Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/8_RTXtrX1Y63IVCqasa-3i9Tjas.roa
File: 8_RTXtrX1Y63IVCqasa-3i9Tjas.roa (raw, json)
Hash identifier: kkeFctMvL3U+4AKt5wiOfP6vzdjTSokCnHBiHUxL0fM=
Subject key identifier: F3:F4:53:5E:DA:D7:D5:8E:B7:21:50:AA:6A:C6:BE:DE:2F:53:8D:AB
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 018E9AB03D41CEC5D236E40AF1C552D006BA
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/8_RTXtrX1Y63IVCqasa-3i9Tjas.roa
Signing time: Mon 01 Apr 2024 17:23:45 +0000
ROA not before: Mon 01 Apr 2024 17:23:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 1.186.0.0/16 maxlen: 16
9.141.0.0/16 maxlen: 16
9.145.0.0/16 maxlen: 16
9.146.0.0/16 maxlen: 16
9.160.0.0/16 maxlen: 16
9.163.0.0/16 maxlen: 16
9.169.0.0/16 maxlen: 16
9.205.0.0/16 maxlen: 16
9.223.0.0/16 maxlen: 16
9.234.0.0/15 maxlen: 15
40.169.0.0/16 maxlen: 16
40.170.0.0/16 maxlen: 16
40.171.0.0/16 maxlen: 16
48.192.0.0/12 maxlen: 12
48.208.0.0/13 maxlen: 13
48.216.0.0/14 maxlen: 14
48.220.0.0/15 maxlen: 15
51.10.0.0/15 maxlen: 15
51.12.0.0/15 maxlen: 15
51.51.0.0/16 maxlen: 16
51.53.0.0/16 maxlen: 16
51.103.0.0/16 maxlen: 16
51.104.0.0/15 maxlen: 15
51.107.0.0/16 maxlen: 16
51.116.0.0/16 maxlen: 16
51.120.0.0/16 maxlen: 16
51.124.0.0/16 maxlen: 16
51.132.0.0/16 maxlen: 16
51.136.0.0/15 maxlen: 15
51.138.0.0/16 maxlen: 16
51.140.0.0/14 maxlen: 14
51.144.0.0/15 maxlen: 15
57.150.0.0/15 maxlen: 15
57.152.0.0/14 maxlen: 14
57.156.0.0/14 maxlen: 14
57.160.0.0/12 maxlen: 12
62.10.0.0/15 maxlen: 15
69.15.0.0/16 maxlen: 16
72.16.128.0/17 maxlen: 17
72.54.0.0/16 maxlen: 16
74.144.0.0/12 maxlen: 12
82.87.0.0/16 maxlen: 16
84.222.0.0/16 maxlen: 16
84.223.0.0/16 maxlen: 16
85.212.0.0/16 maxlen: 16
94.245.64.0/18 maxlen: 24
109.246.0.0/16 maxlen: 16
122.149.0.0/16 maxlen: 16
124.252.0.0/16 maxlen: 16
128.24.0.0/16 maxlen: 16
128.85.0.0/16 maxlen: 16
128.203.0.0/16 maxlen: 16
128.251.0.0/16 maxlen: 16
129.135.0.0/16 maxlen: 16
130.131.0.0/16 maxlen: 16
130.213.0.0/16 maxlen: 16
131.163.0.0/16 maxlen: 16
131.189.0.0/16 maxlen: 16
132.164.0.0/16 maxlen: 16
132.196.0.0/16 maxlen: 16
132.220.0.0/16 maxlen: 16
134.33.0.0/16 maxlen: 16
134.112.0.0/16 maxlen: 16
134.138.0.0/16 maxlen: 16
134.149.0.0/16 maxlen: 16
135.4.0.0/16 maxlen: 16
135.6.0.0/16 maxlen: 16
135.7.0.0/16 maxlen: 16
