/24 maxlen: 24
89.252.146.0/24 maxlen: 24
89.252.147.0/24 maxlen: 24
89.252.152.0/24 maxlen: 24
89.252.149.0/24 maxlen: 24
89.252.148.0/24 maxlen: 24
89.252.150.0/24 maxlen: 24
89.252.156.0/24 maxlen: 24
89.252.155.0/24 maxlen: 24
89.252.158.0/24 maxlen: 24
94.102.2.0/24 maxlen: 24
94.102.1.0/24 maxlen: 24
94.102.4.0/24 maxlen: 24
94.102.3.0/24 maxlen: 24
94.102.0.0/24 maxlen: 24
94.102.6.0/24 maxlen: 24
94.102.5.0/24 maxlen: 24
94.102.7.0/24 maxlen: 24
94.102.9.0/24 maxlen: 24
94.102.8.0/24 maxlen: 24
94.102.11.0/24 maxlen: 24
94.102.10.0/24 maxlen: 24
185.95.85.0/24 maxlen: 24
185.95.84.0/24 maxlen: 24
94.102.15.0/24 maxlen: 24
94.102.13.0/24 maxlen: 24
94.102.14.0/24 maxlen: 24
185.95.87.0/24 maxlen: 24
185.95.86.0/24 maxlen: 24
93.115.78.0/24 maxlen: 24
93.115.77.0/24 maxlen: 24
93.115.76.0/24 maxlen: 24
93.115.79.0/24 maxlen: 24
2a03:2100:28::/48 maxlen: 48
2a03:2100:3::/48 maxlen: 48
2a03:2100:39::/48 maxlen: 48
2a03:2100:3c::/48 maxlen: 48
2a03:2100:17::/48 maxlen: 48
2a03:2100::/48 maxlen: 48
2a03:2100:36::/48 maxlen: 48
2a03:2100:11::/48 maxlen: 48
2a03:2100:14::/48 maxlen: 48
2a03:2100:25::/48 maxlen: 48
2a03:2100:33::/48 maxlen: 48
2a03:2100:e::/48 maxlen: 48
2a03:2100:22::/48 maxlen: 48
2a03:2100:b::/48 maxlen: 48
2a03:2100:44::/48 maxlen: 48
2a03:2100:1f::/48 maxlen: 48
2a03:2100:8::/48 maxlen: 48
2a03:2100:3e::/48 maxlen: 48
2a03:2100:19::/48 maxlen: 48
2a03:2100:1c::/48 maxlen: 48
2a03:2100:2d::/48 maxlen: 48
2a03:2100:3b::/48 maxlen: 48
2a03:2100:16::/48 maxlen: 48
2a03:2100:2a::/48 maxlen: 48
2a03:2100:5::/48 maxlen: 48
2a03:2100::/32 maxlen: 48
2a03:2100:38::/48 maxlen: 48
2a03:2100:13::/48 maxlen: 48
2a03:2100:27::/48 maxlen: 48
2a03:2100:2::/48 maxlen: 48
2a03:2100:10::/48 maxlen: 48
2a03:2100:21::/48 maxlen: 48
2a03:2100:24::/48 maxlen: 48
2a03:2100:35::/48 maxlen: 48
2a03:2100:1e::/48 maxlen: 48
2a03:2100:32::/48 maxlen: 48
2a03:2100:d::/48 maxlen: 48
2a03:2100:40::/48 maxlen: 48
2a03:2100:1b::/48 maxlen: 48
2a03:2100:2f::/48 maxlen: 48
2a03:2100:a::/48 maxlen: 48
2a03:2100:18::/48 maxlen: 48
2a03:2100:29::/48 maxlen: 48
2a03:2100:2c::/48 maxlen: 48
2a03:2100:7::/48 maxlen: 48
2a03:2100:3d::/48 maxlen: 48
2a03:2100:26::/48 maxlen: 48
2a03:2100:1::/48 maxlen: 48
2a03:2100:4::/48 maxlen: 48
2a03:2100:3a::/48 maxlen: 48
2a03:2100:15::/48 maxlen: 48
2a03:2100:23::/48 maxlen: 48
2a03:2100:37::/48 maxlen: 48
2a03:2100:12::/48 maxlen: 48
2a03:2100:20::/48 maxlen: 48
2a03:2100:34::/48 maxlen: 48
2a03:2100:f::/48 maxlen: 48
2a03:2102:1::/48 maxlen: 48
2a03:2100:2e::/48 maxlen: 48
2a03:2100:9::/48 maxlen: 48
2a03:2100:c::/48 maxlen: 48
2a03:2100:1d::/48 maxlen: 48
2a03:2100:2b::/48 maxlen: 48
2a03:2100:6::/48 maxlen: 48
2a02:f80::/32 maxlen: 32
