Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/Jseq94srKMlUB4RFWGsKP5GT30w.roa
File: Jseq94srKMlUB4RFWGsKP5GT30w.roa (raw, json)
Hash identifier: Xq9Q+ESdI8ivMbgORjLcMvdECu0/ByBAygzYPGzMxf0=
Subject key identifier: 26:C7:AA:F7:8B:2B:28:C9:54:07:84:45:58:6B:0A:3F:91:93:DF:4C
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 019026D6DF28802867973A194DB83DBE1063
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/Jseq94srKMlUB4RFWGsKP5GT30w.roa
Signing time: Mon 17 Jun 2024 15:35:34 +0000
ROA not before: Mon 17 Jun 2024 15:35:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25211
IP address blocks: 45.141.232.0/24 maxlen: 24
45.141.233.0/24 maxlen: 24
45.141.234.0/24 maxlen: 24
45.141.235.0/24 maxlen: 24
78.159.128.0/24 maxlen: 24
78.159.129.0/24 maxlen: 24
78.159.131.0/24 maxlen: 24
78.159.136.0/24 maxlen: 24
78.159.137.0/24 maxlen: 24
78.159.138.0/24 maxlen: 24
78.159.139.0/24 maxlen: 24
78.159.149.0/24 maxlen: 24
78.159.150.0/24 maxlen: 24
78.159.152.0/22 maxlen: 22
78.159.153.0/24 maxlen: 24
78.159.154.0/24 maxlen: 24
78.159.155.0/24 maxlen: 24
78.159.156.0/24 maxlen: 24
78.159.157.0/24 maxlen: 24
78.159.158.0/24 maxlen: 24
78.159.159.0/24 maxlen: 24
91.92.33.0/24 maxlen: 24
91.92.34.0/24 maxlen: 24
91.92.35.0/24 maxlen: 24
91.92.40.0/24 maxlen: 24
91.92.41.0/24 maxlen: 24
91.92.42.0/24 maxlen: 24
91.92.43.0/24 maxlen: 24
91.92.44.0/24 maxlen: 24
91.92.45.0/24 maxlen: 24
91.92.46.0/24 maxlen: 24
91.92.49.0/24 maxlen: 24
91.92.50.0/24 maxlen: 24
91.92.51.0/24 maxlen: 24
91.92.52.0/24 maxlen: 24
91.92.53.0/24 maxlen: 24
93.152.206.0/24 maxlen: 24
93.152.207.0/24 maxlen: 24
93.152.208.0/24 maxlen: 24
93.152.209.0/24 maxlen: 24
93.152.210.0/24 maxlen: 24
93.152.211.0/24 maxlen: 24
93.152.212.0/24 maxlen: 24
93.152.213.0/24 maxlen: 24
93.152.214.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
93.152.217.0/24 maxlen: 24
93.152.218.0/24 maxlen: 24
93.152.220.0/24 maxlen: 24
93.152.221.0/24 maxlen: 24
93.152.222.0/24 maxlen: 24
93.152.223.0/24 maxlen: 24
93.152.224.0/24 maxlen: 24
93.152.226.0/24 maxlen: 24
93.152.227.0/24 maxlen: 24
93.152.230.0/24 maxlen: 24
94.26.28.0/24 maxlen: 24
94.26.29.0/24 maxlen: 24
94.26.76.0/22 maxlen: 22
94.26.76.0/24 maxlen: 24
94.26.77.0/24 maxlen: 24
94.26.78.0/24 maxlen: 24
94.26.79.0/24 maxlen: 24
94.26.89.0/24 maxlen: 24
94.190.195.0/24 maxlen: 24
185.96.252.0/24 maxlen: 24
185.96.253.0/24 maxlen: 24
185.96.255.0/24 maxlen: 24
212.102.105.0/24 maxlen: 24
212.102.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Jun 2024 06:34:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:26:d6:df:28:80:28:67:97:3a:19:4d:b8:3d:be:10:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jun 17 15:35:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26c7aaf78b2b28c954078445586b0a3f9193df4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b5:6a:be:85:33:32:33:29:b8:a3:4b:ea:16:
2a:46:e1:ea:33:da:25:26:53:f4:65:98:c1:b7:5e:
78:fe:74:4c:70:04:13:29:04:84:52:86:94:a5:e5:
c5:c5:b1:5a:20:16:a2:4f:f6:57:1c:58:33:62:f6:
95:8b:09:77:b6:a4:3d:ed:c2:a5:3c:78:58:de:29:
1c:63:49:df:3d:96:b0:22:e2:f7:ef:81:70:3e:a1:
cf:3f:52:91:de:da:8b:10:ec:aa:fd:dd:62:89:68:
92:2f:1e:04:0b:1b:48:07:79:9e:98:f7:16:9a:07:
8f:ea:bf:61:43:0f:96:82:ba:d6:bd:ca:b9:2a:b9:
72:16:0e:88:4a:0d:81:cc:3b:f7:39:e8:ea:1f:0a:
57:1c:1a:18:af:f0:92:2d:7e:75:29:56:8c:cd:7e:
f7:a9:aa:1c:63:b6:a2:b6:b5:7f:b7:44:08:5a:28:
