Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/NoUWznlFrC8_J3mzSscOCQmihT8.roa
File: NoUWznlFrC8_J3mzSscOCQmihT8.roa (raw, json)
Hash identifier: IPvJW7oogdWLtcqibOSvHh8hS89Gj4EkIGqqKT4DZR8=
Subject key identifier: 36:85:16:CE:79:45:AC:2F:3F:27:79:B3:4A:C7:0E:09:09:A2:85:3F
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 018BDF8F705D44AC8F0EB2AA992CA5956945
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/NoUWznlFrC8_J3mzSscOCQmihT8.roa
Signing time: Fri 17 Nov 2023 23:13:21 +0000
ROA not before: Fri 17 Nov 2023 23:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 48.208.0.0/13 maxlen: 13
172.208.0.0/13 maxlen: 13
192.100.112.0/21 maxlen: 21
192.100.120.0/21 maxlen: 21
192.100.132.0/23 maxlen: 23
82.87.0.0/16 maxlen: 16
192.100.128.0/22 maxlen: 22
135.114.0.0/16 maxlen: 16
172.160.0.0/11 maxlen: 11
51.107.0.0/16 maxlen: 16
135.6.0.0/16 maxlen: 16
134.33.0.0/16 maxlen: 16
192.100.104.0/21 maxlen: 21
149.175.0.0/16 maxlen: 16
135.229.0.0/16 maxlen: 16
51.12.0.0/15 maxlen: 15
51.140.0.0/14 maxlen: 14
147.214.0.0/16 maxlen: 16
193.221.113.0/24 maxlen: 24
51.53.0.0/16 maxlen: 16
148.53.0.0/16 maxlen: 16
57.160.0.0/12 maxlen: 12
51.120.0.0/16 maxlen: 16
132.220.0.0/16 maxlen: 16
48.220.0.0/15 maxlen: 15
135.18.0.0/16 maxlen: 16
212.173.0.0/17 maxlen: 17
135.240.0.0/16 maxlen: 16
134.112.0.0/16 maxlen: 16
172.200.0.0/13 maxlen: 13
160.207.0.0/16 maxlen: 16
212.207.0.0/16 maxlen: 16
160.234.0.0/16 maxlen: 16
173.200.0.0/16 maxlen: 16
157.172.0.0/16 maxlen: 16
209.199.0.0/16 maxlen: 16
143.226.0.0/16 maxlen: 16
109.246.0.0/16 maxlen: 16
165.17.0.0/16 maxlen: 16
212.132.0.0/19 maxlen: 19
51.132.0.0/16 maxlen: 16
135.4.0.0/16 maxlen: 16
157.31.0.0/16 maxlen: 16
213.199.128.0/18 maxlen: 24
167.186.0.0/16 maxlen: 16
1.186.0.0/16 maxlen: 16
138.213.0.0/16 maxlen: 16
128.85.0.0/16 maxlen: 16
135.85.0.0/16 maxlen: 16
48.192.0.0/12 maxlen: 12
128.24.0.0/16 maxlen: 16
51.51.0.0/16 maxlen: 16
57.152.0.0/14 maxlen: 14
151.206.0.0/16 maxlen: 16
138.105.0.0/16 maxlen: 16
94.245.64.0/18 maxlen: 24
157.252.0.0/16 maxlen: 16
51.124.0.0/16 maxlen: 16
124.252.0.0/16 maxlen: 16
156.23.0.0/16 maxlen: 16
51.144.0.0/15 maxlen: 15
40.171.0.0/16 maxlen: 16
135.171.0.0/16 maxlen: 16
149.198.0.0/16 maxlen: 16
194.238.128.0/17 maxlen: 17
85.212.0.0/16 maxlen: 16
152.138.0.0/16 maxlen: 16
51.138.0.0/16 maxlen: 16
134.138.0.0/16 maxlen: 16
51.10.0.0/15 maxlen: 15
74.144.0.0/12 maxlen: 12
194.110.197.0/24 maxlen: 24
51.104.0.0/15 maxlen: 15
72.16.128.0/17 maxlen: 17
130.131.0.0/16 maxlen: 16
135.232.0.0/14 maxlen: 14
135.185.0.0/16 maxlen: 16
207.103.0.0/16 maxlen: 16
167.231.0.0/16 maxlen: 16
