Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/STOwMPk-QGvtrNR9trARxDNnagU.roa
File: STOwMPk-QGvtrNR9trARxDNnagU.roa (raw, json)
Hash identifier: 4S3gjhi+Cgx+ebM5K5B82XPgXfhwPhrfjCzSC6WyX3Q=
Subject key identifier: 49:33:B0:30:F9:3E:40:6B:ED:AC:D4:7D:B6:B0:11:C4:33:67:6A:05
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 018C5B71FF6EC2252D265CC0462D68158F38
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/STOwMPk-QGvtrNR9trARxDNnagU.roa
Signing time: Tue 12 Dec 2023 00:34:06 +0000
ROA not before: Tue 12 Dec 2023 00:34:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 48.208.0.0/13 maxlen: 13
172.208.0.0/13 maxlen: 13
192.100.112.0/21 maxlen: 21
192.100.120.0/21 maxlen: 21
192.100.132.0/23 maxlen: 23
82.87.0.0/16 maxlen: 16
192.100.128.0/22 maxlen: 22
135.114.0.0/16 maxlen: 16
172.160.0.0/11 maxlen: 11
51.107.0.0/16 maxlen: 16
135.6.0.0/16 maxlen: 16
134.33.0.0/16 maxlen: 16
192.100.104.0/21 maxlen: 21
149.175.0.0/16 maxlen: 16
135.229.0.0/16 maxlen: 16
84.222.0.0/16 maxlen: 16
51.12.0.0/15 maxlen: 15
51.140.0.0/14 maxlen: 14
135.93.0.0/16 maxlen: 16
147.214.0.0/16 maxlen: 16
143.241.0.0/16 maxlen: 16
135.241.0.0/16 maxlen: 16
135.255.0.0/16 maxlen: 16
193.221.113.0/24 maxlen: 24
51.53.0.0/16 maxlen: 16
148.53.0.0/16 maxlen: 16
57.160.0.0/12 maxlen: 12
51.120.0.0/16 maxlen: 16
132.220.0.0/16 maxlen: 16
135.220.0.0/16 maxlen: 16
48.220.0.0/15 maxlen: 15
135.119.0.0/16 maxlen: 16
9.146.0.0/16 maxlen: 16
135.18.0.0/16 maxlen: 16
212.173.0.0/17 maxlen: 17
135.240.0.0/16 maxlen: 16
134.112.0.0/16 maxlen: 16
172.200.0.0/13 maxlen: 13
160.207.0.0/16 maxlen: 16
212.207.0.0/16 maxlen: 16
160.234.0.0/16 maxlen: 16
9.234.0.0/15 maxlen: 15
173.200.0.0/16 maxlen: 16
157.172.0.0/16 maxlen: 16
209.199.0.0/16 maxlen: 16
143.226.0.0/16 maxlen: 16
109.246.0.0/16 maxlen: 16
199.118.0.0/16 maxlen: 16
9.145.0.0/16 maxlen: 16
165.17.0.0/16 maxlen: 16
212.132.0.0/19 maxlen: 19
51.132.0.0/16 maxlen: 16
135.4.0.0/16 maxlen: 16
157.31.0.0/16 maxlen: 16
213.199.128.0/18 maxlen: 24
167.186.0.0/16 maxlen: 16
1.186.0.0/16 maxlen: 16
130.213.0.0/16 maxlen: 16
138.213.0.0/16 maxlen: 16
128.85.0.0/16 maxlen: 16
135.85.0.0/16 maxlen: 16
48.192.0.0/12 maxlen: 12
158.24.0.0/16 maxlen: 16
