Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/1WNs192RrDWJbqRFDQQZvRZiJdc.roa
File: 1WNs192RrDWJbqRFDQQZvRZiJdc.roa (raw, json)
Hash identifier: ZBVrEn2IOhw401xZN7qOmqGKm+c0LUae8MC20yBWTsk=
Subject key identifier: D5:63:6C:D7:DD:91:AC:35:89:6E:A4:45:0D:04:19:BD:16:62:25:D7
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 018B02621463ADA009DD3BC061492871244D
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/1WNs192RrDWJbqRFDQQZvRZiJdc.roa
Signing time: Fri 06 Oct 2023 00:27:44 +0000
ROA not before: Fri 06 Oct 2023 00:27:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 172.208.0.0/13 maxlen: 13
192.100.112.0/21 maxlen: 21
192.100.120.0/21 maxlen: 21
192.100.132.0/23 maxlen: 23
82.87.0.0/16 maxlen: 16
192.100.128.0/22 maxlen: 22
135.114.0.0/16 maxlen: 16
172.160.0.0/11 maxlen: 11
51.107.0.0/16 maxlen: 16
135.6.0.0/16 maxlen: 16
134.33.0.0/16 maxlen: 16
192.100.104.0/21 maxlen: 21
135.229.0.0/16 maxlen: 16
51.12.0.0/15 maxlen: 15
51.140.0.0/14 maxlen: 14
147.214.0.0/16 maxlen: 16
193.221.113.0/24 maxlen: 24
51.53.0.0/16 maxlen: 16
57.160.0.0/12 maxlen: 12
51.120.0.0/16 maxlen: 16
132.220.0.0/16 maxlen: 16
135.18.0.0/16 maxlen: 16
212.173.0.0/17 maxlen: 17
135.240.0.0/16 maxlen: 16
134.112.0.0/16 maxlen: 16
172.200.0.0/13 maxlen: 13
160.207.0.0/16 maxlen: 16
212.207.0.0/16 maxlen: 16
173.200.0.0/16 maxlen: 16
209.199.0.0/16 maxlen: 16
143.226.0.0/16 maxlen: 16
109.246.0.0/16 maxlen: 16
212.132.0.0/19 maxlen: 19
51.132.0.0/16 maxlen: 16
135.4.0.0/16 maxlen: 16
157.31.0.0/16 maxlen: 16
213.199.128.0/18 maxlen: 24
167.186.0.0/16 maxlen: 16
128.85.0.0/16 maxlen: 16
135.85.0.0/16 maxlen: 16
128.24.0.0/16 maxlen: 16
51.51.0.0/16 maxlen: 16
57.152.0.0/14 maxlen: 14
151.206.0.0/16 maxlen: 16
138.105.0.0/16 maxlen: 16
94.245.64.0/18 maxlen: 24
157.252.0.0/16 maxlen: 16
51.124.0.0/16 maxlen: 16
124.252.0.0/16 maxlen: 16
156.23.0.0/16 maxlen: 16
51.144.0.0/15 maxlen: 15
40.171.0.0/16 maxlen: 16
135.171.0.0/16 maxlen: 16
149.198.0.0/16 maxlen: 16
194.238.128.0/17 maxlen: 17
85.212.0.0/16 maxlen: 16
152.138.0.0/16 maxlen: 16
51.138.0.0/16 maxlen: 16
134.138.0.0/16 maxlen: 16
51.10.0.0/15 maxlen: 15
74.144.0.0/12 maxlen: 12
194.110.197.0/24 maxlen: 24
51.104.0.0/15 maxlen: 15
72.16.128.0/17 maxlen: 17
130.131.0.0/16 maxlen: 16
135.232.0.0/14 maxlen: 14
135.185.0.0/16 maxlen: 16
207.103.0.0/16 maxlen: 16
167.231.0.0/16 maxlen: 16
51.103.0.0/16 maxlen: 16
135.130.0.0/16 maxlen: 16
