Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/QWMlVFraQmS-12tpa36K2XWjcnA.roa
File: QWMlVFraQmS-12tpa36K2XWjcnA.roa (raw, json)
Hash identifier: WxJHLJILbpFgMplPWJ4hhGxBvd2FVnFDSJshS5uHzys=
Subject key identifier: 41:63:25:54:5A:DA:42:64:BE:D7:6B:69:6B:7E:8A:D9:75:A3:72:70
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 0187D91CE7D78D64D6BC3C818D3A1E4D6D61
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/QWMlVFraQmS-12tpa36K2XWjcnA.roa
Signing time: Mon 01 May 2023 20:59:22 +0000
ROA not before: Mon 01 May 2023 20:59:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 94.245.64.0/18 maxlen: 24
172.208.0.0/13 maxlen: 13
51.124.0.0/16 maxlen: 16
192.100.112.0/21 maxlen: 21
192.100.120.0/21 maxlen: 21
82.87.0.0/16 maxlen: 16
192.100.128.0/22 maxlen: 22
192.100.132.0/23 maxlen: 23
172.160.0.0/11 maxlen: 11
51.144.0.0/15 maxlen: 15
40.171.0.0/16 maxlen: 16
51.107.0.0/16 maxlen: 16
192.100.104.0/21 maxlen: 21
85.212.0.0/16 maxlen: 16
51.138.0.0/16 maxlen: 16
152.138.0.0/16 maxlen: 16
51.10.0.0/15 maxlen: 15
194.110.197.0/24 maxlen: 24
51.104.0.0/15 maxlen: 15
51.12.0.0/15 maxlen: 15
51.103.0.0/16 maxlen: 16
51.140.0.0/14 maxlen: 14
135.130.0.0/16 maxlen: 16
57.150.0.0/15 maxlen: 15
132.164.0.0/16 maxlen: 16
193.221.113.0/24 maxlen: 24
51.53.0.0/16 maxlen: 16
57.160.0.0/12 maxlen: 12
51.120.0.0/16 maxlen: 16
57.156.0.0/14 maxlen: 14
172.128.0.0/11 maxlen: 11
193.149.64.0/19 maxlen: 24
151.129.0.0/16 maxlen: 16
172.200.0.0/13 maxlen: 13
51.116.0.0/16 maxlen: 16
40.170.0.0/16 maxlen: 16
51.136.0.0/15 maxlen: 15
209.199.0.0/16 maxlen: 16
167.162.0.0/16 maxlen: 16
143.226.0.0/16 maxlen: 16
159.128.0.0/16 maxlen: 16
213.54.0.0/16 maxlen: 16
194.41.16.0/20 maxlen: 20
194.41.18.0/24 maxlen: 24
194.41.22.0/24 maxlen: 24
194.41.23.0/24 maxlen: 24
194.41.20.0/24 maxlen: 24
194.41.21.0/24 maxlen: 24
194.41.19.0/24 maxlen: 24
51.132.0.0/16 maxlen: 16
157.95.0.0/16 maxlen: 16
157.31.0.0/16 maxlen: 16
167.186.0.0/16 maxlen: 16
213.199.128.0/18 maxlen: 24
128.85.0.0/16 maxlen: 16
147.243.0.0/16 maxlen: 24
51.51.0.0/16 maxlen: 16
57.152.0.0/14 maxlen: 14
151.206.0.0/16 maxlen: 16
40.169.0.0/16 maxlen: 16
138.105.0.0/16 maxlen: 16
2a00:1c68::/29 maxlen: 29
2a01:111:4004::/48 maxlen: 48
2a01:111::/32 maxlen: 32
2a01:111:f000::/36 maxlen: 36
2a01:111:2000::/36 maxlen: 36
2a01:111:4000::/36 maxlen: 36
Validation: Failed, certificate revoked on Tue 02 May 2023 17:18:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d9:1c:e7:d7:8d:64:d6:bc:3c:81:8d:3a:1e:4d:6d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: May 1 20:59:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=416325545ada4264bed76b696b7e8ad975a37270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:68:10:dd:21:24:e4:a3:8c:d7:fc:0d:1a:ea:
