Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/xB4ePuFgx_hZdKgXhn9vGuE-7Tc.roa
File: xB4ePuFgx_hZdKgXhn9vGuE-7Tc.roa (raw, json)
Hash identifier: RT28U3M20gWifzDJnKAhnQdtQyR9P7mzsru3+kYCYeA=
Subject key identifier: C4:1E:1E:3E:E1:60:C7:F8:59:74:A8:17:86:7F:6F:1A:E1:3E:ED:37
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 01948B4FAE25F84077ECBA63C4FE8D657154
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/xB4ePuFgx_hZdKgXhn9vGuE-7Tc.roa
Signing time: Wed 22 Jan 2025 00:00:42 +0000
ROA not before: Wed 22 Jan 2025 00:00:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51559
IP address blocks: 31.192.208.0/24 maxlen: 24
31.192.209.0/24 maxlen: 24
31.192.210.0/24 maxlen: 24
31.192.213.0/24 maxlen: 24
31.192.215.0/24 maxlen: 24
89.43.28.0/24 maxlen: 24
89.43.29.0/24 maxlen: 24
89.43.30.0/24 maxlen: 24
89.43.31.0/24 maxlen: 24
89.43.64.0/24 maxlen: 24
89.43.65.0/24 maxlen: 24
89.43.66.0/24 maxlen: 24
89.43.67.0/24 maxlen: 24
89.252.128.0/24 maxlen: 24
89.252.129.0/24 maxlen: 24
89.252.130.0/24 maxlen: 24
89.252.131.0/24 maxlen: 24
89.252.134.0/24 maxlen: 24
89.252.135.0/24 maxlen: 24
89.252.136.0/24 maxlen: 24
89.252.137.0/24 maxlen: 24
89.252.139.0/24 maxlen: 24
89.252.140.0/24 maxlen: 24
89.252.143.0/24 maxlen: 24
89.252.144.0/24 maxlen: 24
89.252.145.0/24 maxlen: 24
89.252.146.0/24 maxlen: 24
89.252.147.0/24 maxlen: 24
89.252.148.0/24 maxlen: 24
89.252.149.0/24 maxlen: 24
89.252.150.0/24 maxlen: 24
89.252.155.0/24 maxlen: 24
89.252.156.0/24 maxlen: 24
89.252.158.0/24 maxlen: 24
89.252.160.0/24 maxlen: 24
89.252.161.0/24 maxlen: 24
89.252.162.0/24 maxlen: 24
89.252.163.0/24 maxlen: 24
89.252.164.0/24 maxlen: 24
89.252.165.0/24 maxlen: 24
89.252.166.0/24 maxlen: 24
89.252.167.0/24 maxlen: 24
89.252.168.0/24 maxlen: 24
89.252.169.0/24 maxlen: 24
89.252.170.0/24 maxlen: 24
89.252.171.0/24 maxlen: 24
89.252.172.0/24 maxlen: 24
89.252.173.0/24 maxlen: 24
89.252.173.119/32 maxlen: 32
89.252.174.0/24 maxlen: 24
89.252.175.0/24 maxlen: 24
89.252.176.0/24 maxlen: 24
89.252.177.0/24 maxlen: 24
93.113.60.0/24 maxlen: 24
93.113.61.0/24 maxlen: 24
93.113.62.0/24 maxlen: 24
93.113.63.0/24 maxlen: 24
93.115.76.0/24 maxlen: 24
93.115.77.0/24 maxlen: 24
93.115.78.0/24 maxlen: 24
93.115.79.0/24 maxlen: 24
94.102.0.0/24 maxlen: 24
94.102.1.0/24 maxlen: 24
94.102.2.0/24 maxlen: 24
94.102.3.0/24 maxlen: 24
94.102.4.0/24 maxlen: 24
94.102.5.0/24 maxlen: 24
94.102.6.0/24 maxlen: 24
94.102.7.0/24 maxlen: 24
94.102.8.0/24 maxlen: 24
94.102.9.0/24 maxlen: 24
94.102.10.0/24 maxlen: 24
94.102.11.0/24 maxlen: 24
94.102.13.0/24 maxlen: 24
94.102.14.0/24 maxlen: 24
94.102.15.0/24 maxlen: 24
95.173.160.0/24 maxlen: 24
95.173.161.0/24 maxlen: 24
95.173.162.0/24 maxlen: 24
95.173.163.0/24 maxlen: 24
95.173.164.0/24 maxlen: 24
95.173.165.0/24 maxlen: 24
95.173.166.0/24 maxlen: 24
95.173.167.0/24 maxlen: 24