135.13.0.0/16 maxlen: 16
135.18.0.0/16 maxlen: 16
135.85.0.0/16 maxlen: 16
135.88.0.0/16 maxlen: 16
135.93.0.0/16 maxlen: 16
135.114.0.0/16 maxlen: 16
135.116.0.0/16 maxlen: 16
135.118.0.0/16 maxlen: 16
135.119.0.0/16 maxlen: 16
135.130.0.0/16 maxlen: 16
135.171.0.0/16 maxlen: 16
135.185.0.0/16 maxlen: 16
135.220.0.0/16 maxlen: 16
135.222.0.0/16 maxlen: 16
135.224.0.0/15 maxlen: 15
135.229.0.0/16 maxlen: 16
135.230.0.0/16 maxlen: 16
135.232.0.0/14 maxlen: 14
135.236.0.0/15 maxlen: 15
135.240.0.0/16 maxlen: 16
135.241.0.0/16 maxlen: 16
135.244.0.0/16 maxlen: 16
135.255.0.0/16 maxlen: 16
137.162.0.0/16 maxlen: 16
138.105.0.0/16 maxlen: 16
138.213.0.0/16 maxlen: 16
139.188.0.0/16 maxlen: 16
143.209.0.0/16 maxlen: 16
143.226.0.0/16 maxlen: 16
143.241.0.0/16 maxlen: 16
145.132.0.0/15 maxlen: 15
147.214.0.0/16 maxlen: 16
147.243.0.0/16 maxlen: 24
148.53.0.0/16 maxlen: 16
149.175.0.0/16 maxlen: 16
149.198.0.0/16 maxlen: 16
149.204.0.0/16 maxlen: 16
151.129.0.0/16 maxlen: 16
151.206.0.0/16 maxlen: 16
152.138.0.0/16 maxlen: 16
156.23.0.0/16 maxlen: 16
157.31.0.0/16 maxlen: 16
157.81.0.0/16 maxlen: 16
157.95.0.0/16 maxlen: 16
157.172.0.0/16 maxlen: 16
157.176.0.0/16 maxlen: 16
157.252.0.0/16 maxlen: 16
158.24.0.0/16 maxlen: 16
158.53.0.0/16 maxlen: 16
159.128.0.0/16 maxlen: 16
160.207.0.0/16 maxlen: 16
160.234.0.0/16 maxlen: 16
161.157.0.0/16 maxlen: 16
161.220.0.0/16 maxlen: 16
165.15.0.0/16 maxlen: 16
165.17.0.0/16 maxlen: 16
167.162.0.0/16 maxlen: 16
167.186.0.0/16 maxlen: 16
167.231.0.0/16 maxlen: 16
172.128.0.0/11 maxlen: 11
172.160.0.0/11 maxlen: 11
172.200.0.0/13 maxlen: 13
172.208.0.0/13 maxlen: 13
173.200.0.0/16 maxlen: 16
192.100.104.0/21 maxlen: 21
192.100.112.0/21 maxlen: 21
192.100.120.0/21 maxlen: 21
192.100.128.0/22 maxlen: 22
192.100.132.0/23 maxlen: 23
193.149.64.0/19 maxlen: 24
193.221.113.0/24 maxlen: 24
194.41.16.0/20 maxlen: 20
194.41.18.0/24 maxlen: 24
194.41.19.0/24 maxlen: 24
194.41.20.0/24 maxlen: 24
194.41.21.0/24 maxlen: 24
194.41.22.0/24 maxlen: 24
194.41.23.0/24 maxlen: 24
194.110.197.0/24 maxlen: 24
194.238.128.0/17 maxlen: 17
199.50.0.0/16 maxlen: 16
199.118.0.0/16 maxlen: 16
207.103.0.0/16 maxlen: 16
209.199.0.0/16 maxlen: 16
212.132.0.0/19 maxlen: 19
212.173.0.0/17 maxlen: 17
212.207.0.0/16 maxlen: 16
213.54.0.0/16 maxlen: 16
