Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/CqiLiShvs9v6GuAYr3gYG80CjW8.roa
File: CqiLiShvs9v6GuAYr3gYG80CjW8.roa (raw, json)
Hash identifier: Z896cIZlxZopUuGlwzVOsiU6cXONO9FEbqLVam0bOjs=
Subject key identifier: 0A:A8:8B:89:28:6F:B3:DB:FA:1A:E0:18:AF:78:18:1B:CD:02:8D:6F
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 018EBFA9B042ACF32E57DA613ECAB1FE3D5E
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/CqiLiShvs9v6GuAYr3gYG80CjW8.roa
Signing time: Mon 08 Apr 2024 21:42:32 +0000
ROA not before: Mon 08 Apr 2024 21:42:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 1.186.0.0/16 maxlen: 16
9.141.0.0/16 maxlen: 16
9.145.0.0/16 maxlen: 16
9.146.0.0/16 maxlen: 16
9.160.0.0/16 maxlen: 16
9.163.0.0/16 maxlen: 16
9.169.0.0/16 maxlen: 16
9.205.0.0/16 maxlen: 16
9.223.0.0/16 maxlen: 16
9.234.0.0/15 maxlen: 15
40.169.0.0/16 maxlen: 16
40.170.0.0/16 maxlen: 16
40.171.0.0/16 maxlen: 16
48.192.0.0/12 maxlen: 12
48.208.0.0/13 maxlen: 13
48.216.0.0/14 maxlen: 14
48.220.0.0/15 maxlen: 15
50.85.0.0/16 maxlen: 16
51.10.0.0/15 maxlen: 15
51.12.0.0/15 maxlen: 15
51.51.0.0/16 maxlen: 16
51.53.0.0/16 maxlen: 16
51.103.0.0/16 maxlen: 16
51.104.0.0/15 maxlen: 15
51.107.0.0/16 maxlen: 16
51.116.0.0/16 maxlen: 16
51.120.0.0/16 maxlen: 16
51.124.0.0/16 maxlen: 16
51.132.0.0/16 maxlen: 16
51.136.0.0/15 maxlen: 15
51.138.0.0/16 maxlen: 16
51.140.0.0/14 maxlen: 14
51.144.0.0/15 maxlen: 15
57.150.0.0/15 maxlen: 15
57.152.0.0/14 maxlen: 14
57.156.0.0/14 maxlen: 14
57.160.0.0/12 maxlen: 12
62.10.0.0/15 maxlen: 15
64.236.0.0/16 maxlen: 16
69.15.0.0/16 maxlen: 16
72.16.128.0/17 maxlen: 17
72.54.0.0/16 maxlen: 16
74.7.0.0/16 maxlen: 16
74.144.0.0/12 maxlen: 12
82.87.0.0/16 maxlen: 16
84.222.0.0/16 maxlen: 16
84.223.0.0/16 maxlen: 16
85.212.0.0/16 maxlen: 16
94.245.64.0/18 maxlen: 24
109.246.0.0/16 maxlen: 16
122.149.0.0/16 maxlen: 16
124.252.0.0/16 maxlen: 16
128.24.0.0/16 maxlen: 16
128.85.0.0/16 maxlen: 16
128.203.0.0/16 maxlen: 16
128.251.0.0/16 maxlen: 16
129.135.0.0/16 maxlen: 16
130.131.0.0/16 maxlen: 16
130.213.0.0/16 maxlen: 16
131.163.0.0/16 maxlen: 16
131.189.0.0/16 maxlen: 16
132.164.0.0/16 maxlen: 16
132.196.0.0/16 maxlen: 16
132.220.0.0/16 maxlen: 16
134.33.0.0/16 maxlen: 16
134.112.0.0/16 maxlen: 16
134.138.0.0/16 maxlen: 16
134.149.0.0/16 maxlen: 16
135.4.0.0/16 maxlen: 16
