Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/ASPOmh57-N4FBeMn6rlSC8PXpPQ.roa
File: ASPOmh57-N4FBeMn6rlSC8PXpPQ.roa (raw, json)
Hash identifier: CNfqEavIvXodSJQW0x2s+Kn0xCM8TVePSQ3MKcdkkHo=
Subject key identifier: 01:23:CE:9A:1E:7B:F8:DE:05:05:E3:27:EA:B9:52:0B:C3:D7:A4:F4
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 018FC45DF4494A591E30B5CF79A10809DC73
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/ASPOmh57-N4FBeMn6rlSC8PXpPQ.roa
Signing time: Wed 29 May 2024 12:40:42 +0000
ROA not before: Wed 29 May 2024 12:40:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25211
IP address blocks: 45.141.232.0/24 maxlen: 24
45.141.233.0/24 maxlen: 24
45.141.234.0/24 maxlen: 24
45.141.235.0/24 maxlen: 24
78.159.128.0/24 maxlen: 24
78.159.129.0/24 maxlen: 24
78.159.131.0/24 maxlen: 24
78.159.136.0/24 maxlen: 24
78.159.137.0/24 maxlen: 24
78.159.138.0/24 maxlen: 24
78.159.139.0/24 maxlen: 24
78.159.149.0/24 maxlen: 24
78.159.150.0/24 maxlen: 24
78.159.152.0/22 maxlen: 22
78.159.153.0/24 maxlen: 24
78.159.154.0/24 maxlen: 24
78.159.155.0/24 maxlen: 24
78.159.156.0/24 maxlen: 24
78.159.157.0/24 maxlen: 24
78.159.158.0/24 maxlen: 24
78.159.159.0/24 maxlen: 24
91.92.33.0/24 maxlen: 24
91.92.34.0/24 maxlen: 24
91.92.35.0/24 maxlen: 24
91.92.40.0/24 maxlen: 24
91.92.41.0/24 maxlen: 24
91.92.42.0/24 maxlen: 24
91.92.43.0/24 maxlen: 24
91.92.44.0/24 maxlen: 24
91.92.45.0/24 maxlen: 24
91.92.46.0/24 maxlen: 24
91.92.47.0/24 maxlen: 24
91.92.49.0/24 maxlen: 24
91.92.50.0/24 maxlen: 24
91.92.51.0/24 maxlen: 24
91.92.52.0/24 maxlen: 24
91.92.53.0/24 maxlen: 24
93.152.206.0/24 maxlen: 24
93.152.207.0/24 maxlen: 24
93.152.208.0/24 maxlen: 24
93.152.209.0/24 maxlen: 24
93.152.210.0/24 maxlen: 24
93.152.211.0/24 maxlen: 24
93.152.212.0/24 maxlen: 24
93.152.213.0/24 maxlen: 24
93.152.214.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
93.152.217.0/24 maxlen: 24
93.152.218.0/24 maxlen: 24
93.152.219.0/24 maxlen: 24
93.152.220.0/24 maxlen: 24
93.152.221.0/24 maxlen: 24
93.152.222.0/24 maxlen: 24
93.152.223.0/24 maxlen: 24
93.152.224.0/24 maxlen: 24
93.152.225.0/24 maxlen: 24
93.152.226.0/24 maxlen: 24
93.152.227.0/24 maxlen: 24
93.152.230.0/24 maxlen: 24
94.26.28.0/24 maxlen: 24
94.26.29.0/24 maxlen: 24
94.26.76.0/22 maxlen: 22
94.26.76.0/24 maxlen: 24
94.26.77.0/24 maxlen: 24
94.26.78.0/24 maxlen: 24
94.26.79.0/24 maxlen: 24
94.26.89.0/24 maxlen: 24
94.26.90.0/24 maxlen: 24
94.190.195.0/24 maxlen: 24
185.96.252.0/24 maxlen: 24
185.96.253.0/24 maxlen: 24
185.96.255.0/24 maxlen: 24
212.102.105.0/24 maxlen: 24
212.102.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jun 2024 08:56:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c4:5d:f4:49:4a:59:1e:30:b5:cf:79:a1:08:09:dc:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: May 29 12:40:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0123ce9a1e7bf8de0505e327eab9520bc3d7a4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:de:7b:bf:17:59:02:46:ce:ab:cc:51:01:eb:
42:fc:b3:08:c6:10:68:3c:cb:cf:11:b8:09:90:58:
37:33:d2:b5:36:59:7f:41:55:9d:32:e7:0b:fe:64:
4f:72:92:7b:0a:28:76:22:5d:34:74:28:e7:0b:c5:
4c:f6:c7:7e:d9:00:87:35:8d:80:98:cc:53:72:5c:
03:2a:cd:e2:8d:3a:6b:a9:a8:5c:62:9c:d0:41:cf:
00:d2:08:01:42:26:d3:53:3d:04:10:e6:ea:eb:8e:
c0:32:bb:5f:bc:5b:30:41:9f:9f:81:75:5e:0d:78:
b3:aa:97:03:f7:f4:1f:f8:e5:32:8b:5f:b6:86:ea:
8d:e6:a8:32:3e:83:f6:96:13:31:2a:ef:9f:c4:1c:
