Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/qS-AxFH5qSIC2xgu6hfd7zALfLk.roa
File: qS-AxFH5qSIC2xgu6hfd7zALfLk.roa (raw, json)
Hash identifier: 3AcpzIZtngCH3YpJz6C/UOSPNSU5B3svnifapfFkn0E=
Subject key identifier: A9:2F:80:C4:51:F9:A9:22:02:DB:18:2E:EA:17:DD:EF:30:0B:7C:B9
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 018C58C701E1196AA313FF209105E149253D
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/qS-AxFH5qSIC2xgu6hfd7zALfLk.roa
Signing time: Mon 11 Dec 2023 12:08:06 +0000
ROA not before: Mon 11 Dec 2023 12:08:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51559
IP address blocks: 95.173.178.0/24 maxlen: 24
95.173.177.0/24 maxlen: 24
95.173.179.0/24 maxlen: 24
95.173.185.0/24 maxlen: 24
95.173.184.0/24 maxlen: 24
95.173.186.0/24 maxlen: 24
95.173.181.0/24 maxlen: 24
95.173.183.0/24 maxlen: 24
95.173.180.0/24 maxlen: 24
95.173.189.0/24 maxlen: 24
95.173.188.0/24 maxlen: 24
95.173.190.0/24 maxlen: 24
95.173.187.0/24 maxlen: 24
95.173.191.0/24 maxlen: 24
93.113.62.0/24 maxlen: 24
93.113.61.0/24 maxlen: 24
93.113.63.0/24 maxlen: 24
93.113.60.0/24 maxlen: 24
95.173.161.0/24 maxlen: 24
95.173.160.0/24 maxlen: 24
95.173.163.0/24 maxlen: 24
95.173.162.0/24 maxlen: 24
95.173.164.0/24 maxlen: 24
95.173.166.0/24 maxlen: 24
95.173.165.0/24 maxlen: 24
95.173.171.0/24 maxlen: 24
95.173.172.0/24 maxlen: 24
95.173.168.0/24 maxlen: 24
95.173.167.0/24 maxlen: 24
95.173.170.0/24 maxlen: 24
95.173.169.0/24 maxlen: 24
31.192.215.0/24 maxlen: 24
89.252.160.0/24 maxlen: 24
89.252.161.0/24 maxlen: 24
89.252.166.0/24 maxlen: 24
89.252.163.0/24 maxlen: 24
89.252.162.0/24 maxlen: 24
89.252.165.0/24 maxlen: 24
89.252.164.0/24 maxlen: 24
89.252.170.0/24 maxlen: 24
89.252.169.0/24 maxlen: 24
89.252.172.0/24 maxlen: 24
89.252.171.0/24 maxlen: 24
89.252.168.0/24 maxlen: 24
89.252.167.0/24 maxlen: 24
89.252.173.0/24 maxlen: 24
89.252.175.0/24 maxlen: 24
89.252.174.0/24 maxlen: 24
89.252.177.0/24 maxlen: 24
89.252.176.0/24 maxlen: 24
31.192.208.0/24 maxlen: 24
31.192.213.0/24 maxlen: 24
31.192.210.0/24 maxlen: 24
31.192.209.0/24 maxlen: 24
159.253.38.0/24 maxlen: 24
159.253.36.0/24 maxlen: 24
159.253.35.0/24 maxlen: 24
159.253.32.0/24 maxlen: 24
159.253.34.0/24 maxlen: 24
159.253.33.0/24 maxlen: 24
159.253.43.0/24 maxlen: 24
159.253.42.0/24 maxlen: 24
159.253.44.0/24 maxlen: 24
159.253.39.0/24 maxlen: 24
159.253.41.0/24 maxlen: 24
159.253.40.0/24 maxlen: 24
159.253.46.0/24 maxlen: 24
159.253.45.0/24 maxlen: 24
159.253.47.0/24 maxlen: 24
89.43.64.0/24 maxlen: 24
89.43.67.0/24 maxlen: 24
89.43.66.0/24 maxlen: 24
89.43.65.0/24 maxlen: 24
89.252.173.119/32 maxlen: 32
89.43.30.0/24 maxlen: 24
89.43.29.0/24 maxlen: 24
89.43.31.0/24 maxlen: 24
89.43.28.0/24 maxlen: 24
89.252.131.0/24 maxlen: 24
89.252.128.0/24 maxlen: 24
89.252.130.0/24 maxlen: 24
89.252.129.0/24 maxlen: 24
89.252.139.0/24 maxlen: 24
