Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/dcqFwzirUOzlaPu_OQItI3iuaP4.roa
File: dcqFwzirUOzlaPu_OQItI3iuaP4.roa (raw, json)
Hash identifier: EtWW6GsWAWAaMqxrzfrhm1jZe1QkBSVH15QE0yrZuyo=
Subject key identifier: 75:CA:85:C3:38:AB:50:EC:E5:68:FB:BF:39:02:2D:23:78:AE:68:FE
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 018BCA07DA9570E8D5B82F92F4BE3B80B8C8
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/dcqFwzirUOzlaPu_OQItI3iuaP4.roa
Signing time: Mon 13 Nov 2023 18:53:14 +0000
ROA not before: Mon 13 Nov 2023 18:53:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 172.208.0.0/13 maxlen: 13
48.208.0.0/13 maxlen: 13
192.100.112.0/21 maxlen: 21
192.100.120.0/21 maxlen: 21
192.100.132.0/23 maxlen: 23
82.87.0.0/16 maxlen: 16
192.100.128.0/22 maxlen: 22
135.114.0.0/16 maxlen: 16
172.160.0.0/11 maxlen: 11
51.107.0.0/16 maxlen: 16
135.6.0.0/16 maxlen: 16
134.33.0.0/16 maxlen: 16
192.100.104.0/21 maxlen: 21
149.175.0.0/16 maxlen: 16
135.229.0.0/16 maxlen: 16
51.12.0.0/15 maxlen: 15
51.140.0.0/14 maxlen: 14
147.214.0.0/16 maxlen: 16
193.221.113.0/24 maxlen: 24
148.53.0.0/16 maxlen: 16
51.53.0.0/16 maxlen: 16
57.160.0.0/12 maxlen: 12
51.120.0.0/16 maxlen: 16
132.220.0.0/16 maxlen: 16
48.220.0.0/15 maxlen: 15
135.18.0.0/16 maxlen: 16
212.173.0.0/17 maxlen: 17
134.112.0.0/16 maxlen: 16
135.240.0.0/16 maxlen: 16
172.200.0.0/13 maxlen: 13
212.207.0.0/16 maxlen: 16
160.207.0.0/16 maxlen: 16
160.234.0.0/16 maxlen: 16
173.200.0.0/16 maxlen: 16
209.199.0.0/16 maxlen: 16
143.226.0.0/16 maxlen: 16
109.246.0.0/16 maxlen: 16
165.17.0.0/16 maxlen: 16
212.132.0.0/19 maxlen: 19
135.4.0.0/16 maxlen: 16
51.132.0.0/16 maxlen: 16
157.31.0.0/16 maxlen: 16
1.186.0.0/16 maxlen: 16
167.186.0.0/16 maxlen: 16
213.199.128.0/18 maxlen: 24
135.85.0.0/16 maxlen: 16
128.85.0.0/16 maxlen: 16
138.213.0.0/16 maxlen: 16
48.192.0.0/12 maxlen: 12
128.24.0.0/16 maxlen: 16
51.51.0.0/16 maxlen: 16
57.152.0.0/14 maxlen: 14
151.206.0.0/16 maxlen: 16
138.105.0.0/16 maxlen: 16
94.245.64.0/18 maxlen: 24
124.252.0.0/16 maxlen: 16
51.124.0.0/16 maxlen: 16
157.252.0.0/16 maxlen: 16
156.23.0.0/16 maxlen: 16
51.144.0.0/15 maxlen: 15
135.171.0.0/16 maxlen: 16
40.171.0.0/16 maxlen: 16
149.198.0.0/16 maxlen: 16
194.238.128.0/17 maxlen: 17
85.212.0.0/16 maxlen: 16
134.138.0.0/16 maxlen: 16
51.138.0.0/16 maxlen: 16
152.138.0.0/16 maxlen: 16
51.10.0.0/15 maxlen: 15
74.144.0.0/12 maxlen: 12
194.110.197.0/24 maxlen: 24
51.104.0.0/15 maxlen: 15
72.16.128.0/17 maxlen: 17
130.131.0.0/16 maxlen: 16
135.232.0.0/14 maxlen: 14
135.185.0.0/16 maxlen: 16
51.103.0.0/16 maxlen: 16
167.231.0.0/16 maxlen: 16
207.103.0.0/16 maxlen: 16