213.199.128.0/18 maxlen: 24
217.176.0.0/16 maxlen: 16
217.177.96.0/19 maxlen: 19
2a00:1c68::/29 maxlen: 29
2a01:111::/32 maxlen: 32
2a01:111:2000::/36 maxlen: 36
2a01:111:4000::/36 maxlen: 36
2a01:111:4004::/48 maxlen: 48
2a01:111:f000::/36 maxlen: 36
Validation: Failed, certificate revoked on Mon 08 Apr 2024 21:42:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9a:b0:3d:41:ce:c5:d2:36:e4:0a:f1:c5:52:d0:06:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Apr 1 17:23:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3f4535edad7d58eb72150aa6ac6bede2f538dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0a:0e:e7:aa:a8:42:29:4e:3e:d4:f0:20:48:
1c:ac:ae:b2:8e:5b:8e:d2:d1:7e:eb:d0:eb:3c:c1:
34:9d:9f:c9:20:e5:94:1d:a2:49:6d:a1:5f:7b:d5:
98:ee:8a:0a:2f:ad:d2:16:6f:20:d8:9c:d5:c3:cd:
b7:2a:af:45:b1:27:ca:3c:d0:82:d2:45:23:dc:0f:
ed:45:bf:be:d5:50:0a:e1:4e:74:60:36:53:88:14:
36:ef:08:4e:ca:71:fb:7a:09:75:e9:8f:ce:f0:bc:
5f:f0:fd:83:20:1e:c2:ef:08:fe:ad:36:7a:a4:8a:
55:4f:66:b2:e4:1e:88:ce:22:49:b2:8b:e3:29:fb:
df:b7:07:c6:91:02:30:71:85:b9:73:f4:0c:b5:a2:
5c:78:1e:16:e1:82:a7:67:7b:bd:84:0c:50:32:04:
64:be:27:92:9c:c9:92:c5:f9:44:54:9e:5f:72:91:
ba:d7:0c:55:38:50:89:09:ba:40:f6:67:a1:ae:e2:
b9:b6:c0:97:02:78:c8:ea:40:d9:63:eb:ca:7e:c2:
ad:2c:ee:0c:9d:2b:81:2e:6f:41:b6:61:36:a3:3d:
fb:f6:cb:1b:86:48:08:25:c8:95:f0:73:70:cd:e5:
28:67:58:d7:1e:d9:39:5a:ed:2c:9a:78:bc:2e:7d:
6b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F4:53:5E:DA:D7:D5:8E:B7:21:50:AA:6A:C6:BE:DE:2F:53:8D:AB
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/8_RTXtrX1Y63IVCqasa-3i9Tjas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.186.0.0/16
9.141.0.0/16
9.145.0.0-9.146.255.255
9.160.0.0/16
9.163.0.0/16
9.169.0.0/16
9.205.0.0/16
9.223.0.0/16
9.234.0.0/15
40.169.0.0-40.171.255.255
48.192.0.0-48.221.255.255
51.10.0.0-51.13.255.255
51.51.0.0/16
51.53.0.0/16
51.103.0.0-51.105.255.255
51.107.0.0/16
51.116.0.0/16
51.120.0.0/16
51.124.0.0/16
51.132.0.0/16
51.136.0.0-51.138.255.255
51.140.0.0-51.145.255.255
57.150.0.0-57.175.255.255
62.10.0.0/15
69.15.0.0/16
72.16.128.0/17
72.54.0.0/16
74.144.0.0/12
82.87.0.0/16
84.222.0.0/15
85.212.0.0/16
94.245.64.0/18
109.246.0.0/16
122.149.0.0/16
124.252.0.0/16
128.24.0.0/16
128.85.0.0/16
128.203.0.0/16
128.251.0.0/16
129.135.0.0/16
