Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/wDZc-Xm9S9nXmnVLnJZZyA-P2uk.roa
File: wDZc-Xm9S9nXmnVLnJZZyA-P2uk.roa (raw, json)
Hash identifier: uRbTBM7gt0huAM2WNs2tJN2+cc55rFPvF1CeNTC6YUk=
Subject key identifier: C0:36:5C:F9:79:BD:4B:D9:D7:9A:75:4B:9C:96:59:C8:0F:8F:DA:E9
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 018B0242092E8A53B5B899E81AE33FEE6518
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/wDZc-Xm9S9nXmnVLnJZZyA-P2uk.roa
Signing time: Thu 05 Oct 2023 23:52:44 +0000
ROA not before: Thu 05 Oct 2023 23:52:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 172.208.0.0/13 maxlen: 13
192.100.112.0/21 maxlen: 21
192.100.120.0/21 maxlen: 21
192.100.132.0/23 maxlen: 23
82.87.0.0/16 maxlen: 16
192.100.128.0/22 maxlen: 22
135.114.0.0/16 maxlen: 16
172.160.0.0/11 maxlen: 11
51.107.0.0/16 maxlen: 16
135.6.0.0/16 maxlen: 16
134.33.0.0/16 maxlen: 16
192.100.104.0/21 maxlen: 21
135.229.0.0/16 maxlen: 16
51.12.0.0/15 maxlen: 15
51.140.0.0/14 maxlen: 14
193.221.113.0/24 maxlen: 24
51.53.0.0/16 maxlen: 16
57.160.0.0/12 maxlen: 12
51.120.0.0/16 maxlen: 16
132.220.0.0/16 maxlen: 16
135.18.0.0/16 maxlen: 16
212.173.0.0/17 maxlen: 17
134.112.0.0/16 maxlen: 16
135.240.0.0/16 maxlen: 16
172.200.0.0/13 maxlen: 13
212.207.0.0/16 maxlen: 16
160.207.0.0/16 maxlen: 16
173.200.0.0/16 maxlen: 16
209.199.0.0/16 maxlen: 16
143.226.0.0/16 maxlen: 16
109.246.0.0/16 maxlen: 16
212.132.0.0/19 maxlen: 19
135.4.0.0/16 maxlen: 16
51.132.0.0/16 maxlen: 16
157.31.0.0/16 maxlen: 16
167.186.0.0/16 maxlen: 16
213.199.128.0/18 maxlen: 24
135.85.0.0/16 maxlen: 16
128.85.0.0/16 maxlen: 16
128.24.0.0/16 maxlen: 16
51.51.0.0/16 maxlen: 16
57.152.0.0/14 maxlen: 14
151.206.0.0/16 maxlen: 16
138.105.0.0/16 maxlen: 16
94.245.64.0/18 maxlen: 24
124.252.0.0/16 maxlen: 16
51.124.0.0/16 maxlen: 16
157.252.0.0/16 maxlen: 16
156.23.0.0/16 maxlen: 16
51.144.0.0/15 maxlen: 15
135.171.0.0/16 maxlen: 16
40.171.0.0/16 maxlen: 16
149.198.0.0/16 maxlen: 16
194.238.128.0/17 maxlen: 17
85.212.0.0/16 maxlen: 16
51.138.0.0/16 maxlen: 16
152.138.0.0/16 maxlen: 16
51.10.0.0/15 maxlen: 15
74.144.0.0/12 maxlen: 12
194.110.197.0/24 maxlen: 24
51.104.0.0/15 maxlen: 15
72.16.128.0/17 maxlen: 17
130.131.0.0/16 maxlen: 16
135.232.0.0/14 maxlen: 14
135.185.0.0/16 maxlen: 16
51.103.0.0/16 maxlen: 16
167.231.0.0/16 maxlen: 16
207.103.0.0/16 maxlen: 16
135.130.0.0/16 maxlen: 16