135.130.0.0/16 maxlen: 16
135.224.0.0/15 maxlen: 15
57.150.0.0/15 maxlen: 15
132.164.0.0/16 maxlen: 16
217.177.96.0/19 maxlen: 19
57.156.0.0/14 maxlen: 14
172.128.0.0/11 maxlen: 11
217.176.0.0/16 maxlen: 16
157.176.0.0/16 maxlen: 16
128.203.0.0/16 maxlen: 16
135.230.0.0/16 maxlen: 16
193.149.64.0/19 maxlen: 24
151.129.0.0/16 maxlen: 16
51.116.0.0/16 maxlen: 16
135.116.0.0/16 maxlen: 16
165.15.0.0/16 maxlen: 16
69.15.0.0/16 maxlen: 16
40.170.0.0/16 maxlen: 16
51.136.0.0/15 maxlen: 15
131.163.0.0/16 maxlen: 16
135.236.0.0/15 maxlen: 15
129.135.0.0/16 maxlen: 16
135.7.0.0/16 maxlen: 16
167.162.0.0/16 maxlen: 16
137.162.0.0/16 maxlen: 16
131.189.0.0/16 maxlen: 16
159.128.0.0/16 maxlen: 16
213.54.0.0/16 maxlen: 16
72.54.0.0/16 maxlen: 16
143.209.0.0/16 maxlen: 16
157.81.0.0/16 maxlen: 16
194.41.16.0/20 maxlen: 20
194.41.18.0/24 maxlen: 24
194.41.22.0/24 maxlen: 24
194.41.23.0/24 maxlen: 24
194.41.20.0/24 maxlen: 24
194.41.21.0/24 maxlen: 24
194.41.19.0/24 maxlen: 24
132.196.0.0/16 maxlen: 16
84.223.0.0/16 maxlen: 16
157.95.0.0/16 maxlen: 16
122.149.0.0/16 maxlen: 16
147.243.0.0/16 maxlen: 24
48.216.0.0/14 maxlen: 14
40.169.0.0/16 maxlen: 16
2a01:111:4004::/48 maxlen: 48
2a01:111::/32 maxlen: 32
2a01:111:f000::/36 maxlen: 36
2a01:111:2000::/36 maxlen: 36
2a01:111:4000::/36 maxlen: 36
2a00:1c68::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 17 Nov 2023 23:13:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ca:07:da:95:70:e8:d5:b8:2f:92:f4:be:3b:80:b8:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Nov 13 18:53:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75ca85c338ab50ece568fbbf39022d2378ae68fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:24:2d:93:83:4e:5c:4e:b6:19:48:95:4d:18:
9d:84:b5:98:90:df:7a:a6:f9:2d:54:df:23:ae:a0:
3b:8b:60:69:fa:45:ca:e0:ef:6a:74:32:98:a3:37:
90:c4:61:6a:ec:1b:ef:b0:f2:a9:00:34:b6:7f:45:
d2:76:c9:81:88:4f:9a:89:58:f0:be:51:5f:82:6f:
88:ac:c6:e1:7a:54:2d:ad:03:f1:ae:e6:27:ea:67:
a2:dc:99:e9:46:ce:cf:66:a4:69:8a:44:08:15:0f:
75:49:93:10:e8:0e:df:5e:d3:c0:d3:f8:8b:54:3c:
23:1b:4b:56:a1:a1:f5:22:05:ab:83:ad:b3:37:38:
39:25:20:44:a9:ca:1b:b9:26:ee:bd:a1:41:2a:2d:
00:71:32:5b:e4:52:8b:05:1a:34:3b:45:2a:c1:5d:
d7:0d:fe:ce:79:ba:b0:00:e6:75:b5:18:fa:96:47:
89:f8:de:13:12:2e:94:f4:72:05:f6:fa:10:f6:44:
33:ff:9d:8d:b0:31:09:a8:dc:9d:1e:a5:4d:76:16:
f2:67:fe:3a:5f:d1:53:45:c9:0b:35:9d:2a:c6:bf:
6d:d9:b2:f6:e7:4e:d0:20:27:d0:f8:f3:34:de:bd:
49:95:8b:1b:e4:ec:98:4f:8d:7c:29:a7:71:ba:41:
15:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CA:85:C3:38:AB:50:EC:E5:68:FB:BF:39:02:2D:23:78:AE:68:FE