128.24.0.0/16 maxlen: 16
51.51.0.0/16 maxlen: 16
57.152.0.0/14 maxlen: 14
151.206.0.0/16 maxlen: 16
138.105.0.0/16 maxlen: 16
94.245.64.0/18 maxlen: 24
157.252.0.0/16 maxlen: 16
51.124.0.0/16 maxlen: 16
124.252.0.0/16 maxlen: 16
156.23.0.0/16 maxlen: 16
199.50.0.0/16 maxlen: 16
51.144.0.0/15 maxlen: 15
40.171.0.0/16 maxlen: 16
135.171.0.0/16 maxlen: 16
149.198.0.0/16 maxlen: 16
194.238.128.0/17 maxlen: 17
85.212.0.0/16 maxlen: 16
152.138.0.0/16 maxlen: 16
51.138.0.0/16 maxlen: 16
134.138.0.0/16 maxlen: 16
51.10.0.0/15 maxlen: 15
74.144.0.0/12 maxlen: 12
194.110.197.0/24 maxlen: 24
51.104.0.0/15 maxlen: 15
72.16.128.0/17 maxlen: 17
130.131.0.0/16 maxlen: 16
135.232.0.0/14 maxlen: 14
135.185.0.0/16 maxlen: 16
207.103.0.0/16 maxlen: 16
167.231.0.0/16 maxlen: 16
51.103.0.0/16 maxlen: 16
135.130.0.0/16 maxlen: 16
161.157.0.0/16 maxlen: 16
135.224.0.0/15 maxlen: 15
57.150.0.0/15 maxlen: 15
132.164.0.0/16 maxlen: 16
217.177.96.0/19 maxlen: 19
57.156.0.0/14 maxlen: 14
172.128.0.0/11 maxlen: 11
157.176.0.0/16 maxlen: 16
217.176.0.0/16 maxlen: 16
128.203.0.0/16 maxlen: 16
135.230.0.0/16 maxlen: 16
193.149.64.0/19 maxlen: 24
151.129.0.0/16 maxlen: 16
135.116.0.0/16 maxlen: 16
51.116.0.0/16 maxlen: 16
135.244.0.0/16 maxlen: 16
69.15.0.0/16 maxlen: 16
165.15.0.0/16 maxlen: 16
40.170.0.0/16 maxlen: 16
51.136.0.0/15 maxlen: 15
131.163.0.0/16 maxlen: 16
135.236.0.0/15 maxlen: 15
135.7.0.0/16 maxlen: 16
129.135.0.0/16 maxlen: 16
137.162.0.0/16 maxlen: 16
167.162.0.0/16 maxlen: 16
131.189.0.0/16 maxlen: 16
159.128.0.0/16 maxlen: 16
72.54.0.0/16 maxlen: 16
213.54.0.0/16 maxlen: 16
157.81.0.0/16 maxlen: 16
143.209.0.0/16 maxlen: 16
194.41.16.0/20 maxlen: 20
194.41.18.0/24 maxlen: 24
194.41.22.0/24 maxlen: 24
194.41.23.0/24 maxlen: 24
194.41.20.0/24 maxlen: 24
194.41.21.0/24 maxlen: 24
194.41.19.0/24 maxlen: 24
132.196.0.0/16 maxlen: 16
157.95.0.0/16 maxlen: 16
84.223.0.0/16 maxlen: 16
134.149.0.0/16 maxlen: 16
122.149.0.0/16 maxlen: 16
135.88.0.0/16 maxlen: 16
147.243.0.0/16 maxlen: 24
48.216.0.0/14 maxlen: 14
40.169.0.0/16 maxlen: 16
2a01:111:4004::/48 maxlen: 48
2a01:111::/32 maxlen: 32
2a01:111:4000::/36 maxlen: 36
2a01:111:2000::/36 maxlen: 36
2a01:111:f000::/36 maxlen: 36
