Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/et1XBtfnOFKkw2e0MDWuDjzJaO0.roa
File: et1XBtfnOFKkw2e0MDWuDjzJaO0.roa (raw, json)
Hash identifier: V86s24psU0Lt34Kz2Z2dvBXCyk6U1hFxqvodigd6XKE=
Subject key identifier: 7A:DD:57:06:D7:E7:38:52:A4:C3:67:B4:30:35:AE:0E:3C:C9:68:ED
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0185708CDBA98B77CD139A5534BA572E760C
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/et1XBtfnOFKkw2e0MDWuDjzJaO0.roa
Signing time: Mon 02 Jan 2023 03:35:57 +0000
ROA not before: Mon 02 Jan 2023 03:35:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25490
IP address blocks: 85.174.143.0/24 maxlen: 24
85.173.4.0/22 maxlen: 22
85.172.160.0/21 maxlen: 21
85.174.128.0/18 maxlen: 18
85.174.240.0/20 maxlen: 20
85.175.0.0/19 maxlen: 19
83.239.0.0/20 maxlen: 20
83.239.0.0/18 maxlen: 18
85.175.0.0/16 maxlen: 16
83.239.16.0/20 maxlen: 20
83.239.32.0/19 maxlen: 19
85.175.32.0/21 maxlen: 21
83.239.32.0/21 maxlen: 21
85.174.224.0/20 maxlen: 20
83.239.96.0/20 maxlen: 20
85.175.96.0/22 maxlen: 22
85.172.0.0/19 maxlen: 19
85.175.100.0/23 maxlen: 23
85.172.32.0/19 maxlen: 19
83.239.40.0/22 maxlen: 22
85.175.46.0/24 maxlen: 24
83.239.48.0/20 maxlen: 20
83.239.64.0/19 maxlen: 19
85.175.62.0/23 maxlen: 23
85.173.144.0/20 maxlen: 20
85.175.66.0/23 maxlen: 23
85.175.71.0/24 maxlen: 24
85.175.65.0/24 maxlen: 24
85.175.72.0/22 maxlen: 22
85.175.82.0/23 maxlen: 23
85.175.91.0/24 maxlen: 24
83.239.200.0/21 maxlen: 21
85.175.216.0/22 maxlen: 22
83.239.224.0/20 maxlen: 20
85.175.226.0/23 maxlen: 23
83.239.240.0/22 maxlen: 22
85.175.236.0/24 maxlen: 24
83.239.244.0/22 maxlen: 22
85.175.152.0/23 maxlen: 23
85.172.64.0/21 maxlen: 21
85.175.170.0/23 maxlen: 23
85.172.72.0/22 maxlen: 22
85.172.82.0/23 maxlen: 23
85.172.84.0/22 maxlen: 22
85.172.79.0/24 maxlen: 24
85.172.96.0/20 maxlen: 20
85.175.192.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:db:a9:8b:77:cd:13:9a:55:34:ba:57:2e:76:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 03:35:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7add5706d7e73852a4c367b43035ae0e3cc968ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:85:49:90:bc:ea:3a:78:0f:b6:5f:d2:72:f7:
fe:5c:ac:c7:f0:65:c5:ff:11:12:5c:d3:ab:a8:12:
25:ae:20:9f:3b:5a:ed:c1:0a:cd:d7:00:4c:ea:c4:
a0:98:bb:3b:99:c0:f1:20:67:ef:0a:a3:bf:66:29:
14:76:cf:51:22:1e:14:b6:c7:7b:72:66:4f:e8:d9:
d8:48:b4:90:6e:23:63:2b:1f:0b:ea:2a:76:46:d3:
a2:cf:93:e6:76:17:73:25:db:6d:51:48:44:a4:2b:
ef:df:39:71:6f:f9:bb:85:bf:ce:37:df:7a:84:19:
36:f9:b2:8d:d6:7b:a4:1f:cc:a0:15:d3:47:12:a1:
6e:f9:5c:90:a1:1b:19:41:c9:f8:69:83:33:d8:95:
cd:c8:31:27:cc:3b:a4:46:9d:52:4e:ff:13:e7:6a:
45:1b:3a:57:d6:69:be:79:bd:1c:cc:9a:3b:eb:2b:
3f:7d:c5:9c:f4:ba:87:ec:7c:99:0e:45:33:47:06:
4b:f2:fc:8c:17:cd:63:2f:51:3e:48:35:58:65:f6:
92:3e:ac:9f:65:f6:91:69:08:ce:b9:e3:c9:46:68:
08:93:9c:28:3e:3e:80:2c:43:5b:2a:25:c4:64:af:
2d:2d:df:31:39:44:35:76:ee:db:e1:7c:a4:20:7d:
d6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DD:57:06:D7:E7:38:52:A4:C3:67:B4:30:35:AE:0E:3C:C9:68:ED
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/et1XBtfnOFKkw2e0MDWuDjzJaO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.239.0.0-83.239.111.255
83.239.200.0/21
83.239.224.0-83.239.247.255
85.172.0.0-85.172.75.255
85.172.79.0/24
85.172.82.0-85.172.87.255
85.172.96.0/20
85.172.160.0/21
85.173.4.0/22
85.173.144.0/20
85.174.128.0/18
85.174.224.0-85.175.255.255
Signature Algorithm: sha256WithRSAEncryption
33:c4:94:f1:5d:74:5d:97:16:80:9a:cf:32:9a:a2:36:c6:79:
5b:d9:86:0a:04:57:09:99:26:9d:42:64:68:b5:4a:a9:de:cd:
2a:7e:ef:8a:c0:1e:9a:bd:8b:39:17:4c:a6:7c:dc:4a:1d:27:
4f:f9:51:0f:58:7f:c7:38:06:bb:19:76:18:06:c9:9f:21:71:
5f:9e:5e:b5:22:b1:75:99:0b:69:91:56:68:4b:3e:a9:f7:de:
7e:d7:91:84:16:08:71:ea:0c:d3:0d:83:6e:37:3b:b7:c8:5c:
ea:65:75:13:72:e1:c5:99:58:45:b8:ec:f7:01:a6:5e:ca:bf:
0e:b6:69:b1:4d:5a:15:d5:d9:df:66:b4:b3:c3:9f:75:1f:fa:
9f:69:12:f1:24:fb:fc:01:c9:9d:cf:d2:7b:2d:55:d8:b5:f7:
16:db:7c:bb:cc:4a:58:e4:9d:94:10:30:ce:8a:52:1a:7b:95:
a1:5c:27:36:6c:c2:e4:b5:b9:b8:1b:8a:3a:4a:6d:44:a6:fb:
33:b5:b1:f6:2c:48:63:bf:6b:b4:76:4f:d2:2d:bb:4d:e8:97:
27:21:91:c2:11:00:0e:22:3d:32:c9:03:50:ef:e6:0c:f0:f6:
2f:2c:fa:27:21:90:a4:63:a1:28:90:80:6d:c4:e4:0e:cf:44:
17:fe:b4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:25 2024 by rpki-client on console-ams.rpki-client.org