Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/YF6Nalih8G23GirioAGiLth_bAQ.roa
File: YF6Nalih8G23GirioAGiLth_bAQ.roa (raw, json)
Hash identifier: R6Ij7euAMo671wxvdhQWDU5tgu7ErjztdCi4Gt6eeas=
Subject key identifier: 60:5E:8D:6A:58:A1:F0:6D:B7:1A:2A:E2:A0:01:A2:2E:D8:7F:6C:04
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 018CC7958F4BF635EF6FE7C220CD72C664AD
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/YF6Nalih8G23GirioAGiLth_bAQ.roa
Signing time: Tue 02 Jan 2024 00:31:56 +0000
ROA not before: Tue 02 Jan 2024 00:31:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 48.208.0.0/13 maxlen: 13
172.208.0.0/13 maxlen: 13
192.100.112.0/21 maxlen: 21
192.100.120.0/21 maxlen: 21
192.100.132.0/23 maxlen: 23
82.87.0.0/16 maxlen: 16
192.100.128.0/22 maxlen: 22
135.114.0.0/16 maxlen: 16
172.160.0.0/11 maxlen: 11
51.107.0.0/16 maxlen: 16
135.6.0.0/16 maxlen: 16
134.33.0.0/16 maxlen: 16
192.100.104.0/21 maxlen: 21
149.175.0.0/16 maxlen: 16
135.229.0.0/16 maxlen: 16
84.222.0.0/16 maxlen: 16
51.12.0.0/15 maxlen: 15
51.140.0.0/14 maxlen: 14
135.93.0.0/16 maxlen: 16
147.214.0.0/16 maxlen: 16
143.241.0.0/16 maxlen: 16
135.241.0.0/16 maxlen: 16
135.255.0.0/16 maxlen: 16
193.221.113.0/24 maxlen: 24
51.53.0.0/16 maxlen: 16
148.53.0.0/16 maxlen: 16
57.160.0.0/12 maxlen: 12
51.120.0.0/16 maxlen: 16
132.220.0.0/16 maxlen: 16
135.220.0.0/16 maxlen: 16
48.220.0.0/15 maxlen: 15
135.119.0.0/16 maxlen: 16
9.146.0.0/16 maxlen: 16
135.18.0.0/16 maxlen: 16
212.173.0.0/17 maxlen: 17
135.240.0.0/16 maxlen: 16
134.112.0.0/16 maxlen: 16
172.200.0.0/13 maxlen: 13
160.207.0.0/16 maxlen: 16
212.207.0.0/16 maxlen: 16
160.234.0.0/16 maxlen: 16
9.234.0.0/15 maxlen: 15
173.200.0.0/16 maxlen: 16
157.172.0.0/16 maxlen: 16
209.199.0.0/16 maxlen: 16
143.226.0.0/16 maxlen: 16
109.246.0.0/16 maxlen: 16
199.118.0.0/16 maxlen: 16
9.145.0.0/16 maxlen: 16
165.17.0.0/16 maxlen: 16
212.132.0.0/19 maxlen: 19
51.132.0.0/16 maxlen: 16
135.4.0.0/16 maxlen: 16
157.31.0.0/16 maxlen: 16
213.199.128.0/18 maxlen: 24
167.186.0.0/16 maxlen: 16
1.186.0.0/16 maxlen: 16
130.213.0.0/16 maxlen: 16
138.213.0.0/16 maxlen: 16
128.85.0.0/16 maxlen: 16
135.85.0.0/16 maxlen: 16
48.192.0.0/12 maxlen: 12
158.24.0.0/16 maxlen: 16
128.24.0.0/16 maxlen: 16
51.51.0.0/16 maxlen: 16
57.152.0.0/14 maxlen: 14
151.206.0.0/16 maxlen: 16
138.105.0.0/16 maxlen: 16
94.245.64.0/18 maxlen: 24
157.252.0.0/16 maxlen: 16
51.124.0.0/16 maxlen: 16
124.252.0.0/16 maxlen: 16
156.23.0.0/16 maxlen: 16
199.50.0.0/16 maxlen: 16
51.144.0.0/15 maxlen: 15
40.171.0.0/16 maxlen: 16
135.171.0.0/16 maxlen: 16
149.198.0.0/16 maxlen: 16
194.238.128.0/17 maxlen: 17
85.212.0.0/16 maxlen: 16
152.138.0.0/16 maxlen: 16
51.138.0.0/16 maxlen: 16
134.138.0.0/16 maxlen: 16
51.10.0.0/15 maxlen: 15
74.144.0.0/12 maxlen: 12
194.110.197.0/24 maxlen: 24
51.104.0.0/15 maxlen: 15
72.16.128.0/17 maxlen: 17