130.131.0.0/16
130.213.0.0/16
131.163.0.0/16
131.189.0.0/16
132.164.0.0/16
132.196.0.0/16
132.220.0.0/16
134.33.0.0/16
134.112.0.0/16
134.138.0.0/16
134.149.0.0/16
135.4.0.0/16
135.6.0.0/15
135.13.0.0/16
135.18.0.0/16
135.85.0.0/16
135.88.0.0/16
135.93.0.0/16
135.114.0.0/16
135.116.0.0/16
135.118.0.0/15
135.130.0.0/16
135.171.0.0/16
135.185.0.0/16
135.220.0.0/16
135.222.0.0/16
135.224.0.0/15
135.229.0.0-135.230.255.255
135.232.0.0-135.237.255.255
135.240.0.0/15
135.244.0.0/16
135.255.0.0/16
137.162.0.0/16
138.105.0.0/16
138.213.0.0/16
139.188.0.0/16
143.209.0.0/16
143.226.0.0/16
143.241.0.0/16
145.132.0.0/15
147.214.0.0/16
147.243.0.0/16
148.53.0.0/16
149.175.0.0/16
149.198.0.0/16
149.204.0.0/16
151.129.0.0/16
151.206.0.0/16
152.138.0.0/16
156.23.0.0/16
157.31.0.0/16
157.81.0.0/16
157.95.0.0/16
157.172.0.0/16
157.176.0.0/16
157.252.0.0/16
158.24.0.0/16
158.53.0.0/16
159.128.0.0/16
160.207.0.0/16
160.234.0.0/16
161.157.0.0/16
161.220.0.0/16
165.15.0.0/16
165.17.0.0/16
167.162.0.0/16
167.186.0.0/16
167.231.0.0/16
172.128.0.0/10
172.200.0.0-172.215.255.255
173.200.0.0/16
192.100.104.0-192.100.133.255
193.149.64.0/19
193.221.113.0/24
194.41.16.0/20
194.110.197.0/24
194.238.128.0/17
199.50.0.0/16
199.118.0.0/16
207.103.0.0/16
209.199.0.0/16
212.132.0.0/19
212.173.0.0/17
212.207.0.0/16
213.54.0.0/16
213.199.128.0/18
217.176.0.0/16
217.177.96.0/19
IPv6:
2a00:1c68::/29
2a01:111::/32
Signature Algorithm: sha256WithRSAEncryption
9a:b0:0b:d9:e5:78:a4:a1:46:31:bc:e2:59:02:2f:a9:03:c3:
f7:e1:3b:fa:06:c1:44:41:9f:94:ba:98:6c:12:a0:12:8e:86:
67:99:c0:ea:b6:7d:f1:42:07:12:0f:83:d4:b8:fa:61:20:84:
f9:51:60:ea:80:74:d5:68:c6:46:8b:92:d2:49:44:d4:ca:f1:
6a:71:10:47:70:ba:d5:36:65:b6:64:90:1f:f3:60:a0:ad:95:
80:4d:29:32:1b:b6:cb:b6:f3:f0:09:21:6f:fd:ad:ae:cc:cb:
37:f8:54:14:3b:c2:6d:42:a0:e0:86:09:a1:b0:ad:27:03:04:
b1:62:99:51:4d:ec:c4:14:62:d5:dd:20:13:93:f3:ac:51:b9:
14:60:1d:0d:77:b4:00:e5:4f:b9:e0:8c:36:61:a2:c9:34:65:
fa:a5:6e:02:5e:ef:8c:6f:61:08:5c:b7:94:13:e4:25:86:b3:
46:f4:9f:75:a1:6c:c5:59:9c:77:c0:95:4f:12:8a:e9:d3:ac:
fb:f9:2d:0d:eb:e8:5b:44:04:2f:4b:b9:40:53:61:b2:98:bc:
f8:b8:cb:29:03:13:16:e4:85:42:fb:a2:43:a9:1a:31:3a:9a:
38:3f:1d:02:f3:6e:88:9d:12:03:2e:f8:b3:8f:e4:a1:4c:ad:
0b:c5:88:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-fra.rpki-client.org