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/dcqFwzirUOzlaPu_OQItI3iuaP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.186.0.0/16
40.169.0.0-40.171.255.255
48.192.0.0-48.221.255.255
51.10.0.0-51.13.255.255
51.51.0.0/16
51.53.0.0/16
51.103.0.0-51.105.255.255
51.107.0.0/16
51.116.0.0/16
51.120.0.0/16
51.124.0.0/16
51.132.0.0/16
51.136.0.0-51.138.255.255
51.140.0.0-51.145.255.255
57.150.0.0-57.175.255.255
69.15.0.0/16
72.16.128.0/17
72.54.0.0/16
74.144.0.0/12
82.87.0.0/16
84.223.0.0/16
85.212.0.0/16
94.245.64.0/18
109.246.0.0/16
122.149.0.0/16
124.252.0.0/16
128.24.0.0/16
128.85.0.0/16
128.203.0.0/16
129.135.0.0/16
130.131.0.0/16
131.163.0.0/16
131.189.0.0/16
132.164.0.0/16
132.196.0.0/16
132.220.0.0/16
134.33.0.0/16
134.112.0.0/16
134.138.0.0/16
135.4.0.0/16
135.6.0.0/15
135.18.0.0/16
135.85.0.0/16
135.114.0.0/16
135.116.0.0/16
135.130.0.0/16
135.171.0.0/16
135.185.0.0/16
135.224.0.0/15
135.229.0.0-135.230.255.255
135.232.0.0-135.237.255.255
135.240.0.0/16
137.162.0.0/16
138.105.0.0/16
138.213.0.0/16
143.209.0.0/16
143.226.0.0/16
147.214.0.0/16
147.243.0.0/16
148.53.0.0/16
149.175.0.0/16
149.198.0.0/16
151.129.0.0/16
151.206.0.0/16
152.138.0.0/16
156.23.0.0/16
157.31.0.0/16
157.81.0.0/16
157.95.0.0/16
157.176.0.0/16
157.252.0.0/16
159.128.0.0/16
160.207.0.0/16
160.234.0.0/16
165.15.0.0/16
165.17.0.0/16
167.162.0.0/16
167.186.0.0/16
167.231.0.0/16
172.128.0.0/10
172.200.0.0-172.215.255.255
173.200.0.0/16
192.100.104.0-192.100.133.255
193.149.64.0/19
193.221.113.0/24
194.41.16.0/20
194.110.197.0/24
194.238.128.0/17
207.103.0.0/16
209.199.0.0/16
212.132.0.0/19
212.173.0.0/17
212.207.0.0/16
213.54.0.0/16
213.199.128.0/18
217.176.0.0/16
217.177.96.0/19
IPv6:
2a00:1c68::/29
2a01:111::/32
Signature Algorithm: sha256WithRSAEncryption
94:aa:4c:95:d8:02:84:0f:fb:c9:6a:03:93:97:d4:4d:f8:7f:
d7:65:54:2a:9a:94:25:4c:9a:3d:5d:ee:50:b9:c2:1b:44:5d:
6b:c6:8c:58:07:09:d8:9c:82:b8:76:ae:fb:f4:0f:d0:7c:ca:
46:7d:96:96:2c:1e:a1:ec:1d:b8:08:58:38:f4:dc:c6:b2:4d:
ba:de:3e:62:7b:0c:31:dd:f4:02:6e:76:00:7f:f1:31:f2:a4:
6c:9c:f9:f5:34:49:3f:29:5f:99:45:88:53:1a:36:4b:bd:7a:
e7:9b:d4:6d:67:18:28:35:8a:bc:75:4f:15:8f:76:4f:33:41:
97:33:12:0e:d5:88:c6:90:32:e9:42:5f:2b:13:de:01:86:40:
9b:2f:b5:a1:ca:d4:a9:49:29:cd:d4:36:da:6a:f7:fa:0d:63:
ca:ef:e6:ff:67:36:e6:14:86:4c:63:c7:9b:cc:28:46:f4:80:
1a:48:6c:db:2b:b5:f7:ee:35:34:56:e2:31:8d:24:6c:59:fa:
b4:b3:46:6b:62:a5:a5:0a:77:46:88:fd:86:71:29:2c:c3:0c:
a3:5e:fd:45:d9:e0:c3:23:f6:cb:25:64:11:f9:f2:29:bd:3f:
f0:f1:51:ec:ea:34:87:c4:d0:a9:f8:48:73:48:fd:f7:26:9e:
94:b8:16:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:00 2024 by rpki-client on console-ams.rpki-client.org