Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/2XEXp1-h7H3MGvEn1n9e1udOMSA.roa
File: 2XEXp1-h7H3MGvEn1n9e1udOMSA.roa (raw, json)
Hash identifier: YdEPca+aB9aE/Hmty+4kr3qw+lIf8AZQISEQG2enmVU=
Subject key identifier: D9:71:17:A7:5F:A1:EC:7D:CC:1A:F1:27:D6:7F:5E:D6:E7:4E:31:20
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 018C418AA6709CC9B33279C2B8FDDA1202F9
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/2XEXp1-h7H3MGvEn1n9e1udOMSA.roa
Signing time: Wed 06 Dec 2023 23:50:54 +0000
ROA not before: Wed 06 Dec 2023 23:50:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 172.208.0.0/13 maxlen: 13
48.208.0.0/13 maxlen: 13
192.100.112.0/21 maxlen: 21
192.100.120.0/21 maxlen: 21
192.100.132.0/23 maxlen: 23
82.87.0.0/16 maxlen: 16
192.100.128.0/22 maxlen: 22
135.114.0.0/16 maxlen: 16
172.160.0.0/11 maxlen: 11
51.107.0.0/16 maxlen: 16
135.6.0.0/16 maxlen: 16
134.33.0.0/16 maxlen: 16
192.100.104.0/21 maxlen: 21
149.175.0.0/16 maxlen: 16
135.229.0.0/16 maxlen: 16
84.222.0.0/16 maxlen: 16
51.12.0.0/15 maxlen: 15
51.140.0.0/14 maxlen: 14
147.214.0.0/16 maxlen: 16
143.241.0.0/16 maxlen: 16
193.221.113.0/24 maxlen: 24
148.53.0.0/16 maxlen: 16
51.53.0.0/16 maxlen: 16
57.160.0.0/12 maxlen: 12
51.120.0.0/16 maxlen: 16
132.220.0.0/16 maxlen: 16
48.220.0.0/15 maxlen: 15
135.18.0.0/16 maxlen: 16
9.146.0.0/16 maxlen: 16
212.173.0.0/17 maxlen: 17
134.112.0.0/16 maxlen: 16
135.240.0.0/16 maxlen: 16
172.200.0.0/13 maxlen: 13
212.207.0.0/16 maxlen: 16
160.207.0.0/16 maxlen: 16
160.234.0.0/16 maxlen: 16
9.234.0.0/15 maxlen: 15
173.200.0.0/16 maxlen: 16
157.172.0.0/16 maxlen: 16
209.199.0.0/16 maxlen: 16
143.226.0.0/16 maxlen: 16
109.246.0.0/16 maxlen: 16
165.17.0.0/16 maxlen: 16
9.145.0.0/16 maxlen: 16
212.132.0.0/19 maxlen: 19
135.4.0.0/16 maxlen: 16
51.132.0.0/16 maxlen: 16
157.31.0.0/16 maxlen: 16
1.186.0.0/16 maxlen: 16
167.186.0.0/16 maxlen: 16
213.199.128.0/18 maxlen: 24
135.85.0.0/16 maxlen: 16
128.85.0.0/16 maxlen: 16
138.213.0.0/16 maxlen: 16
130.213.0.0/16 maxlen: 16
48.192.0.0/12 maxlen: 12
128.24.0.0/16 maxlen: 16
158.24.0.0/16 maxlen: 16
51.51.0.0/16 maxlen: 16
57.152.0.0/14 maxlen: 14
151.206.0.0/16 maxlen: 16
138.105.0.0/16 maxlen: 16
94.245.64.0/18 maxlen: 24
124.252.0.0/16 maxlen: 16
51.124.0.0/16 maxlen: 16
157.252.0.0/16 maxlen: 16
156.23.0.0/16 maxlen: 16
199.50.0.0/16 maxlen: 16
51.144.0.0/15 maxlen: 15
135.171.0.0/16 maxlen: 16
40.171.0.0/16 maxlen: 16
149.198.0.0/16 maxlen: 16
194.238.128.0/17 maxlen: 17
85.212.0.0/16 maxlen: 16
134.138.0.0/16 maxlen: 16
51.138.0.0/16 maxlen: 16
152.138.0.0/16 maxlen: 16
51.10.0.0/15 maxlen: 15
74.144.0.0/12 maxlen: 12
194.110.197.0/24 maxlen: 24
51.104.0.0/15 maxlen: 15
72.16.128.0/17 maxlen: 17
130.131.0.0/16 maxlen: 16
135.232.0.0/14 maxlen: 14