82:c8:d3:dc:80:aa:a6:34:0e:91:af:7b:10:a3:0d:
67:ca:5d:d1:52:28:cc:23:7d:e9:8e:f9:01:ab:f8:
78:70:84:56:39:d8:e4:f7:07:d1:a4:75:b3:5d:61:
18:25:c4:f5:47:24:82:61:11:e4:99:e6:ec:49:e9:
72:7d:4e:b3:4a:9d:cd:e8:9d:01:b5:44:1c:45:cd:
97:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C7:AA:F7:8B:2B:28:C9:54:07:84:45:58:6B:0A:3F:91:93:DF:4C
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/Jseq94srKMlUB4RFWGsKP5GT30w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.232.0/22
78.159.128.0/23
78.159.131.0/24
78.159.136.0/22
78.159.149.0-78.159.150.255
78.159.152.0/21
91.92.33.0-91.92.35.255
91.92.40.0-91.92.46.255
91.92.49.0-91.92.53.255
93.152.206.0-93.152.218.255
93.152.220.0-93.152.224.255
93.152.226.0/23
93.152.230.0/24
94.26.28.0/23
94.26.76.0/22
94.26.89.0/24
94.190.195.0/24
185.96.252.0/23
185.96.255.0/24
212.102.105.0/24
212.102.107.0/24
Signature Algorithm: sha256WithRSAEncryption
68:33:41:b7:3d:9e:72:ab:7c:dc:aa:cb:49:eb:b5:32:7e:56:
df:43:18:a9:5d:da:e2:10:53:91:4b:2c:99:a0:84:88:a5:eb:
f6:a2:dc:9f:a0:2d:9a:9f:0b:98:05:f6:34:45:25:60:dd:26:
0e:81:e1:aa:ae:e0:52:5d:8e:dc:60:76:85:2a:c5:fc:2e:db:
62:f2:5e:8b:67:eb:bd:b6:25:74:88:bf:29:58:75:93:e3:4e:
38:fa:26:93:a0:93:7b:79:22:63:17:de:41:67:d2:4f:ea:27:
5c:6a:9e:e5:19:84:aa:0f:b6:97:f7:c7:2d:c8:f9:ea:36:dd:
d5:a7:fc:9d:a5:8c:93:e7:65:ee:34:8f:41:20:0c:d1:48:29:
21:f7:2f:9f:d2:84:7a:bf:c3:41:d3:f7:ea:7e:4d:6e:3b:fc:
c5:30:06:80:ba:7d:68:63:4f:9c:5b:fd:61:01:23:dc:c1:e4:
22:10:d5:25:0c:af:4e:1f:1a:79:b0:36:f0:80:04:23:20:57:
93:f7:e9:fd:61:b9:69:10:76:81:59:e7:24:ee:a1:a3:67:1b:
64:a6:c8:fd:69:27:53:0f:0f:f3:d2:c0:af:fd:09:f0:b5:32:
a6:4d:be:5c:24:4c:e6:ea:65:29:da:24:19:9a:b5:c2:c7:bf:
e5:12:5f:02
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgISAZAm1t8ogChnlzoZTbg9vhBjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk
MDAxOGMwHhcNMjQwNjE3MTUzNTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmM3YWFmNzhiMmIyOGM5NTQwNzg0NDU1ODZiMGEzZjkxOTNkZjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLVqvoUzMjMpuKNL6hYqRuHqM9ol
JlP0ZZjBt154/nRMcAQTKQSEUoaUpeXFxbFaIBaiT/ZXHFgzYvaViwl3tqQ97cKl
PHhY3ikcY0nfPZawIuL374FwPqHPP1KR3tqLEOyq/d1iiWiSLx4ECxtIB3memPcW
mgeP6r9hQw+WgrrWvcq5KrlyFg6ISg2BzDv3OejqHwpXHBoYr/CSLX51KVaMzX73
qaocY7aitrV/t0QIWiiCyNPcgKqmNA6Rr3sQow1nyl3RUijMI33pjvkBq/h4cIRW
Odjk9wfRpHWzXWEYJcT1RySCYRHkmebsSelyfU6zSp3N6J0BtUQcRc2XRQIDAQAB
o4ICtjCCArIwHQYDVR0OBBYEFCbHqveLKyjJVAeERVhrCj+Rk99MMB8GA1UdIwQY
MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct
MjliMDg1ZGQyM2FkLzEvSnNlcTk0c3JLTWxVQjRSRldHc0tQNUdUMzB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk
LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHLBggrBgEFBQcBBwEB/wSBuzCBuDCBtQQCAAEwga4DBAIt
jegDBAFOn4ADBABOn4MDBAJOn4gwDAMEAE6flQMEAE6flgMEA06fmDAMAwQAW1wh
AwQCW1wgMAwDBANbXCgDBABbXC4wDAMEAFtcMQMEAVtcNDAMAwQBXZjOAwQAXZja
MAwDBAJdmNwDBABdmOADBAFdmOIDBABdmOYDBAFeGhwDBAJeGkwDBABeGlkDBABe
vsMDBAG5YPwDBAC5YP8DBADUZmkDBADUZmswDQYJKoZIhvcNAQELBQADggEBAGgz
Qbc9nnKrfNyqy0nrtTJ+Vt9DGKld2uIQU5FLLJmghIil6/ai3J+gLZqfC5gF9jRF
JWDdJg6B4aqu4FJdjtxgdoUqxfwu22LyXotn6722JXSIvylYdZPjTjj6JpOgk3t5
ImMX3kFn0k/qJ1xqnuUZhKoPtpf3xy3I+eo23dWn/J2ljJPnZe40j0EgDNFIKSH3
L5/ShHq/w0HT9+p+TW47/MUwBoC6fWhjT5xb/WEBI9zB5CIQ1SUMr04fGnmwNvCA
BCMgV5P36f1huWkQdoFZ5yTuoaNnG2SmyP1pJ1MPD/PSwK/9CfC1MqZNvlwkTObq
ZSnaJBmatcLHv+USXwI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:51 2025 by rpki-client