Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/xYvsHYm7Txa1AQlRfYHT5hOCB4o.roa
File: xYvsHYm7Txa1AQlRfYHT5hOCB4o.roa (raw, json)
Hash identifier: JxMQsb6DGwiKMD/ntWk8gvVjX4ftDHK+Wgm689hKX84=
Subject key identifier: C5:8B:EC:1D:89:BB:4F:16:B5:01:09:51:7D:81:D3:E6:13:82:07:8A
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 018B01DD535575D02F98164446DEDC9AF5B9
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/xYvsHYm7Txa1AQlRfYHT5hOCB4o.roa
Signing time: Thu 05 Oct 2023 22:02:43 +0000
ROA not before: Thu 05 Oct 2023 22:02:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 172.208.0.0/13 maxlen: 13
192.100.112.0/21 maxlen: 21
192.100.120.0/21 maxlen: 21
192.100.132.0/23 maxlen: 23
82.87.0.0/16 maxlen: 16
192.100.128.0/22 maxlen: 22
172.160.0.0/11 maxlen: 11
51.107.0.0/16 maxlen: 16
135.6.0.0/16 maxlen: 16
134.33.0.0/16 maxlen: 16
192.100.104.0/21 maxlen: 21
135.229.0.0/16 maxlen: 16
51.12.0.0/15 maxlen: 15
51.140.0.0/14 maxlen: 14
193.221.113.0/24 maxlen: 24
51.53.0.0/16 maxlen: 16
57.160.0.0/12 maxlen: 12
51.120.0.0/16 maxlen: 16
132.220.0.0/16 maxlen: 16
135.18.0.0/16 maxlen: 16
212.173.0.0/17 maxlen: 17
135.240.0.0/16 maxlen: 16
134.112.0.0/16 maxlen: 16
172.200.0.0/13 maxlen: 13
212.207.0.0/16 maxlen: 16
173.200.0.0/16 maxlen: 16
209.199.0.0/16 maxlen: 16
143.226.0.0/16 maxlen: 16
109.246.0.0/16 maxlen: 16
212.132.0.0/19 maxlen: 19
51.132.0.0/16 maxlen: 16
135.4.0.0/16 maxlen: 16
157.31.0.0/16 maxlen: 16
213.199.128.0/18 maxlen: 24
167.186.0.0/16 maxlen: 16
128.85.0.0/16 maxlen: 16
135.85.0.0/16 maxlen: 16
128.24.0.0/16 maxlen: 16
51.51.0.0/16 maxlen: 16
57.152.0.0/14 maxlen: 14
151.206.0.0/16 maxlen: 16
138.105.0.0/16 maxlen: 16
94.245.64.0/18 maxlen: 24
157.252.0.0/16 maxlen: 16
51.124.0.0/16 maxlen: 16
124.252.0.0/16 maxlen: 16
51.144.0.0/15 maxlen: 15
40.171.0.0/16 maxlen: 16
135.171.0.0/16 maxlen: 16
149.198.0.0/16 maxlen: 16
194.238.128.0/17 maxlen: 17
85.212.0.0/16 maxlen: 16
152.138.0.0/16 maxlen: 16
51.138.0.0/16 maxlen: 16
51.10.0.0/15 maxlen: 15
74.144.0.0/12 maxlen: 12
194.110.197.0/24 maxlen: 24
51.104.0.0/15 maxlen: 15
72.16.128.0/17 maxlen: 17
130.131.0.0/16 maxlen: 16
135.232.0.0/14 maxlen: 14
207.103.0.0/16 maxlen: 16
167.231.0.0/16 maxlen: 16
51.103.0.0/16 maxlen: 16
135.130.0.0/16 maxlen: 16
135.224.0.0/15 maxlen: 15
57.150.0.0/15 maxlen: 15
132.164.0.0/16 maxlen: 16
217.177.96.0/19 maxlen: 19
57.156.0.0/14 maxlen: 14
172.128.0.0/11 maxlen: 11
217.176.0.0/16 maxlen: 16
135.230.0.0/16 maxlen: 16
193.149.64.0/19 maxlen: 24
151.129.0.0/16 maxlen: 16
135.116.0.0/16 maxlen: 16
51.116.0.0/16 maxlen: 16
40.170.0.0/16 maxlen: 16
51.136.0.0/15 maxlen: 15
135.236.0.0/15 maxlen: 15
135.7.0.0/16 maxlen: 16
167.162.0.0/16 maxlen: 16
159.128.0.0/16 maxlen: 16
213.54.0.0/16 maxlen: 16
143.209.0.0/16 maxlen: 16
194.41.16.0/20 maxlen: 20
194.41.18.0/24 maxlen: 24
194.41.22.0/24 maxlen: 24
194.41.23.0/24 maxlen: 24
194.41.20.0/24 maxlen: 24
194.41.21.0/24 maxlen: 24
194.41.19.0/24 maxlen: 24
157.95.0.0/16 maxlen: 16
147.243.0.0/16 maxlen: 24
40.169.0.0/16 maxlen: 16
2a01:111:4004::/48 maxlen: 48
2a01:111::/32 maxlen: 32
2a01:111:4000::/36 maxlen: 36
2a01:111:2000::/36 maxlen: 36
2a01:111:f000::/36 maxlen: 36
