Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/oEmmCo22WUHThFzzmorAbp7QJ8A.roa
File: oEmmCo22WUHThFzzmorAbp7QJ8A.roa (raw, json)
Hash identifier: iCmgUc04Pd0A+QHxBVbYp/OpU+aKc9MOLtqU/ewEbYA=
Subject key identifier: A0:49:A6:0A:8D:B6:59:41:D3:84:5C:F3:9A:8A:C0:6E:9E:D0:27:C0
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 018D3054AB0BD07D3B096AA1C0FC5804BDF6
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/oEmmCo22WUHThFzzmorAbp7QJ8A.roa
Signing time: Mon 22 Jan 2024 08:41:11 +0000
ROA not before: Mon 22 Jan 2024 08:41:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51559
IP address blocks: 31.192.208.0/24 maxlen: 24
31.192.209.0/24 maxlen: 24
31.192.210.0/24 maxlen: 24
31.192.213.0/24 maxlen: 24
31.192.215.0/24 maxlen: 24
89.43.28.0/24 maxlen: 24
89.43.29.0/24 maxlen: 24
89.43.30.0/24 maxlen: 24
89.43.31.0/24 maxlen: 24
89.43.64.0/24 maxlen: 24
89.43.65.0/24 maxlen: 24
89.43.66.0/24 maxlen: 24
89.43.67.0/24 maxlen: 24
89.252.128.0/24 maxlen: 24
89.252.129.0/24 maxlen: 24
89.252.130.0/24 maxlen: 24
89.252.131.0/24 maxlen: 24
89.252.134.0/24 maxlen: 24
89.252.135.0/24 maxlen: 24
89.252.136.0/24 maxlen: 24
89.252.137.0/24 maxlen: 24
89.252.139.0/24 maxlen: 24
89.252.140.0/24 maxlen: 24
89.252.143.0/24 maxlen: 24
89.252.145.0/24 maxlen: 24
89.252.146.0/24 maxlen: 24
89.252.148.0/24 maxlen: 24
89.252.150.0/24 maxlen: 24
89.252.155.0/24 maxlen: 24
89.252.158.0/24 maxlen: 24
89.252.160.0/24 maxlen: 24
89.252.161.0/24 maxlen: 24
89.252.162.0/24 maxlen: 24
89.252.163.0/24 maxlen: 24
89.252.164.0/24 maxlen: 24
89.252.165.0/24 maxlen: 24
89.252.166.0/24 maxlen: 24
89.252.167.0/24 maxlen: 24
89.252.168.0/24 maxlen: 24
89.252.169.0/24 maxlen: 24
89.252.170.0/24 maxlen: 24
89.252.171.0/24 maxlen: 24
89.252.172.0/24 maxlen: 24
89.252.173.0/24 maxlen: 24
89.252.173.119/32 maxlen: 32
89.252.174.0/24 maxlen: 24
89.252.175.0/24 maxlen: 24
89.252.176.0/24 maxlen: 24
89.252.177.0/24 maxlen: 24
93.113.60.0/24 maxlen: 24
93.113.61.0/24 maxlen: 24
93.113.62.0/24 maxlen: 24
93.113.63.0/24 maxlen: 24
93.115.76.0/24 maxlen: 24
93.115.77.0/24 maxlen: 24
93.115.78.0/24 maxlen: 24
93.115.79.0/24 maxlen: 24
94.102.0.0/24 maxlen: 24
94.102.1.0/24 maxlen: 24
94.102.2.0/24 maxlen: 24
94.102.3.0/24 maxlen: 24
94.102.4.0/24 maxlen: 24
94.102.5.0/24 maxlen: 24
94.102.6.0/24 maxlen: 24
94.102.7.0/24 maxlen: 24
94.102.8.0/24 maxlen: 24
94.102.9.0/24 maxlen: 24
94.102.10.0/24 maxlen: 24
94.102.11.0/24 maxlen: 24
94.102.13.0/24 maxlen: 24
94.102.14.0/24 maxlen: 24
94.102.15.0/24 maxlen: 24
95.173.160.0/24 maxlen: 24
95.173.161.0/24 maxlen: 24
95.173.162.0/24 maxlen: 24