135.6.0.0/16 maxlen: 16
135.7.0.0/16 maxlen: 16
135.13.0.0/16 maxlen: 16
135.18.0.0/16 maxlen: 16
135.85.0.0/16 maxlen: 16
135.88.0.0/16 maxlen: 16
135.93.0.0/16 maxlen: 16
135.114.0.0/16 maxlen: 16
135.116.0.0/16 maxlen: 16
135.118.0.0/16 maxlen: 16
135.119.0.0/16 maxlen: 16
135.130.0.0/16 maxlen: 16
135.171.0.0/16 maxlen: 16
135.185.0.0/16 maxlen: 16
135.220.0.0/16 maxlen: 16
135.222.0.0/16 maxlen: 16
135.224.0.0/15 maxlen: 15
135.229.0.0/16 maxlen: 16
135.230.0.0/16 maxlen: 16
135.232.0.0/14 maxlen: 14
135.236.0.0/15 maxlen: 15
135.240.0.0/16 maxlen: 16
135.241.0.0/16 maxlen: 16
135.244.0.0/16 maxlen: 16
135.255.0.0/16 maxlen: 16
137.162.0.0/16 maxlen: 16
138.105.0.0/16 maxlen: 16
138.213.0.0/16 maxlen: 16
139.188.0.0/16 maxlen: 16
143.209.0.0/16 maxlen: 16
143.226.0.0/16 maxlen: 16
143.241.0.0/16 maxlen: 16
145.132.0.0/15 maxlen: 15
147.214.0.0/16 maxlen: 16
147.243.0.0/16 maxlen: 24
148.53.0.0/16 maxlen: 16
149.175.0.0/16 maxlen: 16
149.198.0.0/16 maxlen: 16
149.204.0.0/16 maxlen: 16
151.129.0.0/16 maxlen: 16
151.206.0.0/16 maxlen: 16
152.138.0.0/16 maxlen: 16
156.23.0.0/16 maxlen: 16
157.31.0.0/16 maxlen: 16
157.81.0.0/16 maxlen: 16
157.95.0.0/16 maxlen: 16
157.172.0.0/16 maxlen: 16
157.176.0.0/16 maxlen: 16
157.252.0.0/16 maxlen: 16
158.24.0.0/16 maxlen: 16
158.53.0.0/16 maxlen: 16
159.128.0.0/16 maxlen: 16
160.207.0.0/16 maxlen: 16
160.234.0.0/16 maxlen: 16
161.157.0.0/16 maxlen: 16
161.220.0.0/16 maxlen: 16
165.15.0.0/16 maxlen: 16
165.17.0.0/16 maxlen: 16
167.162.0.0/16 maxlen: 16
167.186.0.0/16 maxlen: 16
167.231.0.0/16 maxlen: 16
172.128.0.0/11 maxlen: 11
172.160.0.0/11 maxlen: 11
172.200.0.0/13 maxlen: 13
172.208.0.0/13 maxlen: 13
173.200.0.0/16 maxlen: 16
192.100.104.0/21 maxlen: 21
192.100.112.0/21 maxlen: 21
192.100.120.0/21 maxlen: 21
192.100.128.0/22 maxlen: 22
192.100.132.0/23 maxlen: 23
193.149.64.0/19 maxlen: 24
193.221.113.0/24 maxlen: 24
194.41.16.0/20 maxlen: 20
194.41.18.0/24 maxlen: 24
194.41.19.0/24 maxlen: 24
194.41.20.0/24 maxlen: 24
194.41.21.0/24 maxlen: 24
194.41.22.0/24 maxlen: 24
194.41.23.0/24 maxlen: 24
194.110.197.0/24 maxlen: 24
194.238.128.0/17 maxlen: 17
199.50.0.0/16 maxlen: 16
199.118.0.0/16 maxlen: 16
207.103.0.0/16 maxlen: 16
209.199.0.0/16 maxlen: 16
212.132.0.0/19 maxlen: 19
212.173.0.0/17 maxlen: 17
212.207.0.0/16 maxlen: 16