95.173.168.0/24 maxlen: 24
95.173.169.0/24 maxlen: 24
95.173.170.0/24 maxlen: 24
95.173.171.0/24 maxlen: 24
95.173.172.0/24 maxlen: 24
95.173.177.0/24 maxlen: 24
95.173.178.0/24 maxlen: 24
95.173.179.0/24 maxlen: 24
95.173.180.0/24 maxlen: 24
95.173.181.0/24 maxlen: 24
95.173.183.0/24 maxlen: 24
95.173.184.0/24 maxlen: 24
95.173.185.0/24 maxlen: 24
95.173.186.0/24 maxlen: 24
95.173.187.0/24 maxlen: 24
95.173.188.0/24 maxlen: 24
95.173.189.0/24 maxlen: 24
95.173.190.0/24 maxlen: 24
95.173.191.0/24 maxlen: 24
159.253.32.0/24 maxlen: 24
159.253.33.0/24 maxlen: 24
159.253.34.0/24 maxlen: 24
159.253.35.0/24 maxlen: 24
159.253.36.0/24 maxlen: 24
159.253.38.0/24 maxlen: 24
159.253.39.0/24 maxlen: 24
159.253.40.0/24 maxlen: 24
159.253.41.0/24 maxlen: 24
159.253.42.0/24 maxlen: 24
159.253.43.0/24 maxlen: 24
159.253.44.0/24 maxlen: 24
159.253.45.0/24 maxlen: 24
159.253.46.0/24 maxlen: 24
159.253.47.0/24 maxlen: 24
185.95.84.0/24 maxlen: 24
185.95.85.0/24 maxlen: 24
185.95.86.0/24 maxlen: 24
185.95.87.0/24 maxlen: 24
2a02:f80::/32 maxlen: 32
2a03:2100::/32 maxlen: 48
2a03:2100:1::/48 maxlen: 48
2a03:2100:2::/48 maxlen: 48
2a03:2100:3::/48 maxlen: 48
2a03:2100:4::/48 maxlen: 48
2a03:2100:5::/48 maxlen: 48
2a03:2100:6::/48 maxlen: 48
2a03:2100:7::/48 maxlen: 48
2a03:2100:8::/48 maxlen: 48
2a03:2100:9::/48 maxlen: 48
2a03:2100:a::/48 maxlen: 48
2a03:2100:b::/48 maxlen: 48
2a03:2100:c::/48 maxlen: 48
2a03:2100:d::/48 maxlen: 48
2a03:2100:e::/48 maxlen: 48
2a03:2100:f::/48 maxlen: 48
2a03:2100:10::/48 maxlen: 48
2a03:2100:11::/48 maxlen: 48
2a03:2100:12::/48 maxlen: 48
2a03:2100:13::/48 maxlen: 48
2a03:2100:14::/48 maxlen: 48
2a03:2100:15::/48 maxlen: 48
2a03:2100:16::/48 maxlen: 48
2a03:2100:17::/48 maxlen: 48
2a03:2100:18::/48 maxlen: 48
2a03:2100:19::/48 maxlen: 48
2a03:2100:1b::/48 maxlen: 48
2a03:2100:1c::/48 maxlen: 48
2a03:2100:1d::/48 maxlen: 48
2a03:2100:1e::/48 maxlen: 48
2a03:2100:1f::/48 maxlen: 48
2a03:2100:20::/48 maxlen: 48
2a03:2100:21::/48 maxlen: 48
2a03:2100:22::/48 maxlen: 48
2a03:2100:23::/48 maxlen: 48
2a03:2100:24::/48 maxlen: 48
2a03:2100:25::/48 maxlen: 48
2a03:2100:26::/48 maxlen: 48
2a03:2100:27::/48 maxlen: 48
2a03:2100:28::/48 maxlen: 48
2a03:2100:29::/48 maxlen: 48
2a03:2100:2a::/48 maxlen: 48
2a03:2100:2b::/48 maxlen: 48
2a03:2100:2c::/48 maxlen: 48
2a03:2100:2d::/48 maxlen: 48
2a03:2100:2e::/48 maxlen: 48
2a03:2100:2f::/48 maxlen: 48
2a03:2100:32::/48 maxlen: 48
2a03:2100:33::/48 maxlen: 48
2a03:2100:34::/48 maxlen: 48
2a03:2100:35::/48 maxlen: 48
2a03:2100:36::/48 maxlen: 48
2a03:2100:37::/48 maxlen: 48
2a03:2100:38::/48 maxlen: 48
2a03:2100:39::/48 maxlen: 48
2a03:2100:3a::/48 maxlen: 48
2a03:2100:3b::/48 maxlen: 48
2a03:2100:3c::/48 maxlen: 48
2a03:2100:3d::/48 maxlen: 48
2a03:2100:3e::/48 maxlen: 48
2a03:2100:3f::/48 maxlen: 48
2a03:2100:40::/48 maxlen: 48
2a03:2100:44::/48 maxlen: 48