40:84:5b:64:7e:31:44:7d:4b:78:fb:f0:c6:48:13:
37:a7:72:06:05:32:3b:3c:b3:27:b2:72:1e:a4:b5:
9a:16:14:ee:9f:f2:de:48:04:96:1c:24:13:8b:86:
9f:39:2c:52:fe:93:c0:66:c9:50:c4:f8:2d:77:d2:
01:ab:bf:da:69:e6:ae:af:fe:a2:8a:95:dd:f3:a9:
4c:af:0c:2c:74:94:24:b3:31:2c:5a:25:8f:aa:1d:
a1:00:2e:53:76:1a:3c:b3:53:f7:43:38:1f:5f:7a:
20:f8:ba:8a:4e:d1:ae:fa:40:4d:7f:04:14:a5:4e:
0f:56:cb:c1:7f:63:68:8a:d8:43:23:04:97:8a:81:
6c:60:76:a5:30:56:7b:95:82:70:39:82:37:eb:b9:
d8:c9:6a:0e:9f:26:9a:44:da:97:82:02:0b:2d:62:
7f:9e:07:e4:3c:30:0e:03:43:38:76:37:2f:6c:e9:
4a:de:53:7d:51:be:da:a7:1a:86:b7:c8:f1:35:37:
53:8c:39:73:5a:55:22:96:62:7f:31:65:af:cb:42:
5b:ef:bc:fe:99:b8:7a:60:62:57:ef:08:94:89:cc:
33:10:ae:4e:91:84:8f:7b:0f:09:f5:50:d3:d3:47:
54:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:63:25:54:5A:DA:42:64:BE:D7:6B:69:6B:7E:8A:D9:75:A3:72:70
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/QWMlVFraQmS-12tpa36K2XWjcnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.169.0.0-40.171.255.255
51.10.0.0-51.13.255.255
51.51.0.0/16
51.53.0.0/16
51.103.0.0-51.105.255.255
51.107.0.0/16
51.116.0.0/16
51.120.0.0/16
51.124.0.0/16
51.132.0.0/16
51.136.0.0-51.138.255.255
51.140.0.0-51.145.255.255
57.150.0.0-57.175.255.255
82.87.0.0/16
85.212.0.0/16
94.245.64.0/18
128.85.0.0/16
132.164.0.0/16
135.130.0.0/16
138.105.0.0/16
143.226.0.0/16
147.243.0.0/16
151.129.0.0/16
151.206.0.0/16
152.138.0.0/16
157.31.0.0/16
157.95.0.0/16
159.128.0.0/16
167.162.0.0/16
167.186.0.0/16
172.128.0.0/10
172.200.0.0-172.215.255.255
192.100.104.0-192.100.133.255
193.149.64.0/19
193.221.113.0/24
194.41.16.0/20
194.110.197.0/24
209.199.0.0/16
213.54.0.0/16
213.199.128.0/18
IPv6:
2a00:1c68::/29
2a01:111::/32
Signature Algorithm: sha256WithRSAEncryption
90:f3:fc:47:9f:6a:6e:11:8b:2f:0b:b8:38:aa:bc:89:9f:bb:
08:ec:2b:28:24:8b:2e:08:76:59:d6:9c:06:80:e1:34:a9:f6:
6d:d8:a3:78:8e:94:62:2f:51:5a:b4:a9:29:bb:b8:e9:ad:e6:
65:8b:ee:74:de:6c:eb:c5:06:8c:01:81:69:c5:87:b8:51:12:
2c:7a:67:1f:dc:7e:7f:03:f3:50:89:71:01:9d:20:4d:83:54:
5f:42:71:98:48:9d:8c:eb:b2:ba:d0:a1:2c:b2:17:a3:2c:9a:
8b:e3:3f:c0:8e:78:6b:28:2f:17:97:b0:fe:e8:7e:a2:92:50:
02:8d:09:62:b5:2f:b3:b6:05:9a:91:60:81:46:49:e3:4f:a7:
4b:80:9a:1a:6b:0c:7a:de:48:02:6c:6a:f8:1c:04:fd:e9:85:
8a:60:54:2d:08:b7:26:82:7e:30:96:08:cf:3a:4c:68:b2:0f:
81:bf:0a:7b:b0:87:39:d6:d2:a7:c0:c4:36:64:b8:54:33:4d:
3a:e4:86:31:32:ca:b1:0e:33:31:ad:a2:a6:21:ad:68:b2:b1:
cb:19:d4:b5:83:45:5e:02:18:27:2f:3c:b4:2e:3f:fb:7b:45:
24:4b:5c:06:42:ff:4a:12:1a:26:13:26:78:72:45:6a:a2:c3:
65:e5:18:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-fra.rpki-client.org