Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/lPf9tu4b35NRMx-o8jN_Kpix5eA.roa
File: lPf9tu4b35NRMx-o8jN_Kpix5eA.roa (raw, json)
Hash identifier: xVm7bG7BoY7lid3dfmH/McchIAba2ET1AZUji/qY8kc=
Subject key identifier: 94:F7:FD:B6:EE:1B:DF:93:51:33:1F:A8:F2:33:7F:2A:98:B1:E5:E0
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 01898E1FAB5DC26E6AC7F2E7E19273646E01
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/lPf9tu4b35NRMx-o8jN_Kpix5eA.roa
Signing time: Tue 25 Jul 2023 17:36:27 +0000
ROA not before: Tue 25 Jul 2023 17:36:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 94.245.64.0/18 maxlen: 24
172.208.0.0/13 maxlen: 13
51.124.0.0/16 maxlen: 16
192.100.112.0/21 maxlen: 21
192.100.120.0/21 maxlen: 21
192.100.132.0/23 maxlen: 23
82.87.0.0/16 maxlen: 16
192.100.128.0/22 maxlen: 22
172.160.0.0/11 maxlen: 11
51.144.0.0/15 maxlen: 15
40.171.0.0/16 maxlen: 16
51.107.0.0/16 maxlen: 16
135.6.0.0/16 maxlen: 16
149.198.0.0/16 maxlen: 16
194.238.128.0/17 maxlen: 17
192.100.104.0/21 maxlen: 21
85.212.0.0/16 maxlen: 16
152.138.0.0/16 maxlen: 16
51.138.0.0/16 maxlen: 16
51.10.0.0/15 maxlen: 15
135.229.0.0/16 maxlen: 16
74.144.0.0/12 maxlen: 12
194.110.197.0/24 maxlen: 24
51.104.0.0/15 maxlen: 15
72.16.128.0/17 maxlen: 17
135.232.0.0/14 maxlen: 14
51.12.0.0/15 maxlen: 15
167.231.0.0/16 maxlen: 16
51.103.0.0/16 maxlen: 16
51.140.0.0/14 maxlen: 14
135.130.0.0/16 maxlen: 16
135.224.0.0/15 maxlen: 15
57.150.0.0/15 maxlen: 15
132.164.0.0/16 maxlen: 16
193.221.113.0/24 maxlen: 24
51.53.0.0/16 maxlen: 16
57.160.0.0/12 maxlen: 12
51.120.0.0/16 maxlen: 16
217.177.96.0/19 maxlen: 19
57.156.0.0/14 maxlen: 14
135.18.0.0/16 maxlen: 16
212.173.0.0/17 maxlen: 17
172.128.0.0/11 maxlen: 11
217.176.0.0/16 maxlen: 16
135.230.0.0/16 maxlen: 16
193.149.64.0/19 maxlen: 24
151.129.0.0/16 maxlen: 16
172.200.0.0/13 maxlen: 13
135.116.0.0/16 maxlen: 16
51.116.0.0/16 maxlen: 16
212.207.0.0/16 maxlen: 16
40.170.0.0/16 maxlen: 16
173.200.0.0/16 maxlen: 16
51.136.0.0/15 maxlen: 15
135.236.0.0/15 maxlen: 15
209.199.0.0/16 maxlen: 16
167.162.0.0/16 maxlen: 16
143.226.0.0/16 maxlen: 16
159.128.0.0/16 maxlen: 16
213.54.0.0/16 maxlen: 16
109.246.0.0/16 maxlen: 16
194.41.16.0/20 maxlen: 20
212.132.0.0/19 maxlen: 19
194.41.18.0/24 maxlen: 24
51.132.0.0/16 maxlen: 16
135.4.0.0/16 maxlen: 16
194.41.22.0/24 maxlen: 24
194.41.23.0/24 maxlen: 24
194.41.20.0/24 maxlen: 24
194.41.21.0/24 maxlen: 24
194.41.19.0/24 maxlen: 24
157.31.0.0/16 maxlen: 16
157.95.0.0/16 maxlen: 16
213.199.128.0/18 maxlen: 24
167.186.0.0/16 maxlen: 16
128.85.0.0/16 maxlen: 16
51.51.0.0/16 maxlen: 16
147.243.0.0/16 maxlen: 24
57.152.0.0/14 maxlen: 14
151.206.0.0/16 maxlen: 16
40.169.0.0/16 maxlen: 16
138.105.0.0/16 maxlen: 16
2a00:1c68::/29 maxlen: 29
2a01:111:4004::/48 maxlen: 48
2a01:111::/32 maxlen: 32
2a01:111:4000::/36 maxlen: 36
2a01:111:2000::/36 maxlen: 36
2a01:111:f000::/36 maxlen: 36
Validation: Failed, certificate revoked on Wed 06 Sep 2023 22:58:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8e:1f:ab:5d:c2:6e:6a:c7:f2:e7:e1:92:73:64:6e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Jul 25 17:36:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94f7fdb6ee1bdf9351331fa8f2337f2a98b1e5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a1:9c:15:20:00:a3:a1:a3:20:90:59:32:b6:
32:17:42:f1:f5:13:52:77:47:e3:b9:6d:6d:c2:ab:
a1:b0:db:23:c4:2c:0e:8e:ae:de:24:87:7b:9c:69:
0c:e3:07:d0:77:66:a3:f5:2f:3d:2b:11:91:6b:d2:
64:c2:49:42:91:c1:0f:43:07:d5:c4:13:21:be:9a:
e7:a8:41:64:c9:92:ff:86:6c:f0:8e:63:9d:f8:1a:
6c:7e:8d:b2:b7:3b:46:22:24:d9:b1:0d:88:5e:77:
b9:49:a0:14:5c:7e:5d:d1:08:10:80:29:69:98:b1:
e7:db:ce:e5:ff:3f:31:20:51:f1:6d:33:a2:a5:be:
9d:0c:78:c7:c4:15:19:74:3f:cd:22:ba:71:2f:fc:
0a:16:49:f0:3e:10:d5:39:88:5c:53:bb:a3:4e:43:
1b:a1:45:22:8a:80:0c:2b:3c:28:30:00:59:3a:6e:
10:8c:97:1e:f0:ec:de:2a:f4:52:f9:7c:4d:0e:54:
cd:12:ca:07:42:90:d7:95:52:11:f6:37:2a:5e:f7:
50:1d:d3:5f:5c:b0:e2:3b:60:da:d6:38:1d:1c:d8:
f3:bb:bf:c9:f9:5f:10:47:53:d8:63:a6:56:79:13:
ef:c1:93:20:e2:92:a5:c4:d7:8b:04:79:93:65:00:
0d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F7:FD:B6:EE:1B:DF:93:51:33:1F:A8:F2:33:7F:2A:98:B1:E5:E0
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/lPf9tu4b35NRMx-o8jN_Kpix5eA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.169.0.0-40.171.255.255
51.10.0.0-51.13.255.255
51.51.0.0/16
51.53.0.0/16
51.103.0.0-51.105.255.255
51.107.0.0/16
51.116.0.0/16
51.120.0.0/16
51.124.0.0/16
51.132.0.0/16
51.136.0.0-51.138.255.255
51.140.0.0-51.145.255.255
57.150.0.0-57.175.255.255
72.16.128.0/17
74.144.0.0/12
82.87.0.0/16
85.212.0.0/16
94.245.64.0/18
109.246.0.0/16
128.85.0.0/16
132.164.0.0/16
135.4.0.0/16
135.6.0.0/16
135.18.0.0/16
135.116.0.0/16
135.130.0.0/16
135.224.0.0/15
135.229.0.0-135.230.255.255
135.232.0.0-135.237.255.255
138.105.0.0/16
143.226.0.0/16
147.243.0.0/16
149.198.0.0/16
151.129.0.0/16
151.206.0.0/16
152.138.0.0/16
157.31.0.0/16
157.95.0.0/16
159.128.0.0/16
167.162.0.0/16
167.186.0.0/16
167.231.0.0/16
172.128.0.0/10
172.200.0.0-172.215.255.255
173.200.0.0/16
192.100.104.0-192.100.133.255
193.149.64.0/19
193.221.113.0/24
194.41.16.0/20
194.110.197.0/24
194.238.128.0/17
209.199.0.0/16
212.132.0.0/19
212.173.0.0/17
212.207.0.0/16
213.54.0.0/16
213.199.128.0/18
217.176.0.0/16
217.177.96.0/19
IPv6:
2a00:1c68::/29
2a01:111::/32
Signature Algorithm: sha256WithRSAEncryption
72:63:d6:ba:ee:4e:74:af:41:b6:41:06:97:49:e7:a3:ba:9b:
38:2c:c6:95:f4:8d:16:25:79:13:e8:66:a6:49:f1:35:d9:d3:
dc:fd:fc:9f:af:27:d7:8e:fb:40:04:9e:46:35:44:46:08:97:
40:4d:2e:eb:7a:37:58:b5:3d:76:1b:c5:0e:5c:d5:02:c6:ee:
cb:af:72:8e:a3:8b:21:91:b0:0f:16:87:5f:4b:21:5b:c8:69:
b8:b7:91:fb:7f:2a:6c:95:06:11:6a:eb:8f:9e:9a:90:06:bf:
65:36:5a:83:50:51:d5:a9:d7:0e:0d:a5:59:57:95:80:f4:f1:
1c:7a:aa:01:28:e9:3c:7d:06:e7:c7:2f:ca:c7:ba:e7:58:2c:
70:23:e2:55:84:45:f9:27:33:8c:25:3b:db:f8:b4:bf:4c:d1:
63:66:14:2c:8f:68:a2:99:3d:9f:dd:78:e7:a2:31:16:80:37:
62:41:44:2a:7b:09:0a:30:4d:9c:4a:4a:dc:c2:02:91:89:04:
c4:b5:da:c3:7d:9d:2e:80:88:ff:f6:e9:3c:76:b4:8c:a1:a5:
30:79:82:ac:37:9a:b2:1e:d6:c0:8f:cb:d2:ad:6f:81:f0:6d:
e8:d9:58:48:b1:20:1f:00:6a:dc:a0:01:74:97:fd:b6:64:72:
c9:77:ab:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-fra.rpki-client.org