Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/d_NiY_-zRFVYOuehPguf8OpcuU4.roa
File: d_NiY_-zRFVYOuehPguf8OpcuU4.roa (raw, json)
Hash identifier: PCD4MbOCrZ/tUpFdmiJhxwAebl5lb0hffGuBkIeeqrQ=
Subject key identifier: 77:F3:62:63:FF:B3:44:55:58:3A:E7:A1:3E:0B:9F:F0:EA:5C:B9:4E
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 018C8D9B0D9CD6FA92D23F4372AAD44F26CD
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/d_NiY_-zRFVYOuehPguf8OpcuU4.roa
Signing time: Thu 21 Dec 2023 18:19:58 +0000
ROA not before: Thu 21 Dec 2023 18:19:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51559
IP address blocks: 95.173.178.0/24 maxlen: 24
95.173.177.0/24 maxlen: 24
95.173.179.0/24 maxlen: 24
95.173.185.0/24 maxlen: 24
95.173.184.0/24 maxlen: 24
95.173.186.0/24 maxlen: 24
95.173.181.0/24 maxlen: 24
95.173.183.0/24 maxlen: 24
95.173.180.0/24 maxlen: 24
95.173.189.0/24 maxlen: 24
95.173.188.0/24 maxlen: 24
95.173.190.0/24 maxlen: 24
95.173.187.0/24 maxlen: 24
95.173.191.0/24 maxlen: 24
93.113.62.0/24 maxlen: 24
93.113.61.0/24 maxlen: 24
93.113.63.0/24 maxlen: 24
93.113.60.0/24 maxlen: 24
95.173.161.0/24 maxlen: 24
95.173.160.0/24 maxlen: 24
95.173.163.0/24 maxlen: 24
95.173.162.0/24 maxlen: 24
95.173.164.0/24 maxlen: 24
95.173.166.0/24 maxlen: 24
95.173.165.0/24 maxlen: 24
95.173.171.0/24 maxlen: 24
95.173.172.0/24 maxlen: 24
95.173.168.0/24 maxlen: 24
95.173.167.0/24 maxlen: 24
95.173.170.0/24 maxlen: 24
95.173.169.0/24 maxlen: 24
31.192.215.0/24 maxlen: 24
89.252.160.0/24 maxlen: 24
89.252.161.0/24 maxlen: 24
89.252.166.0/24 maxlen: 24
89.252.163.0/24 maxlen: 24
89.252.162.0/24 maxlen: 24
89.252.165.0/24 maxlen: 24
89.252.164.0/24 maxlen: 24
89.252.170.0/24 maxlen: 24
89.252.169.0/24 maxlen: 24
89.252.172.0/24 maxlen: 24
89.252.171.0/24 maxlen: 24
89.252.168.0/24 maxlen: 24
89.252.167.0/24 maxlen: 24
89.252.173.0/24 maxlen: 24
89.252.175.0/24 maxlen: 24
89.252.174.0/24 maxlen: 24
89.252.177.0/24 maxlen: 24
89.252.176.0/24 maxlen: 24
31.192.208.0/24 maxlen: 24
31.192.213.0/24 maxlen: 24
31.192.210.0/24 maxlen: 24
31.192.209.0/24 maxlen: 24
159.253.38.0/24 maxlen: 24
159.253.36.0/24 maxlen: 24
159.253.35.0/24 maxlen: 24
159.253.32.0/24 maxlen: 24
159.253.34.0/24 maxlen: 24
159.253.33.0/24 maxlen: 24
159.253.43.0/24 maxlen: 24
159.253.42.0/24 maxlen: 24
159.253.44.0/24 maxlen: 24
159.253.39.0/24 maxlen: 24
159.253.41.0/24 maxlen: 24
159.253.40.0/24 maxlen: 24
159.253.46.0/24 maxlen: 24
159.253.45.0/24 maxlen: 24
159.253.47.0/24 maxlen: 24
89.43.64.0/24 maxlen: 24
89.43.67.0/24 maxlen: 24
89.43.66.0/24 maxlen: 24
89.43.65.0/24 maxlen: 24
89.252.173.119/32 maxlen: 32
89.43.30.0/24 maxlen: 24
89.43.29.0/24 maxlen: 24
89.43.31.0/24 maxlen: 24
89.43.28.0/24 maxlen: 24
89.252.131.0/24 maxlen: 24
89.252.128.0/24 maxlen: 24
89.252.130.0/24 maxlen: 24
89.252.129.0/24 maxlen: 24
89.252.139.0/24 maxlen: 24
