Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/Ytwj7mNvolExefZ7Bxr-XmyDWoU.roa
File: Ytwj7mNvolExefZ7Bxr-XmyDWoU.roa (raw, json)
Hash identifier: yc8jSTIauwoeG+2NPJUPWomVa83exA4cjjIxv674t2M=
Subject key identifier: 62:DC:23:EE:63:6F:A2:51:31:79:F6:7B:07:1A:FE:5E:6C:83:5A:85
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 0187C48BFD4F79EF0C9A376165B66A79F0E3
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/Ytwj7mNvolExefZ7Bxr-XmyDWoU.roa
Signing time: Thu 27 Apr 2023 21:08:41 +0000
ROA not before: Thu 27 Apr 2023 21:08:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 94.245.64.0/18 maxlen: 24
172.208.0.0/13 maxlen: 13
51.124.0.0/16 maxlen: 16
192.100.112.0/21 maxlen: 21
192.100.120.0/21 maxlen: 21
192.100.128.0/22 maxlen: 22
192.100.132.0/23 maxlen: 23
172.160.0.0/11 maxlen: 11
51.144.0.0/15 maxlen: 15
40.171.0.0/16 maxlen: 16
51.107.0.0/16 maxlen: 16
192.100.104.0/21 maxlen: 21
85.212.0.0/16 maxlen: 16
51.138.0.0/16 maxlen: 16
152.138.0.0/16 maxlen: 16
51.10.0.0/15 maxlen: 15
194.110.197.0/24 maxlen: 24
51.104.0.0/15 maxlen: 15
51.12.0.0/15 maxlen: 15
51.103.0.0/16 maxlen: 16
51.140.0.0/14 maxlen: 14
135.130.0.0/16 maxlen: 16
57.150.0.0/15 maxlen: 15
132.164.0.0/16 maxlen: 16
193.221.113.0/24 maxlen: 24
51.53.0.0/16 maxlen: 16
57.160.0.0/12 maxlen: 12
51.120.0.0/16 maxlen: 16
57.156.0.0/14 maxlen: 14
172.128.0.0/11 maxlen: 11
193.149.64.0/19 maxlen: 24
172.200.0.0/13 maxlen: 13
51.116.0.0/16 maxlen: 16
40.170.0.0/16 maxlen: 16
51.136.0.0/15 maxlen: 15
209.199.0.0/16 maxlen: 16
167.162.0.0/16 maxlen: 16
159.128.0.0/16 maxlen: 16
213.54.0.0/16 maxlen: 16
194.41.16.0/20 maxlen: 20
194.41.18.0/24 maxlen: 24
194.41.22.0/24 maxlen: 24
194.41.23.0/24 maxlen: 24
194.41.20.0/24 maxlen: 24
194.41.21.0/24 maxlen: 24
194.41.19.0/24 maxlen: 24
51.132.0.0/16 maxlen: 16
157.95.0.0/16 maxlen: 16
157.31.0.0/16 maxlen: 16
167.186.0.0/16 maxlen: 16
213.199.128.0/18 maxlen: 24
147.243.0.0/16 maxlen: 24
51.51.0.0/16 maxlen: 16
57.152.0.0/14 maxlen: 14
151.206.0.0/16 maxlen: 16
40.169.0.0/16 maxlen: 16
138.105.0.0/16 maxlen: 16
2a00:1c68::/29 maxlen: 29
2a01:111:4004::/48 maxlen: 48
2a01:111::/32 maxlen: 32
2a01:111:f000::/36 maxlen: 36
2a01:111:2000::/36 maxlen: 36
2a01:111:4000::/36 maxlen: 36
Validation: Failed, certificate revoked on Mon 01 May 2023 20:58:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c4:8b:fd:4f:79:ef:0c:9a:37:61:65:b6:6a:79:f0:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Apr 27 21:08:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62dc23ee636fa2513179f67b071afe5e6c835a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:54:3e:1a:30:ca:42:ad:99:63:a7:34:f4:66:
cc:6c:b0:a8:d9:3b:71:0e:f4:d2:f3:e0:d1:ae:2c:
a7:3d:17:4e:c7:74:ef:0a:8e:2f:1b:fe:0a:18:fc:
a5:9c:b8:7e:fd:0f:24:03:c6:dd:04:95:aa:89:e3:
b5:d7:34:33:da:10:22:81:4e:67:83:84:17:f6:80:
e8:0f:8d:75:04:61:c1:4d:9d:7b:2f:23:28:10:93:
c5:d5:9a:7e:00:20:84:32:73:b8:ea:b6:86:44:1e:
f5:3f:21:d1:11:d5:fc:08:87:b4:73:c2:9c:36:4d:
9a:f0:07:36:60:5a:05:dc:8c:bb:5d:11:74:61:22:
16:f4:44:fe:ca:7b:7a:5a:72:28:e5:74:57:af:49:
bf:69:e5:36:e5:2a:ba:2b:a8:d6:c1:34:ef:e3:20:
8a:04:26:3f:d3:8b:39:f5:ba:75:3e:57:a7:34:62:
48:70:02:14:1a:73:c0:3d:ad:a7:74:a6:c9:82:eb:
ab:0b:23:e4:be:3a:59:89:9e:31:1b:f6:6b:7e:60:
76:a8:11:f3:cc:9c:11:83:70:d1:b5:de:b0:14:1d:
8b:ab:b4:f9:d2:17:f4:d1:66:0c:27:1e:dc:9f:07:
99:dc:70:2b:82:e0:4d:00:e7:af:fd:99:1d:a1:cc:
b8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DC:23:EE:63:6F:A2:51:31:79:F6:7B:07:1A:FE:5E:6C:83:5A:85
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/Ytwj7mNvolExefZ7Bxr-XmyDWoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.169.0.0-40.171.255.255
51.10.0.0-51.13.255.255
51.51.0.0/16
51.53.0.0/16
51.103.0.0-51.105.255.255
51.107.0.0/16
51.116.0.0/16
51.120.0.0/16
51.124.0.0/16
51.132.0.0/16
51.136.0.0-51.138.255.255
51.140.0.0-51.145.255.255
57.150.0.0-57.175.255.255
85.212.0.0/16
94.245.64.0/18
132.164.0.0/16
135.130.0.0/16
138.105.0.0/16
147.243.0.0/16
151.206.0.0/16
152.138.0.0/16
157.31.0.0/16
157.95.0.0/16
159.128.0.0/16
167.162.0.0/16
167.186.0.0/16
172.128.0.0/10
172.200.0.0-172.215.255.255
192.100.104.0-192.100.133.255
193.149.64.0/19
193.221.113.0/24
194.41.16.0/20
194.110.197.0/24
209.199.0.0/16
213.54.0.0/16
213.199.128.0/18
IPv6:
2a00:1c68::/29
2a01:111::/32
Signature Algorithm: sha256WithRSAEncryption
43:17:9a:61:c3:bc:c8:56:0f:b4:46:35:ef:8f:ac:3f:b6:7c:
e1:75:5c:f3:61:0e:f5:02:30:20:1a:c7:55:2f:e3:83:2c:b4:
2f:ee:92:20:7b:68:7f:1b:77:5c:35:29:5b:20:4a:f1:c1:3b:
0b:d7:da:76:2d:80:8f:6a:30:49:11:ba:0f:c8:6e:28:ee:ed:
ae:97:54:6f:36:b1:c1:a0:f9:3a:96:0a:5e:27:7b:06:1f:84:
b5:f2:71:3d:10:d7:13:db:bd:c4:bd:e4:e3:25:e9:ed:1a:9e:
ee:7a:03:4e:fa:8e:b2:7b:e0:25:88:a6:c5:50:2a:dc:89:8c:
9b:6f:4d:40:1c:7d:88:9d:8e:e8:13:f0:7b:e8:29:1a:7c:31:
6b:04:58:63:37:c7:35:20:e0:21:bb:f8:48:af:1e:53:0e:73:
03:1e:15:2d:f8:69:36:ab:5d:e3:69:61:b4:76:96:95:19:47:
da:8b:69:36:21:e1:c3:36:84:50:9b:27:b9:73:3d:fc:4e:6f:
86:3d:c2:6d:e0:e5:4a:ff:d7:a3:ca:9a:dd:20:6a:2a:a1:22:
3a:2c:04:07:e1:b5:16:49:2a:be:9c:0c:60:8a:77:a1:bf:e9:
24:82:70:4e:33:ca:ac:ae:45:fe:0f:41:0a:2c:af:31:fb:87:
1c:62:7e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:00 2024 by rpki-client on console-ams.rpki-client.org