130.131.0.0/16 maxlen: 16
135.232.0.0/14 maxlen: 14
135.185.0.0/16 maxlen: 16
207.103.0.0/16 maxlen: 16
167.231.0.0/16 maxlen: 16
51.103.0.0/16 maxlen: 16
135.130.0.0/16 maxlen: 16
161.157.0.0/16 maxlen: 16
135.224.0.0/15 maxlen: 15
57.150.0.0/15 maxlen: 15
132.164.0.0/16 maxlen: 16
217.177.96.0/19 maxlen: 19
57.156.0.0/14 maxlen: 14
172.128.0.0/11 maxlen: 11
157.176.0.0/16 maxlen: 16
217.176.0.0/16 maxlen: 16
128.203.0.0/16 maxlen: 16
135.230.0.0/16 maxlen: 16
193.149.64.0/19 maxlen: 24
151.129.0.0/16 maxlen: 16
135.116.0.0/16 maxlen: 16
51.116.0.0/16 maxlen: 16
135.244.0.0/16 maxlen: 16
69.15.0.0/16 maxlen: 16
165.15.0.0/16 maxlen: 16
40.170.0.0/16 maxlen: 16
51.136.0.0/15 maxlen: 15
131.163.0.0/16 maxlen: 16
135.236.0.0/15 maxlen: 15
135.7.0.0/16 maxlen: 16
129.135.0.0/16 maxlen: 16
137.162.0.0/16 maxlen: 16
167.162.0.0/16 maxlen: 16
131.189.0.0/16 maxlen: 16
159.128.0.0/16 maxlen: 16
72.54.0.0/16 maxlen: 16
213.54.0.0/16 maxlen: 16
157.81.0.0/16 maxlen: 16
143.209.0.0/16 maxlen: 16
194.41.16.0/20 maxlen: 20
194.41.18.0/24 maxlen: 24
194.41.22.0/24 maxlen: 24
194.41.23.0/24 maxlen: 24
194.41.20.0/24 maxlen: 24
194.41.21.0/24 maxlen: 24
194.41.19.0/24 maxlen: 24
132.196.0.0/16 maxlen: 16
157.95.0.0/16 maxlen: 16
84.223.0.0/16 maxlen: 16
134.149.0.0/16 maxlen: 16
122.149.0.0/16 maxlen: 16
135.88.0.0/16 maxlen: 16
147.243.0.0/16 maxlen: 24
48.216.0.0/14 maxlen: 14
40.169.0.0/16 maxlen: 16
2a01:111:4004::/48 maxlen: 48
2a01:111::/32 maxlen: 32
2a01:111:4000::/36 maxlen: 36
2a01:111:2000::/36 maxlen: 36
2a01:111:f000::/36 maxlen: 36
2a00:1c68::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 23 Feb 2024 17:53:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:8f:4b:f6:35:ef:6f:e7:c2:20:cd:72:c6:64:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Jan 2 00:31:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=605e8d6a58a1f06db71a2ae2a001a22ed87f6c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:54:f8:5c:35:2e:ec:09:76:32:ac:5a:95:29:
34:3f:bf:66:e5:bc:e2:7d:d9:3f:d3:1b:fe:6f:c3:
92:b2:56:6c:27:c4:4d:2e:ac:5b:fe:9a:bc:ac:f2:
d4:73:92:1b:9e:05:cb:e7:26:ef:55:25:bf:97:7f:
48:66:61:1d:ba:7f:ab:74:41:ff:dd:38:72:13:b5:
5f:25:7b:da:77:30:08:e5:7b:d4:bf:c3:73:69:bf:
4e:a2:29:de:3c:60:a4:5f:1a:89:be:9e:bc:97:4d:
10:fb:aa:84:a1:b1:70:37:e6:a2:c9:c2:88:f5:79:
b4:26:98:73:90:d5:35:fa:e8:eb:a0:78:7a:44:31:
40:7d:e2:0d:63:65:1b:3e:70:e7:07:7a:e4:59:c1:
a4:be:5b:49:5e:ed:af:c8:43:8b:88:6e:81:bd:ce:
76:ca:ff:78:36:48:e9:f1:68:a4:2b:c2:c5:6b:b2:
50:0c:70:bd:ab:cd:36:55:b8:20:36:be:92:ab:ac:
06:c4:fe:5f:3e:2a:64:7c:0d:89:1b:57:8f:de:d1:
09:ea:20:f6:3c:f0:79:62:8f:ec:7b:36:79:7a:77:
2a:f0:7c:fd:13:59:da:34:a7:25:af:42:22:5b:05:
71:bd:4c:10:28:c4:06:8c:96:1a:c7:5c:2e:be:b6:
ac:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5E:8D:6A:58:A1:F0:6D:B7:1A:2A:E2:A0:01:A2:2E:D8:7F:6C:04
