Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/8BoXX_BSxZcVtd1eRzCggmNertA.roa
File: 8BoXX_BSxZcVtd1eRzCggmNertA.roa (raw, json)
Hash identifier: OxGjIPn5TK9QXjzsFQGggMBzIaUy3P2PdnFo7z2zKy0=
Subject key identifier: F0:1A:17:5F:F0:52:C5:97:15:B5:DD:5E:47:30:A0:82:63:5E:AE:D0
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018DEEDAE29645984028C39250555E23A501
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/8BoXX_BSxZcVtd1eRzCggmNertA.roa
Signing time: Wed 28 Feb 2024 08:35:38 +0000
ROA not before: Wed 28 Feb 2024 08:35:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.128.0/17 maxlen: 24
85.133.128.0/22 maxlen: 22
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.134.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.140.0/24 maxlen: 24
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.147.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.189.0/24 maxlen: 24
85.133.192.0/22 maxlen: 22
85.133.196.0/22 maxlen: 22
85.133.196.0/24 maxlen: 24
85.133.197.0/24 maxlen: 24
85.133.206.0/24 maxlen: 24
85.133.207.0/24 maxlen: 24
85.133.209.0/24 maxlen: 24
85.133.210.0/23 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/22 maxlen: 22
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.220.0/22 maxlen: 22
85.133.220.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.224.0/22 maxlen: 22
85.133.224.0/24 maxlen: 24
85.133.225.0/24 maxlen: 24
85.133.226.0/24 maxlen: 24
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.231.0/24 maxlen: 24
85.133.232.0/22 maxlen: 22
85.133.232.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.240.0/22 maxlen: 22
85.133.240.0/24 maxlen: 24
85.133.243.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.245.0/24 maxlen: 24
85.133.246.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
85.133.248.0/23 maxlen: 24
85.133.249.0/24 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.252.0/22 maxlen: 22
85.133.254.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
185.41.0.0/24 maxlen: 24
185.41.1.0/24 maxlen: 24
185.41.2.0/24 maxlen: 24
185.41.3.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 05 Mar 2024 16:42:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ee:da:e2:96:45:98:40:28:c3:92:50:55:5e:23:a5:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Feb 28 08:35:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f01a175ff052c59715b5dd5e4730a082635eaed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a3:57:6a:6f:b4:61:ec:b5:a2:3c:97:4b:33:
bf:6a:6c:b8:f0:ef:6c:73:cc:95:6d:53:08:5b:a0:
e3:8e:f5:bf:b3:64:84:b8:e7:12:cc:f4:94:b2:c5:
37:54:48:0a:89:d8:84:85:04:85:95:73:d8:a4:ad:
bf:2d:d5:da:78:f3:59:67:44:c2:a2:b4:dc:81:07:
7a:3e:e5:81:d1:82:ba:21:51:5e:f8:32:c6:f1:84:
bb:45:91:4b:cb:ac:fc:21:28:81:4a:e9:51:f8:62:
23:19:b8:6d:c7:21:1a:44:36:af:b3:e6:9e:7f:72:
25:0f:e3:66:4d:f3:aa:0e:60:ff:36:bd:d1:3f:7c:
