Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/yqFhSgR-HVp4kYKHQkkGM4OUCW8.roa
File: yqFhSgR-HVp4kYKHQkkGM4OUCW8.roa (raw, json)
Hash identifier: f2tTk6ugpCqi40zDuMFI0M1PtD0HTBKOAgcAIHxbUpg=
Subject key identifier: CA:A1:61:4A:04:7E:1D:5A:78:91:82:87:42:49:06:33:83:94:09:6F
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 018B72328819470972068CCE3E210FA023BF
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/yqFhSgR-HVp4kYKHQkkGM4OUCW8.roa
Signing time: Fri 27 Oct 2023 17:33:16 +0000
ROA not before: Fri 27 Oct 2023 17:33:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 48.208.0.0/13 maxlen: 13
172.208.0.0/13 maxlen: 13
192.100.112.0/21 maxlen: 21
192.100.120.0/21 maxlen: 21
192.100.132.0/23 maxlen: 23
82.87.0.0/16 maxlen: 16
192.100.128.0/22 maxlen: 22
135.114.0.0/16 maxlen: 16
172.160.0.0/11 maxlen: 11
51.107.0.0/16 maxlen: 16
135.6.0.0/16 maxlen: 16
134.33.0.0/16 maxlen: 16
192.100.104.0/21 maxlen: 21
135.229.0.0/16 maxlen: 16
51.12.0.0/15 maxlen: 15
51.140.0.0/14 maxlen: 14
147.214.0.0/16 maxlen: 16
193.221.113.0/24 maxlen: 24
51.53.0.0/16 maxlen: 16
57.160.0.0/12 maxlen: 12
51.120.0.0/16 maxlen: 16
132.220.0.0/16 maxlen: 16
48.220.0.0/15 maxlen: 15
135.18.0.0/16 maxlen: 16
212.173.0.0/17 maxlen: 17
135.240.0.0/16 maxlen: 16
134.112.0.0/16 maxlen: 16
172.200.0.0/13 maxlen: 13
160.207.0.0/16 maxlen: 16
212.207.0.0/16 maxlen: 16
173.200.0.0/16 maxlen: 16
209.199.0.0/16 maxlen: 16
143.226.0.0/16 maxlen: 16
109.246.0.0/16 maxlen: 16
212.132.0.0/19 maxlen: 19
51.132.0.0/16 maxlen: 16
135.4.0.0/16 maxlen: 16
157.31.0.0/16 maxlen: 16
213.199.128.0/18 maxlen: 24
167.186.0.0/16 maxlen: 16
128.85.0.0/16 maxlen: 16
135.85.0.0/16 maxlen: 16
48.192.0.0/12 maxlen: 12
128.24.0.0/16 maxlen: 16
51.51.0.0/16 maxlen: 16
57.152.0.0/14 maxlen: 14
151.206.0.0/16 maxlen: 16
138.105.0.0/16 maxlen: 16
94.245.64.0/18 maxlen: 24
157.252.0.0/16 maxlen: 16
51.124.0.0/16 maxlen: 16
124.252.0.0/16 maxlen: 16
156.23.0.0/16 maxlen: 16
51.144.0.0/15 maxlen: 15
40.171.0.0/16 maxlen: 16
135.171.0.0/16 maxlen: 16
149.198.0.0/16 maxlen: 16
194.238.128.0/17 maxlen: 17
85.212.0.0/16 maxlen: 16
152.138.0.0/16 maxlen: 16
51.138.0.0/16 maxlen: 16
134.138.0.0/16 maxlen: 16
51.10.0.0/15 maxlen: 15
74.144.0.0/12 maxlen: 12
194.110.197.0/24 maxlen: 24
51.104.0.0/15 maxlen: 15
72.16.128.0/17 maxlen: 17
130.131.0.0/16 maxlen: 16
135.232.0.0/14 maxlen: 14
135.185.0.0/16 maxlen: 16
207.103.0.0/16 maxlen: 16
167.231.0.0/16 maxlen: 16
51.103.0.0/16 maxlen: 16