95.173.163.0/24 maxlen: 24
95.173.164.0/24 maxlen: 24
95.173.165.0/24 maxlen: 24
95.173.166.0/24 maxlen: 24
95.173.167.0/24 maxlen: 24
95.173.168.0/24 maxlen: 24
95.173.169.0/24 maxlen: 24
95.173.170.0/24 maxlen: 24
95.173.171.0/24 maxlen: 24
95.173.172.0/24 maxlen: 24
95.173.177.0/24 maxlen: 24
95.173.178.0/24 maxlen: 24
95.173.179.0/24 maxlen: 24
95.173.180.0/24 maxlen: 24
95.173.181.0/24 maxlen: 24
95.173.183.0/24 maxlen: 24
95.173.184.0/24 maxlen: 24
95.173.185.0/24 maxlen: 24
95.173.186.0/24 maxlen: 24
95.173.187.0/24 maxlen: 24
95.173.188.0/24 maxlen: 24
95.173.189.0/24 maxlen: 24
95.173.190.0/24 maxlen: 24
95.173.191.0/24 maxlen: 24
159.253.32.0/24 maxlen: 24
159.253.33.0/24 maxlen: 24
159.253.34.0/24 maxlen: 24
159.253.35.0/24 maxlen: 24
159.253.36.0/24 maxlen: 24
159.253.38.0/24 maxlen: 24
159.253.39.0/24 maxlen: 24
159.253.40.0/24 maxlen: 24
159.253.41.0/24 maxlen: 24
159.253.42.0/24 maxlen: 24
159.253.43.0/24 maxlen: 24
159.253.44.0/24 maxlen: 24
159.253.45.0/24 maxlen: 24
159.253.46.0/24 maxlen: 24
159.253.47.0/24 maxlen: 24
185.95.84.0/24 maxlen: 24
185.95.85.0/24 maxlen: 24
185.95.86.0/24 maxlen: 24
185.95.87.0/24 maxlen: 24
2a02:f80::/32 maxlen: 32
2a03:2100::/32 maxlen: 48
2a03:2100::/48 maxlen: 48
2a03:2100:1::/48 maxlen: 48
2a03:2100:2::/48 maxlen: 48
2a03:2100:3::/48 maxlen: 48
2a03:2100:4::/48 maxlen: 48
2a03:2100:5::/48 maxlen: 48
2a03:2100:6::/48 maxlen: 48
2a03:2100:7::/48 maxlen: 48
2a03:2100:8::/48 maxlen: 48
2a03:2100:9::/48 maxlen: 48
2a03:2100:a::/48 maxlen: 48
2a03:2100:b::/48 maxlen: 48
2a03:2100:c::/48 maxlen: 48
2a03:2100:d::/48 maxlen: 48
2a03:2100:e::/48 maxlen: 48
2a03:2100:f::/48 maxlen: 48
2a03:2100:10::/48 maxlen: 48
2a03:2100:11::/48 maxlen: 48
2a03:2100:12::/48 maxlen: 48
2a03:2100:13::/48 maxlen: 48
2a03:2100:14::/48 maxlen: 48
2a03:2100:15::/48 maxlen: 48
2a03:2100:16::/48 maxlen: 48
2a03:2100:17::/48 maxlen: 48
2a03:2100:18::/48 maxlen: 48
2a03:2100:19::/48 maxlen: 48
2a03:2100:1b::/48 maxlen: 48
2a03:2100:1c::/48 maxlen: 48
2a03:2100:1d::/48 maxlen: 48
2a03:2100:1e::/48 maxlen: 48
2a03:2100:1f::/48 maxlen: 48
2a03:2100:20::/48 maxlen: 48
2a03:2100:21::/48 maxlen: 48
2a03:2100:22::/48 maxlen: 48
2a03:2100:23::/48 maxlen: 48
2a03:2100:24::/48 maxlen: 48
2a03:2100:25::/48 maxlen: 48
2a03:2100:26::/48 maxlen: 48
2a03:2100:27::/48 maxlen: 48
2a03:2100:28::/48 maxlen: 48
2a03:2100:29::/48 maxlen: 48
2a03:2100:2a::/48 maxlen: 48
2a03:2100:2b::/48 maxlen: 48
2a03:2100:2c::/48 maxlen: 48
2a03:2100:2d::/48 maxlen: 48
2a03:2100:2e::/48 maxlen: 48
2a03:2100:2f::/48 maxlen: 48
2a03:2100:32::/48 maxlen: 48
