Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/4B-XkPxbSjZ3OK70mMfO5SWJxRQ.roa
File: 4B-XkPxbSjZ3OK70mMfO5SWJxRQ.roa (raw, json)
Hash identifier: 8OupuPOpIi2lg10in5y+x7Ksf6yV65D4u5E2eZcsZ6I=
Subject key identifier: E0:1F:97:90:FC:5B:4A:36:77:38:AE:F4:98:C7:CE:E5:25:89:C5:14
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 0188C15E991559481370C2033ADBBC518117
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/4B-XkPxbSjZ3OK70mMfO5SWJxRQ.roa
Signing time: Thu 15 Jun 2023 23:23:02 +0000
ROA not before: Thu 15 Jun 2023 23:23:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 94.245.64.0/18 maxlen: 24
172.208.0.0/13 maxlen: 13
51.124.0.0/16 maxlen: 16
192.100.112.0/21 maxlen: 21
192.100.120.0/21 maxlen: 21
192.100.132.0/23 maxlen: 23
82.87.0.0/16 maxlen: 16
192.100.128.0/22 maxlen: 22
172.160.0.0/11 maxlen: 11
51.144.0.0/15 maxlen: 15
40.171.0.0/16 maxlen: 16
51.107.0.0/16 maxlen: 16
135.6.0.0/16 maxlen: 16
149.198.0.0/16 maxlen: 16
194.238.128.0/17 maxlen: 17
192.100.104.0/21 maxlen: 21
85.212.0.0/16 maxlen: 16
152.138.0.0/16 maxlen: 16
51.138.0.0/16 maxlen: 16
51.10.0.0/15 maxlen: 15
135.229.0.0/16 maxlen: 16
194.110.197.0/24 maxlen: 24
51.104.0.0/15 maxlen: 15
135.232.0.0/14 maxlen: 14
51.12.0.0/15 maxlen: 15
51.103.0.0/16 maxlen: 16
51.140.0.0/14 maxlen: 14
135.130.0.0/16 maxlen: 16
135.224.0.0/15 maxlen: 15
57.150.0.0/15 maxlen: 15
132.164.0.0/16 maxlen: 16
193.221.113.0/24 maxlen: 24
51.53.0.0/16 maxlen: 16
57.160.0.0/12 maxlen: 12
51.120.0.0/16 maxlen: 16
217.177.96.0/19 maxlen: 19
57.156.0.0/14 maxlen: 14
135.18.0.0/16 maxlen: 16
212.173.0.0/17 maxlen: 17
172.128.0.0/11 maxlen: 11
217.176.0.0/16 maxlen: 16
135.230.0.0/16 maxlen: 16
193.149.64.0/19 maxlen: 24
151.129.0.0/16 maxlen: 16
172.200.0.0/13 maxlen: 13
135.116.0.0/16 maxlen: 16
51.116.0.0/16 maxlen: 16
212.207.0.0/16 maxlen: 16
40.170.0.0/16 maxlen: 16
51.136.0.0/15 maxlen: 15
135.236.0.0/15 maxlen: 15
209.199.0.0/16 maxlen: 16
167.162.0.0/16 maxlen: 16
143.226.0.0/16 maxlen: 16
159.128.0.0/16 maxlen: 16
213.54.0.0/16 maxlen: 16
109.246.0.0/16 maxlen: 16
194.41.16.0/20 maxlen: 20
212.132.0.0/19 maxlen: 19
194.41.18.0/24 maxlen: 24
51.132.0.0/16 maxlen: 16
135.4.0.0/16 maxlen: 16
194.41.22.0/24 maxlen: 24
194.41.23.0/24 maxlen: 24
194.41.20.0/24 maxlen: 24
194.41.21.0/24 maxlen: 24
194.41.19.0/24 maxlen: 24
157.31.0.0/16 maxlen: 16
157.95.0.0/16 maxlen: 16
213.199.128.0/18 maxlen: 24
167.186.0.0/16 maxlen: 16
128.85.0.0/16 maxlen: 16
51.51.0.0/16 maxlen: 16
147.243.0.0/16 maxlen: 24
57.152.0.0/14 maxlen: 14
151.206.0.0/16 maxlen: 16
40.169.0.0/16 maxlen: 16
138.105.0.0/16 maxlen: 16
2a00:1c68::/29 maxlen: 29
2a01:111:4004::/48 maxlen: 48
2a01:111::/32 maxlen: 32
2a01:111:4000::/36 maxlen: 36
2a01:111:2000::/36 maxlen: 36
2a01:111:f000::/36 maxlen: 36
Validation: Failed, certificate revoked on Tue 25 Jul 2023 17:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c1:5e:99:15:59:48:13:70:c2:03:3a:db:bc:51:81:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Jun 15 23:23:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e01f9790fc5b4a367738aef498c7cee52589c514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3e:ce:c5:b4:07:c6:15:a4:e2:c2:38:be:47:
64:d2:fa:be:d7:d6:fa:ea:a3:ab:6c:d0:dd:02:8f:
2a:61:7a:ef:ae:6c:11:4f:39:83:76:93:b3:50:7b:
23:78:dc:01:df:57:46:1c:ca:12:fb:9e:67:2e:2d:
8f:5c:df:02:db:22:b8:8c:0b:66:34:0c:94:c1:5f:
7e:14:d0:af:13:fd:53:d0:e1:8e:2a:59:12:17:ea:
40:03:2c:b5:6b:0f:51:e8:cb:81:18:f1:87:a1:67:
b5:7e:74:18:ff:d1:38:6a:09:d2:01:c5:fc:fa:08:
83:79:88:7b:6f:81:47:f3:80:2b:a3:81:ab:5b:b5:
24:cf:84:db:ae:f3:70:24:8b:92:72:27:27:5d:12:
f1:c6:c1:2f:27:bd:91:ca:98:d1:4b:2c:af:87:23:
23:07:68:fc:ac:5e:b0:25:b4:c4:ae:66:d6:ba:5d:
af:fc:50:83:ef:d9:29:a1:f6:ad:57:91:2d:00:b5:
41:94:73:e5:75:05:73:53:52:0c:6e:97:b3:06:c7:
b0:a9:21:a4:57:0d:0a:18:e1:d9:f2:d4:40:50:a1:
de:c7:6a:83:b5:ab:d3:3f:d5:90:9b:e7:03:2d:31:
4f:c6:56:90:7b:6f:96:2c:d7:03:22:65:84:6f:13:
a9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1F:97:90:FC:5B:4A:36:77:38:AE:F4:98:C7:CE:E5:25:89:C5:14
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/4B-XkPxbSjZ3OK70mMfO5SWJxRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.169.0.0-40.171.255.255
51.10.0.0-51.13.255.255
51.51.0.0/16
51.53.0.0/16
51.103.0.0-51.105.255.255
51.107.0.0/16
51.116.0.0/16
51.120.0.0/16
51.124.0.0/16
51.132.0.0/16
51.136.0.0-51.138.255.255
51.140.0.0-51.145.255.255
57.150.0.0-57.175.255.255
82.87.0.0/16
85.212.0.0/16
94.245.64.0/18
109.246.0.0/16
128.85.0.0/16
132.164.0.0/16
135.4.0.0/16
135.6.0.0/16
135.18.0.0/16
135.116.0.0/16
135.130.0.0/16
135.224.0.0/15
135.229.0.0-135.230.255.255
135.232.0.0-135.237.255.255
138.105.0.0/16
143.226.0.0/16
147.243.0.0/16
149.198.0.0/16
151.129.0.0/16
151.206.0.0/16
152.138.0.0/16
157.31.0.0/16
157.95.0.0/16
159.128.0.0/16
167.162.0.0/16
167.186.0.0/16
172.128.0.0/10
172.200.0.0-172.215.255.255
192.100.104.0-192.100.133.255
193.149.64.0/19
193.221.113.0/24
194.41.16.0/20
194.110.197.0/24
194.238.128.0/17
209.199.0.0/16
212.132.0.0/19
212.173.0.0/17
212.207.0.0/16
213.54.0.0/16
213.199.128.0/18
217.176.0.0/16
217.177.96.0/19
IPv6:
2a00:1c68::/29
2a01:111::/32
Signature Algorithm: sha256WithRSAEncryption
09:80:c9:84:d8:1b:ec:d8:b7:99:27:14:ac:39:6d:02:75:08:
1f:5d:04:4a:0b:50:91:f0:d8:8b:06:5d:c9:24:ee:d2:6b:01:
f2:73:ba:51:c2:c8:c1:4e:ba:fe:77:8b:d5:75:da:35:74:ab:
4a:d8:91:a1:5c:f6:d7:04:5a:35:c3:1b:cf:4e:ea:6d:c1:b2:
b0:33:17:96:06:a7:09:b1:bc:b8:a0:d3:1e:9d:33:d2:ca:80:
a9:fe:7b:ac:9d:f2:61:e9:22:f6:36:bc:bd:5b:77:ed:28:78:
af:7c:e3:78:64:57:01:88:35:fc:04:49:72:e7:b2:96:70:18:
d6:ae:cd:94:fc:0b:b9:5c:bc:37:08:07:e5:49:4d:4b:76:98:
0b:1b:a6:53:26:34:95:3b:8d:0a:fc:85:f8:ab:d7:34:f8:d1:
f6:2e:2d:62:15:d7:02:f7:e7:6f:c2:df:9a:f4:21:16:e3:fb:
85:92:32:c0:9c:2e:79:2c:65:cc:48:22:fa:a0:44:5a:19:e2:
96:1e:eb:24:f0:22:79:90:ae:13:be:d7:64:00:d8:98:48:af:
7d:2e:fe:60:15:12:09:c2:c3:6e:26:8d:b4:89:f6:69:5e:f6:
f9:29:dc:07:68:40:c1:57:cd:a3:04:51:41:b8:0b:8e:c0:60:
58:9d:4c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:00 2024 by rpki-client on console-ams.rpki-client.org