Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/8teOkdLAMM9xXrEBfIhdWDx1KNI.roa
File: 8teOkdLAMM9xXrEBfIhdWDx1KNI.roa (raw, json)
Hash identifier: fXKEwxiRXtvuVvi9zWggwQF+9AnROw8j28HW2IUx8Z4=
Subject key identifier: F2:D7:8E:91:D2:C0:30:CF:71:5E:B1:01:7C:88:5D:58:3C:75:28:D2
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0192E18BB1D667F10A070BBB6FB2205C0BD6
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/8teOkdLAMM9xXrEBfIhdWDx1KNI.roa
Signing time: Thu 31 Oct 2024 07:48:01 +0000
ROA not before: Thu 31 Oct 2024 07:48:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.128.0/22 maxlen: 22
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.132.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.134.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.140.0/24 maxlen: 24
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.143.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.147.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.153.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.156.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.167.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
85.133.168.0/24 maxlen: 24
85.133.169.0/24 maxlen: 24
85.133.170.0/24 maxlen: 24
85.133.171.0/24 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.173.0/24 maxlen: 24
85.133.174.0/24 maxlen: 24
85.133.175.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.176.0/24 maxlen: 24
85.133.177.0/24 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.179.0/24 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.180.0/24 maxlen: 24
85.133.181.0/24 maxlen: 24
85.133.182.0/24 maxlen: 24
85.133.183.0/24 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.184.0/24 maxlen: 24
85.133.185.0/24 maxlen: 24
85.133.186.0/24 maxlen: 24
85.133.187.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.188.0/24 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.190.0/24 maxlen: 24
85.133.191.0/24 maxlen: 24
85.133.192.0/24 maxlen: 24
85.133.196.0/22 maxlen: 22
85.133.196.0/24 maxlen: 24
85.133.209.0/24 maxlen: 24
85.133.210.0/23 maxlen: 24
85.133.210.0/24 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/22 maxlen: 22
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.217.0/24 maxlen: 24
85.133.219.0/24 maxlen: 24
85.133.220.0/22 maxlen: 22
85.133.220.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.226.0/24 maxlen: 24
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.231.0/24 maxlen: 24
85.133.232.0/22 maxlen: 22
85.133.232.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.245.0/24 maxlen: 24
85.133.248.0/23 maxlen: 24
85.133.248.0/24 maxlen: 24
85.133.249.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 02 Nov 2024 12:57:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e1:8b:b1:d6:67:f1:0a:07:0b:bb:6f:b2:20:5c:0b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Oct 31 07:48:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2d78e91d2c030cf715eb1017c885d583c7528d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4e:21:1e:b1:de:27:d5:2c:8d:8f:db:a1:63:
82:e9:c9:d4:d9:00:7c:3d:15:4c:90:74:9c:b0:46:
e3:81:3c:85:b9:64:d6:25:02:c7:d5:b7:6e:1f:4d:
71:b4:88:4a:d1:4d:c5:71:9f:61:4f:d3:e5:30:d8:
8e:71:9a:e5:9b:ba:47:4b:2f:da:1b:00:06:80:a8:
8d:07:64:f1:31:82:d8:b5:f0:cc:bf:bd:18:fb:7c:
36:72:7c:f8:c3:c6:33:6c:09:ff:02:0a:5f:51:84:
65:e8:d8:b6:07:92:14:6f:21:6b:9d:0e:4b:86:4f:
0a:b3:53:7b:08:8b:7d:33:88:24:b1:bc:b7:02:ac:
dd:59:8d:8d:56:62:c1:41:9c:bf:77:a1:6b:ea:53:
0b:f3:24:81:54:55:1c:6c:9c:d5:d4:b0:72:b3:ec:
6e:b5:e5:c4:e3:fd:e1:ce:23:08:d6:bf:0d:85:77:
cd:59:2a:b2:ea:b3:14:e6:9d:9f:50:cb:23:00:c9:
b0:45:70:3c:a1:93:00:5e:c1:1f:aa:70:38:5e:07:
79:c1:39:e3:07:b0:33:ad:ae:26:56:bd:8f:c2:2a:
24:de:03:cb:16:00:d8:db:36:64:55:24:74:b0:48:
59:57:cc:c6:ad:c0:03:71:d1:8a:1c:c3:a3:93:e1:
db:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D7:8E:91:D2:C0:30:CF:71:5E:B1:01:7C:88:5D:58:3C:75:28:D2
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/8teOkdLAMM9xXrEBfIhdWDx1KNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/19
85.133.164.0/23
85.133.167.0-85.133.192.255
85.133.196.0/22
85.133.209.0-85.133.215.255
85.133.217.0/24
85.133.219.0-85.133.223.255
85.133.226.0/24
85.133.229.0-85.133.235.255
85.133.239.0/24
85.133.244.0/23
85.133.248.0/23
85.133.255.0/24
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
40:0a:5b:38:17:80:ff:d6:36:eb:96:26:ab:56:23:2b:5b:fd:
7e:b4:98:a5:92:39:37:f8:fc:ae:fe:d2:b9:18:6e:a1:90:c1:
85:ac:72:be:09:97:6f:2e:49:26:4b:e8:07:aa:60:28:d5:f3:
a3:91:b6:86:65:6f:76:60:ac:b5:1f:79:49:27:dd:a5:5a:e8:
bd:9b:29:e9:17:eb:4f:09:78:4e:a3:e4:71:ac:57:16:62:0e:
50:28:4b:64:d5:da:68:6c:f4:9c:88:84:08:a6:21:86:0b:15:
99:42:c7:60:3e:51:79:50:38:73:a9:e1:80:79:a1:43:d9:41:
c1:3f:82:37:68:87:56:80:c0:f8:7c:a4:0c:14:f2:b0:97:02:
3e:ae:e5:39:84:9c:52:a5:56:5d:38:b3:19:63:40:83:94:db:
d0:c3:25:cb:42:05:e7:cb:69:f4:7f:2b:1d:8d:9a:ef:d2:96:
f4:aa:3d:d5:65:14:77:f2:48:65:9a:7c:d3:8a:fc:93:4f:74:
0c:9a:77:69:26:51:b8:a4:fa:72:67:38:ac:6b:9d:cb:12:01:
02:ef:d5:20:a2:7f:e6:5e:a6:ae:e7:ae:11:6b:9a:6c:89:41:
27:7a:27:36:0a:75:2d:d1:05:5d:f3:34:c5:40:db:73:2d:a0:
4e:30:52:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 16:14:05 2024 by rpki-client on console-fra.rpki-client.org