Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/6mzoQMGcpK-xWgsGNNq7EGqTkCg.roa
File: 6mzoQMGcpK-xWgsGNNq7EGqTkCg.roa (raw, json)
Hash identifier: NqHF8p787O0plgI0n56iJBGFMP4ZpF8Pp6MBIButMIU=
Subject key identifier: EA:6C:E8:40:C1:9C:A4:AF:B1:5A:0B:06:34:DA:BB:10:6A:93:90:28
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 018A6CB93F4E57674C603B9DB120F68B77A6
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/6mzoQMGcpK-xWgsGNNq7EGqTkCg.roa
Signing time: Wed 06 Sep 2023 22:59:54 +0000
ROA not before: Wed 06 Sep 2023 22:59:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 94.245.64.0/18 maxlen: 24
172.208.0.0/13 maxlen: 13
51.124.0.0/16 maxlen: 16
157.252.0.0/16 maxlen: 16
192.100.112.0/21 maxlen: 21
192.100.120.0/21 maxlen: 21
192.100.132.0/23 maxlen: 23
82.87.0.0/16 maxlen: 16
192.100.128.0/22 maxlen: 22
172.160.0.0/11 maxlen: 11
51.144.0.0/15 maxlen: 15
40.171.0.0/16 maxlen: 16
51.107.0.0/16 maxlen: 16
135.6.0.0/16 maxlen: 16
149.198.0.0/16 maxlen: 16
194.238.128.0/17 maxlen: 17
192.100.104.0/21 maxlen: 21
85.212.0.0/16 maxlen: 16
51.138.0.0/16 maxlen: 16
152.138.0.0/16 maxlen: 16
51.10.0.0/15 maxlen: 15
135.229.0.0/16 maxlen: 16
74.144.0.0/12 maxlen: 12
194.110.197.0/24 maxlen: 24
51.104.0.0/15 maxlen: 15
72.16.128.0/17 maxlen: 17
135.232.0.0/14 maxlen: 14
51.12.0.0/15 maxlen: 15
51.103.0.0/16 maxlen: 16
167.231.0.0/16 maxlen: 16
207.103.0.0/16 maxlen: 16
51.140.0.0/14 maxlen: 14
135.130.0.0/16 maxlen: 16
135.224.0.0/15 maxlen: 15
57.150.0.0/15 maxlen: 15
132.164.0.0/16 maxlen: 16
193.221.113.0/24 maxlen: 24
51.53.0.0/16 maxlen: 16
57.160.0.0/12 maxlen: 12
51.120.0.0/16 maxlen: 16
217.177.96.0/19 maxlen: 19
132.220.0.0/16 maxlen: 16
57.156.0.0/14 maxlen: 14
135.18.0.0/16 maxlen: 16
212.173.0.0/17 maxlen: 17
172.128.0.0/11 maxlen: 11
217.176.0.0/16 maxlen: 16
135.230.0.0/16 maxlen: 16
193.149.64.0/19 maxlen: 24
151.129.0.0/16 maxlen: 16
172.200.0.0/13 maxlen: 13
51.116.0.0/16 maxlen: 16
135.116.0.0/16 maxlen: 16
212.207.0.0/16 maxlen: 16
40.170.0.0/16 maxlen: 16
173.200.0.0/16 maxlen: 16
51.136.0.0/15 maxlen: 15
135.236.0.0/15 maxlen: 15
209.199.0.0/16 maxlen: 16
167.162.0.0/16 maxlen: 16
143.226.0.0/16 maxlen: 16
159.128.0.0/16 maxlen: 16
213.54.0.0/16 maxlen: 16
109.246.0.0/16 maxlen: 16
194.41.16.0/20 maxlen: 20
212.132.0.0/19 maxlen: 19
194.41.18.0/24 maxlen: 24
135.4.0.0/16 maxlen: 16
51.132.0.0/16 maxlen: 16
194.41.22.0/24 maxlen: 24
194.41.23.0/24 maxlen: 24
194.41.20.0/24 maxlen: 24
194.41.21.0/24 maxlen: 24
194.41.19.0/24 maxlen: 24
157.31.0.0/16 maxlen: 16
157.95.0.0/16 maxlen: 16
167.186.0.0/16 maxlen: 16
213.199.128.0/18 maxlen: 24
128.85.0.0/16 maxlen: 16
51.51.0.0/16 maxlen: 16
147.243.0.0/16 maxlen: 24
57.152.0.0/14 maxlen: 14
151.206.0.0/16 maxlen: 16
40.169.0.0/16 maxlen: 16
138.105.0.0/16 maxlen: 16
2a00:1c68::/29 maxlen: 29
2a01:111:4004::/48 maxlen: 48
2a01:111::/32 maxlen: 32
2a01:111:f000::/36 maxlen: 36
2a01:111:2000::/36 maxlen: 36
2a01:111:4000::/36 maxlen: 36