135.130.0.0/16 maxlen: 16
135.224.0.0/15 maxlen: 15
57.150.0.0/15 maxlen: 15
132.164.0.0/16 maxlen: 16
217.177.96.0/19 maxlen: 19
57.156.0.0/14 maxlen: 14
172.128.0.0/11 maxlen: 11
157.176.0.0/16 maxlen: 16
217.176.0.0/16 maxlen: 16
128.203.0.0/16 maxlen: 16
135.230.0.0/16 maxlen: 16
193.149.64.0/19 maxlen: 24
151.129.0.0/16 maxlen: 16
135.116.0.0/16 maxlen: 16
51.116.0.0/16 maxlen: 16
165.15.0.0/16 maxlen: 16
40.170.0.0/16 maxlen: 16
51.136.0.0/15 maxlen: 15
135.236.0.0/15 maxlen: 15
135.7.0.0/16 maxlen: 16
137.162.0.0/16 maxlen: 16
167.162.0.0/16 maxlen: 16
159.128.0.0/16 maxlen: 16
72.54.0.0/16 maxlen: 16
213.54.0.0/16 maxlen: 16
157.81.0.0/16 maxlen: 16
143.209.0.0/16 maxlen: 16
194.41.16.0/20 maxlen: 20
194.41.18.0/24 maxlen: 24
194.41.22.0/24 maxlen: 24
194.41.23.0/24 maxlen: 24
194.41.20.0/24 maxlen: 24
194.41.21.0/24 maxlen: 24
194.41.19.0/24 maxlen: 24
132.196.0.0/16 maxlen: 16
157.95.0.0/16 maxlen: 16
84.223.0.0/16 maxlen: 16
122.149.0.0/16 maxlen: 16
147.243.0.0/16 maxlen: 24
48.216.0.0/14 maxlen: 14
40.169.0.0/16 maxlen: 16
2a01:111:4004::/48 maxlen: 48
2a01:111::/32 maxlen: 32
2a01:111:4000::/36 maxlen: 36
2a01:111:2000::/36 maxlen: 36
2a01:111:f000::/36 maxlen: 36
2a00:1c68::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 07 Nov 2023 18:57:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:72:32:88:19:47:09:72:06:8c:ce:3e:21:0f:a0:23:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Oct 27 17:33:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=caa1614a047e1d5a78918287424906338394096f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f3:fd:73:53:1c:67:24:1d:36:18:0e:95:98:
c7:8b:a2:4d:be:ee:25:05:c5:a9:a5:22:9c:9b:7a:
63:e8:71:1a:b9:7e:42:5d:45:90:93:63:83:e9:61:
3c:88:42:bd:83:3c:8c:4e:df:85:eb:83:ff:b0:08:
12:a3:b0:19:c6:3e:bb:dc:b0:18:ee:b1:a6:32:1e:
dd:ed:67:de:7f:b7:40:4f:d3:5b:e9:93:6d:64:e7:
2a:4a:53:4c:b4:34:58:7a:21:04:2d:1d:df:72:06:
93:5b:52:e9:cc:42:da:b7:08:3b:cb:71:52:7f:c8:
df:65:fa:21:49:b5:66:1d:ce:97:10:9b:d8:2c:39:
28:fc:a8:7e:a0:a9:9a:75:96:2c:26:cc:00:5c:9e:
82:ef:5d:c7:4e:3d:9d:69:1c:97:ae:1f:2f:f5:e5:
6c:56:19:c2:97:82:92:48:1c:76:f8:f8:0c:ac:62:
9a:3b:4e:dd:66:ab:2c:43:14:99:e5:2c:23:81:e7:
6e:55:be:35:a4:e1:9c:2b:fb:a8:6d:15:f7:b5:ba:
9c:3e:a9:ac:88:e8:cd:94:80:ca:87:91:eb:35:08:
33:97:52:a9:4d:40:d7:66:75:cb:7d:33:d6:5e:43:
99:fb:ee:01:8f:63:e0:9f:b4:b1:eb:f7:d4:c4:e3:
b5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A1:61:4A:04:7E:1D:5A:78:91:82:87:42:49:06:33:83:94:09:6F