2a00:1c68::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5b:71:ff:6e:c2:25:2d:26:5c:c0:46:2d:68:15:8f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Dec 12 00:34:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4933b030f93e406bedacd47db6b011c433676a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:70:3b:79:c8:8a:0c:2a:a9:93:7b:7e:88:8f:
54:55:60:3a:ba:4a:32:f3:f2:42:c6:e0:0c:0b:37:
5d:12:83:6b:f5:9b:79:02:06:39:0c:5c:aa:b9:63:
bd:ce:06:df:02:a3:23:10:bc:8e:f4:16:77:0e:5a:
6d:e3:a5:f7:44:38:56:88:01:90:f7:38:39:9c:9d:
d8:c8:f5:fe:3d:9c:aa:2e:7d:02:62:e1:c2:f2:f2:
8f:1e:af:35:a8:18:df:37:b9:48:12:3a:f3:99:eb:
33:9c:40:86:59:84:33:3f:d3:b6:f2:25:36:07:78:
1a:3e:b7:c5:c1:68:96:c4:07:3c:da:3b:08:6a:40:
74:02:d3:6c:68:a2:36:43:1b:26:cd:bc:4c:1b:2c:
49:98:22:bd:11:64:1e:bd:f9:ee:d9:73:45:89:c9:
2e:c6:58:6d:a7:66:d4:1e:db:2c:8b:3b:2a:30:23:
ab:dc:37:95:4b:6f:56:04:86:a0:bd:93:d0:93:c6:
27:0a:a0:3c:92:d1:f1:80:3c:08:f9:8f:3e:8a:0b:
1a:21:6c:4a:ba:e3:07:43:42:34:68:dd:fd:5d:16:
e6:16:82:72:f9:a7:24:e6:f2:b2:31:be:7d:e3:35:
dc:31:0d:e1:7a:39:d2:40:2b:76:30:e4:23:e1:d9:
84:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:33:B0:30:F9:3E:40:6B:ED:AC:D4:7D:B6:B0:11:C4:33:67:6A:05
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/STOwMPk-QGvtrNR9trARxDNnagU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.186.0.0/16
9.145.0.0-9.146.255.255
9.234.0.0/15
40.169.0.0-40.171.255.255
48.192.0.0-48.221.255.255
51.10.0.0-51.13.255.255
51.51.0.0/16
51.53.0.0/16
51.103.0.0-51.105.255.255
51.107.0.0/16
51.116.0.0/16
51.120.0.0/16
51.124.0.0/16
51.132.0.0/16
51.136.0.0-51.138.255.255
51.140.0.0-51.145.255.255
57.150.0.0-57.175.255.255
69.15.0.0/16
72.16.128.0/17
72.54.0.0/16
74.144.0.0/12
82.87.0.0/16
84.222.0.0/15
85.212.0.0/16
94.245.64.0/18
109.246.0.0/16
122.149.0.0/16
124.252.0.0/16
128.24.0.0/16
128.85.0.0/16
128.203.0.0/16
129.135.0.0/16
130.131.0.0/16
130.213.0.0/16
131.163.0.0/16
131.189.0.0/16
132.164.0.0/16
132.196.0.0/16
132.220.0.0/16
134.33.0.0/16
134.112.0.0/16
134.138.0.0/16
134.149.0.0/16
135.4.0.0/16
135.6.0.0/15
135.18.0.0/16
135.85.0.0/16
135.88.0.0/16
135.93.0.0/16
135.114.0.0/16
135.116.0.0/16
135.119.0.0/16
135.130.0.0/16
135.171.0.0/16
135.185.0.0/16
135.220.0.0/16
