Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/aeAuJHWA2hYEWv6piqkVrwZTh1s.roa
File: aeAuJHWA2hYEWv6piqkVrwZTh1s.roa (raw, json)
Hash identifier: 7eYri4iWZ/89VrpSVCZ+ciOQ6WpoEVHO2IpFrqqORbE=
Subject key identifier: 69:E0:2E:24:75:80:DA:16:04:5A:FE:A9:8A:A9:15:AF:06:53:87:5B
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 018C1CEC0F100A3DB9E8B0A5DBE23B937363
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/aeAuJHWA2hYEWv6piqkVrwZTh1s.roa
Signing time: Wed 29 Nov 2023 21:11:21 +0000
ROA not before: Wed 29 Nov 2023 21:11:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 48.208.0.0/13 maxlen: 13
172.208.0.0/13 maxlen: 13
192.100.112.0/21 maxlen: 21
192.100.120.0/21 maxlen: 21
192.100.132.0/23 maxlen: 23
82.87.0.0/16 maxlen: 16
192.100.128.0/22 maxlen: 22
135.114.0.0/16 maxlen: 16
172.160.0.0/11 maxlen: 11
51.107.0.0/16 maxlen: 16
135.6.0.0/16 maxlen: 16
134.33.0.0/16 maxlen: 16
192.100.104.0/21 maxlen: 21
149.175.0.0/16 maxlen: 16
135.229.0.0/16 maxlen: 16
84.222.0.0/16 maxlen: 16
51.12.0.0/15 maxlen: 15
51.140.0.0/14 maxlen: 14
147.214.0.0/16 maxlen: 16
193.221.113.0/24 maxlen: 24
51.53.0.0/16 maxlen: 16
148.53.0.0/16 maxlen: 16
57.160.0.0/12 maxlen: 12
51.120.0.0/16 maxlen: 16
132.220.0.0/16 maxlen: 16
48.220.0.0/15 maxlen: 15
135.18.0.0/16 maxlen: 16
212.173.0.0/17 maxlen: 17
135.240.0.0/16 maxlen: 16
134.112.0.0/16 maxlen: 16
172.200.0.0/13 maxlen: 13
160.207.0.0/16 maxlen: 16
212.207.0.0/16 maxlen: 16
160.234.0.0/16 maxlen: 16
173.200.0.0/16 maxlen: 16
157.172.0.0/16 maxlen: 16
209.199.0.0/16 maxlen: 16
143.226.0.0/16 maxlen: 16
109.246.0.0/16 maxlen: 16
165.17.0.0/16 maxlen: 16
212.132.0.0/19 maxlen: 19
51.132.0.0/16 maxlen: 16
135.4.0.0/16 maxlen: 16
157.31.0.0/16 maxlen: 16
213.199.128.0/18 maxlen: 24
167.186.0.0/16 maxlen: 16
1.186.0.0/16 maxlen: 16
138.213.0.0/16 maxlen: 16
128.85.0.0/16 maxlen: 16
135.85.0.0/16 maxlen: 16
48.192.0.0/12 maxlen: 12
158.24.0.0/16 maxlen: 16
128.24.0.0/16 maxlen: 16
51.51.0.0/16 maxlen: 16
57.152.0.0/14 maxlen: 14
151.206.0.0/16 maxlen: 16
138.105.0.0/16 maxlen: 16
94.245.64.0/18 maxlen: 24
157.252.0.0/16 maxlen: 16
51.124.0.0/16 maxlen: 16
124.252.0.0/16 maxlen: 16
156.23.0.0/16 maxlen: 16
199.50.0.0/16 maxlen: 16
51.144.0.0/15 maxlen: 15
40.171.0.0/16 maxlen: 16
135.171.0.0/16 maxlen: 16
149.198.0.0/16 maxlen: 16
194.238.128.0/17 maxlen: 17
85.212.0.0/16 maxlen: 16
152.138.0.0/16 maxlen: 16
51.138.0.0/16 maxlen: 16
134.138.0.0/16 maxlen: 16
51.10.0.0/15 maxlen: 15
74.144.0.0/12 maxlen: 12
194.110.197.0/24 maxlen: 24
51.104.0.0/15 maxlen: 15
72.16.128.0/17 maxlen: 17
130.131.0.0/16 maxlen: 16
135.232.0.0/14 maxlen: 14
135.185.0.0/16 maxlen: 16
207.103.0.0/16 maxlen: 16