2a03:2100:33::/48 maxlen: 48
2a03:2100:34::/48 maxlen: 48
2a03:2100:35::/48 maxlen: 48
2a03:2100:36::/48 maxlen: 48
2a03:2100:37::/48 maxlen: 48
2a03:2100:38::/48 maxlen: 48
2a03:2100:39::/48 maxlen: 48
2a03:2100:3a::/48 maxlen: 48
2a03:2100:3b::/48 maxlen: 48
2a03:2100:3c::/48 maxlen: 48
2a03:2100:3d::/48 maxlen: 48
2a03:2100:3e::/48 maxlen: 48
2a03:2100:3f::/48 maxlen: 48
2a03:2100:40::/48 maxlen: 48
2a03:2100:44::/48 maxlen: 48
2a03:2102:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 11:26:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:30:54:ab:0b:d0:7d:3b:09:6a:a1:c0:fc:58:04:bd:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Jan 22 08:41:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a049a60a8db65941d3845cf39a8ac06e9ed027c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:14:4a:4e:ba:1b:aa:93:fc:64:99:80:09:61:
17:e6:15:37:0d:11:e4:d4:3d:01:1b:8b:20:ff:ad:
fe:b7:66:f0:67:18:59:f4:dc:43:17:96:1d:ae:6e:
8f:9d:31:78:83:23:a1:d5:2f:ec:dc:37:11:f2:5c:
3a:7a:75:5d:85:e6:8b:e2:19:d7:12:cc:aa:16:73:
4d:98:8c:a6:6c:52:79:a2:e2:5b:29:76:e2:fb:68:
97:0c:7b:a1:fa:64:b5:b5:aa:95:2e:86:2e:fa:2f:
e1:06:09:4f:df:22:2b:8f:6d:cd:f9:cf:e6:e6:bc:
cb:8b:b1:fc:ae:59:93:55:bd:78:39:52:23:62:be:
88:ca:71:df:ff:84:07:d1:b3:3d:7a:b2:7e:69:05:
32:47:99:1d:00:75:b0:16:e3:97:42:0d:b0:2c:8c:
6d:f5:30:31:5f:f1:81:d0:e5:aa:3f:f3:fb:1f:0e:
42:6f:0a:b4:ca:0c:ea:e4:8e:d4:81:2e:c4:c5:b6:
cb:fd:11:cc:be:8c:7f:35:46:3a:db:8e:c4:d4:f7:
5a:d3:13:41:b5:e9:60:18:83:7b:c6:e9:53:7b:e5:
90:32:02:89:40:4a:b8:d3:d8:2a:89:43:e9:d9:e2:
1c:69:d5:e3:75:8c:10:56:14:71:3a:15:39:54:1e:
df:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:49:A6:0A:8D:B6:59:41:D3:84:5C:F3:9A:8A:C0:6E:9E:D0:27:C0
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/oEmmCo22WUHThFzzmorAbp7QJ8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.208.0-31.192.210.255
31.192.213.0/24
31.192.215.0/24
89.43.28.0/22
89.43.64.0/22
89.252.128.0/22
89.252.134.0-89.252.137.255
89.252.139.0-89.252.140.255
89.252.143.0/24
89.252.145.0-89.252.146.255
89.252.148.0/24
89.252.150.0/24
89.252.155.0/24
89.252.158.0/24
89.252.160.0-89.252.177.255
93.113.60.0/22
93.115.76.0/22
94.102.0.0-94.102.11.255
94.102.13.0-94.102.15.255
95.173.160.0-95.173.172.255
95.173.177.0-95.173.181.255
95.173.183.0-95.173.191.255
159.253.32.0-159.253.36.255
159.253.38.0-159.253.47.255
185.95.84.0/22
IPv6:
2a02:f80::/32
2a03:2100::/32
2a03:2102:1::/48
Signature Algorithm: sha256WithRSAEncryption
21:32:f1:bc:bc:00:79:17:01:48:5d:16:98:d6:7f:68:07:ad:
49:84:62:9a:b9:c2:96:ba:a7:8e:73:d9:8b:3a:41:31:20:2a:
