Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/49Ck1MHdEbGyHZk17dZbndxThHE.roa
File: 49Ck1MHdEbGyHZk17dZbndxThHE.roa (raw, json)
Hash identifier: hL6w6r65OikF0MXZvUVAk8QUBZapG82Eo0iLHYi+nUs=
Subject key identifier: E3:D0:A4:D4:C1:DD:11:B1:B2:1D:99:35:ED:D6:5B:9D:DC:53:84:71
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0185B9BCADF5E9276F4F3C04AB54115A2183
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/49Ck1MHdEbGyHZk17dZbndxThHE.roa
Signing time: Mon 16 Jan 2023 08:40:28 +0000
ROA not before: Mon 16 Jan 2023 08:40:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.231.0/24 maxlen: 24
85.133.232.0/24 maxlen: 24
85.133.228.0/22 maxlen: 22
85.133.232.0/22 maxlen: 22
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.236.0/22 maxlen: 22
85.133.240.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.240.0/22 maxlen: 22
85.133.245.0/24 maxlen: 24
85.133.246.0/24 maxlen: 24
85.133.243.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
85.133.248.0/22 maxlen: 22
85.133.249.0/24 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.252.0/22 maxlen: 22
85.133.254.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.192.0/22 maxlen: 22
85.133.196.0/24 maxlen: 24
85.133.197.0/24 maxlen: 24
85.133.196.0/22 maxlen: 22
85.133.203.0/24 maxlen: 24
85.133.204.0/24 maxlen: 24
85.133.200.0/22 maxlen: 22
85.133.206.0/24 maxlen: 24
85.133.200.0/24 maxlen: 24
85.133.201.0/24 maxlen: 24
85.133.204.0/22 maxlen: 22
85.133.210.0/24 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.208.0/22 maxlen: 22
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.207.0/24 maxlen: 24
85.133.212.0/22 maxlen: 22
85.133.209.0/24 maxlen: 24
85.133.220.0/24 maxlen: 24
85.133.220.0/22 maxlen: 22
85.133.226.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.224.0/22 maxlen: 22
85.133.132.0/22 maxlen: 22
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.128.0/17 maxlen: 24
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.128.0/22 maxlen: 22
85.133.134.0/24 maxlen: 24
85.133.136.0/22 maxlen: 22
85.133.133.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.140.0/24 maxlen: 24
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.147.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.156.0/22 maxlen: 22
85.133.154.0/24 maxlen: 24
85.133.160.0/22 maxlen: 22
85.133.162.0/24 maxlen: 24
85.133.163.0/24 maxlen: 24
85.133.164.0/22 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
185.41.0.0/24 maxlen: 24
185.41.1.0/24 maxlen: 24
185.41.2.0/24 maxlen: 24
185.41.3.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 28 Mar 2023 02:28:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b9:bc:ad:f5:e9:27:6f:4f:3c:04:ab:54:11:5a:21:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jan 16 08:40:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3d0a4d4c1dd11b1b21d9935edd65b9ddc538471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a4:94:46:e7:d3:e5:8f:95:e1:4d:0b:06:64:
c4:dc:df:56:51:31:b2:54:7b:a0:0a:17:4d:f5:75:
62:14:c6:34:6f:3e:6a:0e:ae:0a:a1:1b:cd:63:61:
54:2f:2c:f3:f7:80:8c:5a:e6:26:52:0e:98:b1:0c:
ba:dd:87:f9:17:55:35:d8:f5:17:d8:f2:c1:63:ba:
16:04:1f:24:98:47:62:f4:4a:ac:d5:dd:b8:ec:f5:
d0:35:65:68:70:dc:4c:93:5b:0e:ec:72:e3:0e:4b:
08:4c:83:7f:99:ca:90:ae:4f:93:3d:1c:b0:78:33:
09:52:8d:4a:c9:9f:93:d9:58:ed:e4:ec:66:70:e7:
82:b0:ec:44:e9:b3:b4:d6:f4:1d:f5:10:21:50:dd:
87:1b:e4:15:32:44:c1:df:93:eb:18:3a:a4:c1:d1:
66:1a:59:3a:bd:62:a9:3b:0b:1e:25:01:13:8b:bf:
b2:1a:75:41:00:b6:50:fd:be:ef:e1:c8:6e:cf:b2:
34:97:7e:1f:a8:22:d4:c9:89:fc:af:14:5f:98:81:
d4:07:fb:92:88:dd:a5:55:79:a7:4e:8d:47:c4:21:
49:49:11:fd:0a:a3:95:e4:a4:1c:1d:27:d5:af:a3:
df:7c:6a:a3:eb:89:89:4c:46:3d:31:28:dc:18:77:
57:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D0:A4:D4:C1:DD:11:B1:B2:1D:99:35:ED:D6:5B:9D:DC:53:84:71
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/49Ck1MHdEbGyHZk17dZbndxThHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/17
185.41.0.0/22
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
99:e8:26:78:f0:39:b2:a8:c5:17:e5:d4:8c:37:28:08:3d:6a:
e5:1a:e7:7b:77:04:03:fe:cb:38:e8:c6:c8:13:b8:5d:41:8a:
43:f9:f6:ee:e5:da:b4:24:cd:f0:28:15:f9:69:c5:51:06:af:
31:19:3c:13:d4:63:f3:8a:4e:6a:e0:2a:ac:72:73:92:73:de:
d8:42:2c:17:e7:93:1b:91:84:cd:2f:ec:39:e4:26:1c:69:ae:
17:67:0f:2c:ee:22:18:79:f0:0d:aa:d2:38:21:7d:78:48:ed:
f8:b0:75:e4:e5:7e:8f:fd:47:77:5d:1e:82:d0:d7:81:c9:f3:
37:67:43:7e:26:c9:cf:87:25:43:c4:64:9c:33:0f:4e:3d:3b:
37:6b:5b:cf:fa:ce:e5:0d:c9:36:6b:72:b4:e4:84:a7:f2:76:
bd:6c:01:5a:84:61:7b:a8:b0:e4:d4:4b:d8:16:25:6f:5f:1f:
03:f9:05:17:7f:bd:52:16:a5:66:cd:ea:a9:06:07:f3:30:22:
5a:a6:7f:35:3b:52:8d:84:84:38:8e:c2:4d:5c:3e:59:54:3d:
ec:82:aa:05:b2:5f:09:b7:6e:f5:99:25:a6:bc:6a:5b:2a:90:
d9:eb:2c:be:fd:dc:0a:43:f8:7f:7c:41:18:25:fc:d7:f9:a8:
bb:96:e1:a8
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYW5vK316SdvTzwEq1QRWiGDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjMwMTE2MDg0MDI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2QwYTRkNGMxZGQxMWIxYjIxZDk5MzVlZGQ2NWI5ZGRjNTM4NDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKSURufT5Y+V4U0LBmTE3N9WUTGy
VHugChdN9XViFMY0bz5qDq4KoRvNY2FULyzz94CMWuYmUg6YsQy63Yf5F1U12PUX
2PLBY7oWBB8kmEdi9Eqs1d247PXQNWVocNxMk1sO7HLjDksITIN/mcqQrk+TPRyw
eDMJUo1KyZ+T2Vjt5OxmcOeCsOxE6bO01vQd9RAhUN2HG+QVMkTB35PrGDqkwdFm
Glk6vWKpOwseJQETi7+yGnVBALZQ/b7v4chuz7I0l34fqCLUyYn8rxRfmIHUB/uS
iN2lVXmnTo1HxCFJSRH9CqOV5KQcHSfVr6PffGqj64mJTEY9MSjcGHdXWQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFOPQpNTB3RGxsh2ZNe3WW53cU4RxMB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvNDlDazFNSGRFYkd5SFprMTdkWmJuZHhUaEhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQHVYWAAwQC
uSkAMA0EAgACMAcDBQMqBIfAMA0GCSqGSIb3DQEBCwUAA4IBAQCZ6CZ48DmyqMUX
5dSMNygIPWrlGud7dwQD/ss46MbIE7hdQYpD+fbu5dq0JM3wKBX5acVRBq8xGTwT
1GPzik5q4CqscnOSc97YQiwX55MbkYTNL+w55CYcaa4XZw8s7iIYefANqtI4IX14
SO34sHXk5X6P/Ud3XR6C0NeByfM3Z0N+JsnPhyVDxGScMw9OPTs3a1vP+s7lDck2
a3K05ISn8na9bAFahGF7qLDk1EvYFiVvXx8D+QUXf71SFqVmzeqpBgfzMCJapn81
O1KNhIQ4jsJNXD5ZVD3sgqoFsl8Jt271mSWmvGpbKpDZ6yy+/dwKQ/h/fEEYJfzX
+ai7luGo
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:12 2024 by rpki-client on console-fra.rpki-client.org