2a03:2100:3f::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 02 Dec 2023 21:09:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f1:91:1f:4d:2f:86:47:95:bd:b6:ea:06:43:09:29:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Nov 21 11:08:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70b1bb887b32c19274a8dac08feeab58ee7c96a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:25:fc:5d:db:48:88:a9:e4:45:43:71:09:34:
84:05:eb:52:d1:0e:7c:cf:ba:d4:53:5e:58:fa:36:
ce:de:6a:ff:ba:b8:ec:75:17:da:de:c5:83:b1:58:
78:e1:cc:c5:58:3a:14:f2:26:7a:c5:0b:22:6c:33:
58:cc:26:ba:c5:6f:31:e3:25:39:90:2b:7e:9e:01:
3e:c6:93:99:7d:1d:0f:29:4c:78:02:bf:1c:25:84:
24:b0:89:a2:b4:20:de:80:ec:13:86:80:20:6f:59:
77:81:8f:7b:aa:e0:32:bf:67:8c:8e:49:35:68:90:
b4:11:6b:a3:9b:1f:f5:d1:38:47:ed:80:d4:1e:1e:
70:25:a0:7c:61:36:09:ef:ff:3d:3b:67:f4:ce:81:
b2:81:54:58:40:13:7e:32:ce:c5:b5:d0:ed:4b:d6:
98:67:e2:bf:8d:21:80:08:3f:39:d1:b2:56:1d:2f:
61:1c:5a:bf:95:d5:62:57:a9:76:d3:ea:2d:3b:9b:
83:ac:ee:69:6b:8c:48:a2:21:14:e7:cf:09:21:74:
67:6c:ae:ad:d4:2d:7b:ac:cd:1f:9f:e5:e8:2a:18:
16:c5:ef:0d:27:d8:7a:9f:a4:cc:ee:e7:48:ac:00:
b5:fe:c1:73:db:82:d4:06:c6:10:72:0b:8d:48:c9:
9a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B1:BB:88:7B:32:C1:92:74:A8:DA:C0:8F:EE:AB:58:EE:7C:96:A4
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/cLG7iHsywZJ0qNrAj-6rWO58lqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.208.0-31.192.210.255
31.192.213.0/24
31.192.215.0/24
89.43.28.0/22
89.43.64.0/22
89.252.128.0/22
89.252.134.0-89.252.137.255
89.252.139.0-89.252.140.255
89.252.143.0-89.252.150.255
89.252.152.0/24
89.252.155.0-89.252.156.255
89.252.158.0/24
89.252.160.0-89.252.177.255
93.113.60.0/22
93.115.76.0/22
94.102.0.0-94.102.11.255
94.102.13.0-94.102.15.255
95.173.160.0-95.173.172.255
95.173.177.0-95.173.181.255
95.173.183.0-95.173.191.255
159.253.32.0-159.253.36.255
159.253.38.0-159.253.47.255
185.95.84.0/22
IPv6:
2a02:f80::/32
2a03:2100::/32
2a03:2102:1::/48
Signature Algorithm: sha256WithRSAEncryption
60:97:e9:0c:fe:3c:90:a1:d7:05:cf:e8:11:f7:cf:5e:bc:4f:
a2:d4:8c:39:2f:0a:c4:3b:40:a6:58:c1:62:0f:bf:45:fb:05:
20:ff:08:a8:1d:6f:84:54:a6:9f:a0:b2:4e:b5:6c:37:7f:8e:
31:0c:dc:6e:30:1f:ef:67:86:b9:ba:fc:02:a8:8d:df:95:a8:
b7:66:01:a4:a1:93:6d:7c:61:ab:4b:88:6f:a1:73:d4:fc:51:
a8:99:e6:df:af:59:3a:32:f6:fa:e7:c1:64:3d:a4:fd:c0:e8:
b5:2a:cb:b5:7e:83:0e:48:6c:cd:70:83:30:5d:16:6c:c5:97:
fb:37:05:10:19:02:5d:ed:d7:56:de:3a:a2:d7:b5:1f:70:f5:
cc:5e:4d:c1:18:5d:37:cf:3b:7d:ef:73:50:f9:10:c1:31:70:
90:08:13:d0:6b:09:1e:8e:1a:ad:6d:51:8b:59:0a:77:d4:a0:
03:ed:fe:cf:92:fa:fd:56:8a:04:03:78:7c:9e:5a:e4:45:5d:
2d:bb:1f:bb:a3:79:a4:eb:0d:1a:5a:9a:9a:40:00:b1:d6:23:
9d:fe:b5:98:be:b8:c3:3b:b5:1e:80:00:de:62:b6:39:7c:a5:
53:b1:0e:ac:e6:ef:95:67:5e:75:3b:81:20:d9:19:2a:86:df:
40:66:ab:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:52 2024 by rpki-client on console-fra.rpki-client.org