135.224.0.0/15
135.229.0.0-135.230.255.255
135.232.0.0-135.237.255.255
135.240.0.0/15
135.244.0.0/16
135.255.0.0/16
137.162.0.0/16
138.105.0.0/16
138.213.0.0/16
143.209.0.0/16
143.226.0.0/16
143.241.0.0/16
147.214.0.0/16
147.243.0.0/16
148.53.0.0/16
149.175.0.0/16
149.198.0.0/16
151.129.0.0/16
151.206.0.0/16
152.138.0.0/16
156.23.0.0/16
157.31.0.0/16
157.81.0.0/16
157.95.0.0/16
157.172.0.0/16
157.176.0.0/16
157.252.0.0/16
158.24.0.0/16
159.128.0.0/16
160.207.0.0/16
160.234.0.0/16
161.157.0.0/16
165.15.0.0/16
165.17.0.0/16
167.162.0.0/16
167.186.0.0/16
167.231.0.0/16
172.128.0.0/10
172.200.0.0-172.215.255.255
173.200.0.0/16
192.100.104.0-192.100.133.255
193.149.64.0/19
193.221.113.0/24
194.41.16.0/20
194.110.197.0/24
194.238.128.0/17
199.50.0.0/16
199.118.0.0/16
207.103.0.0/16
209.199.0.0/16
212.132.0.0/19
212.173.0.0/17
212.207.0.0/16
213.54.0.0/16
213.199.128.0/18
217.176.0.0/16
217.177.96.0/19
IPv6:
2a00:1c68::/29
2a01:111::/32
Signature Algorithm: sha256WithRSAEncryption
2f:d4:c0:74:f8:e8:4d:d3:11:5f:74:0c:0f:91:33:d1:50:b0:
10:46:aa:d6:0f:f1:ab:90:30:e9:dd:39:08:aa:f2:69:30:71:
07:83:87:98:6f:07:4d:b2:2d:ec:71:3c:e8:5d:d0:4d:59:ca:
e7:30:06:21:df:8c:ad:43:57:dc:ff:55:b9:c1:b0:48:97:63:
2f:5d:0b:68:20:29:ef:f1:e4:7c:f7:d2:b5:47:f6:1c:0a:94:
aa:7b:a7:8f:99:80:c0:a3:d4:b5:0c:d8:f7:69:b4:81:17:3a:
a3:68:ed:b8:bc:5f:aa:19:ee:d2:0c:8f:4d:3c:45:6a:a2:62:
54:83:da:a4:15:9b:15:00:2b:68:ed:19:88:79:b5:09:91:c5:
84:2c:4c:ff:c8:05:b7:f2:3a:9b:57:95:bd:4a:cb:d4:dd:c0:
02:d2:dd:75:90:6b:2f:cc:e2:b7:b7:67:88:3e:ef:ed:44:10:
73:05:d2:30:ac:15:12:b0:39:1d:18:ea:a4:ec:f0:e3:0b:20:
86:e2:59:77:12:37:36:8c:ce:ec:98:11:27:b1:76:21:ea:b5:
25:f0:a4:88:2a:26:1d:40:70:f7:7b:72:4f:72:4e:16:b0:c9:
7f:fb:56:e6:7c:b5:76:22:18:a0:0e:71:1d:16:20:7a:9e:36:
d2:b5:95:40
-----BEGIN CERTIFICATE-----
MIIHrTCCBpWgAwIBAgISAYxbcf9uwiUtJlzARi1oFY84MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjZTY4ZGFmNWYwODk0NTZjMGUxZDAyMjQ1MzkzNTMxYWM1
YjhmY2IwHhcNMjMxMjEyMDAzNDA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTMzYjAzMGY5M2U0MDZiZWRhY2Q0N2RiNmIwMTFjNDMzNjc2YTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknA7eciKDCqpk3t+iI9UVWA6ukoy
8/JCxuAMCzddEoNr9Zt5AgY5DFyquWO9zgbfAqMjELyO9BZ3Dlpt46X3RDhWiAGQ