2a03:2102:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 05 Feb 2025 06:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8b:4f:ae:25:f8:40:77:ec:ba:63:c4:fe:8d:65:71:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Jan 22 00:00:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c41e1e3ee160c7f85974a817867f6f1ae13eed37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5c:e1:55:f3:ca:ee:d2:bd:6a:80:c7:dc:8a:
83:c8:31:73:79:18:f1:a0:18:d4:ab:58:ba:b8:55:
4c:2f:2c:10:64:0c:c0:0d:57:0e:2f:1a:70:2f:26:
c8:1b:c2:38:bc:97:d1:77:ad:d9:46:c4:a3:6a:ef:
09:96:0f:c5:8b:fc:20:69:33:25:9f:ce:d3:9d:22:
ec:61:a4:75:84:35:c9:52:07:1c:c7:66:29:07:a3:
d1:7a:20:2d:f1:c8:d9:a8:89:6f:29:fc:33:fe:d4:
a2:71:1e:43:6c:33:2b:5f:70:64:0d:cc:82:86:87:
27:d1:92:24:47:95:4f:2d:d5:a3:b5:8e:31:40:48:
37:fe:c4:21:34:64:b4:0a:de:ac:4c:b8:e0:7b:0f:
df:95:a6:3c:36:47:61:c0:ee:cd:26:24:e5:45:13:
49:50:62:8f:c9:63:51:3a:5e:29:5e:85:be:22:cc:
96:02:27:db:46:0a:e1:26:78:3d:4b:ed:9d:dc:82:
60:4e:43:f3:e8:20:ca:c6:5c:2e:9b:00:15:35:c2:
0b:80:f0:b6:be:c3:33:ef:b9:cb:ce:e2:42:0e:b3:
c3:34:30:8f:25:ef:96:22:a3:90:17:ee:17:bf:37:
5b:8b:04:5e:e9:88:21:7a:25:43:b3:83:44:6c:9a:
00:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1E:1E:3E:E1:60:C7:F8:59:74:A8:17:86:7F:6F:1A:E1:3E:ED:37
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/xB4ePuFgx_hZdKgXhn9vGuE-7Tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.208.0-31.192.210.255
31.192.213.0/24
31.192.215.0/24
89.43.28.0/22
89.43.64.0/22
89.252.128.0/22
89.252.134.0-89.252.137.255
89.252.139.0-89.252.140.255
89.252.143.0-89.252.150.255
89.252.155.0-89.252.156.255
89.252.158.0/24
89.252.160.0-89.252.177.255
93.113.60.0/22
93.115.76.0/22
94.102.0.0-94.102.11.255
94.102.13.0-94.102.15.255
95.173.160.0-95.173.172.255
95.173.177.0-95.173.181.255
95.173.183.0-95.173.191.255
159.253.32.0-159.253.36.255
159.253.38.0-159.253.47.255
185.95.84.0/22
IPv6:
2a02:f80::/32
2a03:2100::/32
2a03:2102:1::/48
Signature Algorithm: sha256WithRSAEncryption
92:19:a3:9f:b6:dc:a8:4f:59:bd:63:63:77:0c:60:f4:de:2a:
d5:b0:2b:e4:e2:43:81:bd:68:b0:ab:4f:f5:ed:1f:00:3c:4e:
1a:c3:86:1e:cf:c7:27:5d:ac:7c:31:ca:06:1b:0b:0d:f8:58:
d5:c7:90:58:3c:be:fd:26:ec:1e:2c:0b:39:3a:a6:97:ac:b5:
ff:6d:cf:4a:de:59:b9:bd:99:6f:9a:63:ad:1f:a4:95:39:92:
c3:9f:b8:ae:37:59:52:fe:a8:d7:3f:a3:d8:48:c6:cd:86:71:
f4:49:e6:4a:2d:0f:0b:d9:c0:32:3d:41:1b:a3:d0:48:de:d0:
b7:d4:cd:ba:9e:ab:98:6f:2e:16:3b:b4:96:85:ca:77:6f:22:
d6:e6:62:0c:90:26:fe:92:e8:5c:15:97:16:b2:da:85:5b:f0:
69:45:0f:33:2a:d6:64:f6:ed:d4:11:b9:21:a1:fb:f2:cc:a0:
95:5f:4e:4c:e5:3e:05:00:c9:24:ab:b4:03:0f:2b:dd:da:86:
ce:e4:0f:be:a1:ca:f3:70:81:be:12:18:86:16:6a:08:8d:a1:
d9:d6:b6:f2:e1:6c:b3:51:bb:8e:a9:aa:92:b4:11:47:e3:78:
31:9e:f4:db:b8:63:bb:b1:9b:94:68:f0:3d:5f:ad:fa:3b:8f:
ba:74:89:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:09:35 2025 by rpki-client