Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/0piIO3dCuBNtCHCgKlP9d5ilgPM.roa
File: 0piIO3dCuBNtCHCgKlP9d5ilgPM.roa (raw, json)
Hash identifier: sT9dhCeM0vYW4Ap2OXtHVmTfTrXYCssiZ8O+9HI+1Aw=
Subject key identifier: D2:98:88:3B:77:42:B8:13:6D:08:70:A0:2A:53:FD:77:98:A5:80:F3
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0192F5C06D876510BAAFB4F7AEF228BE32EA
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/0piIO3dCuBNtCHCgKlP9d5ilgPM.roa
Signing time: Mon 04 Nov 2024 05:58:01 +0000
ROA not before: Mon 04 Nov 2024 05:58:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.128.0/22 maxlen: 22
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.132.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.134.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.140.0/24 maxlen: 24
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.143.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.147.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.153.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.156.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.167.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
85.133.168.0/24 maxlen: 24
85.133.169.0/24 maxlen: 24
85.133.170.0/24 maxlen: 24
85.133.171.0/24 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.173.0/24 maxlen: 24
85.133.174.0/24 maxlen: 24
85.133.175.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.176.0/24 maxlen: 24
85.133.177.0/24 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.179.0/24 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.180.0/24 maxlen: 24
85.133.181.0/24 maxlen: 24
85.133.182.0/24 maxlen: 24
85.133.183.0/24 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.184.0/24 maxlen: 24
85.133.185.0/24 maxlen: 24
85.133.186.0/24 maxlen: 24
85.133.187.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.188.0/24 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.190.0/24 maxlen: 24
85.133.191.0/24 maxlen: 24
85.133.192.0/24 maxlen: 24
85.133.196.0/22 maxlen: 22
85.133.196.0/24 maxlen: 24
85.133.207.0/24 maxlen: 24
85.133.209.0/24 maxlen: 24
85.133.210.0/23 maxlen: 24
85.133.210.0/24 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/22 maxlen: 22
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.215.0/24 maxlen: 24
85.133.217.0/24 maxlen: 24
85.133.218.0/23 maxlen: 24
85.133.219.0/24 maxlen: 24
85.133.220.0/22 maxlen: 22
85.133.220.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.225.0/24 maxlen: 24
85.133.226.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.231.0/24 maxlen: 24
85.133.232.0/22 maxlen: 22
85.133.232.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.245.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
85.133.248.0/23 maxlen: 24
85.133.248.0/24 maxlen: 24
85.133.249.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 04 Nov 2024 12:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f5:c0:6d:87:65:10:ba:af:b4:f7:ae:f2:28:be:32:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Nov 4 05:58:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d298883b7742b8136d0870a02a53fd7798a580f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:be:d3:0b:be:8f:5b:19:1d:f4:1b:e7:61:e3:
07:0a:34:9b:38:67:32:8d:8e:8d:19:7c:c4:d8:ba:
67:f4:c9:0b:23:b0:e9:f0:79:3b:be:ea:aa:1b:1b:
ff:9d:a6:7a:6d:5b:73:ef:72:8c:04:38:40:2f:57:
82:f2:42:43:2c:00:af:fb:9a:a0:44:c8:62:d4:05:
99:8c:da:f4:df:f8:e4:c0:ab:e5:f8:22:78:6e:37:
14:1e:5a:ed:00:31:6d:4d:8c:34:f9:b0:55:63:f5:
a2:58:c2:0a:01:7a:1d:19:1f:ec:f8:b9:24:62:ce:
96:48:38:02:6a:e2:a1:c3:70:9e:54:6a:21:9a:d3:
cf:6c:13:48:e7:4f:16:85:10:fd:41:90:62:2a:15:
28:46:91:89:35:e4:2e:cb:bf:5f:4d:fa:9e:75:a3:
93:02:85:af:25:06:a8:6b:b5:46:62:6a:33:e6:f2:
1e:5f:3e:bf:dc:10:17:96:1a:c3:f8:c5:e5:91:65:
80:3e:08:ad:4f:79:7f:01:88:e2:f6:54:d2:8c:b9:
09:92:f0:0f:da:41:74:67:08:16:41:2e:30:aa:a4:
0b:fa:7d:93:50:f5:1e:1d:bc:46:79:a6:f0:66:2d:
e2:94:ed:e2:60:cf:e8:ad:17:f3:06:18:00:81:4d:
f8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:98:88:3B:77:42:B8:13:6D:08:70:A0:2A:53:FD:77:98:A5:80:F3
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/0piIO3dCuBNtCHCgKlP9d5ilgPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/19
85.133.164.0/23
85.133.167.0-85.133.192.255
85.133.196.0/22
85.133.207.0/24
85.133.209.0-85.133.215.255
85.133.217.0-85.133.223.255
85.133.225.0-85.133.226.255
85.133.228.0-85.133.235.255
85.133.239.0/24
85.133.244.0/23
85.133.247.0-85.133.249.255
85.133.255.0/24
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
a3:f1:3d:d1:56:e5:32:e2:2f:ee:b4:da:a8:e7:c1:6d:73:6b:
eb:2e:c0:69:36:cf:28:3a:cc:ba:a0:ae:0d:49:56:e6:9b:35:
e2:6e:c9:fb:da:3f:0d:e1:44:8b:75:3e:7d:6a:5f:11:d6:a5:
f3:c1:6b:01:f4:50:da:e2:4f:63:d8:4c:9e:b2:a6:ca:24:9d:
9b:fc:e7:0d:12:42:71:8e:9e:0b:36:a4:f0:93:f1:66:01:0b:
37:60:2b:b3:5a:44:73:58:66:95:f1:1d:70:fb:d3:c6:c5:05:
b9:fb:78:b1:c7:1c:22:84:44:ce:24:4c:09:7a:01:f1:5b:30:
a4:0a:b5:2c:4d:0f:5f:c9:c5:c9:53:1c:ce:c6:b9:3b:68:ef:
7e:43:b6:ec:5b:15:c7:a5:6c:81:59:1d:e9:d4:62:fa:6e:b1:
23:ee:e4:f0:21:f1:d9:64:f4:8a:5a:65:6f:2d:1f:3d:a3:56:
58:72:71:83:cb:82:b0:52:60:b5:c3:70:ba:44:f1:71:af:d7:
6e:cf:00:dc:c1:f4:6d:b4:f0:63:3c:f3:81:a1:24:63:20:e8:
ff:0b:f3:f3:54:ed:18:5d:b4:ff:0b:82:f7:3f:67:9b:c1:0c:
2f:f5:a0:6c:c8:04:e0:3d:d8:8c:43:bf:59:a8:21:be:90:62:
46:1a:33:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 14:58:13 2024 by rpki-client on console-fra.rpki-client.org