Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/pOd9ClPHm-oivx-75fXSR5drC3k.roa
File: pOd9ClPHm-oivx-75fXSR5drC3k.roa (raw, json)
Hash identifier: iAHm8HaSPpno3n5maHHV4W4zUjMD9Ot2J9XEkxoS8n0=
Subject key identifier: A4:E7:7D:0A:53:C7:9B:EA:22:BF:1F:BB:E5:F5:D2:47:97:6B:0B:79
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 018C2C5D4DCEC818365F347F219464BA015E
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/pOd9ClPHm-oivx-75fXSR5drC3k.roa
Signing time: Sat 02 Dec 2023 21:09:21 +0000
ROA not before: Sat 02 Dec 2023 21:09:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51559
IP address blocks: 95.173.178.0/24 maxlen: 24
95.173.177.0/24 maxlen: 24
95.173.179.0/24 maxlen: 24
95.173.185.0/24 maxlen: 24
95.173.184.0/24 maxlen: 24
95.173.186.0/24 maxlen: 24
95.173.181.0/24 maxlen: 24
95.173.183.0/24 maxlen: 24
95.173.180.0/24 maxlen: 24
95.173.189.0/24 maxlen: 24
95.173.188.0/24 maxlen: 24
95.173.190.0/24 maxlen: 24
95.173.187.0/24 maxlen: 24
95.173.191.0/24 maxlen: 24
93.113.62.0/24 maxlen: 24
93.113.61.0/24 maxlen: 24
93.113.63.0/24 maxlen: 24
93.113.60.0/24 maxlen: 24
95.173.161.0/24 maxlen: 24
95.173.160.0/24 maxlen: 24
95.173.163.0/24 maxlen: 24
95.173.162.0/24 maxlen: 24
95.173.164.0/24 maxlen: 24
95.173.166.0/24 maxlen: 24
95.173.165.0/24 maxlen: 24
95.173.171.0/24 maxlen: 24
95.173.172.0/24 maxlen: 24
95.173.168.0/24 maxlen: 24
95.173.167.0/24 maxlen: 24
95.173.170.0/24 maxlen: 24
95.173.169.0/24 maxlen: 24
31.192.215.0/24 maxlen: 24
89.252.160.0/24 maxlen: 24
89.252.161.0/24 maxlen: 24
89.252.166.0/24 maxlen: 24
89.252.163.0/24 maxlen: 24
89.252.162.0/24 maxlen: 24
89.252.165.0/24 maxlen: 24
89.252.164.0/24 maxlen: 24
89.252.170.0/24 maxlen: 24
89.252.169.0/24 maxlen: 24
89.252.172.0/24 maxlen: 24
89.252.171.0/24 maxlen: 24
89.252.168.0/24 maxlen: 24
89.252.167.0/24 maxlen: 24
89.252.173.0/24 maxlen: 24
89.252.175.0/24 maxlen: 24
89.252.174.0/24 maxlen: 24
89.252.177.0/24 maxlen: 24
89.252.176.0/24 maxlen: 24
31.192.208.0/24 maxlen: 24
31.192.213.0/24 maxlen: 24
31.192.210.0/24 maxlen: 24
31.192.209.0/24 maxlen: 24
159.253.38.0/24 maxlen: 24
159.253.36.0/24 maxlen: 24
159.253.35.0/24 maxlen: 24
159.253.32.0/24 maxlen: 24
159.253.34.0/24 maxlen: 24
159.253.33.0/24 maxlen: 24
159.253.43.0/24 maxlen: 24
159.253.42.0/24 maxlen: 24
159.253.44.0/24 maxlen: 24
159.253.39.0/24 maxlen: 24
159.253.41.0/24 maxlen: 24
159.253.40.0/24 maxlen: 24
159.253.46.0/24 maxlen: 24
159.253.45.0/24 maxlen: 24
159.253.47.0/24 maxlen: 24
89.43.64.0/24 maxlen: 24
89.43.67.0/24 maxlen: 24
89.43.66.0/24 maxlen: 24
89.43.65.0/24 maxlen: 24
89.252.173.119/32 maxlen: 32
89.43.30.0/24 maxlen: 24
89.43.29.0/24 maxlen: 24
89.43.31.0/24 maxlen: 24
89.43.28.0/24 maxlen: 24
89.252.131.0/24 maxlen: 24
89.252.128.0/24 maxlen: 24
89.252.130.0/24 maxlen: 24
89.252.129.0/24 maxlen: 24
89.252.139.0/24 maxlen: 24
89.252.135.0/24 maxlen: 24