51.103.0.0/16 maxlen: 16
135.130.0.0/16 maxlen: 16
135.224.0.0/15 maxlen: 15
57.150.0.0/15 maxlen: 15
132.164.0.0/16 maxlen: 16
217.177.96.0/19 maxlen: 19
57.156.0.0/14 maxlen: 14
172.128.0.0/11 maxlen: 11
157.176.0.0/16 maxlen: 16
217.176.0.0/16 maxlen: 16
128.203.0.0/16 maxlen: 16
135.230.0.0/16 maxlen: 16
193.149.64.0/19 maxlen: 24
151.129.0.0/16 maxlen: 16
135.116.0.0/16 maxlen: 16
51.116.0.0/16 maxlen: 16
69.15.0.0/16 maxlen: 16
165.15.0.0/16 maxlen: 16
40.170.0.0/16 maxlen: 16
51.136.0.0/15 maxlen: 15
131.163.0.0/16 maxlen: 16
135.236.0.0/15 maxlen: 15
135.7.0.0/16 maxlen: 16
129.135.0.0/16 maxlen: 16
137.162.0.0/16 maxlen: 16
167.162.0.0/16 maxlen: 16
131.189.0.0/16 maxlen: 16
159.128.0.0/16 maxlen: 16
72.54.0.0/16 maxlen: 16
213.54.0.0/16 maxlen: 16
157.81.0.0/16 maxlen: 16
143.209.0.0/16 maxlen: 16
194.41.16.0/20 maxlen: 20
194.41.18.0/24 maxlen: 24
194.41.22.0/24 maxlen: 24
194.41.23.0/24 maxlen: 24
194.41.20.0/24 maxlen: 24
194.41.21.0/24 maxlen: 24
194.41.19.0/24 maxlen: 24
132.196.0.0/16 maxlen: 16
157.95.0.0/16 maxlen: 16
84.223.0.0/16 maxlen: 16
122.149.0.0/16 maxlen: 16
147.243.0.0/16 maxlen: 24
48.216.0.0/14 maxlen: 14
40.169.0.0/16 maxlen: 16
2a01:111:4004::/48 maxlen: 48
2a01:111::/32 maxlen: 32
2a01:111:4000::/36 maxlen: 36
2a01:111:2000::/36 maxlen: 36
2a01:111:f000::/36 maxlen: 36
2a00:1c68::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 27 Nov 2023 19:47:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:df:8f:70:5d:44:ac:8f:0e:b2:aa:99:2c:a5:95:69:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Nov 17 23:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=368516ce7945ac2f3f2779b34ac70e0909a2853f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:16:0e:6a:7e:85:9f:f7:cb:43:80:50:6b:e6:
bd:70:22:43:5d:76:44:51:42:64:51:c4:79:41:4b:
db:10:57:bd:c8:25:4c:b3:73:ff:53:df:b5:25:b2:
12:10:24:c9:1d:8e:e6:74:fb:68:4c:cc:15:7e:30:
c0:4e:b1:7a:a7:11:05:65:ec:57:ce:c7:4d:90:df:
86:37:33:4d:5f:92:1e:e2:e3:c1:f4:63:4b:04:b9:
0d:d8:78:d5:40:18:1f:a9:5c:ac:17:e9:55:e7:c3:
7c:9c:e9:48:ac:09:19:fb:df:30:b5:21:2c:27:ca:
a8:11:2b:ea:49:fe:9d:1b:c7:3d:32:41:1b:38:4d:
f6:17:3c:53:96:6f:09:e5:d8:59:22:aa:eb:08:a0:
90:b5:15:b9:e6:14:11:da:96:5d:19:c4:30:8a:a7:
d7:d2:74:79:e8:e5:44:20:ff:b2:d3:a4:70:e9:e4:
66:a1:6c:19:04:52:ff:36:1d:07:a6:52:94:ca:94:
ad:c1:bd:83:f2:b0:78:88:5f:86:37:18:af:ca:86:
87:d5:35:b1:08:70:3c:24:fe:17:b9:3e:9d:ca:9a:
be:e4:e6:f4:62:1c:02:c9:5d:c7:c2:5b:76:60:11:
ec:50:ca:39:98:d8:1c:fd:e4:50:b5:dc:39:62:12:
90:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:85:16:CE:79:45:AC:2F:3F:27:79:B3:4A:C7:0E:09:09:A2:85:3F
