Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/z4YBzyX1_YRNkamlFMGNLKoA3ug.roa
File: z4YBzyX1_YRNkamlFMGNLKoA3ug.roa (raw, json)
Hash identifier: 7ZKYM6hU4ekKP7uI6KjwT9NEAQqMzXkIYgrZ7JQBzKo=
Subject key identifier: CF:86:01:CF:25:F5:FD:84:4D:91:A9:A5:14:C1:8D:2C:AA:00:DE:E8
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 018E37693404725CCB6F1078FFD44D752EA6
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/z4YBzyX1_YRNkamlFMGNLKoA3ug.roa
Signing time: Wed 13 Mar 2024 10:43:45 +0000
ROA not before: Wed 13 Mar 2024 10:43:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 1.186.0.0/16 maxlen: 16
9.145.0.0/16 maxlen: 16
9.146.0.0/16 maxlen: 16
9.234.0.0/15 maxlen: 15
40.169.0.0/16 maxlen: 16
40.170.0.0/16 maxlen: 16
40.171.0.0/16 maxlen: 16
48.192.0.0/12 maxlen: 12
48.208.0.0/13 maxlen: 13
48.216.0.0/14 maxlen: 14
48.220.0.0/15 maxlen: 15
51.10.0.0/15 maxlen: 15
51.12.0.0/15 maxlen: 15
51.51.0.0/16 maxlen: 16
51.53.0.0/16 maxlen: 16
51.103.0.0/16 maxlen: 16
51.104.0.0/15 maxlen: 15
51.107.0.0/16 maxlen: 16
51.116.0.0/16 maxlen: 16
51.120.0.0/16 maxlen: 16
51.124.0.0/16 maxlen: 16
51.132.0.0/16 maxlen: 16
51.136.0.0/15 maxlen: 15
51.138.0.0/16 maxlen: 16
51.140.0.0/14 maxlen: 14
51.144.0.0/15 maxlen: 15
57.150.0.0/15 maxlen: 15
57.152.0.0/14 maxlen: 14
57.156.0.0/14 maxlen: 14
57.160.0.0/12 maxlen: 12
62.10.0.0/15 maxlen: 15
69.15.0.0/16 maxlen: 16
72.16.128.0/17 maxlen: 17
72.54.0.0/16 maxlen: 16
74.144.0.0/12 maxlen: 12
82.87.0.0/16 maxlen: 16
84.222.0.0/16 maxlen: 16
84.223.0.0/16 maxlen: 16
85.212.0.0/16 maxlen: 16
94.245.64.0/18 maxlen: 24
109.246.0.0/16 maxlen: 16
122.149.0.0/16 maxlen: 16
124.252.0.0/16 maxlen: 16
128.24.0.0/16 maxlen: 16
128.85.0.0/16 maxlen: 16
128.203.0.0/16 maxlen: 16
129.135.0.0/16 maxlen: 16
130.131.0.0/16 maxlen: 16
130.213.0.0/16 maxlen: 16
131.163.0.0/16 maxlen: 16
131.189.0.0/16 maxlen: 16
132.164.0.0/16 maxlen: 16
132.196.0.0/16 maxlen: 16
132.220.0.0/16 maxlen: 16
134.33.0.0/16 maxlen: 16
134.112.0.0/16 maxlen: 16
134.138.0.0/16 maxlen: 16
134.149.0.0/16 maxlen: 16
135.4.0.0/16 maxlen: 16
135.6.0.0/16 maxlen: 16
135.7.0.0/16 maxlen: 16
135.18.0.0/16 maxlen: 16
135.85.0.0/16 maxlen: 16
135.88.0.0/16 maxlen: 16
135.93.0.0/16 maxlen: 16
135.114.0.0/16 maxlen: 16
135.116.0.0/16 maxlen: 16
135.119.0.0/16 maxlen: 16
135.130.0.0/16 maxlen: 16
135.171.0.0/16 maxlen: 16
135.185.0.0/16 maxlen: 16
135.220.0.0/16 maxlen: 16
135.224.0.0/15 maxlen: 15
135.229.0.0/16 maxlen: 16
135.230.0.0/16 maxlen: 16
135.232.0.0/14 maxlen: 14
135.236.0.0/15 maxlen: 15
135.240.0.0/16 maxlen: 16
135.241.0.0/16 maxlen: 16
135.244.0.0/16 maxlen: 16
135.255.0.0/16 maxlen: 16
137.162.0.0/16 maxlen: 16
138.105.0.0/16 maxlen: 16
138.213.0.0/16 maxlen: 16
143.209.0.0/16 maxlen: 16
143.226.0.0/16 maxlen: 16
143.241.0.0/16 maxlen: 16
147.214.0.0/16 maxlen: 16
147.243.0.0/16 maxlen: 24
148.53.0.0/16 maxlen: 16