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/yqFhSgR-HVp4kYKHQkkGM4OUCW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.169.0.0-40.171.255.255
48.192.0.0-48.221.255.255
51.10.0.0-51.13.255.255
51.51.0.0/16
51.53.0.0/16
51.103.0.0-51.105.255.255
51.107.0.0/16
51.116.0.0/16
51.120.0.0/16
51.124.0.0/16
51.132.0.0/16
51.136.0.0-51.138.255.255
51.140.0.0-51.145.255.255
57.150.0.0-57.175.255.255
72.16.128.0/17
72.54.0.0/16
74.144.0.0/12
82.87.0.0/16
84.223.0.0/16
85.212.0.0/16
94.245.64.0/18
109.246.0.0/16
122.149.0.0/16
124.252.0.0/16
128.24.0.0/16
128.85.0.0/16
128.203.0.0/16
130.131.0.0/16
132.164.0.0/16
132.196.0.0/16
132.220.0.0/16
134.33.0.0/16
134.112.0.0/16
134.138.0.0/16
135.4.0.0/16
135.6.0.0/15
135.18.0.0/16
135.85.0.0/16
135.114.0.0/16
135.116.0.0/16
135.130.0.0/16
135.171.0.0/16
135.185.0.0/16
135.224.0.0/15
135.229.0.0-135.230.255.255
135.232.0.0-135.237.255.255
135.240.0.0/16
137.162.0.0/16
138.105.0.0/16
143.209.0.0/16
143.226.0.0/16
147.214.0.0/16
147.243.0.0/16
149.198.0.0/16
151.129.0.0/16
151.206.0.0/16
152.138.0.0/16
156.23.0.0/16
157.31.0.0/16
157.81.0.0/16
157.95.0.0/16
157.176.0.0/16
157.252.0.0/16
159.128.0.0/16
160.207.0.0/16
165.15.0.0/16
167.162.0.0/16
167.186.0.0/16
167.231.0.0/16
172.128.0.0/10
172.200.0.0-172.215.255.255
173.200.0.0/16
192.100.104.0-192.100.133.255
193.149.64.0/19
193.221.113.0/24
194.41.16.0/20
194.110.197.0/24
194.238.128.0/17
207.103.0.0/16
209.199.0.0/16
212.132.0.0/19
212.173.0.0/17
212.207.0.0/16
213.54.0.0/16
213.199.128.0/18
217.176.0.0/16
217.177.96.0/19
IPv6:
2a00:1c68::/29
2a01:111::/32
Signature Algorithm: sha256WithRSAEncryption
27:ca:6f:58:fb:81:4b:71:d9:81:b7:45:27:80:15:85:ff:b2:
8c:ca:d0:4c:d7:43:41:d2:2e:c9:9f:ba:1b:42:dc:89:c4:e5:
88:22:d5:cd:d4:28:be:bb:83:d3:c2:3f:28:16:6a:59:21:3c:
93:8b:f8:3b:a7:0c:a3:b4:42:94:3c:38:6e:a6:ac:85:72:cf:
5d:e5:d2:e2:b5:b9:00:90:61:a2:62:11:3d:35:45:2d:d6:6e:
ce:ed:63:57:4c:11:ae:4b:ba:25:5e:67:49:dd:25:e6:9e:75:
3b:81:95:c3:98:fc:88:db:da:85:bc:40:ea:32:85:16:d6:40:
63:d1:71:d9:9c:49:11:51:12:13:0d:97:84:fc:79:2b:8b:fe:
02:bb:5c:75:70:ce:2f:e1:7c:5e:ee:5a:47:e2:7f:0e:3d:cb:
f7:58:56:72:1d:ec:22:1f:33:26:01:d9:cf:9e:79:1a:9e:57:
7c:e1:9c:c4:85:e1:98:f5:7f:ad:5f:80:11:f1:05:a4:d9:47:
20:a7:60:b3:ab:b3:2b:b4:08:17:0a:4b:d4:ef:98:af:1c:b9:
16:c5:10:7f:5b:e9:f5:b0:f7:2d:68:8b:16:23:6c:02:8f:62:
ab:2d:1d:ad:9f:20:c2:d2:78:6b:1b:74:0d:26:ae:64:73:c3:
20:fc:a1:11