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/YF6Nalih8G23GirioAGiLth_bAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.186.0.0/16
9.145.0.0-9.146.255.255
9.234.0.0/15
40.169.0.0-40.171.255.255
48.192.0.0-48.221.255.255
51.10.0.0-51.13.255.255
51.51.0.0/16
51.53.0.0/16
51.103.0.0-51.105.255.255
51.107.0.0/16
51.116.0.0/16
51.120.0.0/16
51.124.0.0/16
51.132.0.0/16
51.136.0.0-51.138.255.255
51.140.0.0-51.145.255.255
57.150.0.0-57.175.255.255
69.15.0.0/16
72.16.128.0/17
72.54.0.0/16
74.144.0.0/12
82.87.0.0/16
84.222.0.0/15
85.212.0.0/16
94.245.64.0/18
109.246.0.0/16
122.149.0.0/16
124.252.0.0/16
128.24.0.0/16
128.85.0.0/16
128.203.0.0/16
129.135.0.0/16
130.131.0.0/16
130.213.0.0/16
131.163.0.0/16
131.189.0.0/16
132.164.0.0/16
132.196.0.0/16
132.220.0.0/16
134.33.0.0/16
134.112.0.0/16
134.138.0.0/16
134.149.0.0/16
135.4.0.0/16
135.6.0.0/15
135.18.0.0/16
135.85.0.0/16
135.88.0.0/16
135.93.0.0/16
135.114.0.0/16
135.116.0.0/16
135.119.0.0/16
135.130.0.0/16
135.171.0.0/16
135.185.0.0/16
135.220.0.0/16
135.224.0.0/15
135.229.0.0-135.230.255.255
135.232.0.0-135.237.255.255
135.240.0.0/15
135.244.0.0/16
135.255.0.0/16
137.162.0.0/16
138.105.0.0/16
138.213.0.0/16
143.209.0.0/16
143.226.0.0/16
143.241.0.0/16
147.214.0.0/16
147.243.0.0/16
148.53.0.0/16
149.175.0.0/16
149.198.0.0/16
151.129.0.0/16
151.206.0.0/16
152.138.0.0/16
156.23.0.0/16
157.31.0.0/16
157.81.0.0/16
157.95.0.0/16
157.172.0.0/16
157.176.0.0/16
157.252.0.0/16
158.24.0.0/16
159.128.0.0/16
160.207.0.0/16
160.234.0.0/16
161.157.0.0/16
165.15.0.0/16
165.17.0.0/16
167.162.0.0/16
167.186.0.0/16
167.231.0.0/16
172.128.0.0/10
172.200.0.0-172.215.255.255
173.200.0.0/16
192.100.104.0-192.100.133.255
193.149.64.0/19
193.221.113.0/24
194.41.16.0/20
194.110.197.0/24
194.238.128.0/17
199.50.0.0/16
199.118.0.0/16
207.103.0.0/16
209.199.0.0/16
212.132.0.0/19
212.173.0.0/17
212.207.0.0/16
213.54.0.0/16
213.199.128.0/18
217.176.0.0/16
217.177.96.0/19
IPv6:
2a00:1c68::/29
2a01:111::/32
Signature Algorithm: sha256WithRSAEncryption
88:f1:89:7a:15:f3:88:2d:dd:3f:55:93:ed:c4:d5:41:0e:76:
80:50:74:49:60:74:38:d8:f5:58:83:6c:a3:aa:8e:d7:03:67:
62:59:66:1a:ba:01:6e:38:7a:ba:90:da:6c:9a:32:87:52:26:
8b:e4:0c:83:74:5f:35:f2:c4:a0:b7:a3:3c:0d:b6:7a:c7:7d:
d6:57:15:eb:33:33:35:ff:d7:0a:60:6d:84:50:dc:c1:95:1e:
79:e6:7e:06:21:00:ab:1d:85:d2:3c:65:ef:bc:b7:ab:cc:57:
81:51:72:55:3d:b8:31:94:3c:93:29:47:b7:39:3b:f3:93:06:
a8:f0:54:fe:6f:0d:63:a6:11:a7:a5:e1:bd:bb:33:d6:33:bf:
ef:6b:1e:b5:65:ba:24:58:49:9c:dc:d2:c9:d6:a5:14:39:cc:
9b:83:bb:15:48:ac:be:7e:48:da:00:42:7e:ca:b9:4a:85:65:
a7:19:01:8c:1c:64:54:b4:54:17:f0:92:0b:b3:04:59:11:d3:
87:90:2e:e3:f6:ab:97:7c:5c:af:61:08:80:49:95:d0:0e:51:
ad:81:7b:03:72:c7:15:e7:d9:fe:37:fb:78:51:38:a6:d3:1d:
21:a5:1f:75:1d:47:1a:02:74:35:40:1d:68:6a:96:06:30:b4:
00:90:47:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:00 2024 by rpki-client on console-ams.rpki-client.org