de:10:47:40:85:d9:21:a9:0a:4b:40:fe:a1:07:04:d0:60:81:
37:fd:4d:f7:f6:0e:0a:a4:da:6f:d0:0e:24:ee:f4:06:a1:40:
48:2d:fd:37:36:ea:e6:3a:e1:08:f7:6f:5e:aa:16:e9:bb:39:
8d:13:b2:ea:08:00:8b:da:8d:55:9c:7f:bf:59:e9:95:9f:15:
ad:46:9a:75:94:9b:6d:34:df:c0:95:4b:a7:e0:d9:8c:45:fb:
a9:28:90:2d:d9:9a:76:b2:50:e6:59:20:fc:63:f7:6f:bf:f0:
e5:91:2e:5b:c4:2c:32:7b:88:e5:3f:dd:d3:0b:5b:de:a4:0e:
4e:f6:5c:ae:e3:97:4e:1d:aa:b0:03:ad:4b:97:1e:b6:3a:48:
0a:4e:44:15:58:4d:09:cf:30:e7:cd:73:51:1c:25:63:8b:ce:
5f:3b:95:d3:e1:60:43:b8:bb:39:91:93:4a:5f:6f:53:c7:b0:
41:b9:75:e8:ac:e8:85:4e:00:85:97:10:eb:28:ed:62:3b:2a:
5d:d5:4f:f8:00:ec:fd:05:e2:c9:19:ea:2d:7c:e6:9b:51:2a:
80:8c:f9:ff
-----BEGIN CERTIFICATE-----
MIIGEzCCBPugAwIBAgISAY0wVKsL0H07CWqhwPxYBL32MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZTRhZWQzZWY3MmJlZTMxNDE2NjBkMTE0OWUxNmQwNzky
MDVmM2MwHhcNMjQwMTIyMDg0MTExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDQ5YTYwYThkYjY1OTQxZDM4NDVjZjM5YThhYzA2ZTllZDAyN2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhRKTrobqpP8ZJmACWEX5hU3DRHk
1D0BG4sg/63+t2bwZxhZ9NxDF5Ydrm6PnTF4gyOh1S/s3DcR8lw6enVdheaL4hnX
EsyqFnNNmIymbFJ5ouJbKXbi+2iXDHuh+mS1taqVLoYu+i/hBglP3yIrj23N+c/m
5rzLi7H8rlmTVb14OVIjYr6IynHf/4QH0bM9erJ+aQUyR5kdAHWwFuOXQg2wLIxt
9TAxX/GB0OWqP/P7Hw5Cbwq0ygzq5I7UgS7ExbbL/RHMvox/NUY6247E1Pda0xNB
telgGIN7xulTe+WQMgKJQEq409gqiUPp2eIcadXjdYwQVhRxOhU5VB7feQIDAQAB
o4IDHzCCAxswHQYDVR0OBBYEFKBJpgqNtllB04Rc85qKwG6e0CfAMB8GA1UdIwQY
MBaAFCXkrtPvcr7jFBZg0RSeFtB5IF88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEt
ZWQzZTM4Zjk1NzdmLzEvb0VtbUNvMjJXVUhUaEZ6em1vckFicDdRSjhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEtZWQzZTM4Zjk1Nzdm
LzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBMwYIKwYBBQUHAQcBAf8EggEiMIIBHjCB/AQCAAEwgfUw
DAMEBB/A0AMEAB/A0gMEAB/A1QMEAB/A1wMEAlkrHAMEAlkrQAMEAln8gDAMAwQB
WfyGAwQBWfyIMAwDBABZ/IsDBABZ/IwDBABZ/I8wDAMEAFn8kQMEAFn8kgMEAFn8
lAMEAFn8lgMEAFn8mwMEAFn8njAMAwQFWfygAwQBWfywAwQCXXE8AwQCXXNMMAsD
AwFeZgMEAl5mCDAMAwQAXmYNAwQEXmYAMAwDBAVfraADBABfrawwDAMEAF+tsQME
AV+ttDAMAwQAX623AwQGX62AMAwDBAWf/SADBACf/SQwDAMEAZ/9JgMEBJ/9IAME
ArlfVDAdBAIAAjAXAwUAKgIPgAMFACoDIQADBwAqAyECAAEwDQYJKoZIhvcNAQEL
BQADggEBACEy8by8AHkXAUhdFpjWf2gHrUmEYpq5wpa6p45z2Ys6QTEgKt4QR0CF
2SGpCktA/qEHBNBggTf9Tff2Dgqk2m/QDiTu9AahQEgt/Tc26uY64Qj3b16qFum7
OY0TsuoIAIvajVWcf79Z6ZWfFa1GmnWUm20038CVS6fg2YxF+6kokC3ZmnayUOZZ
IPxj92+/8OWRLlvELDJ7iOU/3dMLW96kDk72XK7jl04dqrADrUuXHrY6SApORBVY
TQnPMOfNc1EcJWOLzl87ldPhYEO4uzmRk0pfb1PHsEG5deis6IVOAIWXEOso7WI7
Kl3VT/gA7P0F4skZ6i185ptRKoCM+f8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:52 2024 by rpki-client on console-fra.rpki-client.org