149.175.0.0/16 maxlen: 16
149.198.0.0/16 maxlen: 16
151.129.0.0/16 maxlen: 16
151.206.0.0/16 maxlen: 16
152.138.0.0/16 maxlen: 16
156.23.0.0/16 maxlen: 16
157.31.0.0/16 maxlen: 16
157.81.0.0/16 maxlen: 16
157.95.0.0/16 maxlen: 16
157.172.0.0/16 maxlen: 16
157.176.0.0/16 maxlen: 16
157.252.0.0/16 maxlen: 16
158.24.0.0/16 maxlen: 16
158.53.0.0/16 maxlen: 16
159.128.0.0/16 maxlen: 16
160.207.0.0/16 maxlen: 16
160.234.0.0/16 maxlen: 16
161.157.0.0/16 maxlen: 16
165.15.0.0/16 maxlen: 16
165.17.0.0/16 maxlen: 16
167.162.0.0/16 maxlen: 16
167.186.0.0/16 maxlen: 16
167.231.0.0/16 maxlen: 16
172.128.0.0/11 maxlen: 11
172.160.0.0/11 maxlen: 11
172.200.0.0/13 maxlen: 13
172.208.0.0/13 maxlen: 13
173.200.0.0/16 maxlen: 16
192.100.104.0/21 maxlen: 21
192.100.112.0/21 maxlen: 21
192.100.120.0/21 maxlen: 21
192.100.128.0/22 maxlen: 22
192.100.132.0/23 maxlen: 23
193.149.64.0/19 maxlen: 24
193.221.113.0/24 maxlen: 24
194.41.16.0/20 maxlen: 20
194.41.18.0/24 maxlen: 24
194.41.19.0/24 maxlen: 24
194.41.20.0/24 maxlen: 24
194.41.21.0/24 maxlen: 24
194.41.22.0/24 maxlen: 24
194.41.23.0/24 maxlen: 24
194.110.197.0/24 maxlen: 24
194.238.128.0/17 maxlen: 17
199.50.0.0/16 maxlen: 16
199.118.0.0/16 maxlen: 16
207.103.0.0/16 maxlen: 16
209.199.0.0/16 maxlen: 16
212.132.0.0/19 maxlen: 19
212.173.0.0/17 maxlen: 17
212.207.0.0/16 maxlen: 16
213.54.0.0/16 maxlen: 16
213.199.128.0/18 maxlen: 24
217.176.0.0/16 maxlen: 16
217.177.96.0/19 maxlen: 19
2a00:1c68::/29 maxlen: 29
2a01:111::/32 maxlen: 32
2a01:111:2000::/36 maxlen: 36
2a01:111:4000::/36 maxlen: 36
2a01:111:4004::/48 maxlen: 48
2a01:111:f000::/36 maxlen: 36
Validation: Failed, certificate revoked on Thu 14 Mar 2024 18:24:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:37:69:34:04:72:5c:cb:6f:10:78:ff:d4:4d:75:2e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Mar 13 10:43:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf8601cf25f5fd844d91a9a514c18d2caa00dee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5b:25:fe:37:40:9a:ad:5d:aa:9e:dc:61:9c:
4d:63:1a:6f:7c:d4:45:4b:9c:8f:7d:48:b6:2d:be:
79:a9:02:52:6e:e4:3f:22:e8:3f:42:eb:3e:99:36:
78:be:14:e2:75:62:09:47:2e:f1:5a:b0:e6:d0:09:
6d:3a:4b:20:67:c8:80:41:20:7f:3d:82:a4:c4:18:
ad:fe:cb:63:fc:b6:bc:fd:8d:8f:ac:92:1e:38:4a:
c6:51:40:39:13:c5:48:de:12:02:fa:71:68:4a:d9:
c7:64:2a:e1:7a:61:00:84:b9:37:49:c7:58:70:13:
75:97:b5:74:9c:45:79:40:27:8a:71:d9:63:e1:47:
86:ee:6d:89:9a:11:37:f6:40:15:06:7b:81:d0:e3:
30:a8:40:45:3c:e5:a2:c1:1e:2d:27:03:10:d0:ac:
98:b8:e1:58:f9:ee:3e:a2:66:35:67:1f:5e:16:69:
0c:27:b9:d9:e9:cb:d9:bc:d9:4f:e7:20:89:32:b3:
ff:cc:2e:9e:d0:cd:7a:f3:40:ea:d1:78:8f:4c:1a:
9e:fa:4c:fc:3a:98:17:90:56:68:0c:eb:38:d2:a1:
fd:1a:6b:24:36:bc:e8:24:ea:b7:19:f8:09:21:78:
8a:f4:ad:ca:d0:5c:e0:8d:7c:56:22:36:6b:80:19:
0d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:86:01:CF:25:F5:FD:84:4D:91:A9:A5:14:C1:8D:2C:AA:00:DE:E8