135.224.0.0/15 maxlen: 15
57.150.0.0/15 maxlen: 15
132.164.0.0/16 maxlen: 16
217.177.96.0/19 maxlen: 19
57.156.0.0/14 maxlen: 14
172.128.0.0/11 maxlen: 11
157.176.0.0/16 maxlen: 16
217.176.0.0/16 maxlen: 16
128.203.0.0/16 maxlen: 16
135.230.0.0/16 maxlen: 16
193.149.64.0/19 maxlen: 24
151.129.0.0/16 maxlen: 16
135.116.0.0/16 maxlen: 16
51.116.0.0/16 maxlen: 16
165.15.0.0/16 maxlen: 16
40.170.0.0/16 maxlen: 16
51.136.0.0/15 maxlen: 15
135.236.0.0/15 maxlen: 15
135.7.0.0/16 maxlen: 16
137.162.0.0/16 maxlen: 16
167.162.0.0/16 maxlen: 16
159.128.0.0/16 maxlen: 16
72.54.0.0/16 maxlen: 16
213.54.0.0/16 maxlen: 16
157.81.0.0/16 maxlen: 16
143.209.0.0/16 maxlen: 16
194.41.16.0/20 maxlen: 20
194.41.18.0/24 maxlen: 24
194.41.22.0/24 maxlen: 24
194.41.23.0/24 maxlen: 24
194.41.20.0/24 maxlen: 24
194.41.21.0/24 maxlen: 24
194.41.19.0/24 maxlen: 24
132.196.0.0/16 maxlen: 16
157.95.0.0/16 maxlen: 16
122.149.0.0/16 maxlen: 16
147.243.0.0/16 maxlen: 24
40.169.0.0/16 maxlen: 16
2a01:111:4004::/48 maxlen: 48
2a01:111::/32 maxlen: 32
2a01:111:4000::/36 maxlen: 36
2a01:111:2000::/36 maxlen: 36
2a01:111:f000::/36 maxlen: 36
2a00:1c68::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 23 Oct 2023 23:34:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:02:62:14:63:ad:a0:09:dd:3b:c0:61:49:28:71:24:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Oct 6 00:27:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5636cd7dd91ac35896ea4450d0419bd166225d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cd:3d:aa:99:94:76:b1:79:85:78:68:f7:79:
0b:b2:2a:d8:cf:43:94:5d:ac:ad:d0:eb:38:53:1a:
59:b3:5c:e8:cd:30:f9:4e:eb:7b:39:55:04:31:2e:
31:d0:24:67:25:7c:e1:a8:b7:6d:08:6a:ba:54:c8:
e1:aa:02:30:ea:48:6c:34:2d:84:c0:25:2c:b6:e3:
b1:17:20:27:e0:1a:30:5e:dd:dc:19:06:9e:51:a2:
1b:01:e5:34:41:47:c6:2e:c3:91:22:44:d7:e9:93:
50:a0:c6:7e:87:33:35:4a:2f:ab:3b:9a:56:90:b5:
fc:ad:8d:9e:6d:a6:9c:dc:08:b0:06:b9:a4:b8:d6:
11:c1:49:54:09:c3:77:0b:ca:f0:65:c4:8d:3e:78:
48:0f:fd:00:e7:fd:db:b5:75:94:b1:19:f0:0c:00:
5c:c7:c7:91:08:04:e2:78:7b:55:38:43:cb:76:d2:
d6:32:ba:c5:ff:9b:b0:11:bf:69:b6:69:03:27:e2:
12:8e:25:7a:2d:2a:5c:a2:ab:a6:c7:47:82:be:33:
73:49:1b:20:ac:ea:8e:69:56:f8:8b:5a:f9:9a:36:
8c:f9:21:27:04:b0:be:16:1d:7a:9a:43:91:b2:47:
b3:67:9a:1c:25:5b:93:23:53:8e:66:df:db:0f:c0:
20:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:63:6C:D7:DD:91:AC:35:89:6E:A4:45:0D:04:19:BD:16:62:25:D7
