Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/8-Hgy9nYT68oxLajR6pkHKalN4c.roa
File: 8-Hgy9nYT68oxLajR6pkHKalN4c.roa (raw, json)
Hash identifier: Ft4ixXQzJD8bvQrbT61JAgJ564WhsG+8pWa1B9zeYec=
Subject key identifier: F3:E1:E0:CB:D9:D8:4F:AF:28:C4:B6:A3:47:AA:64:1C:A6:A5:37:87
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0197076BCD78FE0210690A239348EEB8C7ED
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/8-Hgy9nYT68oxLajR6pkHKalN4c.roa
Signing time: Sun 25 May 2025 12:29:54 +0000
ROA not before: Sun 25 May 2025 12:29:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.128.0/22 maxlen: 22
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.132.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.134.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.140.0/24 maxlen: 24
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.143.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.147.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.151.0/24 maxlen: 24
85.133.152.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.156.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.166.0/24 maxlen: 24
85.133.167.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
85.133.168.0/24 maxlen: 24
85.133.169.0/24 maxlen: 24
85.133.170.0/24 maxlen: 24
85.133.171.0/24 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.173.0/24 maxlen: 24
85.133.174.0/24 maxlen: 24
85.133.175.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.176.0/24 maxlen: 24
85.133.177.0/24 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.179.0/24 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.180.0/24 maxlen: 24
85.133.181.0/24 maxlen: 24
85.133.182.0/24 maxlen: 24
85.133.183.0/24 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.184.0/24 maxlen: 24
85.133.185.0/24 maxlen: 24
85.133.186.0/24 maxlen: 24
85.133.187.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.188.0/24 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.190.0/24 maxlen: 24
85.133.191.0/24 maxlen: 24
85.133.192.0/24 maxlen: 24
85.133.208.0/23 maxlen: 24
85.133.209.0/24 maxlen: 24
85.133.210.0/23 maxlen: 24
85.133.210.0/24 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.220.0/24 maxlen: 24
85.133.222.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.225.0/24 maxlen: 24
85.133.226.0/24 maxlen: 24
85.133.227.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.231.0/24 maxlen: 24
85.133.232.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.245.0/24 maxlen: 24
85.133.246.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
85.133.248.0/24 maxlen: 24
85.133.249.0/24 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.252.0/24 maxlen: 24
85.133.254.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 26 May 2025 15:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:07:6b:cd:78:fe:02:10:69:0a:23:93:48:ee:b8:c7:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: May 25 12:29:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3e1e0cbd9d84faf28c4b6a347aa641ca6a53787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:82:5a:54:2e:d0:ef:52:b5:95:58:d3:69:6a:
ef:70:b4:15:94:14:b1:ed:4b:60:74:8e:3e:af:e2:
a8:af:df:17:4d:ac:d4:87:3d:ca:8a:66:60:af:3f:
7e:87:d9:3a:a3:41:56:61:3f:9e:34:0b:d9:32:d4:
5e:cd:e1:95:bc:cb:a4:4f:47:3a:c6:66:fb:4b:ea:
cf:a4:0a:df:5a:7f:6a:6b:c9:50:af:c5:7a:5c:3e:
1e:32:98:12:95:b9:14:69:65:a7:d6:3b:2f:bc:51:
fe:6d:7d:fa:d1:c0:c2:6a:1f:f7:d7:e2:ae:6b:69:
4e:78:be:3c:25:01:45:9c:79:a1:13:44:71:d6:c5:
9d:ca:d4:d2:b1:b0:3e:49:f7:38:97:d9:2f:df:64:
9c:cc:a5:37:a4:9f:02:3c:96:93:2d:91:65:31:58:
4c:d5:84:a2:a3:a1:bf:c9:2a:03:99:0a:f4:c0:6c:
75:3c:5a:37:0d:9f:43:48:41:f9:e4:bd:1e:bd:89:
62:ec:42:64:f8:e4:07:8a:8a:49:f8:1c:50:64:2d:
3e:ca:bb:71:2e:34:68:5e:90:6e:7e:75:da:bf:a0:
dc:09:97:21:05:e5:d5:3d:b9:49:67:0b:28:81:0e:
38:d6:ef:62:74:4c:2f:06:9e:65:67:b2:bc:ae:79:
62:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E1:E0:CB:D9:D8:4F:AF:28:C4:B6:A3:47:AA:64:1C:A6:A5:37:87
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/8-Hgy9nYT68oxLajR6pkHKalN4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0-85.133.152.255
85.133.154.0-85.133.159.255
85.133.164.0-85.133.192.255
85.133.208.0-85.133.213.255
85.133.220.0/24
85.133.222.0/23
85.133.225.0-85.133.232.255
85.133.235.0/24
85.133.239.0/24
85.133.244.0-85.133.249.255
85.133.251.0-85.133.252.255
85.133.254.0/23
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
16:fb:fe:5c:28:eb:98:f7:6d:ad:6f:35:54:97:44:e2:39:f0:
1c:d6:b5:c3:96:18:52:32:ae:fc:de:e2:70:34:c0:69:26:63:
fb:73:06:01:e6:ab:f2:47:22:84:20:f3:be:b7:99:34:f3:bd:
49:f9:99:66:48:ca:95:a6:07:44:70:9d:65:ff:86:38:a1:79:
81:d4:c1:8b:ed:2d:f2:b1:60:95:8a:3a:56:0f:60:07:f5:7e:
7d:a1:bf:d7:88:98:44:b0:94:a7:6e:7d:5b:19:01:91:f0:f1:
0b:e0:cc:be:8f:1b:fe:05:40:8b:ba:90:49:4e:b3:a7:bc:68:
01:ea:56:4d:5c:00:b7:8c:9d:84:d3:31:7d:ed:52:e6:84:82:
7f:3b:7b:9d:9f:b4:94:1e:5a:a6:e2:e0:35:b4:75:d3:bc:9c:
9c:c6:7c:7b:85:7d:c7:9d:de:33:b7:ff:93:db:53:47:c0:56:
4a:e4:98:71:3f:5a:5b:96:b5:37:77:57:6c:3a:5c:2e:81:c9:
e4:ee:06:89:ed:d6:9e:c1:95:c5:9a:d4:f1:80:fc:99:e0:29:
c1:80:7d:15:78:3f:c7:83:48:1f:a9:62:c1:2c:e8:ec:42:18:
8b:5b:86:ea:9e:1d:06:b8:f8:6b:a5:e9:e7:cc:9b:01:97:66:
0d:12:42:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:27:52 2025 by rpki-client