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/z4YBzyX1_YRNkamlFMGNLKoA3ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.186.0.0/16
9.145.0.0-9.146.255.255
9.234.0.0/15
40.169.0.0-40.171.255.255
48.192.0.0-48.221.255.255
51.10.0.0-51.13.255.255
51.51.0.0/16
51.53.0.0/16
51.103.0.0-51.105.255.255
51.107.0.0/16
51.116.0.0/16
51.120.0.0/16
51.124.0.0/16
51.132.0.0/16
51.136.0.0-51.138.255.255
51.140.0.0-51.145.255.255
57.150.0.0-57.175.255.255
62.10.0.0/15
69.15.0.0/16
72.16.128.0/17
72.54.0.0/16
74.144.0.0/12
82.87.0.0/16
84.222.0.0/15
85.212.0.0/16
94.245.64.0/18
109.246.0.0/16
122.149.0.0/16
124.252.0.0/16
128.24.0.0/16
128.85.0.0/16
128.203.0.0/16
129.135.0.0/16
130.131.0.0/16
130.213.0.0/16
131.163.0.0/16
131.189.0.0/16
132.164.0.0/16
132.196.0.0/16
132.220.0.0/16
134.33.0.0/16
134.112.0.0/16
134.138.0.0/16
134.149.0.0/16
135.4.0.0/16
135.6.0.0/15
135.18.0.0/16
135.85.0.0/16
135.88.0.0/16
135.93.0.0/16
135.114.0.0/16
135.116.0.0/16
135.119.0.0/16
135.130.0.0/16
135.171.0.0/16
135.185.0.0/16
135.220.0.0/16
135.224.0.0/15
135.229.0.0-135.230.255.255
135.232.0.0-135.237.255.255
135.240.0.0/15
135.244.0.0/16
135.255.0.0/16
137.162.0.0/16
138.105.0.0/16
138.213.0.0/16
143.209.0.0/16
143.226.0.0/16
143.241.0.0/16
147.214.0.0/16
147.243.0.0/16
148.53.0.0/16
149.175.0.0/16
149.198.0.0/16
151.129.0.0/16
151.206.0.0/16
152.138.0.0/16
156.23.0.0/16
157.31.0.0/16
157.81.0.0/16
157.95.0.0/16
157.172.0.0/16
157.176.0.0/16
157.252.0.0/16
158.24.0.0/16
158.53.0.0/16
159.128.0.0/16
160.207.0.0/16
160.234.0.0/16
161.157.0.0/16
165.15.0.0/16
165.17.0.0/16
167.162.0.0/16
167.186.0.0/16
167.231.0.0/16
172.128.0.0/10
172.200.0.0-172.215.255.255
173.200.0.0/16
192.100.104.0-192.100.133.255
193.149.64.0/19
193.221.113.0/24
194.41.16.0/20
194.110.197.0/24
194.238.128.0/17
199.50.0.0/16
199.118.0.0/16
207.103.0.0/16
209.199.0.0/16
212.132.0.0/19
212.173.0.0/17
212.207.0.0/16
213.54.0.0/16
213.199.128.0/18
217.176.0.0/16
217.177.96.0/19
IPv6:
2a00:1c68::/29
2a01:111::/32
Signature Algorithm: sha256WithRSAEncryption
4f:a3:3d:30:71:9a:3c:2b:09:6d:46:98:ad:b8:f6:ef:45:bf:
64:17:cb:c0:d8:5f:35:2a:7f:01:6a:f5:32:36:30:80:e2:35:
73:ac:64:94:4a:08:70:ef:1f:46:d2:25:2e:35:be:1a:f7:38:
fc:32:c7:89:75:aa:ab:99:dc:c1:b7:86:ba:7b:a1:14:ca:bd:
10:80:77:58:f9:79:16:fc:e6:8d:bf:86:7c:d9:1d:f4:a4:dd:
a0:d8:17:b7:04:ce:3e:a9:72:f5:a6:f7:03:5d:8b:ad:75:51:
83:41:3b:b0:5a:48:76:1f:44:b3:e5:13:90:f6:df:ab:c4:8e:
46:5d:bf:47:8a:ce:47:83:48:48:98:f3:d5:07:0b:b1:eb:e1:
b4:3e:11:51:20:c6:8b:08:a3:f7:34:f1:8f:3c:e9:90:ec:a5:
30:d2:41:7f:20:82:a9:24:04:6d:e1:c0:26:f5:9a:96:10:44:
2d:6e:ce:0e:89:3f:2f:00:60:17:3f:db:34:c2:9f:9a:8b:54:
24:44:ea:3d:a6:42:2d:c4:b7:3d:d8:e1:79:63:eb:97:72:f5:
62:cd:47:55:9a:60:05:fd:ba:f0:f1:c3:42:18:d8:18:a3:67:
2c:24:59:8b:21:d5:b7:cc:41:80:98:a3:54:bc:b0:5c:38:cf:
b4:40:94:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-fra.rpki-client.org