89.252.135.0/24 maxlen: 24
89.252.134.0/24 maxlen: 24
89.252.137.0/24 maxlen: 24
89.252.136.0/24 maxlen: 24
89.252.145.0/24 maxlen: 24
89.252.143.0/24 maxlen: 24
89.252.140.0/24 maxlen: 24
89.252.146.0/24 maxlen: 24
89.252.147.0/24 maxlen: 24
89.252.149.0/24 maxlen: 24
89.252.148.0/24 maxlen: 24
89.252.150.0/24 maxlen: 24
89.252.155.0/24 maxlen: 24
89.252.158.0/24 maxlen: 24
94.102.2.0/24 maxlen: 24
94.102.1.0/24 maxlen: 24
94.102.4.0/24 maxlen: 24
94.102.3.0/24 maxlen: 24
94.102.0.0/24 maxlen: 24
94.102.6.0/24 maxlen: 24
94.102.5.0/24 maxlen: 24
94.102.7.0/24 maxlen: 24
94.102.9.0/24 maxlen: 24
94.102.8.0/24 maxlen: 24
94.102.11.0/24 maxlen: 24
94.102.10.0/24 maxlen: 24
185.95.85.0/24 maxlen: 24
185.95.84.0/24 maxlen: 24
94.102.15.0/24 maxlen: 24
94.102.13.0/24 maxlen: 24
94.102.14.0/24 maxlen: 24
185.95.87.0/24 maxlen: 24
185.95.86.0/24 maxlen: 24
93.115.78.0/24 maxlen: 24
93.115.77.0/24 maxlen: 24
93.115.76.0/24 maxlen: 24
93.115.79.0/24 maxlen: 24
2a03:2100:28::/48 maxlen: 48
2a03:2100:3::/48 maxlen: 48
2a03:2100:39::/48 maxlen: 48
2a03:2100:3c::/48 maxlen: 48
2a03:2100:17::/48 maxlen: 48
2a03:2100::/48 maxlen: 48
2a03:2100:36::/48 maxlen: 48
2a03:2100:11::/48 maxlen: 48
2a03:2100:14::/48 maxlen: 48
2a03:2100:25::/48 maxlen: 48
2a03:2100:33::/48 maxlen: 48
2a03:2100:e::/48 maxlen: 48
2a03:2100:22::/48 maxlen: 48
2a03:2100:b::/48 maxlen: 48
2a03:2100:44::/48 maxlen: 48
2a03:2100:1f::/48 maxlen: 48
2a03:2100:8::/48 maxlen: 48
2a03:2100:3e::/48 maxlen: 48
2a03:2100:19::/48 maxlen: 48
2a03:2100:1c::/48 maxlen: 48
2a03:2100:2d::/48 maxlen: 48
2a03:2100:3b::/48 maxlen: 48
2a03:2100:16::/48 maxlen: 48
2a03:2100:2a::/48 maxlen: 48
2a03:2100:5::/48 maxlen: 48
2a03:2100::/32 maxlen: 48
2a03:2100:38::/48 maxlen: 48
2a03:2100:13::/48 maxlen: 48
2a03:2100:27::/48 maxlen: 48
2a03:2100:2::/48 maxlen: 48
2a03:2100:10::/48 maxlen: 48
2a03:2100:21::/48 maxlen: 48
2a03:2100:24::/48 maxlen: 48
2a03:2100:35::/48 maxlen: 48
2a03:2100:1e::/48 maxlen: 48
2a03:2100:32::/48 maxlen: 48
2a03:2100:d::/48 maxlen: 48
2a03:2100:40::/48 maxlen: 48
2a03:2100:1b::/48 maxlen: 48
2a03:2100:2f::/48 maxlen: 48
2a03:2100:a::/48 maxlen: 48
2a03:2100:18::/48 maxlen: 48
2a03:2100:29::/48 maxlen: 48
2a03:2100:2c::/48 maxlen: 48
2a03:2100:7::/48 maxlen: 48
2a03:2100:3d::/48 maxlen: 48
2a03:2100:26::/48 maxlen: 48
2a03:2100:1::/48 maxlen: 48
2a03:2100:4::/48 maxlen: 48
2a03:2100:3a::/48 maxlen: 48
2a03:2100:15::/48 maxlen: 48
2a03:2100:23::/48 maxlen: 48
2a03:2100:37::/48 maxlen: 48
2a03:2100:12::/48 maxlen: 48
2a03:2100:20::/48 maxlen: 48
2a03:2100:34::/48 maxlen: 48
2a03:2100:f::/48 maxlen: 48
2a03:2102:1::/48 maxlen: 48
2a03:2100:2e::/48 maxlen: 48
2a03:2100:9::/48 maxlen: 48
2a03:2100:c::/48 maxlen: 48
2a03:2100:1d::/48 maxlen: 48
2a03:2100:2b::/48 maxlen: 48
2a03:2100:6::/48 maxlen: 48
2a02:f80::/32 maxlen: 32