167.231.0.0/16 maxlen: 16
51.103.0.0/16 maxlen: 16
135.130.0.0/16 maxlen: 16
161.157.0.0/16 maxlen: 16
135.224.0.0/15 maxlen: 15
57.150.0.0/15 maxlen: 15
132.164.0.0/16 maxlen: 16
217.177.96.0/19 maxlen: 19
57.156.0.0/14 maxlen: 14
172.128.0.0/11 maxlen: 11
157.176.0.0/16 maxlen: 16
217.176.0.0/16 maxlen: 16
128.203.0.0/16 maxlen: 16
135.230.0.0/16 maxlen: 16
193.149.64.0/19 maxlen: 24
151.129.0.0/16 maxlen: 16
135.116.0.0/16 maxlen: 16
51.116.0.0/16 maxlen: 16
69.15.0.0/16 maxlen: 16
165.15.0.0/16 maxlen: 16
40.170.0.0/16 maxlen: 16
51.136.0.0/15 maxlen: 15
131.163.0.0/16 maxlen: 16
135.236.0.0/15 maxlen: 15
135.7.0.0/16 maxlen: 16
129.135.0.0/16 maxlen: 16
137.162.0.0/16 maxlen: 16
167.162.0.0/16 maxlen: 16
131.189.0.0/16 maxlen: 16
159.128.0.0/16 maxlen: 16
72.54.0.0/16 maxlen: 16
213.54.0.0/16 maxlen: 16
157.81.0.0/16 maxlen: 16
143.209.0.0/16 maxlen: 16
194.41.16.0/20 maxlen: 20
194.41.18.0/24 maxlen: 24
194.41.22.0/24 maxlen: 24
194.41.23.0/24 maxlen: 24
194.41.20.0/24 maxlen: 24
194.41.21.0/24 maxlen: 24
194.41.19.0/24 maxlen: 24
132.196.0.0/16 maxlen: 16
157.95.0.0/16 maxlen: 16
84.223.0.0/16 maxlen: 16
122.149.0.0/16 maxlen: 16
147.243.0.0/16 maxlen: 24
48.216.0.0/14 maxlen: 14
40.169.0.0/16 maxlen: 16
2a01:111:4004::/48 maxlen: 48
2a01:111::/32 maxlen: 32
2a01:111:4000::/36 maxlen: 36
2a01:111:2000::/36 maxlen: 36
2a01:111:f000::/36 maxlen: 36
2a00:1c68::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 06 Dec 2023 23:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1c:ec:0f:10:0a:3d:b9:e8:b0:a5:db:e2:3b:93:73:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Nov 29 21:11:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69e02e247580da16045afea98aa915af0653875b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fb:e5:28:53:24:d1:6e:7b:91:2d:41:0c:3e:
8a:d9:72:68:a5:3d:65:02:97:d2:7a:c2:ad:2b:f6:
85:52:d2:d8:0f:5e:dc:2d:6b:4f:4e:70:10:51:b3:
b7:d8:82:3c:7d:8e:9d:32:87:f1:ff:cf:69:33:98:
6d:d1:f4:b8:92:ba:f4:31:f0:f9:d5:3e:5d:7a:00:
c6:48:ac:53:57:08:bc:43:38:70:15:e5:91:74:73:
87:93:4c:67:f1:38:64:60:16:11:f1:d3:6c:cc:d2:
da:15:1b:8c:a6:1d:f8:b9:14:c0:de:9e:af:e8:a8:
24:8f:3b:d2:40:d8:bd:f3:32:e4:4e:47:84:ba:4c:
05:e9:b6:8f:8d:ac:99:76:3e:da:c2:1c:06:ce:0b:
7f:94:ab:6c:f1:3a:de:a2:f6:99:47:b6:65:27:58:
5d:02:78:6e:ca:69:30:28:b5:5a:53:e5:0b:a8:4c:
d8:ff:e3:f7:71:37:c4:de:9a:f5:7b:89:ae:09:ff:
86:ef:4a:32:d8:7b:ba:d8:e0:58:16:0c:a2:d9:36:
8e:9f:8b:57:07:d9:36:4e:d7:d2:ec:93:f8:6f:26:
4a:40:75:05:3b:7b:9e:30:b5:d5:c6:57:2e:96:a7:
ef:24:55:0f:78:f8:71:cc:df:92:31:3a:ad:d7:c0:
51:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E0:2E:24:75:80:DA:16:04:5A:FE:A9:8A:A9:15:AF:06:53:87:5B