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/NoUWznlFrC8_J3mzSscOCQmihT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.186.0.0/16
40.169.0.0-40.171.255.255
48.192.0.0-48.221.255.255
51.10.0.0-51.13.255.255
51.51.0.0/16
51.53.0.0/16
51.103.0.0-51.105.255.255
51.107.0.0/16
51.116.0.0/16
51.120.0.0/16
51.124.0.0/16
51.132.0.0/16
51.136.0.0-51.138.255.255
51.140.0.0-51.145.255.255
57.150.0.0-57.175.255.255
69.15.0.0/16
72.16.128.0/17
72.54.0.0/16
74.144.0.0/12
82.87.0.0/16
84.223.0.0/16
85.212.0.0/16
94.245.64.0/18
109.246.0.0/16
122.149.0.0/16
124.252.0.0/16
128.24.0.0/16
128.85.0.0/16
128.203.0.0/16
129.135.0.0/16
130.131.0.0/16
131.163.0.0/16
131.189.0.0/16
132.164.0.0/16
132.196.0.0/16
132.220.0.0/16
134.33.0.0/16
134.112.0.0/16
134.138.0.0/16
135.4.0.0/16
135.6.0.0/15
135.18.0.0/16
135.85.0.0/16
135.114.0.0/16
135.116.0.0/16
135.130.0.0/16
135.171.0.0/16
135.185.0.0/16
135.224.0.0/15
135.229.0.0-135.230.255.255
135.232.0.0-135.237.255.255
135.240.0.0/16
137.162.0.0/16
138.105.0.0/16
138.213.0.0/16
143.209.0.0/16
143.226.0.0/16
147.214.0.0/16
147.243.0.0/16
148.53.0.0/16
149.175.0.0/16
149.198.0.0/16
151.129.0.0/16
151.206.0.0/16
152.138.0.0/16
156.23.0.0/16
157.31.0.0/16
157.81.0.0/16
157.95.0.0/16
157.172.0.0/16
157.176.0.0/16
157.252.0.0/16
159.128.0.0/16
160.207.0.0/16
160.234.0.0/16
165.15.0.0/16
165.17.0.0/16
167.162.0.0/16
167.186.0.0/16
167.231.0.0/16
172.128.0.0/10
172.200.0.0-172.215.255.255
173.200.0.0/16
192.100.104.0-192.100.133.255
193.149.64.0/19
193.221.113.0/24
194.41.16.0/20
194.110.197.0/24
194.238.128.0/17
207.103.0.0/16
209.199.0.0/16
212.132.0.0/19
212.173.0.0/17
212.207.0.0/16
213.54.0.0/16
213.199.128.0/18
217.176.0.0/16
217.177.96.0/19
IPv6:
2a00:1c68::/29
2a01:111::/32
Signature Algorithm: sha256WithRSAEncryption
92:82:49:09:08:f7:79:88:8c:0d:16:58:b5:1d:bc:1f:26:5a:
4a:00:5c:4d:92:b1:46:84:fa:b4:44:ac:04:61:81:1e:51:43:
57:4d:8c:a2:7d:d9:8f:8e:a6:2c:f4:a8:f5:a5:fb:fe:54:8a:
f8:89:21:3f:bd:37:ee:6b:73:87:7b:40:6a:52:6e:ef:f8:69:
8d:17:3c:0e:5b:f7:ad:76:27:43:8c:3f:03:fe:9f:56:15:c5:
03:71:0e:c9:20:49:ce:63:e1:cc:43:91:ef:c2:a1:96:09:4c:
8c:67:4d:0e:9e:96:b1:0f:b2:dd:38:1f:ec:08:85:e7:55:9c:
1b:be:04:24:e0:5e:46:7f:bb:b7:5f:c0:40:21:65:50:c3:15:
22:16:09:73:19:a7:34:45:d8:b5:21:c8:00:d3:ba:ea:b6:72:
c3:b9:4f:b3:1d:49:2c:b4:a3:f2:43:cf:50:e5:56:0b:92:18:
d8:4e:3e:9a:b7:c6:ad:05:d8:f7:8c:84:96:70:18:79:f7:03:
65:26:1d:3c:a3:7a:82:7b:7d:9a:9c:b8:95:b8:16:cb:26:38:
19:a2:aa:52:e3:da:cc:22:f2:27:03:6d:cb:0d:dc:d7:1a:d6:
c8:ed:d8:e9:bc:e6:67:c2:95:a3:53:4b:11:d2:d9:df:1f:27:
51:ac:11:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:00 2024 by rpki-client on console-ams.rpki-client.org