89.252.135.0/24 maxlen: 24
89.252.134.0/24 maxlen: 24
89.252.137.0/24 maxlen: 24
89.252.136.0/24 maxlen: 24
89.252.145.0/24 maxlen: 24
89.252.143.0/24 maxlen: 24
89.252.140.0/24 maxlen: 24
89.252.146.0/24 maxlen: 24
89.252.149.0/24 maxlen: 24
89.252.148.0/24 maxlen: 24
89.252.150.0/24 maxlen: 24
89.252.155.0/24 maxlen: 24
89.252.158.0/24 maxlen: 24
94.102.2.0/24 maxlen: 24
94.102.1.0/24 maxlen: 24
94.102.4.0/24 maxlen: 24
94.102.3.0/24 maxlen: 24
94.102.0.0/24 maxlen: 24
94.102.6.0/24 maxlen: 24
94.102.5.0/24 maxlen: 24
94.102.7.0/24 maxlen: 24
94.102.9.0/24 maxlen: 24
94.102.8.0/24 maxlen: 24
94.102.11.0/24 maxlen: 24
94.102.10.0/24 maxlen: 24
185.95.85.0/24 maxlen: 24
185.95.84.0/24 maxlen: 24
94.102.15.0/24 maxlen: 24
94.102.13.0/24 maxlen: 24
94.102.14.0/24 maxlen: 24
185.95.87.0/24 maxlen: 24
185.95.86.0/24 maxlen: 24
93.115.78.0/24 maxlen: 24
93.115.77.0/24 maxlen: 24
93.115.76.0/24 maxlen: 24
93.115.79.0/24 maxlen: 24
2a03:2100:28::/48 maxlen: 48
2a03:2100:3::/48 maxlen: 48
2a03:2100:39::/48 maxlen: 48
2a03:2100:3c::/48 maxlen: 48
2a03:2100:17::/48 maxlen: 48
2a03:2100::/48 maxlen: 48
2a03:2100:36::/48 maxlen: 48
2a03:2100:11::/48 maxlen: 48
2a03:2100:14::/48 maxlen: 48
2a03:2100:25::/48 maxlen: 48
2a03:2100:33::/48 maxlen: 48
2a03:2100:e::/48 maxlen: 48
2a03:2100:22::/48 maxlen: 48
2a03:2100:b::/48 maxlen: 48
2a03:2100:44::/48 maxlen: 48
2a03:2100:1f::/48 maxlen: 48
2a03:2100:8::/48 maxlen: 48
2a03:2100:3e::/48 maxlen: 48
2a03:2100:19::/48 maxlen: 48
2a03:2100:1c::/48 maxlen: 48
2a03:2100:2d::/48 maxlen: 48
2a03:2100:3b::/48 maxlen: 48
2a03:2100:16::/48 maxlen: 48
2a03:2100:2a::/48 maxlen: 48
2a03:2100:5::/48 maxlen: 48
2a03:2100::/32 maxlen: 48
2a03:2100:38::/48 maxlen: 48
2a03:2100:13::/48 maxlen: 48
2a03:2100:27::/48 maxlen: 48
2a03:2100:2::/48 maxlen: 48
2a03:2100:10::/48 maxlen: 48
2a03:2100:21::/48 maxlen: 48
2a03:2100:24::/48 maxlen: 48
2a03:2100:35::/48 maxlen: 48
2a03:2100:1e::/48 maxlen: 48
2a03:2100:32::/48 maxlen: 48
2a03:2100:d::/48 maxlen: 48
2a03:2100:40::/48 maxlen: 48
2a03:2100:1b::/48 maxlen: 48
2a03:2100:2f::/48 maxlen: 48
2a03:2100:a::/48 maxlen: 48
2a03:2100:18::/48 maxlen: 48
2a03:2100:29::/48 maxlen: 48
2a03:2100:2c::/48 maxlen: 48
2a03:2100:7::/48 maxlen: 48
2a03:2100:3d::/48 maxlen: 48
2a03:2100:26::/48 maxlen: 48
2a03:2100:1::/48 maxlen: 48
2a03:2100:4::/48 maxlen: 48
2a03:2100:3a::/48 maxlen: 48
2a03:2100:15::/48 maxlen: 48
2a03:2100:23::/48 maxlen: 48
2a03:2100:37::/48 maxlen: 48
2a03:2100:12::/48 maxlen: 48
2a03:2100:20::/48 maxlen: 48
2a03:2100:34::/48 maxlen: 48
2a03:2100:f::/48 maxlen: 48
2a03:2102:1::/48 maxlen: 48
2a03:2100:2e::/48 maxlen: 48
2a03:2100:9::/48 maxlen: 48
2a03:2100:c::/48 maxlen: 48
2a03:2100:1d::/48 maxlen: 48
2a03:2100:2b::/48 maxlen: 48
2a03:2100:6::/48 maxlen: 48
2a02:f80::/32 maxlen: 32
