Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/0LqWURlj4yBaKT4fXAcLOAvTCEc.roa
File: 0LqWURlj4yBaKT4fXAcLOAvTCEc.roa (raw, json)
Hash identifier: o9Xv0JYuc7hMPwmGaFqvDuMYXxRH9w6NqWk9V5UUplg=
Subject key identifier: D0:BA:96:51:19:63:E3:20:5A:29:3E:1F:5C:07:0B:38:0B:D3:08:47
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01879DE23A1DE9D78C5060EE3D58631820EF
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/0LqWURlj4yBaKT4fXAcLOAvTCEc.roa
Signing time: Thu 20 Apr 2023 08:57:41 +0000
ROA not before: Thu 20 Apr 2023 08:57:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 85.133.194.0/24 maxlen: 24
85.133.205.0/24 maxlen: 24
85.133.208.0/22 maxlen: 22
85.133.216.0/24 maxlen: 24
85.133.219.0/24 maxlen: 24
85.133.233.0/24 maxlen: 24
85.133.238.0/24 maxlen: 24
85.133.241.0/24 maxlen: 24
85.133.250.0/24 maxlen: 24
85.133.253.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Apr 2023 11:56:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9d:e2:3a:1d:e9:d7:8c:50:60:ee:3d:58:63:18:20:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Apr 20 08:57:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0ba96511963e3205a293e1f5c070b380bd30847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:92:30:f2:1f:27:52:b0:75:1e:a8:5c:90:b8:
58:52:c3:42:7c:c2:f6:2d:58:0d:80:bf:0e:7b:5f:
1c:fc:42:41:46:1a:6a:38:df:22:54:63:06:3d:59:
71:d5:a1:8b:c7:f5:5e:48:fc:1c:97:a5:16:be:e2:
be:f1:e5:50:12:4d:16:42:e3:92:a8:b6:31:8b:20:
ad:03:0e:a8:d5:45:cc:f2:db:24:81:36:b7:eb:17:
90:84:11:d5:9f:f4:d4:37:9c:cd:62:ea:66:ef:8b:
01:bc:df:74:34:b0:87:72:3a:c5:c7:4f:38:70:c8:
c3:78:9e:d1:1f:07:d2:a8:53:9e:d0:44:7a:45:ec:
6f:be:f0:b3:0e:75:ad:f4:31:1c:de:27:00:8e:1e:
79:cf:81:6c:43:e5:2e:3d:f8:97:8f:f0:76:e9:73:
de:93:9b:cd:06:16:f2:33:ca:3b:ec:bf:02:04:f1:
39:b6:ca:3d:7c:91:f9:0a:3c:0f:65:22:7a:92:8a:
f1:a2:10:4b:2c:fe:5d:38:0c:4e:ff:2a:fb:45:fd:
fd:67:3d:b4:bc:1c:4d:33:5f:d9:53:ef:b1:3b:7d:
23:5e:51:9b:2c:db:8b:9e:6a:7d:f9:83:b7:6d:d1:
0f:37:5a:27:66:ca:7a:d2:c8:7d:40:bf:28:04:a9:
84:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BA:96:51:19:63:E3:20:5A:29:3E:1F:5C:07:0B:38:0B:D3:08:47
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/0LqWURlj4yBaKT4fXAcLOAvTCEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.146.0/24
85.133.194.0/24
85.133.205.0/24
85.133.208.0/22
85.133.216.0/24
85.133.219.0/24
85.133.233.0/24
85.133.238.0/24
85.133.241.0/24
85.133.250.0/24
85.133.253.0/24
Signature Algorithm: sha256WithRSAEncryption
28:96:20:b1:fe:29:35:bb:93:df:e8:90:50:b9:64:90:6e:4e:
f6:35:47:bb:d6:d0:ff:3c:ee:68:3b:99:3c:fb:0c:29:3e:86:
3c:a7:ce:c1:a5:37:ca:cd:7a:d7:cf:c6:05:7b:46:c8:9b:99:
6d:6d:06:99:cf:c0:27:7b:62:e4:f0:c7:fa:9b:93:5e:9b:17:
e5:1b:68:c9:fe:ba:19:eb:97:af:b9:9a:58:3e:28:8c:1f:81:
73:fc:a5:3c:ea:e8:e1:5b:e9:59:70:8b:ec:e1:75:c1:4c:14:
ae:52:58:65:46:d0:eb:35:4c:17:85:ea:2e:e3:e9:91:c5:37:
05:a3:82:ec:3e:9e:12:1e:14:7b:4c:39:61:dc:8a:bc:d7:41:
f1:71:66:47:a9:60:3d:b2:51:0e:64:36:bb:64:66:33:d4:e5:
58:ac:7a:a9:46:3b:fe:05:32:d2:b7:cc:38:bc:c7:af:a8:11:
db:8a:28:51:2d:8d:bd:66:eb:c8:91:80:74:b6:7d:94:ec:49:
13:b6:33:cf:b3:b8:1d:78:c5:9d:8f:65:6c:8a:69:5d:91:62:
db:11:36:4d:85:6d:88:74:da:36:ed:f1:e2:0c:01:cf:75:fa:
6c:a6:9d:39:f7:c5:06:30:ca:c7:e6:9e:b2:c0:cf:ed:d3:f2:
80:dc:9d:71
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAYed4jod6deMUGDuPVhjGCDvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjMwNDIwMDg1NzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGJhOTY1MTE5NjNlMzIwNWEyOTNlMWY1YzA3MGIzODBiZDMwODQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJIw8h8nUrB1HqhckLhYUsNCfML2
LVgNgL8Oe18c/EJBRhpqON8iVGMGPVlx1aGLx/VeSPwcl6UWvuK+8eVQEk0WQuOS
qLYxiyCtAw6o1UXM8tskgTa36xeQhBHVn/TUN5zNYupm74sBvN90NLCHcjrFx084
cMjDeJ7RHwfSqFOe0ER6RexvvvCzDnWt9DEc3icAjh55z4FsQ+UuPfiXj/B26XPe
k5vNBhbyM8o77L8CBPE5tso9fJH5CjwPZSJ6korxohBLLP5dOAxO/yr7Rf39Zz20
vBxNM1/ZU++xO30jXlGbLNuLnmp9+YO3bdEPN1onZsp60sh9QL8oBKmEuwIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFNC6llEZY+MgWik+H1wHCzgL0whHMB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvMExxV1VSbGo0eUJhS1Q0ZlhBY0xPQXZUQ0VjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAVYWSAwQA
VYXCAwQAVYXNAwQCVYXQAwQAVYXYAwQAVYXbAwQAVYXpAwQAVYXuAwQAVYXxAwQA
VYX6AwQAVYX9MA0GCSqGSIb3DQEBCwUAA4IBAQAoliCx/ik1u5Pf6JBQuWSQbk72
NUe71tD/PO5oO5k8+wwpPoY8p87BpTfKzXrXz8YFe0bIm5ltbQaZz8Ane2Lk8Mf6
m5NemxflG2jJ/roZ65evuZpYPiiMH4Fz/KU86ujhW+lZcIvs4XXBTBSuUlhlRtDr
NUwXheou4+mRxTcFo4LsPp4SHhR7TDlh3Iq810HxcWZHqWA9slEOZDa7ZGYz1OVY
rHqpRjv+BTLSt8w4vMevqBHbiihRLY29ZuvIkYB0tn2U7EkTtjPPs7gdeMWdj2Vs
imldkWLbETZNhW2IdNo27fHiDAHPdfpspp0598UGMMrH5p6ywM/t0/KA3J1x
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:12 2024 by rpki-client on console-fra.rpki-client.org