213.54.0.0/16 maxlen: 16
213.199.128.0/18 maxlen: 24
217.176.0.0/16 maxlen: 16
217.177.96.0/19 maxlen: 19
2a00:1c68::/29 maxlen: 29
2a01:111::/32 maxlen: 32
2a01:111:2000::/36 maxlen: 36
2a01:111:4000::/36 maxlen: 36
2a01:111:4004::/48 maxlen: 48
2a01:111:f000::/36 maxlen: 36
Validation: Failed, certificate revoked on Thu 11 Apr 2024 20:54:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bf:a9:b0:42:ac:f3:2e:57:da:61:3e:ca:b1:fe:3d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Apr 8 21:42:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0aa88b89286fb3dbfa1ae018af78181bcd028d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:21:3e:65:f5:61:d9:3b:27:73:f5:73:5a:4c:
b7:a2:8f:06:0b:f6:2b:76:b1:dd:fc:d6:d8:6f:38:
95:38:21:e8:ab:f3:4c:40:32:16:f7:af:e7:c8:8e:
2a:f3:ec:55:ea:b6:1a:8e:c2:e5:e8:20:ba:5b:c3:
20:45:b7:5f:d4:e3:5a:38:84:14:f2:06:5f:7d:2e:
41:a7:2f:5e:c5:52:80:83:0c:3c:fc:e1:27:02:e0:
31:e2:24:42:ef:10:e7:28:2d:7f:0f:54:fc:3f:70:
3a:82:6f:8b:2d:d0:74:bf:6d:85:8b:16:46:09:35:
9f:ad:1f:2e:2f:8f:b2:e1:8d:5f:8e:41:2e:5c:14:
e8:c3:c1:f3:6e:5a:65:fc:54:4d:88:9e:5c:4b:47:
5f:13:4a:3b:9a:86:65:2c:e3:3f:ad:f8:3e:3e:ce:
7b:fe:0a:00:28:35:9a:14:cb:f8:88:ba:9f:0b:31:
b7:61:ba:35:64:73:8b:23:3d:9d:7f:c1:6e:00:a4:
79:79:d3:db:9f:f2:90:ad:39:17:b6:62:22:48:aa:
b0:79:1b:d2:a1:7e:3e:01:47:36:fa:83:fe:e6:c2:
c9:ff:36:a5:4b:53:d6:f0:bf:96:37:3e:01:eb:22:
d6:ec:c8:05:ad:7a:4e:c0:d2:d5:4a:39:41:ac:16:
fd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A8:8B:89:28:6F:B3:DB:FA:1A:E0:18:AF:78:18:1B:CD:02:8D:6F
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/CqiLiShvs9v6GuAYr3gYG80CjW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.186.0.0/16
9.141.0.0/16
9.145.0.0-9.146.255.255
9.160.0.0/16
9.163.0.0/16
9.169.0.0/16
9.205.0.0/16
9.223.0.0/16
9.234.0.0/15
40.169.0.0-40.171.255.255
48.192.0.0-48.221.255.255
50.85.0.0/16
51.10.0.0-51.13.255.255
51.51.0.0/16
51.53.0.0/16
51.103.0.0-51.105.255.255
51.107.0.0/16
51.116.0.0/16
51.120.0.0/16
51.124.0.0/16
51.132.0.0/16
51.136.0.0-51.138.255.255
51.140.0.0-51.145.255.255
57.150.0.0-57.175.255.255
62.10.0.0/15
64.236.0.0/16
69.15.0.0/16
72.16.128.0/17
72.54.0.0/16
74.7.0.0/16
74.144.0.0/12
82.87.0.0/16
84.222.0.0/15
85.212.0.0/16
94.245.64.0/18
109.246.0.0/16
122.149.0.0/16
124.252.0.0/16
128.24.0.0/16
128.85.0.0/16
128.203.0.0/16