9zg5nJ3YyPX+PZyqLn0CYuHC8vKPHq81qBjfN7lIEjrzmesznECGWYQzP9O28iU2
B3gaPrfFwWiWxAc82jsIakB0AtNsaKI2QxsmzbxMGyxJmCK9EWQevfnu2XNFicku
xlhtp2bUHtssizsqMCOr3DeVS29WBIagvZPQk8YnCqA8ktHxgDwI+Y8+igsaIWxK
uuMHQ0I0aN39XRbmFoJy+ack5vKyMb594zXcMQ3hejnSQCt2MOQj4dmENwIDAQAB
o4IEuTCCBLUwHQYDVR0OBBYEFEkzsDD5PkBr7azUfbawEcQzZ2oFMB8GA1UdIwQY
MBaAFHzmja9fCJRWwOHQIkU5NTGsW4/LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZk9hTnIxOElsRmJBNGRBaVJUazFNYXhiajhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lYzBiODktMWU2OC00NWEwLThiOTMt
MTNhMDZhMjY5YWE4LzEvU1RPd01Qay1RR3Z0ck5SOXRyQVJ4RE5uYWdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9lYzBiODktMWU2OC00NWEwLThiOTMtMTNhMDZhMjY5YWE4
LzEvZk9hTnIxOElsRmJBNGRBaVJUazFNYXhiajhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICzQYIKwYBBQUHAQcBAf8EggK8MIICuDCCAp4EAgABMIIC
lgMDAAG6MAoDAwAJkQMDAAmSAwMBCeowCgMDACipAwMCKKgwCgMDBjDAAwMBMNww
CgMDATMKAwMBMwwDAwAzMwMDADM1MAoDAwAzZwMDATNoAwMAM2sDAwAzdAMDADN4
AwMAM3wDAwAzhDAKAwMDM4gDAwAzijAKAwMCM4wDAwEzkDAKAwMBOZYDAwQ5oAMD
AEUPAwQHSBCAAwMASDYDAwRKkAMDAFJXAwMBVN4DAwBV1AMEBl71QAMDAG32AwMA
epUDAwB8/AMDAIAYAwMAgFUDAwCAywMDAIGHAwMAgoMDAwCC1QMDAIOjAwMAg70D
AwCEpAMDAITEAwMAhNwDAwCGIQMDAIZwAwMAhooDAwCGlQMDAIcEAwMBhwYDAwCH
EgMDAIdVAwMAh1gDAwCHXQMDAIdyAwMAh3QDAwCHdwMDAIeCAwMAh6sDAwCHuQMD
AIfcAwMBh+AwCgMDAIflAwMAh+YwCgMDA4foAwMBh+wDAwGH8AMDAIf0AwMAh/8D
AwCJogMDAIppAwMAitUDAwCP0QMDAI/iAwMAj/EDAwCT1gMDAJPzAwMAlDUDAwCV
rwMDAJXGAwMAl4EDAwCXzgMDAJiKAwMAnBcDAwCdHwMDAJ1RAwMAnV8DAwCdrAMD
AJ2wAwMAnfwDAwCeGAMDAJ+AAwMAoM8DAwCg6gMDAKGdAwMApQ8DAwClEQMDAKei
AwMAp7oDAwCn5wMDBqyAMAoDAwOsyAMDA6zQAwMArcgwDAMEA8BkaAMEAcBkhAME
BcGVQAMEAMHdcQMEBMIpEAMEAMJuxQMEB8LugAMDAMcyAwMAx3YDAwDPZwMDANHH
AwQF1IQAAwQH1K0AAwMA1M8DAwDVNgMEBtXHgAMDANmwAwQF2bFgMBQEAgACMA4D
BQMqABxoAwUAKgEBETANBgkqhkiG9w0BAQsFAAOCAQEAL9TAdPjoTdMRX3QMD5Ez
0VCwEEaq1g/xq5Aw6d05CKryaTBxB4OHmG8HTbIt7HE86F3QTVnK5zAGId+MrUNX
3P9VucGwSJdjL10LaCAp7/HkfPfStUf2HAqUqnunj5mAwKPUtQzY92m0gRc6o2jt
uLxfqhnu0gyPTTxFaqJiVIPapBWbFQAraO0ZiHm1CZHFhCxM/8gFt/I6m1eVvUrL
1N3AAtLddZBrL8zit7dniD7v7UQQcwXSMKwVErA5HRjqpOzw4wsghuJZdxI3NozO
7JgRJ7F2Ieq1JfCkiComHUBw93tyT3JOFrDJf/tW5ny1diIYoA5xHRYgep420rWV
QA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-fra.rpki-client.org