2a03:2100:3f::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8d:9b:0d:9c:d6:fa:92:d2:3f:43:72:aa:d4:4f:26:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Dec 21 18:19:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77f36263ffb34455583ae7a13e0b9ff0ea5cb94e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:12:0f:1d:cc:cb:0d:82:28:36:35:18:18:12:
44:59:1e:1a:dc:90:28:91:cb:e2:92:c2:14:be:2c:
21:3c:e6:3d:31:1c:b7:3a:e1:45:61:5d:3b:f9:cf:
f2:0f:9c:a3:fc:2c:54:8c:d2:d8:b9:28:8f:37:82:
09:06:1a:da:71:ff:7b:0a:1e:0c:6b:20:8f:bf:8f:
4e:ce:01:6d:d7:87:77:60:78:79:98:77:6a:cc:3e:
bf:c1:58:aa:a9:8e:eb:a9:4b:e8:53:ec:1c:1a:8a:
f7:56:a7:98:c6:36:df:7f:de:6e:e1:6e:96:1d:65:
4a:34:f2:e1:a6:9a:f2:96:d6:db:a8:ff:6a:5f:b8:
33:69:f5:82:58:dd:b4:f4:5f:48:52:02:b5:bd:44:
cc:ea:14:ee:59:a4:45:88:35:7b:fa:a3:bc:ab:c7:
6d:be:df:d8:0e:83:67:06:9c:49:31:c5:a3:17:0d:
a1:85:b9:d9:c3:53:e1:fa:d3:5e:9e:94:87:e6:32:
b9:07:16:c9:78:a1:79:29:81:87:c6:85:b4:46:b4:
f4:1d:30:1c:4e:4e:32:d4:41:98:93:3d:9e:1c:0c:
23:ce:7d:2c:1c:36:21:03:66:6a:8a:d9:aa:fa:e6:
31:45:ce:04:bc:66:3e:fc:73:f6:32:64:04:11:9c:
b2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F3:62:63:FF:B3:44:55:58:3A:E7:A1:3E:0B:9F:F0:EA:5C:B9:4E
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/d_NiY_-zRFVYOuehPguf8OpcuU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.208.0-31.192.210.255
31.192.213.0/24
31.192.215.0/24
89.43.28.0/22
89.43.64.0/22
89.252.128.0/22
89.252.134.0-89.252.137.255
89.252.139.0-89.252.140.255
89.252.143.0/24
89.252.145.0-89.252.146.255
89.252.148.0-89.252.150.255
89.252.155.0/24
89.252.158.0/24
89.252.160.0-89.252.177.255
93.113.60.0/22
93.115.76.0/22
94.102.0.0-94.102.11.255
94.102.13.0-94.102.15.255
95.173.160.0-95.173.172.255
95.173.177.0-95.173.181.255
95.173.183.0-95.173.191.255
159.253.32.0-159.253.36.255
159.253.38.0-159.253.47.255
185.95.84.0/22
IPv6:
2a02:f80::/32
2a03:2100::/32
2a03:2102:1::/48
Signature Algorithm: sha256WithRSAEncryption
6b:b1:96:83:c2:38:1e:c1:10:c0:ac:29:6f:30:a2:c8:fd:ec:
43:74:36:e5:b8:4a:dd:b6:20:5a:25:a5:b7:87:7b:91:e0:85:
17:8d:e6:7d:d1:46:2a:0e:69:7b:97:26:b2:80:a9:4e:38:b2:
a9:db:a7:e1:99:10:17:64:e4:7c:9d:41:41:89:54:8b:38:cd:
89:1f:70:94:2a:0d:4e:17:ba:1a:98:ea:1e:40:c8:99:60:e2:
5a:31:57:4a:41:59:8d:cf:8b:eb:ea:31:23:1b:e3:1c:ca:9e:
fe:fa:8a:2a:a2:fe:7c:df:de:b0:d8:86:39:8b:8e:a7:17:79:
d6:76:ec:f9:82:c5:06:80:5f:79:8c:a7:60:5a:b7:1b:a7:85:
91:8d:77:5e:1d:42:54:64:fb:e3:93:04:e0:d0:08:66:5d:9a:
da:2d:fa:80:8b:46:3e:6d:48:70:8d:3b:a1:24:fe:a2:23:2b:
c4:50:4e:4f:69:39:3e:94:8c:d1:b6:c8:a1:e7:8f:48:56:80:
e8:2c:3a:b0:90:54:4b:2a:cd:2d:d9:fe:3a:2e:b4:5a:74:08:
da:24:ed:b5:36:8c:bc:f5:77:6c:e3:73:1b:01:f2:df:36:ad:
ca:33:54:cf:ec:b6:7b:08:b3:34:7b:eb:61:93:fc:f1:fc:d5:
1e:3d:65:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:52 2024 by rpki-client on console-fra.rpki-client.org