84:27:89:74:4c:ab:ec:9a:c5:e7:dc:51:b8:1c:bf:
07:5e:ca:1f:64:b9:dd:4e:08:7a:17:a2:9e:bf:d6:
9a:08:48:75:48:7c:b1:bc:30:3a:41:12:4d:ed:7d:
a7:ce:06:0e:77:76:47:a1:86:7f:a6:bb:e2:b1:67:
ee:9f:81:bc:32:b9:3d:21:a3:32:84:d5:9b:24:35:
58:72:8e:eb:cf:c5:fe:52:d1:da:b5:47:23:99:ab:
5d:f6:97:e1:75:c9:78:db:4f:d7:b7:b7:04:ff:ee:
9c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:23:CE:9A:1E:7B:F8:DE:05:05:E3:27:EA:B9:52:0B:C3:D7:A4:F4
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/ASPOmh57-N4FBeMn6rlSC8PXpPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.232.0/22
78.159.128.0/23
78.159.131.0/24
78.159.136.0/22
78.159.149.0-78.159.150.255
78.159.152.0/21
91.92.33.0-91.92.35.255
91.92.40.0/21
91.92.49.0-91.92.53.255
93.152.206.0-93.152.227.255
93.152.230.0/24
94.26.28.0/23
94.26.76.0/22
94.26.89.0-94.26.90.255
94.190.195.0/24
185.96.252.0/23
185.96.255.0/24
212.102.105.0/24
212.102.107.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:30:d7:73:64:d5:c5:41:6f:9f:0a:ec:02:e4:6f:5e:7b:55:
40:04:04:55:bd:a6:bf:df:55:72:17:e2:3c:d1:08:80:80:32:
4e:68:eb:3e:12:9d:3f:81:64:9a:1f:c9:f5:ec:4e:94:1d:31:
e6:31:ce:07:5b:c2:07:fa:c0:ac:80:6a:45:ab:07:54:bd:67:
3a:69:71:1f:0a:dd:f7:aa:89:5a:4f:b4:9e:59:a2:2e:1d:62:
19:52:52:98:a8:a7:e6:9b:29:2c:a9:d9:67:e4:2e:11:0c:fd:
c2:d0:dc:bc:f5:e3:56:74:23:0a:37:54:47:22:21:ef:45:4c:
51:8b:2a:94:f3:f7:b9:ce:cf:be:cd:8e:5e:71:d8:28:a3:af:
b5:de:5d:b4:d5:ff:18:68:27:b4:77:52:eb:a9:3b:59:34:83:
f5:ef:79:a9:dc:2e:3c:d1:eb:df:d6:e8:28:3c:a2:c7:a4:c8:
a3:67:13:b1:54:ce:29:db:9f:67:bb:64:ef:d3:7a:54:f8:a1:
00:2d:09:f5:69:8f:4a:a3:58:0c:e6:f3:fb:67:b7:15:57:1f:
59:52:3d:f5:6b:48:08:a0:40:8f:c7:f3:93:e2:3a:9a:0c:9a:
04:02:04:37:06:39:66:80:9e:08:a4:f3:cb:e6:83:63:71:b3:
20:77:8a:ab
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgISAY/EXfRJSlkeMLXPeaEICdxzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk
MDAxOGMwHhcNMjQwNTI5MTI0MDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTIzY2U5YTFlN2JmOGRlMDUwNWUzMjdlYWI5NTIwYmMzZDdhNGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd57vxdZAkbOq8xRAetC/LMIxhBo
PMvPEbgJkFg3M9K1Nll/QVWdMucL/mRPcpJ7Cih2Il00dCjnC8VM9sd+2QCHNY2A
mMxTclwDKs3ijTprqahcYpzQQc8A0ggBQibTUz0EEObq647AMrtfvFswQZ+fgXVe
DXizqpcD9/Qf+OUyi1+2huqN5qgyPoP2lhMxKu+fxByEJ4l0TKvsmsXn3FG4HL8H
XsofZLndTgh6F6Kev9aaCEh1SHyxvDA6QRJN7X2nzgYOd3ZHoYZ/prvisWfun4G8
Mrk9IaMyhNWbJDVYco7rz8X+UtHatUcjmatd9pfhdcl420/Xt7cE/+6ctwIDAQAB
o4ICojCCAp4wHQYDVR0OBBYEFAEjzpoee/jeBQXjJ+q5UgvD16T0MB8GA1UdIwQY
MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct
MjliMDg1ZGQyM2FkLzEvQVNQT21oNTctTjRGQmVNbjZybFNDOFBYcFBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk
LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG3BggrBgEFBQcBBwEB/wSBpzCBpDCBoQQCAAEwgZoDBAIt
jegDBAFOn4ADBABOn4MDBAJOn4gwDAMEAE6flQMEAE6flgMEA06fmDAMAwQAW1wh
AwQCW1wgAwQDW1woMAwDBABbXDEDBAFbXDQwDAMEAV2YzgMEAl2Y4AMEAF2Y5gME
AV4aHAMEAl4aTDAMAwQAXhpZAwQAXhpaAwQAXr7DAwQBuWD8AwQAuWD/AwQA1GZp
AwQA1GZrMA0GCSqGSIb3DQEBCwUAA4IBAQAbMNdzZNXFQW+fCuwC5G9ee1VABARV
vaa/31VyF+I80QiAgDJOaOs+Ep0/gWSaH8n17E6UHTHmMc4HW8IH+sCsgGpFqwdU
vWc6aXEfCt33qolaT7SeWaIuHWIZUlKYqKfmmyksqdln5C4RDP3C0Ny89eNWdCMK
N1RHIiHvRUxRiyqU8/e5zs++zY5ecdgoo6+13l201f8YaCe0d1LrqTtZNIP173mp
3C480evf1ugoPKLHpMijZxOxVM4p259nu2Tv03pU+KEALQn1aY9Ko1gM5vP7Z7cV
Vx9ZUj31a0gIoECPx/OT4jqaDJoEAgQ3BjlmgJ4IpPPL5oNjcbMgd4qr
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:54 2025 by rpki-client