135.185.0.0/16 maxlen: 16
51.103.0.0/16 maxlen: 16
167.231.0.0/16 maxlen: 16
207.103.0.0/16 maxlen: 16
135.130.0.0/16 maxlen: 16
161.157.0.0/16 maxlen: 16
135.224.0.0/15 maxlen: 15
57.150.0.0/15 maxlen: 15
132.164.0.0/16 maxlen: 16
217.177.96.0/19 maxlen: 19
57.156.0.0/14 maxlen: 14
172.128.0.0/11 maxlen: 11
217.176.0.0/16 maxlen: 16
157.176.0.0/16 maxlen: 16
128.203.0.0/16 maxlen: 16
135.230.0.0/16 maxlen: 16
193.149.64.0/19 maxlen: 24
151.129.0.0/16 maxlen: 16
51.116.0.0/16 maxlen: 16
135.116.0.0/16 maxlen: 16
165.15.0.0/16 maxlen: 16
69.15.0.0/16 maxlen: 16
40.170.0.0/16 maxlen: 16
51.136.0.0/15 maxlen: 15
131.163.0.0/16 maxlen: 16
135.236.0.0/15 maxlen: 15
129.135.0.0/16 maxlen: 16
135.7.0.0/16 maxlen: 16
167.162.0.0/16 maxlen: 16
137.162.0.0/16 maxlen: 16
131.189.0.0/16 maxlen: 16
159.128.0.0/16 maxlen: 16
213.54.0.0/16 maxlen: 16
72.54.0.0/16 maxlen: 16
143.209.0.0/16 maxlen: 16
157.81.0.0/16 maxlen: 16
194.41.16.0/20 maxlen: 20
194.41.18.0/24 maxlen: 24
194.41.22.0/24 maxlen: 24
194.41.23.0/24 maxlen: 24
194.41.20.0/24 maxlen: 24
194.41.21.0/24 maxlen: 24
194.41.19.0/24 maxlen: 24
132.196.0.0/16 maxlen: 16
84.223.0.0/16 maxlen: 16
157.95.0.0/16 maxlen: 16
122.149.0.0/16 maxlen: 16
134.149.0.0/16 maxlen: 16
147.243.0.0/16 maxlen: 24
48.216.0.0/14 maxlen: 14
40.169.0.0/16 maxlen: 16
2a01:111:4004::/48 maxlen: 48
2a01:111::/32 maxlen: 32
2a01:111:f000::/36 maxlen: 36
2a01:111:2000::/36 maxlen: 36
2a01:111:4000::/36 maxlen: 36
2a00:1c68::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 12 Dec 2023 00:34:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:41:8a:a6:70:9c:c9:b3:32:79:c2:b8:fd:da:12:02:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Dec 6 23:50:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d97117a75fa1ec7dcc1af127d67f5ed6e74e3120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a9:26:37:d7:e4:a4:16:ba:af:e3:68:51:71:
9c:83:4b:d7:b8:14:47:09:a5:6e:67:5d:66:a7:6e:
47:83:b2:2a:12:aa:b7:0b:5d:27:16:12:18:a4:17:
ee:28:1f:10:3e:45:33:42:4b:30:f2:89:51:77:99:
34:b9:60:94:01:76:03:b9:9d:9f:30:9b:dc:7c:38:
63:5d:84:08:5b:fa:2a:b2:cd:e4:57:9e:53:27:70:
28:81:02:af:56:1b:c7:ec:88:29:f3:f9:02:bd:f6:
e4:8b:23:40:09:a5:fb:fc:33:eb:2e:70:5b:14:ac:
1f:7a:f0:a0:bb:ee:20:08:e2:94:d7:83:15:bb:da:
c7:56:db:7a:a7:3a:80:7b:9d:c2:f7:c0:1e:56:d7:
e1:6f:12:d6:3d:3f:ff:2b:41:64:26:18:27:06:fc:
81:f2:66:0d:c9:00:21:bd:d4:96:a1:37:13:a7:79:
c5:24:5f:7a:2e:37:aa:eb:87:e8:a1:cc:61:8b:e7:
3e:88:d9:10:60:d6:2d:9b:06:7b:db:9f:aa:fc:37:
33:c1:fd:6b:bc:50:f2:d8:08:96:2c:97:66:c4:0e:
da:6d:18:b9:48:fc:db:8d:f7:56:e4:32:48:0f:0a:
b8:52:53:77:56:48:30:a9:6e:2b:2c:42:78:a2:6a:
7b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:71:17:A7:5F:A1:EC:7D:CC:1A:F1:27:D6:7F:5E:D6:E7:4E:31:20
