Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/vLpTRxggamuqRSIlDOgypkgpa40.roa
File: vLpTRxggamuqRSIlDOgypkgpa40.roa (raw, json)
Hash identifier: CAB9pbME4du2XzSVvlNT84r6+V7H+8OCUrYqK1Pipm8=
Subject key identifier: BC:BA:53:47:18:20:6A:6B:AA:45:22:25:0C:E8:32:A6:48:29:6B:8D
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 0187DD79DB52731076F5F8136EB0807AB78A
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/vLpTRxggamuqRSIlDOgypkgpa40.roa
Signing time: Tue 02 May 2023 17:19:23 +0000
ROA not before: Tue 02 May 2023 17:19:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 94.245.64.0/18 maxlen: 24
172.208.0.0/13 maxlen: 13
51.124.0.0/16 maxlen: 16
192.100.112.0/21 maxlen: 21
192.100.120.0/21 maxlen: 21
82.87.0.0/16 maxlen: 16
192.100.128.0/22 maxlen: 22
192.100.132.0/23 maxlen: 23
172.160.0.0/11 maxlen: 11
51.144.0.0/15 maxlen: 15
40.171.0.0/16 maxlen: 16
51.107.0.0/16 maxlen: 16
192.100.104.0/21 maxlen: 21
85.212.0.0/16 maxlen: 16
51.138.0.0/16 maxlen: 16
152.138.0.0/16 maxlen: 16
51.10.0.0/15 maxlen: 15
194.110.197.0/24 maxlen: 24
51.104.0.0/15 maxlen: 15
51.12.0.0/15 maxlen: 15
51.103.0.0/16 maxlen: 16
51.140.0.0/14 maxlen: 14
135.130.0.0/16 maxlen: 16
57.150.0.0/15 maxlen: 15
132.164.0.0/16 maxlen: 16
193.221.113.0/24 maxlen: 24
51.53.0.0/16 maxlen: 16
57.160.0.0/12 maxlen: 12
51.120.0.0/16 maxlen: 16
57.156.0.0/14 maxlen: 14
172.128.0.0/11 maxlen: 11
217.176.0.0/16 maxlen: 16
193.149.64.0/19 maxlen: 24
151.129.0.0/16 maxlen: 16
172.200.0.0/13 maxlen: 13
51.116.0.0/16 maxlen: 16
212.207.0.0/16 maxlen: 16
40.170.0.0/16 maxlen: 16
51.136.0.0/15 maxlen: 15
209.199.0.0/16 maxlen: 16
167.162.0.0/16 maxlen: 16
143.226.0.0/16 maxlen: 16
159.128.0.0/16 maxlen: 16
213.54.0.0/16 maxlen: 16
194.41.16.0/20 maxlen: 20
194.41.18.0/24 maxlen: 24
194.41.22.0/24 maxlen: 24
194.41.23.0/24 maxlen: 24
194.41.20.0/24 maxlen: 24
194.41.21.0/24 maxlen: 24
194.41.19.0/24 maxlen: 24
51.132.0.0/16 maxlen: 16
157.95.0.0/16 maxlen: 16
157.31.0.0/16 maxlen: 16
167.186.0.0/16 maxlen: 16
213.199.128.0/18 maxlen: 24
128.85.0.0/16 maxlen: 16
147.243.0.0/16 maxlen: 24
51.51.0.0/16 maxlen: 16
57.152.0.0/14 maxlen: 14
151.206.0.0/16 maxlen: 16
40.169.0.0/16 maxlen: 16
138.105.0.0/16 maxlen: 16
2a00:1c68::/29 maxlen: 29
2a01:111:4004::/48 maxlen: 48
2a01:111::/32 maxlen: 32
2a01:111:f000::/36 maxlen: 36
2a01:111:2000::/36 maxlen: 36
2a01:111:4000::/36 maxlen: 36
Validation: Failed, certificate revoked on Thu 18 May 2023 20:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dd:79:db:52:73:10:76:f5:f8:13:6e:b0:80:7a:b7:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: May 2 17:19:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcba534718206a6baa4522250ce832a648296b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3f:7a:90:a1:bb:95:a3:11:df:b0:ad:47:67:
26:c5:da:90:7b:22:4e:cb:a8:15:f1:6c:82:fc:e6:
00:1a:7a:e0:56:9a:03:af:ca:e0:00:22:d2:c8:e0:
fb:3d:6d:24:22:75:94:9e:68:66:72:40:ac:9d:1c:
9e:37:77:10:ac:15:cd:d1:57:84:bf:75:27:58:5a:
15:02:29:11:6d:2a:de:fe:ed:7c:ba:6e:ab:56:2c:
16:f3:11:ad:b2:b9:d4:2e:07:99:8a:77:21:c6:4e:
57:03:8f:be:20:93:f1:95:27:83:c3:90:aa:4a:3d:
63:62:ac:57:35:58:93:0d:52:71:63:60:3d:16:d9:
98:c2:92:d0:e6:3b:30:fb:9d:8c:cb:f1:84:30:68:
56:d4:66:67:89:98:83:fc:49:58:3e:3e:39:89:45:
da:4f:5e:2e:89:da:22:8c:39:c5:00:c4:2d:db:65:
93:8f:b8:4a:1c:f0:8c:5d:a0:42:00:2e:9e:1e:e7:
c8:f1:7e:af:fa:0f:b7:93:df:0e:44:b6:66:1b:f1:
8e:8a:cd:0c:8e:2d:66:82:b7:4c:f6:78:ea:fe:03:
ab:76:8b:1f:6c:a7:71:70:6d:d4:20:11:2c:fc:c1:
b3:da:dd:5b:5f:81:06:91:72:bd:df:6f:9b:a1:52:
20:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BA:53:47:18:20:6A:6B:AA:45:22:25:0C:E8:32:A6:48:29:6B:8D
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/vLpTRxggamuqRSIlDOgypkgpa40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.169.0.0-40.171.255.255
51.10.0.0-51.13.255.255
51.51.0.0/16
51.53.0.0/16
51.103.0.0-51.105.255.255
51.107.0.0/16
51.116.0.0/16
51.120.0.0/16
51.124.0.0/16
51.132.0.0/16
51.136.0.0-51.138.255.255
51.140.0.0-51.145.255.255
57.150.0.0-57.175.255.255
82.87.0.0/16
85.212.0.0/16
94.245.64.0/18
128.85.0.0/16
132.164.0.0/16
135.130.0.0/16
138.105.0.0/16
143.226.0.0/16
147.243.0.0/16
151.129.0.0/16
151.206.0.0/16
152.138.0.0/16
157.31.0.0/16
157.95.0.0/16
159.128.0.0/16
167.162.0.0/16
167.186.0.0/16
172.128.0.0/10
172.200.0.0-172.215.255.255
192.100.104.0-192.100.133.255
193.149.64.0/19
193.221.113.0/24
194.41.16.0/20
194.110.197.0/24
209.199.0.0/16
212.207.0.0/16
213.54.0.0/16
213.199.128.0/18
217.176.0.0/16
IPv6:
2a00:1c68::/29
2a01:111::/32
Signature Algorithm: sha256WithRSAEncryption
a2:df:a3:eb:60:42:a3:de:1c:67:a5:7a:34:77:21:e9:ef:f3:
be:86:aa:d4:ed:e7:b1:7a:d4:16:63:aa:d4:03:07:ce:2b:85:
40:79:56:c1:07:b1:19:b7:ad:83:7b:ca:bd:3a:3b:c6:cf:ed:
ef:bb:b6:e2:38:44:ba:eb:d3:e8:11:eb:19:0e:6b:2c:3b:d4:
81:d1:75:7d:0f:91:b5:3d:c3:95:0e:44:23:93:2a:aa:61:eb:
20:0a:91:53:f0:03:0f:13:50:b3:d5:3a:66:84:22:22:ec:ea:
79:7f:b4:19:56:49:4c:9d:19:a8:65:fb:ed:c9:9a:fd:3c:95:
46:71:45:df:97:f2:ff:1f:3d:c8:42:69:9e:da:aa:ac:41:38:
02:8e:dc:07:09:3a:1e:83:0d:f4:c1:cf:6c:2d:62:b8:e0:b0:
d0:6f:03:a2:7e:92:0a:0a:32:36:1a:c9:b8:32:ab:84:3d:26:
aa:75:8e:c8:40:2d:7f:ee:d3:65:e7:e6:2d:81:39:ce:4d:16:
a5:01:5c:3d:c3:44:86:bd:a5:b9:af:b1:68:b8:81:e8:46:3b:
a8:06:2c:7d:2b:f1:7b:5d:f5:80:c2:bd:58:2d:2c:e5:7a:03:
68:41:a6:6f:cb:15:e0:13:1b:0c:80:41:ff:ab:c8:c2:0c:69:
d3:e2:5c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:00 2024 by rpki-client on console-ams.rpki-client.org