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgISAYtyMogZRwlyBozOPiEPoCO/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjZTY4ZGFmNWYwODk0NTZjMGUxZDAyMjQ1MzkzNTMxYWM1
YjhmY2IwHhcNMjMxMDI3MTczMzE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWExNjE0YTA0N2UxZDVhNzg5MTgyODc0MjQ5MDYzMzgzOTQwOTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPP9c1McZyQdNhgOlZjHi6JNvu4l
BcWppSKcm3pj6HEauX5CXUWQk2OD6WE8iEK9gzyMTt+F64P/sAgSo7AZxj673LAY
7rGmMh7d7Wfef7dAT9Nb6ZNtZOcqSlNMtDRYeiEELR3fcgaTW1LpzELatwg7y3FS
f8jfZfohSbVmHc6XEJvYLDko/Kh+oKmadZYsJswAXJ6C713HTj2daRyXrh8v9eVs
VhnCl4KSSBx2+PgMrGKaO07dZqssQxSZ5SwjgeduVb41pOGcK/uobRX3tbqcPqms
iOjNlIDKh5HrNQgzl1KpTUDXZnXLfTPWXkOZ++4Bj2Pgn7Sx6/fUxOO1mQIDAQAB
o4IEMDCCBCwwHQYDVR0OBBYEFMqhYUoEfh1aeJGCh0JJBjODlAlvMB8GA1UdIwQY
MBaAFHzmja9fCJRWwOHQIkU5NTGsW4/LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZk9hTnIxOElsRmJBNGRBaVJUazFNYXhiajhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lYzBiODktMWU2OC00NWEwLThiOTMt
MTNhMDZhMjY5YWE4LzEveXFGaFNnUi1IVnA0a1lLSFFra0dNNE9VQ1c4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9lYzBiODktMWU2OC00NWEwLThiOTMtMTNhMDZhMjY5YWE4
LzEvZk9hTnIxOElsRmJBNGRBaVJUazFNYXhiajhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICRAYIKwYBBQUHAQcBAf8EggIzMIICLzCCAhUEAgABMIIC
DTAKAwMAKKkDAwIoqDAKAwMGMMADAwEw3DAKAwMBMwoDAwEzDAMDADMzAwMAMzUw
CgMDADNnAwMBM2gDAwAzawMDADN0AwMAM3gDAwAzfAMDADOEMAoDAwMziAMDADOK
MAoDAwIzjAMDATOQMAoDAwE5lgMDBDmgAwQHSBCAAwMASDYDAwRKkAMDAFJXAwMA
VN8DAwBV1AMEBl71QAMDAG32AwMAepUDAwB8/AMDAIAYAwMAgFUDAwCAywMDAIKD
AwMAhKQDAwCExAMDAITcAwMAhiEDAwCGcAMDAIaKAwMAhwQDAwGHBgMDAIcSAwMA
h1UDAwCHcgMDAId0AwMAh4IDAwCHqwMDAIe5AwMBh+AwCgMDAIflAwMAh+YwCgMD
A4foAwMBh+wDAwCH8AMDAImiAwMAimkDAwCP0QMDAI/iAwMAk9YDAwCT8wMDAJXG
AwMAl4EDAwCXzgMDAJiKAwMAnBcDAwCdHwMDAJ1RAwMAnV8DAwCdsAMDAJ38AwMA
n4ADAwCgzwMDAKUPAwMAp6IDAwCnugMDAKfnAwMGrIAwCgMDA6zIAwMDrNADAwCt
yDAMAwQDwGRoAwQBwGSEAwQFwZVAAwQAwd1xAwQEwikQAwQAwm7FAwQHwu6AAwMA
z2cDAwDRxwMEBdSEAAMEB9StAAMDANTPAwMA1TYDBAbVx4ADAwDZsAMEBdmxYDAU
BAIAAjAOAwUDKgAcaAMFACoBAREwDQYJKoZIhvcNAQELBQADggEBACfKb1j7gUtx
2YG3RSeAFYX/sozK0EzXQ0HSLsmfuhtC3InE5Ygi1c3UKL67g9PCPygWalkhPJOL
+DunDKO0QpQ8OG6mrIVyz13l0uK1uQCQYaJiET01RS3Wbs7tY1dMEa5LuiVeZ0nd
JeaedTuBlcOY/Ijb2oW8QOoyhRbWQGPRcdmcSRFREhMNl4T8eSuL/gK7XHVwzi/h
fF7uWkfifw49y/dYVnId7CIfMyYB2c+eeRqeV3zhnMSF4Zj1f61fgBHxBaTZRyCn
YLOrsyu0CBcKS9TvmK8cuRbFEH9b6fWw9y1oixYjbAKPYqstHa2fIMLSeGsbdA0m
rmRzwyD8oRE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:00 2024 by rpki-client on console-ams.rpki-client.org