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/aeAuJHWA2hYEWv6piqkVrwZTh1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.186.0.0/16
40.169.0.0-40.171.255.255
48.192.0.0-48.221.255.255
51.10.0.0-51.13.255.255
51.51.0.0/16
51.53.0.0/16
51.103.0.0-51.105.255.255
51.107.0.0/16
51.116.0.0/16
51.120.0.0/16
51.124.0.0/16
51.132.0.0/16
51.136.0.0-51.138.255.255
51.140.0.0-51.145.255.255
57.150.0.0-57.175.255.255
69.15.0.0/16
72.16.128.0/17
72.54.0.0/16
74.144.0.0/12
82.87.0.0/16
84.222.0.0/15
85.212.0.0/16
94.245.64.0/18
109.246.0.0/16
122.149.0.0/16
124.252.0.0/16
128.24.0.0/16
128.85.0.0/16
128.203.0.0/16
129.135.0.0/16
130.131.0.0/16
131.163.0.0/16
131.189.0.0/16
132.164.0.0/16
132.196.0.0/16
132.220.0.0/16
134.33.0.0/16
134.112.0.0/16
134.138.0.0/16
135.4.0.0/16
135.6.0.0/15
135.18.0.0/16
135.85.0.0/16
135.114.0.0/16
135.116.0.0/16
135.130.0.0/16
135.171.0.0/16
135.185.0.0/16
135.224.0.0/15
135.229.0.0-135.230.255.255
135.232.0.0-135.237.255.255
135.240.0.0/16
137.162.0.0/16
138.105.0.0/16
138.213.0.0/16
143.209.0.0/16
143.226.0.0/16
147.214.0.0/16
147.243.0.0/16
148.53.0.0/16
149.175.0.0/16
149.198.0.0/16
151.129.0.0/16
151.206.0.0/16
152.138.0.0/16
156.23.0.0/16
157.31.0.0/16
157.81.0.0/16
157.95.0.0/16
157.172.0.0/16
157.176.0.0/16
157.252.0.0/16
158.24.0.0/16
159.128.0.0/16
160.207.0.0/16
160.234.0.0/16
161.157.0.0/16
165.15.0.0/16
165.17.0.0/16
167.162.0.0/16
167.186.0.0/16
167.231.0.0/16
172.128.0.0/10
172.200.0.0-172.215.255.255
173.200.0.0/16
192.100.104.0-192.100.133.255
193.149.64.0/19
193.221.113.0/24
194.41.16.0/20
194.110.197.0/24
194.238.128.0/17
199.50.0.0/16
207.103.0.0/16
209.199.0.0/16
212.132.0.0/19
212.173.0.0/17
212.207.0.0/16
213.54.0.0/16
213.199.128.0/18
217.176.0.0/16
217.177.96.0/19
IPv6:
2a00:1c68::/29
2a01:111::/32
Signature Algorithm: sha256WithRSAEncryption
cc:bc:ef:28:f3:60:6f:48:53:bd:fa:98:56:5e:b7:54:d8:e8:
1c:f7:e8:4e:38:e9:f0:7a:26:2b:a1:4f:ef:7b:3e:4f:55:97:
72:48:11:9c:8d:fd:d3:17:cd:b4:01:31:46:92:0c:eb:f5:95:
de:42:b1:d7:20:32:31:1e:1b:0d:64:8e:f0:be:3d:95:c9:8e:
8d:f6:f5:34:c5:41:bc:2a:00:0b:f4:d1:ab:de:52:a0:50:23:
2c:77:8e:42:2e:5f:81:c5:b2:ba:10:67:c5:79:ad:e2:f4:5e:
a0:7a:21:d5:e8:a8:7b:ef:00:8d:26:a1:4d:6a:76:a9:e9:61:
84:f7:12:11:e8:2f:10:2d:d6:c3:71:6a:d5:47:ed:4c:c8:ba:
29:2c:74:a1:b2:8e:75:35:fe:e3:72:7d:08:0d:de:4c:62:2a:
ff:d5:bd:35:98:a7:52:86:c0:0a:25:0c:91:24:f5:36:bb:4a:
7c:4c:2e:69:d5:7a:98:b9:8e:67:9d:bd:07:89:51:df:11:7b:
da:75:08:94:03:8d:6e:d4:87:9a:c4:ab:bd:81:a6:f4:78:d0:
2b:9c:a4:2e:15:6e:1b:cf:c3:2b:45:13:bc:e3:90:2b:a9:55:
31:33:a7:3d:d7:97:57:25:12:f6:1b:73:32:71:2b:b3:ba:ac:
75:65:39:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-fra.rpki-client.org