89.252.134.0/24 maxlen: 24
89.252.137.0/24 maxlen: 24
89.252.136.0/24 maxlen: 24
89.252.145.0/24 maxlen: 24
89.252.143.0/24 maxlen: 24
89.252.140.0/24 maxlen: 24
89.252.146.0/24 maxlen: 24
89.252.147.0/24 maxlen: 24
89.252.152.0/24 maxlen: 24
89.252.149.0/24 maxlen: 24
89.252.148.0/24 maxlen: 24
89.252.150.0/24 maxlen: 24
89.252.156.0/24 maxlen: 24
89.252.155.0/24 maxlen: 24
89.252.158.0/24 maxlen: 24
94.102.2.0/24 maxlen: 24
94.102.1.0/24 maxlen: 24
94.102.4.0/24 maxlen: 24
94.102.3.0/24 maxlen: 24
94.102.0.0/24 maxlen: 24
94.102.6.0/24 maxlen: 24
94.102.5.0/24 maxlen: 24
94.102.7.0/24 maxlen: 24
94.102.9.0/24 maxlen: 24
94.102.8.0/24 maxlen: 24
94.102.11.0/24 maxlen: 24
94.102.10.0/24 maxlen: 24
185.95.85.0/24 maxlen: 24
185.95.84.0/24 maxlen: 24
94.102.15.0/24 maxlen: 24
94.102.13.0/24 maxlen: 24
94.102.14.0/24 maxlen: 24
185.95.87.0/24 maxlen: 24
185.95.86.0/24 maxlen: 24
93.115.78.0/24 maxlen: 24
93.115.77.0/24 maxlen: 24
93.115.76.0/24 maxlen: 24
93.115.79.0/24 maxlen: 24
2a03:2100:28::/48 maxlen: 48
2a03:2100:3::/48 maxlen: 48
2a03:2100:39::/48 maxlen: 48
2a03:2100:3c::/48 maxlen: 48
2a03:2100:17::/48 maxlen: 48
2a03:2100::/48 maxlen: 48
2a03:2100:36::/48 maxlen: 48
2a03:2100:11::/48 maxlen: 48
2a03:2100:14::/48 maxlen: 48
2a03:2100:25::/48 maxlen: 48
2a03:2100:33::/48 maxlen: 48
2a03:2100:e::/48 maxlen: 48
2a03:2100:22::/48 maxlen: 48
2a03:2100:b::/48 maxlen: 48
2a03:2100:44::/48 maxlen: 48
2a03:2100:1f::/48 maxlen: 48
2a03:2100:8::/48 maxlen: 48
2a03:2100:3e::/48 maxlen: 48
2a03:2100:19::/48 maxlen: 48
2a03:2100:1c::/48 maxlen: 48
2a03:2100:2d::/48 maxlen: 48
2a03:2100:3b::/48 maxlen: 48
2a03:2100:16::/48 maxlen: 48
2a03:2100:2a::/48 maxlen: 48
2a03:2100:5::/48 maxlen: 48
2a03:2100::/32 maxlen: 48
2a03:2100:38::/48 maxlen: 48
2a03:2100:13::/48 maxlen: 48
2a03:2100:27::/48 maxlen: 48
2a03:2100:2::/48 maxlen: 48
2a03:2100:10::/48 maxlen: 48
2a03:2100:21::/48 maxlen: 48
2a03:2100:24::/48 maxlen: 48
2a03:2100:35::/48 maxlen: 48
2a03:2100:1e::/48 maxlen: 48
2a03:2100:32::/48 maxlen: 48
2a03:2100:d::/48 maxlen: 48
2a03:2100:40::/48 maxlen: 48
2a03:2100:1b::/48 maxlen: 48
2a03:2100:2f::/48 maxlen: 48
2a03:2100:a::/48 maxlen: 48
2a03:2100:18::/48 maxlen: 48
2a03:2100:29::/48 maxlen: 48
2a03:2100:2c::/48 maxlen: 48
2a03:2100:7::/48 maxlen: 48
2a03:2100:3d::/48 maxlen: 48
2a03:2100:26::/48 maxlen: 48
2a03:2100:1::/48 maxlen: 48
2a03:2100:4::/48 maxlen: 48
2a03:2100:3a::/48 maxlen: 48
2a03:2100:15::/48 maxlen: 48
2a03:2100:23::/48 maxlen: 48
2a03:2100:37::/48 maxlen: 48
2a03:2100:12::/48 maxlen: 48
2a03:2100:20::/48 maxlen: 48
2a03:2100:34::/48 maxlen: 48
2a03:2100:f::/48 maxlen: 48
2a03:2102:1::/48 maxlen: 48
2a03:2100:2e::/48 maxlen: 48
2a03:2100:9::/48 maxlen: 48
2a03:2100:c::/48 maxlen: 48
2a03:2100:1d::/48 maxlen: 48
2a03:2100:2b::/48 maxlen: 48
2a03:2100:6::/48 maxlen: 48
2a02:f80::/32 maxlen: 32