135.224.0.0/15 maxlen: 15
57.150.0.0/15 maxlen: 15
132.164.0.0/16 maxlen: 16
217.177.96.0/19 maxlen: 19
57.156.0.0/14 maxlen: 14
172.128.0.0/11 maxlen: 11
217.176.0.0/16 maxlen: 16
157.176.0.0/16 maxlen: 16
128.203.0.0/16 maxlen: 16
135.230.0.0/16 maxlen: 16
193.149.64.0/19 maxlen: 24
151.129.0.0/16 maxlen: 16
51.116.0.0/16 maxlen: 16
135.116.0.0/16 maxlen: 16
165.15.0.0/16 maxlen: 16
40.170.0.0/16 maxlen: 16
51.136.0.0/15 maxlen: 15
135.236.0.0/15 maxlen: 15
135.7.0.0/16 maxlen: 16
167.162.0.0/16 maxlen: 16
137.162.0.0/16 maxlen: 16
159.128.0.0/16 maxlen: 16
213.54.0.0/16 maxlen: 16
72.54.0.0/16 maxlen: 16
143.209.0.0/16 maxlen: 16
157.81.0.0/16 maxlen: 16
194.41.16.0/20 maxlen: 20
194.41.18.0/24 maxlen: 24
194.41.22.0/24 maxlen: 24
194.41.23.0/24 maxlen: 24
194.41.20.0/24 maxlen: 24
194.41.21.0/24 maxlen: 24
194.41.19.0/24 maxlen: 24
157.95.0.0/16 maxlen: 16
122.149.0.0/16 maxlen: 16
147.243.0.0/16 maxlen: 24
40.169.0.0/16 maxlen: 16
2a01:111:4004::/48 maxlen: 48
2a01:111::/32 maxlen: 32
2a01:111:f000::/36 maxlen: 36
2a01:111:2000::/36 maxlen: 36
2a01:111:4000::/36 maxlen: 36
2a00:1c68::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 06 Oct 2023 00:27:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:02:42:09:2e:8a:53:b5:b8:99:e8:1a:e3:3f:ee:65:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Oct 5 23:52:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0365cf979bd4bd9d79a754b9c9659c80f8fdae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8b:ed:6c:fc:d9:54:c7:e9:d1:1d:1a:dd:1f:
55:f2:d2:75:b1:c8:6c:08:c2:62:04:14:7a:77:ff:
89:96:26:26:c4:1b:13:b7:c2:9c:f5:ed:c1:6d:d2:
22:18:98:a3:73:e9:05:96:0c:8b:7c:4a:61:4c:ff:
de:12:03:98:cf:fd:8f:ff:3b:d1:20:d5:e1:50:32:
d0:4c:ae:c3:f1:ea:1b:62:9b:f2:3f:fe:61:6e:58:
3c:d1:4a:44:5f:dd:81:e0:da:9d:28:10:74:b2:f8:
70:a1:a7:00:62:99:12:0f:dc:a8:cc:01:27:d3:78:
75:2c:3a:aa:32:66:cd:3e:05:03:70:91:55:1d:d3:
8f:10:33:02:9a:88:70:58:5f:f5:46:52:f6:32:75:
c0:67:99:40:b6:3f:00:e7:c0:e7:75:89:2a:68:56:
e5:12:86:d7:61:00:cc:63:53:fc:d9:59:06:2c:0a:
70:b5:09:6a:45:a0:37:68:32:f3:be:fa:4c:7f:0d:
0c:98:3f:be:9f:28:11:a8:7a:1f:23:88:18:5d:64:
e2:f8:77:39:ac:99:1b:4b:99:1f:5d:a0:ed:d2:80:
fe:cb:2a:a9:d0:51:21:15:25:4c:cc:fa:66:ef:1f:
86:f3:49:45:33:15:02:2b:d3:08:cf:75:cf:28:85:
bf:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:36:5C:F9:79:BD:4B:D9:D7:9A:75:4B:9C:96:59:C8:0F:8F:DA:E9