2a03:2100:3f::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 21 Dec 2023 18:19:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:58:c7:01:e1:19:6a:a3:13:ff:20:91:05:e1:49:25:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Dec 11 12:08:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a92f80c451f9a92202db182eea17ddef300b7cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f0:5a:62:f9:4e:27:be:cd:44:ae:4d:45:ae:
62:af:86:a3:ec:e7:42:f3:ec:90:a4:08:8b:cf:79:
19:85:d7:92:2d:5b:3a:09:38:4a:fc:e8:04:c7:2f:
83:b0:71:e7:f0:fa:22:d4:aa:83:b0:d9:dc:46:01:
a5:88:ea:b6:38:c6:36:31:b2:51:de:ac:27:3a:ef:
4d:bc:8e:12:66:f7:d2:dd:25:60:f0:82:a4:7a:51:
3c:46:a0:8f:ed:ec:d9:c0:4c:a3:1b:d9:4d:ae:3d:
9d:58:0a:f8:1a:29:99:65:b1:da:96:42:51:38:37:
2b:a9:dd:59:42:70:47:7f:0a:92:be:a6:0d:af:41:
32:f0:81:99:22:6d:c2:15:3b:fb:1f:ec:7d:6f:f2:
89:8f:f3:ee:f4:8b:68:aa:66:45:51:7b:64:66:e1:
ea:e4:fe:b9:e4:9b:2b:9c:88:ab:76:cb:b9:bf:95:
ee:17:b9:4a:09:eb:fe:e7:da:cc:fa:a1:7c:75:3e:
42:d3:e9:69:16:fc:9e:ba:10:e3:28:5e:0e:8f:f9:
72:74:19:5a:be:83:e3:80:4d:1b:2b:35:22:05:c5:
43:69:b3:a0:06:b6:5a:1f:70:73:f7:c3:aa:d0:2d:
d9:7f:55:9c:93:71:61:7d:b5:a7:38:42:54:29:aa:
86:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2F:80:C4:51:F9:A9:22:02:DB:18:2E:EA:17:DD:EF:30:0B:7C:B9
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/qS-AxFH5qSIC2xgu6hfd7zALfLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.208.0-31.192.210.255
31.192.213.0/24
31.192.215.0/24
89.43.28.0/22
89.43.64.0/22
89.252.128.0/22
89.252.134.0-89.252.137.255
89.252.139.0-89.252.140.255
89.252.143.0/24
89.252.145.0-89.252.150.255
89.252.155.0/24
89.252.158.0/24
89.252.160.0-89.252.177.255
93.113.60.0/22
93.115.76.0/22
94.102.0.0-94.102.11.255
94.102.13.0-94.102.15.255
95.173.160.0-95.173.172.255
95.173.177.0-95.173.181.255
95.173.183.0-95.173.191.255
159.253.32.0-159.253.36.255
159.253.38.0-159.253.47.255
185.95.84.0/22
IPv6:
2a02:f80::/32
2a03:2100::/32
2a03:2102:1::/48
Signature Algorithm: sha256WithRSAEncryption
5b:1a:83:06:e5:89:39:43:2c:bb:05:3a:33:58:94:a8:29:13:
25:35:5c:02:aa:84:e1:7e:d3:b8:53:cb:25:ae:59:43:df:00:
74:00:c7:07:14:b0:c0:7c:ed:0e:c4:9f:cd:0d:3b:27:93:7f:
93:e9:18:e2:bf:57:05:6f:96:a1:d8:a4:3b:99:fe:3f:3d:e4:
c5:ad:63:38:a8:ab:a4:02:ac:f9:fc:a0:85:1d:1e:ed:9c:34:
d7:a7:6b:37:d9:c0:af:15:89:40:cd:02:ee:fd:b3:b5:d3:8d:
c1:07:54:40:5c:73:0d:ee:66:9f:64:23:91:1e:61:10:3f:5c:
1d:eb:25:79:09:ba:9c:dd:6f:c3:5d:72:37:df:6b:ab:43:6e:
b3:97:7e:fb:f9:bd:fc:1e:b0:53:d9:0c:84:53:07:a7:f3:dd:
39:bb:d7:41:0a:b2:59:d6:81:72:3d:4b:91:99:a6:b4:83:92:
63:e7:df:59:c2:ba:e2:00:08:82:a5:a4:59:af:5c:70:2e:fd:
87:21:2e:9f:d8:c0:7e:55:26:4e:99:04:3c:4e:cb:28:6d:73:
76:d0:ce:6a:4d:eb:a6:07:da:bc:87:df:4b:ad:3d:b6:5f:e1:
05:a7:45:3f:1f:d0:13:37:7a:45:c0:b4:d2:5c:d5:1d:8e:66:
73:41:dc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:08 2024 by rpki-client on console-ams.rpki-client.org