2a03:2100:3f::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 05 Dec 2023 11:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2c:5d:4d:ce:c8:18:36:5f:34:7f:21:94:64:ba:01:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Dec 2 21:09:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4e77d0a53c79bea22bf1fbbe5f5d247976b0b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0c:d1:c2:3a:20:40:01:17:c9:5f:8b:85:e9:
87:f8:3f:4f:04:e4:14:2f:ba:17:37:bd:7b:97:c2:
e0:71:f1:63:19:1c:08:b6:f1:cf:16:40:1c:17:f6:
8c:f3:7c:c1:ab:ce:11:37:4e:0c:bd:82:67:eb:75:
99:4b:21:ba:ee:a8:40:df:f2:aa:fd:86:7e:a1:a8:
ed:13:59:ef:2c:47:e4:76:78:95:42:a5:b6:5c:67:
8d:89:87:f7:fe:af:3c:2c:4a:58:91:89:68:01:76:
5d:36:09:2e:d0:af:e6:b3:d9:43:1d:29:08:3e:30:
7b:dd:04:2f:cb:24:b0:88:e7:6d:3b:d2:aa:04:1b:
00:32:a1:d9:e4:ef:e9:f3:08:ef:dc:0a:d0:ba:95:
26:51:b0:d6:f4:7c:f4:d0:ec:a5:ed:8f:6c:0a:33:
19:cb:55:86:3b:84:2e:cb:51:da:f9:09:22:ae:93:
fc:f0:07:8d:8f:64:8a:86:be:c6:19:ea:89:f0:e1:
07:ae:9d:e2:9f:a0:96:b6:18:40:97:17:68:a0:6f:
36:6f:25:6e:21:9f:96:cb:c7:52:c9:26:f8:54:fd:
0d:21:93:c8:dc:61:32:2e:84:97:4a:46:54:25:d4:
3c:83:ff:a7:a3:a5:64:a0:df:5b:20:e7:d2:16:e5:
27:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E7:7D:0A:53:C7:9B:EA:22:BF:1F:BB:E5:F5:D2:47:97:6B:0B:79
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/pOd9ClPHm-oivx-75fXSR5drC3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.208.0-31.192.210.255
31.192.213.0/24
31.192.215.0/24
89.43.28.0/22
89.43.64.0/22
89.252.128.0/22
89.252.134.0-89.252.137.255
89.252.139.0-89.252.140.255
89.252.143.0/24
89.252.145.0-89.252.150.255
89.252.152.0/24
89.252.155.0-89.252.156.255
89.252.158.0/24
89.252.160.0-89.252.177.255
93.113.60.0/22
93.115.76.0/22
94.102.0.0-94.102.11.255
94.102.13.0-94.102.15.255
95.173.160.0-95.173.172.255
95.173.177.0-95.173.181.255
95.173.183.0-95.173.191.255
159.253.32.0-159.253.36.255
159.253.38.0-159.253.47.255
185.95.84.0/22
IPv6:
2a02:f80::/32
2a03:2100::/32
2a03:2102:1::/48
Signature Algorithm: sha256WithRSAEncryption
82:08:0e:6b:be:04:55:10:db:ae:fa:7f:80:5b:cf:8a:9a:e0:
d6:db:a0:e8:36:67:25:7a:25:d4:20:f3:74:cf:55:41:d2:b6:
50:b6:ad:a9:33:98:df:fb:16:fd:a0:1d:36:4b:9c:95:d9:9e:
5a:6d:19:94:8b:4f:bd:b8:c3:b7:ce:a2:7a:45:92:1d:be:4c:
d9:4b:81:34:cb:bc:75:47:59:c2:0f:b7:c1:a7:1a:58:ae:f9:
8e:bc:91:7a:50:cd:57:89:86:65:36:3b:6e:27:a5:18:9f:46:
ce:41:c1:82:50:45:a1:38:b6:39:b2:6f:e8:7e:75:8f:c6:a6:
ed:03:b7:cd:1d:a8:2f:57:3d:3a:33:4f:8a:a7:19:a0:90:a6:
21:28:c2:db:35:fc:5b:d1:58:6a:50:e6:98:f5:78:be:81:0d:
86:f9:fd:8f:3d:3f:b3:5a:61:c5:f1:3a:f6:f4:b9:f9:7d:3e:
1c:bf:63:35:b2:1b:be:fa:77:7a:71:73:39:8a:d1:f9:3a:34:
a4:72:c7:c5:ad:2e:f6:b8:a6:49:9a:87:d7:af:29:c9:7f:fa:
de:2e:0d:a8:40:eb:fb:6a:e8:a2:96:4d:30:f0:ae:f2:81:e1:
b2:f6:aa:93:15:60:33:2e:89:11:a6:3d:f1:d2:7e:d3:97:f8:
53:e8:5c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:08 2024 by rpki-client on console-ams.rpki-client.org