Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/URPxqanjgbDVGB4-ngphTrm07H0.roa
File: URPxqanjgbDVGB4-ngphTrm07H0.roa (raw, json)
Hash identifier: hNOgecTyFUO0+sJ6wH+yp9oHnUpE+bhMdvg4DjenmJk=
Subject key identifier: 51:13:F1:A9:A9:E3:81:B0:D5:18:1E:3E:9E:0A:61:4E:B9:B4:EC:7D
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 0188308FDA6435FA26024346B8B77E10FF67
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/URPxqanjgbDVGB4-ngphTrm07H0.roa
Signing time: Thu 18 May 2023 20:31:53 +0000
ROA not before: Thu 18 May 2023 20:31:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 94.245.64.0/18 maxlen: 24
172.208.0.0/13 maxlen: 13
51.124.0.0/16 maxlen: 16
192.100.112.0/21 maxlen: 21
192.100.120.0/21 maxlen: 21
82.87.0.0/16 maxlen: 16
192.100.128.0/22 maxlen: 22
192.100.132.0/23 maxlen: 23
172.160.0.0/11 maxlen: 11
51.144.0.0/15 maxlen: 15
40.171.0.0/16 maxlen: 16
51.107.0.0/16 maxlen: 16
194.238.128.0/17 maxlen: 17
192.100.104.0/21 maxlen: 21
85.212.0.0/16 maxlen: 16
51.138.0.0/16 maxlen: 16
152.138.0.0/16 maxlen: 16
51.10.0.0/15 maxlen: 15
194.110.197.0/24 maxlen: 24
51.104.0.0/15 maxlen: 15
51.12.0.0/15 maxlen: 15
51.103.0.0/16 maxlen: 16
51.140.0.0/14 maxlen: 14
135.130.0.0/16 maxlen: 16
57.150.0.0/15 maxlen: 15
132.164.0.0/16 maxlen: 16
193.221.113.0/24 maxlen: 24
51.53.0.0/16 maxlen: 16
57.160.0.0/12 maxlen: 12
51.120.0.0/16 maxlen: 16
217.177.96.0/19 maxlen: 19
57.156.0.0/14 maxlen: 14
212.173.0.0/17 maxlen: 17
172.128.0.0/11 maxlen: 11
217.176.0.0/16 maxlen: 16
193.149.64.0/19 maxlen: 24
151.129.0.0/16 maxlen: 16
172.200.0.0/13 maxlen: 13
51.116.0.0/16 maxlen: 16
212.207.0.0/16 maxlen: 16
40.170.0.0/16 maxlen: 16
51.136.0.0/15 maxlen: 15
209.199.0.0/16 maxlen: 16
167.162.0.0/16 maxlen: 16
143.226.0.0/16 maxlen: 16
159.128.0.0/16 maxlen: 16
213.54.0.0/16 maxlen: 16
194.41.16.0/20 maxlen: 20
212.132.0.0/19 maxlen: 19
194.41.18.0/24 maxlen: 24
194.41.22.0/24 maxlen: 24
194.41.23.0/24 maxlen: 24
194.41.20.0/24 maxlen: 24
194.41.21.0/24 maxlen: 24
194.41.19.0/24 maxlen: 24
51.132.0.0/16 maxlen: 16
157.95.0.0/16 maxlen: 16
157.31.0.0/16 maxlen: 16
167.186.0.0/16 maxlen: 16
213.199.128.0/18 maxlen: 24
128.85.0.0/16 maxlen: 16
147.243.0.0/16 maxlen: 24
51.51.0.0/16 maxlen: 16
57.152.0.0/14 maxlen: 14
151.206.0.0/16 maxlen: 16
40.169.0.0/16 maxlen: 16
138.105.0.0/16 maxlen: 16
2a00:1c68::/29 maxlen: 29
2a01:111:4004::/48 maxlen: 48
2a01:111::/32 maxlen: 32
2a01:111:f000::/36 maxlen: 36
2a01:111:2000::/36 maxlen: 36
2a01:111:4000::/36 maxlen: 36
Validation: Failed, certificate revoked on Fri 26 May 2023 18:18:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:30:8f:da:64:35:fa:26:02:43:46:b8:b7:7e:10:ff:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: May 18 20:31:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5113f1a9a9e381b0d5181e3e9e0a614eb9b4ec7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5a:83:4a:2b:50:75:d4:9b:1c:d2:20:95:3d:
3d:37:29:a9:69:7d:02:51:62:63:3c:0f:4d:52:2d:
af:61:29:d6:de:47:d0:3a:e4:03:d5:fc:fd:bc:aa:
35:00:7e:17:9e:0f:4d:97:75:51:d4:5d:65:c8:45:
a3:ef:f0:e7:75:99:d0:7a:87:98:40:f4:39:0a:4b:
d3:0c:c4:e4:84:9e:7d:51:05:72:a9:47:95:a0:1d:
e6:0c:0f:00:5b:13:1a:b5:83:a6:1d:05:87:4e:6c:
b8:aa:80:f1:69:8e:84:c9:9b:12:9d:6a:d5:d6:c3:
ae:61:b8:4d:1a:65:bc:fb:d7:bf:7f:c4:97:b5:e2:
06:5f:f5:4d:84:07:9d:1a:d2:da:88:48:4a:a3:2e:
bc:7f:48:ae:ff:11:87:df:20:64:5e:b3:aa:30:a3:
2d:29:ae:76:c4:ef:77:d0:aa:6d:4d:38:48:01:f5:
99:0b:02:62:3c:c9:db:d4:91:58:4d:33:3a:52:9a:
c9:4a:34:d6:79:31:94:1c:66:5c:45:e2:33:db:17:
82:c3:dd:df:a2:08:e2:69:8c:4b:ec:9f:21:07:52:
8d:19:64:ed:09:95:51:70:3e:f4:9f:0a:4e:a1:c5:
11:86:7e:42:64:f4:59:f9:02:fd:f3:d1:8e:8f:26:
87:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:13:F1:A9:A9:E3:81:B0:D5:18:1E:3E:9E:0A:61:4E:B9:B4:EC:7D
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/URPxqanjgbDVGB4-ngphTrm07H0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.169.0.0-40.171.255.255
51.10.0.0-51.13.255.255
51.51.0.0/16
51.53.0.0/16
51.103.0.0-51.105.255.255
51.107.0.0/16
51.116.0.0/16
51.120.0.0/16
51.124.0.0/16
51.132.0.0/16
51.136.0.0-51.138.255.255
51.140.0.0-51.145.255.255
57.150.0.0-57.175.255.255
82.87.0.0/16
85.212.0.0/16
94.245.64.0/18
128.85.0.0/16
132.164.0.0/16
135.130.0.0/16
138.105.0.0/16
143.226.0.0/16
147.243.0.0/16
151.129.0.0/16
151.206.0.0/16
152.138.0.0/16
157.31.0.0/16
157.95.0.0/16
159.128.0.0/16
167.162.0.0/16
167.186.0.0/16
172.128.0.0/10
172.200.0.0-172.215.255.255
192.100.104.0-192.100.133.255
193.149.64.0/19
193.221.113.0/24
194.41.16.0/20
194.110.197.0/24
194.238.128.0/17
209.199.0.0/16
212.132.0.0/19
212.173.0.0/17
212.207.0.0/16
213.54.0.0/16
213.199.128.0/18
217.176.0.0/16
217.177.96.0/19
IPv6:
2a00:1c68::/29
2a01:111::/32
Signature Algorithm: sha256WithRSAEncryption
55:da:4e:9d:d6:ba:61:4e:69:00:df:58:75:29:e1:3a:40:54:
ab:df:b4:66:d3:2b:a9:02:b1:52:bc:61:ba:a8:24:14:6b:43:
2b:e6:14:38:2a:33:ef:5a:bc:6a:76:40:a5:43:6a:f5:58:ce:
90:db:79:39:29:60:85:ad:6f:3d:ab:56:72:8b:67:37:86:c4:
84:ee:99:c5:e2:f9:75:a1:b9:11:ac:b3:fc:f3:43:f0:6e:e8:
23:ce:31:ed:ee:f7:a5:f9:2d:16:13:99:f9:a8:08:de:44:f4:
61:af:9c:29:27:78:e7:bd:d8:92:e2:9e:bd:9b:26:7f:b7:40:
e1:8c:4a:df:f3:7c:d8:ed:63:02:90:dd:13:30:54:22:69:4b:
bc:23:ae:3a:1c:b1:4d:42:40:c2:07:26:b4:b0:1e:26:93:cb:
f2:5a:6f:c5:ad:9b:cf:df:e3:2d:f8:95:19:04:6a:61:67:65:
e2:99:b7:6a:e1:19:9a:05:c7:05:22:3c:e8:76:06:54:fe:74:
bd:fb:de:c3:43:e5:eb:bd:07:22:11:4c:45:b2:28:c6:19:ac:
7f:24:a6:50:31:0b:46:c5:fd:78:ba:9b:d0:92:1c:63:d6:09:
35:5a:4b:b2:5e:a5:b5:d6:2d:b6:66:21:07:b1:22:d8:04:37:
57:c8:13:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-fra.rpki-client.org