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/2XEXp1-h7H3MGvEn1n9e1udOMSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.186.0.0/16
9.145.0.0-9.146.255.255
9.234.0.0/15
40.169.0.0-40.171.255.255
48.192.0.0-48.221.255.255
51.10.0.0-51.13.255.255
51.51.0.0/16
51.53.0.0/16
51.103.0.0-51.105.255.255
51.107.0.0/16
51.116.0.0/16
51.120.0.0/16
51.124.0.0/16
51.132.0.0/16
51.136.0.0-51.138.255.255
51.140.0.0-51.145.255.255
57.150.0.0-57.175.255.255
69.15.0.0/16
72.16.128.0/17
72.54.0.0/16
74.144.0.0/12
82.87.0.0/16
84.222.0.0/15
85.212.0.0/16
94.245.64.0/18
109.246.0.0/16
122.149.0.0/16
124.252.0.0/16
128.24.0.0/16
128.85.0.0/16
128.203.0.0/16
129.135.0.0/16
130.131.0.0/16
130.213.0.0/16
131.163.0.0/16
131.189.0.0/16
132.164.0.0/16
132.196.0.0/16
132.220.0.0/16
134.33.0.0/16
134.112.0.0/16
134.138.0.0/16
134.149.0.0/16
135.4.0.0/16
135.6.0.0/15
135.18.0.0/16
135.85.0.0/16
135.114.0.0/16
135.116.0.0/16
135.130.0.0/16
135.171.0.0/16
135.185.0.0/16
135.224.0.0/15
135.229.0.0-135.230.255.255
135.232.0.0-135.237.255.255
135.240.0.0/16
137.162.0.0/16
138.105.0.0/16
138.213.0.0/16
143.209.0.0/16
143.226.0.0/16
143.241.0.0/16
147.214.0.0/16
147.243.0.0/16
148.53.0.0/16
149.175.0.0/16
149.198.0.0/16
151.129.0.0/16
151.206.0.0/16
152.138.0.0/16
156.23.0.0/16
157.31.0.0/16
157.81.0.0/16
157.95.0.0/16
157.172.0.0/16
157.176.0.0/16
157.252.0.0/16
158.24.0.0/16
159.128.0.0/16
160.207.0.0/16
160.234.0.0/16
161.157.0.0/16
165.15.0.0/16
165.17.0.0/16
167.162.0.0/16
167.186.0.0/16
167.231.0.0/16
172.128.0.0/10
172.200.0.0-172.215.255.255
173.200.0.0/16
192.100.104.0-192.100.133.255
193.149.64.0/19
193.221.113.0/24
194.41.16.0/20
194.110.197.0/24
194.238.128.0/17
199.50.0.0/16
207.103.0.0/16
209.199.0.0/16
212.132.0.0/19
212.173.0.0/17
212.207.0.0/16
213.54.0.0/16
213.199.128.0/18
217.176.0.0/16
217.177.96.0/19
IPv6:
2a00:1c68::/29
2a01:111::/32
Signature Algorithm: sha256WithRSAEncryption
00:23:05:a4:23:9f:b4:d2:89:bc:87:f6:ec:bd:b3:3f:bc:22:
19:6b:19:fb:06:ae:a9:61:f5:e0:d6:9e:18:5e:98:b4:a9:b5:
72:3a:cd:f0:4e:98:e1:d9:66:e0:1a:a0:6c:c6:89:f6:3a:bf:
e5:3f:e3:67:b2:03:1b:9b:8b:49:cd:85:97:87:29:a0:f7:17:
7d:c9:fb:98:5c:7c:1a:39:3e:9a:77:52:92:a8:f0:d8:00:d9:
a7:33:7d:67:4e:fd:05:a8:ae:fa:f8:83:0d:ac:07:e4:85:c7:
1c:32:87:fd:86:a5:07:86:55:ff:8a:ee:d3:80:fd:54:17:12:
ca:b9:9c:fc:09:39:22:95:53:51:0e:4f:5c:cb:3f:45:b6:6c:
3e:77:08:27:14:60:46:8e:06:d7:a8:55:53:68:52:07:6f:ac:
7b:e9:e6:24:ce:92:6c:00:8d:fc:95:80:90:fd:4e:f3:9c:23:
79:71:0f:b7:60:dc:d0:40:33:0e:85:c7:2e:11:62:d8:b5:de:
cf:4b:25:f6:61:03:a3:53:79:70:d0:3d:87:a2:f2:40:5b:ed:
11:f9:07:de:3c:ee:07:f7:7e:d1:00:38:cb:a3:3c:99:c4:19:
8a:e4:0f:36:80:da:82:6e:2b:8e:1c:16:11:57:6f:79:d7:0e:
15:f5:5f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:00 2024 by rpki-client on console-ams.rpki-client.org