Validation: Failed, certificate revoked on Thu 05 Oct 2023 22:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6c:b9:3f:4e:57:67:4c:60:3b:9d:b1:20:f6:8b:77:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Sep 6 22:59:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea6ce840c19ca4afb15a0b0634dabb106a939028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:62:1f:66:4a:ca:b3:ab:37:30:e6:b4:fd:78:
1c:3b:3a:2d:04:8e:4e:05:f3:5c:3c:c5:4e:81:b8:
87:38:7f:66:40:44:8e:af:be:8c:29:0d:11:fa:b7:
39:bb:63:95:94:99:17:5a:31:c7:74:19:06:fa:2b:
f1:4a:c3:1b:f0:02:04:e9:47:a0:04:cc:53:18:aa:
4f:b2:6b:94:e1:0d:4b:17:45:60:7b:2d:f8:07:27:
82:8d:d4:93:6b:9d:00:96:d8:02:ea:0c:28:e7:2b:
84:d3:e2:08:0f:25:76:0f:bd:3e:64:21:f7:f3:6e:
d0:f0:62:b5:4c:34:73:84:d6:a3:4a:42:dd:4d:05:
bb:ed:92:b5:b7:c8:5c:40:d2:a2:c3:ec:30:b4:5e:
05:d8:03:97:8d:db:1b:a0:12:63:ac:57:1e:b1:d0:
83:7a:18:fa:7d:42:2c:f5:bc:ba:99:2c:9b:1a:49:
ce:20:3d:68:eb:8a:e0:65:73:31:38:fa:bb:98:bf:
4c:81:21:d3:9e:7a:9c:3f:0f:9e:e0:b4:1e:56:a0:
c8:22:6b:2d:74:44:e3:17:41:16:12:c4:a9:ae:01:
fc:dd:2c:41:76:12:be:69:a5:f6:52:55:ff:7a:f9:
a8:c4:a2:05:a1:c6:b9:4e:f1:af:c9:62:88:cc:f5:
0d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6C:E8:40:C1:9C:A4:AF:B1:5A:0B:06:34:DA:BB:10:6A:93:90:28
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/6mzoQMGcpK-xWgsGNNq7EGqTkCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.169.0.0-40.171.255.255
51.10.0.0-51.13.255.255
51.51.0.0/16
51.53.0.0/16
51.103.0.0-51.105.255.255
51.107.0.0/16
51.116.0.0/16
51.120.0.0/16
51.124.0.0/16
51.132.0.0/16
51.136.0.0-51.138.255.255
51.140.0.0-51.145.255.255
57.150.0.0-57.175.255.255
72.16.128.0/17
74.144.0.0/12
82.87.0.0/16
85.212.0.0/16
94.245.64.0/18
109.246.0.0/16
128.85.0.0/16
132.164.0.0/16
132.220.0.0/16
135.4.0.0/16
135.6.0.0/16
135.18.0.0/16
135.116.0.0/16
135.130.0.0/16
135.224.0.0/15
135.229.0.0-135.230.255.255
135.232.0.0-135.237.255.255
138.105.0.0/16
143.226.0.0/16
147.243.0.0/16
149.198.0.0/16
151.129.0.0/16
151.206.0.0/16
152.138.0.0/16
157.31.0.0/16
157.95.0.0/16
157.252.0.0/16
159.128.0.0/16
167.162.0.0/16
167.186.0.0/16
167.231.0.0/16
172.128.0.0/10
172.200.0.0-172.215.255.255
173.200.0.0/16
192.100.104.0-192.100.133.255
193.149.64.0/19
193.221.113.0/24
194.41.16.0/20
194.110.197.0/24
194.238.128.0/17
207.103.0.0/16
209.199.0.0/16
212.132.0.0/19
212.173.0.0/17
212.207.0.0/16
213.54.0.0/16
213.199.128.0/18
217.176.0.0/16
217.177.96.0/19
IPv6:
2a00:1c68::/29
2a01:111::/32
Signature Algorithm: sha256WithRSAEncryption
15:e6:b1:80:98:f3:73:f1:8a:49:76:06:f3:c4:e3:de:bc:1e:
e6:43:00:13:1c:38:f3:12:c3:54:bb:f4:a2:70:11:16:86:f8:
b7:c4:5d:99:2b:d4:eb:d9:39:30:a2:9a:cc:35:6c:e8:40:31:
6e:61:25:45:30:68:b1:f2:d6:82:a3:8c:a8:4f:38:7e:d3:56:
fb:ec:9a:f3:f2:3d:8a:db:67:09:f7:ec:51:59:c4:21:e6:78:
2f:ce:cf:b7:48:0f:db:a1:d2:8d:70:8f:0f:e7:0c:a0:01:a6:
29:8a:e7:d1:85:e7:3c:4b:7b:56:1d:c9:a7:92:50:5a:89:71:
94:27:4c:fd:1c:39:60:c6:2e:78:3e:bc:72:e6:64:dd:28:e8:
f5:cc:eb:0a:b8:a3:2d:c9:b5:07:64:47:ae:69:92:e3:7f:d1:
c1:f7:9c:6f:03:b9:c6:42:12:f7:be:f0:13:fa:df:a5:db:28:
1d:7e:a0:70:36:1c:6f:7d:35:19:ac:92:56:8a:15:5b:63:6a:
74:3e:a9:59:a5:c7:ac:0d:52:7f:f9:8f:98:c7:85:ba:02:93:
0e:a7:a5:de:1b:85:5a:11:8f:0c:fb:03:9d:f3:e6:01:c6:fa:
8a:e1:9c:5f:16:b4:92:df:65:d5:11:25:99:ed:65:a1:74:79:
5f:c6:e1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-fra.rpki-client.org