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/1WNs192RrDWJbqRFDQQZvRZiJdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.169.0.0-40.171.255.255
51.10.0.0-51.13.255.255
51.51.0.0/16
51.53.0.0/16
51.103.0.0-51.105.255.255
51.107.0.0/16
51.116.0.0/16
51.120.0.0/16
51.124.0.0/16
51.132.0.0/16
51.136.0.0-51.138.255.255
51.140.0.0-51.145.255.255
57.150.0.0-57.175.255.255
72.16.128.0/17
72.54.0.0/16
74.144.0.0/12
82.87.0.0/16
85.212.0.0/16
94.245.64.0/18
109.246.0.0/16
122.149.0.0/16
124.252.0.0/16
128.24.0.0/16
128.85.0.0/16
128.203.0.0/16
130.131.0.0/16
132.164.0.0/16
132.196.0.0/16
132.220.0.0/16
134.33.0.0/16
134.112.0.0/16
134.138.0.0/16
135.4.0.0/16
135.6.0.0/15
135.18.0.0/16
135.85.0.0/16
135.114.0.0/16
135.116.0.0/16
135.130.0.0/16
135.171.0.0/16
135.185.0.0/16
135.224.0.0/15
135.229.0.0-135.230.255.255
135.232.0.0-135.237.255.255
135.240.0.0/16
137.162.0.0/16
138.105.0.0/16
143.209.0.0/16
143.226.0.0/16
147.214.0.0/16
147.243.0.0/16
149.198.0.0/16
151.129.0.0/16
151.206.0.0/16
152.138.0.0/16
156.23.0.0/16
157.31.0.0/16
157.81.0.0/16
157.95.0.0/16
157.176.0.0/16
157.252.0.0/16
159.128.0.0/16
160.207.0.0/16
165.15.0.0/16
167.162.0.0/16
167.186.0.0/16
167.231.0.0/16
172.128.0.0/10
172.200.0.0-172.215.255.255
173.200.0.0/16
192.100.104.0-192.100.133.255
193.149.64.0/19
193.221.113.0/24
194.41.16.0/20
194.110.197.0/24
194.238.128.0/17
207.103.0.0/16
209.199.0.0/16
212.132.0.0/19
212.173.0.0/17
212.207.0.0/16
213.54.0.0/16
213.199.128.0/18
217.176.0.0/16
217.177.96.0/19
IPv6:
2a00:1c68::/29
2a01:111::/32
Signature Algorithm: sha256WithRSAEncryption
97:33:7c:3d:4e:c1:a7:fb:8b:f5:67:56:5a:5b:0a:12:e5:8e:
56:32:57:20:9f:36:a4:95:7b:d3:d4:4a:32:2f:ee:f5:af:fe:
2a:d4:89:3e:1d:2e:ed:d5:c0:39:2e:67:d2:2a:de:f3:24:ce:
46:d8:80:72:07:70:47:6d:04:bd:96:6a:4c:55:16:fb:9c:68:
4f:b0:aa:75:27:ba:f5:b6:61:63:99:95:e2:96:cc:c3:80:bf:
23:d3:c0:09:7a:7c:e0:e8:dc:7d:98:45:41:60:22:12:6c:f8:
df:d5:0e:f0:22:60:c4:46:91:82:42:61:c8:30:28:de:20:89:
04:59:f4:97:77:b3:8e:3f:0c:d8:7f:c2:5e:b6:a5:e4:55:31:
96:7f:50:7a:72:6f:6e:31:b6:3c:35:e8:7f:9a:c3:c9:44:85:
8d:42:9e:ea:a4:59:df:03:49:c5:ee:6b:7f:96:f6:0e:0e:1c:
87:21:93:ed:e6:a6:21:e9:5a:89:b7:41:a2:d4:a0:b3:83:b8:
9c:8e:cf:34:4b:ae:84:39:2a:8f:99:0b:cd:15:15:a5:67:d4:
4f:20:46:ae:60:e0:04:b0:ab:dd:c9:26:ff:d3:e0:4b:0c:1e:
80:64:63:06:f1:81:db:0e:a6:09:9d:b8:f6:39:36:7e:a6:3b:
ea:4f:5a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:00 2024 by rpki-client on console-ams.rpki-client.org