128.251.0.0/16
129.135.0.0/16
130.131.0.0/16
130.213.0.0/16
131.163.0.0/16
131.189.0.0/16
132.164.0.0/16
132.196.0.0/16
132.220.0.0/16
134.33.0.0/16
134.112.0.0/16
134.138.0.0/16
134.149.0.0/16
135.4.0.0/16
135.6.0.0/15
135.13.0.0/16
135.18.0.0/16
135.85.0.0/16
135.88.0.0/16
135.93.0.0/16
135.114.0.0/16
135.116.0.0/16
135.118.0.0/15
135.130.0.0/16
135.171.0.0/16
135.185.0.0/16
135.220.0.0/16
135.222.0.0/16
135.224.0.0/15
135.229.0.0-135.230.255.255
135.232.0.0-135.237.255.255
135.240.0.0/15
135.244.0.0/16
135.255.0.0/16
137.162.0.0/16
138.105.0.0/16
138.213.0.0/16
139.188.0.0/16
143.209.0.0/16
143.226.0.0/16
143.241.0.0/16
145.132.0.0/15
147.214.0.0/16
147.243.0.0/16
148.53.0.0/16
149.175.0.0/16
149.198.0.0/16
149.204.0.0/16
151.129.0.0/16
151.206.0.0/16
152.138.0.0/16
156.23.0.0/16
157.31.0.0/16
157.81.0.0/16
157.95.0.0/16
157.172.0.0/16
157.176.0.0/16
157.252.0.0/16
158.24.0.0/16
158.53.0.0/16
159.128.0.0/16
160.207.0.0/16
160.234.0.0/16
161.157.0.0/16
161.220.0.0/16
165.15.0.0/16
165.17.0.0/16
167.162.0.0/16
167.186.0.0/16
167.231.0.0/16
172.128.0.0/10
172.200.0.0-172.215.255.255
173.200.0.0/16
192.100.104.0-192.100.133.255
193.149.64.0/19
193.221.113.0/24
194.41.16.0/20
194.110.197.0/24
194.238.128.0/17
199.50.0.0/16
199.118.0.0/16
207.103.0.0/16
209.199.0.0/16
212.132.0.0/19
212.173.0.0/17
212.207.0.0/16
213.54.0.0/16
213.199.128.0/18
217.176.0.0/16
217.177.96.0/19
IPv6:
2a00:1c68::/29
2a01:111::/32
Signature Algorithm: sha256WithRSAEncryption
5a:6a:da:20:f8:1c:be:8b:1b:64:d9:1a:d5:c5:54:7f:f1:f6:
34:a9:d7:12:46:fa:1a:11:dd:ab:84:03:46:0d:b6:3b:47:e7:
7a:55:3c:7c:00:a6:16:89:5a:81:fa:41:83:88:d2:36:81:3e:
d6:2a:ee:ab:72:3e:5c:49:0b:5f:38:df:93:08:39:c7:58:8a:
59:d6:e2:33:bc:4b:c9:9c:dc:77:aa:c4:cd:1f:67:80:e1:f7:
78:de:e8:94:5a:ff:f6:51:5e:d4:0e:c6:b3:9e:1b:0f:45:2a:
3b:88:d2:52:e0:36:0d:45:c8:a4:d1:e8:df:90:12:9b:10:c2:
70:ee:fd:25:51:bb:1b:38:c0:b4:cf:9d:8a:97:1d:45:3e:8f:
10:d8:f8:6b:91:f9:3f:24:26:47:2d:a2:10:16:a8:84:0c:fe:
b6:e8:09:4b:06:00:32:c5:24:00:76:08:13:2a:00:af:43:28:
a2:e2:d6:71:9f:26:03:6b:a0:d7:1b:ec:bb:97:96:7a:54:c7:
08:86:1a:2d:e5:d9:f6:aa:17:b7:52:19:39:e1:9b:7e:47:65:
6d:07:5e:46:ac:13:e1:a6:73:2f:89:d8:2d:77:b8:a3:80:57:
50:b0:05:59:a5:45:b7:58:b4:b2:59:0a:5a:21:87:d9:c8:c7:
9c:a8:2d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-fra.rpki-client.org