08:5e:81:82:97:24:24:65:31:42:34:e2:ea:99:ff:
c2:d9:16:5a:1c:e4:3e:3f:e7:fb:a7:03:69:fd:32:
55:e3:8e:36:bf:40:5f:46:29:e1:57:8e:f3:7c:78:
54:31:49:27:1a:9c:5d:e0:f4:60:e6:bd:b2:e0:7c:
56:42:5f:3e:c0:0f:c7:09:d2:6c:89:cc:c7:13:dd:
c0:6b:38:20:ad:7b:85:67:28:1b:7e:33:48:89:c5:
25:c4:d8:6d:e2:41:44:c5:f9:88:df:2d:8c:ec:ce:
c4:97:2e:8c:f9:1f:f0:d6:a8:36:cb:ff:f1:d8:25:
dd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1A:17:5F:F0:52:C5:97:15:B5:DD:5E:47:30:A0:82:63:5E:AE:D0
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/8BoXX_BSxZcVtd1eRzCggmNertA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/17
185.41.0.0/22
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
07:f7:f8:21:73:9d:18:7c:83:f4:e4:b3:f5:2c:9f:b8:16:67:
51:ba:64:4b:ea:e4:a8:b6:d3:12:77:d2:9d:7d:27:3f:65:01:
4c:09:99:b4:02:0b:4e:e0:7b:69:9e:de:16:68:36:0b:c4:3d:
cb:85:18:49:23:a1:68:96:6f:c8:3d:01:aa:62:fd:d6:a2:0a:
b5:b0:af:35:a3:18:bf:0c:e1:bb:18:75:10:e4:c0:c0:09:f6:
4b:0a:4d:3e:73:2f:05:a2:8e:28:85:f3:e2:09:ae:2b:a3:ed:
93:1c:86:50:93:e4:78:52:40:91:77:23:47:99:e6:a3:c8:1d:
eb:56:b3:70:b4:b4:2a:99:a4:3d:44:2d:e2:a6:4d:3c:d9:31:
93:38:47:82:08:84:92:f1:99:22:6b:42:d2:31:17:e0:64:24:
d8:c1:e0:f4:33:88:1a:ca:16:2c:5b:75:a4:11:eb:05:a1:3d:
a8:52:1b:92:e4:f8:0a:a0:72:07:20:32:e4:68:67:47:01:10:
32:d0:ff:dc:f3:c9:32:c5:a4:e6:46:e5:2a:85:e2:a0:cc:09:
71:5e:da:e1:48:28:b9:76:4a:7e:1f:dd:c6:13:c2:ae:fb:3c:
92:94:05:06:c4:8c:b2:14:f2:bc:b7:c3:37:de:04:ee:87:ff:
ff:8d:8c:b6
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAY3u2uKWRZhAKMOSUFVeI6UBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjQwMjI4MDgzNTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDFhMTc1ZmYwNTJjNTk3MTViNWRkNWU0NzMwYTA4MjYzNWVhZWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaNXam+0Yey1ojyXSzO/amy48O9s
c8yVbVMIW6DjjvW/s2SEuOcSzPSUssU3VEgKidiEhQSFlXPYpK2/LdXaePNZZ0TC
orTcgQd6PuWB0YK6IVFe+DLG8YS7RZFLy6z8ISiBSulR+GIjGbhtxyEaRDavs+ae
f3IlD+NmTfOqDmD/Nr3RP3wIXoGClyQkZTFCNOLqmf/C2RZaHOQ+P+f7pwNp/TJV
4442v0BfRinhV47zfHhUMUknGpxd4PRg5r2y4HxWQl8+wA/HCdJsiczHE93Aazgg
rXuFZygbfjNIicUlxNht4kFExfmI3y2M7M7Ely6M+R/w1qg2y//x2CXd8wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFPAaF1/wUsWXFbXdXkcwoIJjXq7QMB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvOEJvWFhfQlN4WmNWdGQxZVJ6Q2dnbU5lcnRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQHVYWAAwQC
uSkAMA0EAgACMAcDBQMqBIfAMA0GCSqGSIb3DQEBCwUAA4IBAQAH9/ghc50YfIP0
5LP1LJ+4FmdRumRL6uSottMSd9KdfSc/ZQFMCZm0AgtO4Htpnt4WaDYLxD3LhRhJ
I6Folm/IPQGqYv3Wogq1sK81oxi/DOG7GHUQ5MDACfZLCk0+cy8Foo4ohfPiCa4r
o+2THIZQk+R4UkCRdyNHmeajyB3rVrNwtLQqmaQ9RC3ipk082TGTOEeCCISS8Zki
a0LSMRfgZCTYweD0M4gayhYsW3WkEesFoT2oUhuS5PgKoHIHIDLkaGdHARAy0P/c
88kyxaTmRuUqheKgzAlxXtrhSCi5dkp+H93GE8Ku+zySlAUGxIyyFPK8t8M33gTu
h///jYy2
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:12 2024 by rpki-client on console-fra.rpki-client.org