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/wDZc-Xm9S9nXmnVLnJZZyA-P2uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.169.0.0-40.171.255.255
51.10.0.0-51.13.255.255
51.51.0.0/16
51.53.0.0/16
51.103.0.0-51.105.255.255
51.107.0.0/16
51.116.0.0/16
51.120.0.0/16
51.124.0.0/16
51.132.0.0/16
51.136.0.0-51.138.255.255
51.140.0.0-51.145.255.255
57.150.0.0-57.175.255.255
72.16.128.0/17
72.54.0.0/16
74.144.0.0/12
82.87.0.0/16
85.212.0.0/16
94.245.64.0/18
109.246.0.0/16
122.149.0.0/16
124.252.0.0/16
128.24.0.0/16
128.85.0.0/16
128.203.0.0/16
130.131.0.0/16
132.164.0.0/16
132.220.0.0/16
134.33.0.0/16
134.112.0.0/16
135.4.0.0/16
135.6.0.0/15
135.18.0.0/16
135.85.0.0/16
135.114.0.0/16
135.116.0.0/16
135.130.0.0/16
135.171.0.0/16
135.185.0.0/16
135.224.0.0/15
135.229.0.0-135.230.255.255
135.232.0.0-135.237.255.255
135.240.0.0/16
137.162.0.0/16
138.105.0.0/16
143.209.0.0/16
143.226.0.0/16
147.243.0.0/16
149.198.0.0/16
151.129.0.0/16
151.206.0.0/16
152.138.0.0/16
156.23.0.0/16
157.31.0.0/16
157.81.0.0/16
157.95.0.0/16
157.176.0.0/16
157.252.0.0/16
159.128.0.0/16
160.207.0.0/16
165.15.0.0/16
167.162.0.0/16
167.186.0.0/16
167.231.0.0/16
172.128.0.0/10
172.200.0.0-172.215.255.255
173.200.0.0/16
192.100.104.0-192.100.133.255
193.149.64.0/19
193.221.113.0/24
194.41.16.0/20
194.110.197.0/24
194.238.128.0/17
207.103.0.0/16
209.199.0.0/16
212.132.0.0/19
212.173.0.0/17
212.207.0.0/16
213.54.0.0/16
213.199.128.0/18
217.176.0.0/16
217.177.96.0/19
IPv6:
2a00:1c68::/29
2a01:111::/32
Signature Algorithm: sha256WithRSAEncryption
ac:77:d4:31:fe:2b:ee:e4:a6:8d:af:e5:c3:b9:df:a8:f4:18:
9e:ef:3c:54:cb:5f:ae:a4:f9:16:c1:c2:7c:06:0e:56:77:9c:
56:e7:a0:9c:d9:09:44:d4:5f:13:a5:31:89:f9:bd:e9:2f:ef:
64:91:e3:73:bb:2b:2a:e9:79:97:9e:97:17:40:30:a6:a4:12:
0a:fb:cd:f2:31:a2:36:c7:15:4c:94:5f:6f:10:8b:21:7b:24:
8f:97:f6:d0:f7:25:5a:dc:fb:80:9b:6d:9e:cb:7c:9f:44:46:
77:a4:3d:b5:d2:11:c2:77:7d:74:47:b6:75:35:1f:df:0b:50:
2f:f2:aa:a2:c8:41:b6:03:a4:c9:e2:95:ab:29:4c:2a:ca:44:
8b:c2:52:25:8c:a7:d9:ab:e8:23:29:d3:00:dd:21:66:30:3b:
d8:0d:e7:e9:1f:48:c5:1c:b5:2b:66:53:0f:ce:d1:1c:f3:b5:
74:65:40:d3:58:32:68:08:b5:55:30:0c:ba:3d:0a:67:ec:3c:
de:d7:00:5c:58:47:a9:59:9f:08:0a:d5:f2:43:ce:cd:c3:94:
24:2a:34:b1:19:43:b4:45:f0:5a:83:d9:4a:ff:f1:86:aa:50:
70:15:99:f8:63:5d:6d:f9:c5:6e:f4:b1:74:35:8c:bc:c8:82:
46:e0:37:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-fra.rpki-client.org