2a00:1c68::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 05 Oct 2023 23:52:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:01:dd:53:55:75:d0:2f:98:16:44:46:de:dc:9a:f5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Oct 5 22:02:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c58bec1d89bb4f16b50109517d81d3e61382078a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e1:58:19:cd:68:6d:01:be:0d:3c:5b:a3:69:
e4:64:79:19:fc:3a:0e:53:dd:a1:7c:2a:ca:ac:6e:
2e:0d:6d:ce:1d:d4:71:66:97:e1:d8:84:40:26:e0:
2f:d2:bb:f4:d3:2e:9e:14:a6:13:c0:09:8f:f1:47:
76:a2:53:af:f5:c2:01:ec:ee:34:f4:df:d7:f9:c6:
3f:7f:79:01:7b:a0:b8:2d:73:24:b6:66:6b:53:5f:
64:cc:69:c7:b8:06:dc:c8:73:ce:5b:a2:99:73:74:
03:88:a7:15:20:e5:d5:bc:2f:c3:54:74:98:20:94:
34:25:24:fb:e6:6d:1b:6a:65:62:d0:01:01:80:c0:
f8:81:82:b6:bd:68:d9:f3:c0:cf:63:37:04:05:04:
a9:ac:63:28:67:5b:c3:44:09:f7:e4:bb:b7:6a:b0:
20:85:25:31:ea:9c:6a:19:43:00:8b:19:12:4d:7f:
61:59:72:9e:46:18:a7:0c:ce:32:e4:59:c2:8b:ac:
08:26:8e:88:c8:a8:6c:75:34:10:8f:3e:87:98:1d:
86:76:9c:8b:c5:15:cd:11:5c:5c:40:da:c0:15:c0:
44:66:ed:0e:de:ec:16:a1:e8:a2:5e:57:8e:f3:d8:
83:bd:5c:57:0f:38:2a:84:30:04:ce:fc:20:ab:bb:
44:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8B:EC:1D:89:BB:4F:16:B5:01:09:51:7D:81:D3:E6:13:82:07:8A
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/xYvsHYm7Txa1AQlRfYHT5hOCB4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.169.0.0-40.171.255.255
51.10.0.0-51.13.255.255
51.51.0.0/16
51.53.0.0/16
51.103.0.0-51.105.255.255
51.107.0.0/16
51.116.0.0/16
51.120.0.0/16
51.124.0.0/16
51.132.0.0/16
51.136.0.0-51.138.255.255
51.140.0.0-51.145.255.255
57.150.0.0-57.175.255.255
72.16.128.0/17
74.144.0.0/12
82.87.0.0/16
85.212.0.0/16
94.245.64.0/18
109.246.0.0/16
124.252.0.0/16
128.24.0.0/16
128.85.0.0/16
130.131.0.0/16
132.164.0.0/16
132.220.0.0/16
134.33.0.0/16
134.112.0.0/16
135.4.0.0/16
135.6.0.0/15
135.18.0.0/16
135.85.0.0/16
135.116.0.0/16
135.130.0.0/16
135.171.0.0/16
135.224.0.0/15
135.229.0.0-135.230.255.255
135.232.0.0-135.237.255.255
135.240.0.0/16
138.105.0.0/16
143.209.0.0/16
143.226.0.0/16
147.243.0.0/16
149.198.0.0/16
151.129.0.0/16
151.206.0.0/16
152.138.0.0/16
157.31.0.0/16
157.95.0.0/16
157.252.0.0/16
159.128.0.0/16
167.162.0.0/16
167.186.0.0/16
167.231.0.0/16
172.128.0.0/10
172.200.0.0-172.215.255.255
173.200.0.0/16
192.100.104.0-192.100.133.255
193.149.64.0/19
193.221.113.0/24
194.41.16.0/20
194.110.197.0/24
194.238.128.0/17
207.103.0.0/16
209.199.0.0/16
212.132.0.0/19
212.173.0.0/17
212.207.0.0/16
213.54.0.0/16
213.199.128.0/18
217.176.0.0/16
217.177.96.0/19
IPv6:
2a00:1c68::/29
2a01:111::/32
Signature Algorithm: sha256WithRSAEncryption
01:1a:d0:03:35:90:b7:c9:30:d7:4b:93:93:55:34:f6:ab:e7:
c4:eb:10:82:cf:63:5e:11:ff:e7:bf:d3:ab:30:fb:0f:23:bd:
41:16:51:2b:26:59:b1:d6:d6:36:43:57:7f:cd:24:3c:fe:b2:
83:22:53:7f:7f:27:2d:69:cf:b7:63:e0:12:81:e2:a5:8f:49:
73:6f:99:07:66:28:bb:36:04:62:76:60:b8:f6:c1:27:09:5d:
5b:c1:53:5a:55:60:62:71:91:4f:2e:f4:8e:7b:89:3a:78:af:
d6:42:d4:26:05:51:6e:ae:45:ed:da:0a:e3:62:bc:55:d2:3f:
b9:c1:47:ff:cd:30:4e:22:f5:0d:62:d7:7c:3b:1e:2b:24:0c:
d7:94:8c:27:ef:93:69:65:cc:53:b3:a9:ed:07:ad:15:88:92:
ff:ef:ae:fe:93:d8:50:fd:89:eb:0a:bf:41:74:71:28:a5:8d:
69:19:00:4f:04:61:e9:e5:96:e1:15:bf:b8:c1:28:49:34:66:
04:8a:6d:04:a3:e2:41:26:19:a3:b3:93:83:01:c5:fc:60:80:
22:9e:19:0b:b6:92:78:c0:c2:69:ca:d9:25:b7:a6:ba:df:4e:
ee:0d:d2:ca:0c:dc:3d:34:a1:ea:62:08:e8:25:b4:01:4d:70:
ff:0a:f7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-fra.rpki-client.org