Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/0NVaJaH74ms4B55kSxb9oouAYn8.roa
File: 0NVaJaH74ms4B55kSxb9oouAYn8.roa (raw, json)
Hash identifier: f90Vv20DjSeCOBYBM7OtAWYQR0z4kg04EcwzWdMXUAk=
Subject key identifier: D0:D5:5A:25:A1:FB:E2:6B:38:07:9E:64:4B:16:FD:A2:8B:80:62:7F
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01881FD103B6B5377ACBE8CA04F952985D70
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/0NVaJaH74ms4B55kSxb9oouAYn8.roa
Signing time: Mon 15 May 2023 14:29:31 +0000
ROA not before: Mon 15 May 2023 14:29:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54339
IP address blocks: 85.133.227.0/24 maxlen: 24
85.133.233.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
85.133.234.0/24 maxlen: 24
85.133.238.0/24 maxlen: 24
85.133.237.0/24 maxlen: 24
85.133.241.0/24 maxlen: 24
85.133.242.0/24 maxlen: 24
85.133.253.0/24 maxlen: 24
85.133.250.0/24 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.174.0/24 maxlen: 24
85.133.199.0/24 maxlen: 24
85.133.194.0/24 maxlen: 24
85.133.205.0/24 maxlen: 24
85.133.208.0/24 maxlen: 24
85.133.221.0/24 maxlen: 24
85.133.132.0/22 maxlen: 22
85.133.135.0/24 maxlen: 24
85.133.143.0/24 maxlen: 24
85.133.151.0/24 maxlen: 24
85.133.153.0/24 maxlen: 24
85.133.160.0/24 maxlen: 24
85.133.161.0/24 maxlen: 24
85.133.166.0/24 maxlen: 24
185.41.0.0/24 maxlen: 24
185.41.1.0/24 maxlen: 24
185.41.2.0/24 maxlen: 24
185.41.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 May 2023 10:08:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1f:d1:03:b6:b5:37:7a:cb:e8:ca:04:f9:52:98:5d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: May 15 14:29:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0d55a25a1fbe26b38079e644b16fda28b80627f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ce:b1:65:81:09:59:21:6e:da:df:d9:88:b7:
0b:42:56:dc:c4:8a:44:cf:d2:08:e2:2e:2a:87:b1:
41:76:ce:85:43:ce:61:02:e9:36:eb:e6:8a:4c:ad:
77:ef:07:fe:b2:da:46:e4:a4:18:e0:5e:43:fa:af:
7f:5a:5f:73:14:3b:0e:1e:ca:31:5c:3f:b9:1b:22:
17:3b:d2:e7:f4:a1:3c:a2:4a:4c:32:ae:8d:a3:37:
4a:e6:04:d6:6f:db:79:98:13:7b:98:83:44:70:a2:
09:d7:aa:99:0d:99:9a:06:67:3a:f3:ab:6f:56:ef:
49:0a:81:80:4f:da:30:d6:b1:20:fd:8b:5d:2d:fc:
eb:b4:d4:32:c5:28:e9:24:68:6a:ee:6a:cd:c1:1e:
4f:81:49:d6:d6:8d:e9:49:b2:ac:d6:09:34:ff:d1:
db:78:89:0f:0d:62:4e:84:dd:13:73:cb:53:48:0d:
f7:b5:02:b4:b9:85:4a:de:62:34:e7:38:a9:e1:f2:
a0:71:2a:71:2f:84:00:ae:65:ad:b7:1c:7e:ba:10:
d8:32:ce:7d:3b:d5:6f:24:0c:d1:ed:b9:dd:9e:0a:
36:5f:b4:ea:f9:80:cf:97:d6:dd:94:cf:32:f6:9b:
a8:34:d6:05:1f:f0:81:7c:74:a4:c9:20:10:a6:70:
7d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D5:5A:25:A1:FB:E2:6B:38:07:9E:64:4B:16:FD:A2:8B:80:62:7F
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/0NVaJaH74ms4B55kSxb9oouAYn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.132.0/22
85.133.143.0/24
85.133.151.0/24
85.133.153.0/24
85.133.160.0/23
85.133.166.0/24
85.133.174.0/24
85.133.178.0/24
85.133.194.0/24
85.133.199.0/24
85.133.205.0/24
85.133.208.0/24
85.133.221.0/24
85.133.227.0-85.133.228.255
85.133.233.0-85.133.234.255
85.133.237.0-85.133.238.255
85.133.241.0-85.133.242.255
85.133.250.0/24
85.133.253.0/24
185.41.0.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:09:97:ee:85:99:b4:4d:17:8d:aa:c1:fb:3c:a8:ac:a5:46:
22:09:c2:05:1e:17:e7:bf:b9:b5:29:3b:81:0f:14:20:1c:78:
d6:88:cd:e2:c3:f9:d9:68:c8:57:99:8d:a1:e4:00:a2:5f:e7:
82:38:45:83:f6:02:14:5a:c7:f6:b2:5c:86:57:bf:a4:ae:e9:
9b:ce:c6:13:0b:d3:2e:5b:ee:02:0e:91:ef:06:f9:dc:ca:5c:
ba:42:0a:e9:aa:63:54:bf:a8:87:59:98:92:19:29:fb:2e:7b:
aa:a5:11:16:cb:a5:fa:12:b3:66:31:38:bb:fb:42:e8:cb:5f:
e4:3d:ff:b2:aa:d7:a7:c1:90:b5:dc:07:51:1e:a9:84:d0:50:
2d:7a:3f:9d:5c:5b:7e:94:cf:e6:f3:43:1c:b7:80:52:28:3d:
c0:f5:3f:26:36:48:04:bb:19:5b:75:d1:9e:89:7b:c8:95:30:
84:5d:e8:93:67:65:94:34:40:0c:ce:1a:ce:b2:69:65:45:bd:
04:d7:28:0e:84:04:ba:36:a2:d4:e7:b1:1f:bf:b8:3f:cb:21:
30:ff:5c:75:01:e3:ed:9a:de:bf:d1:03:89:37:dd:88:50:72:
83:a2:c1:d2:55:13:48:86:ae:93:b9:a7:f0:b7:cb:65:5c:cd:
55:af:69:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:12 2024 by rpki-client on console-fra.rpki-client.org