Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/9JvKTqcmGyLsoydWpGBfEfQgciY.roa
File: 9JvKTqcmGyLsoydWpGBfEfQgciY.roa (raw, json)
Hash identifier: a8Tg38y+VUbkRn/7ePNfxRy6G5v7vHpnKNbpgYOslzM=
Subject key identifier: F4:9B:CA:4E:A7:26:1B:22:EC:A3:27:56:A4:60:5F:11:F4:20:72:26
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01896AB9C49EE2421D85159D23961F58228C
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/9JvKTqcmGyLsoydWpGBfEfQgciY.roa
Signing time: Tue 18 Jul 2023 20:38:26 +0000
ROA not before: Tue 18 Jul 2023 20:38:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.231.0/24 maxlen: 24
85.133.232.0/24 maxlen: 24
85.133.233.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
85.133.232.0/22 maxlen: 22
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.227.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.240.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.240.0/22 maxlen: 22
85.133.237.0/24 maxlen: 24
85.133.245.0/24 maxlen: 24
85.133.246.0/24 maxlen: 24
85.133.242.0/24 maxlen: 24
85.133.243.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.241.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
85.133.253.0/24 maxlen: 24
85.133.248.0/22 maxlen: 22
85.133.249.0/24 maxlen: 24
85.133.250.0/24 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.252.0/22 maxlen: 22
85.133.254.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
85.133.179.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.174.0/24 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.192.0/22 maxlen: 22
85.133.196.0/24 maxlen: 24
85.133.197.0/24 maxlen: 24
85.133.199.0/24 maxlen: 24
85.133.196.0/22 maxlen: 22
85.133.205.0/24 maxlen: 24
85.133.203.0/24 maxlen: 24
85.133.204.0/24 maxlen: 24
85.133.200.0/22 maxlen: 22
85.133.206.0/24 maxlen: 24
85.133.200.0/24 maxlen: 24
85.133.201.0/24 maxlen: 24
85.133.204.0/22 maxlen: 22
85.133.202.0/24 maxlen: 24
85.133.210.0/24 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.207.0/24 maxlen: 24
85.133.212.0/22 maxlen: 22
85.133.208.0/24 maxlen: 24
85.133.209.0/24 maxlen: 24
85.133.217.0/24 maxlen: 24
85.133.218.0/24 maxlen: 24
85.133.219.0/24 maxlen: 24
85.133.215.0/24 maxlen: 24
85.133.216.0/24 maxlen: 24
85.133.220.0/24 maxlen: 24
85.133.220.0/22 maxlen: 22
85.133.225.0/24 maxlen: 24
85.133.226.0/24 maxlen: 24
85.133.221.0/24 maxlen: 24
85.133.222.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.224.0/22 maxlen: 22
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.128.0/17 maxlen: 24
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.128.0/22 maxlen: 22
85.133.134.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.143.0/24 maxlen: 24
85.133.140.0/24 maxlen: 24
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.147.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.156.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.153.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.162.0/24 maxlen: 24
85.133.163.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
85.133.160.0/24 maxlen: 24
85.133.161.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.168.0/22 maxlen: 24
185.41.0.0/24 maxlen: 24
185.41.1.0/24 maxlen: 24
185.41.2.0/24 maxlen: 24
185.41.3.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 19 Jul 2023 12:42:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6a:b9:c4:9e:e2:42:1d:85:15:9d:23:96:1f:58:22:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jul 18 20:38:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f49bca4ea7261b22eca32756a4605f11f4207226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a5:64:ff:79:07:f7:5d:9e:01:ea:dd:df:71:
80:f5:60:82:92:e2:dd:85:f7:e0:30:d7:c5:7a:a0:
3c:d3:67:69:f0:f8:ee:92:27:72:ee:36:98:d4:f6:
cd:25:68:e2:93:0e:43:fd:8e:e8:35:83:14:89:97:
5e:46:d3:db:b4:6e:0a:4d:64:d7:3f:9d:41:d1:69:
ff:7f:fa:6b:7b:0f:8f:01:58:fe:40:a2:32:1d:a3:
8a:a8:8f:89:bb:fc:97:ec:7d:68:64:2d:55:da:37:
46:96:56:f8:0c:f9:ed:b1:50:33:30:3c:5e:88:a6:
af:34:de:9a:3a:20:86:96:69:58:06:a0:90:89:17:
04:25:f2:20:34:09:ed:4a:af:7a:8a:f5:58:58:3a:
6b:37:0b:5d:b5:b8:08:c4:4e:b5:d3:83:ff:a8:a7:
93:1a:f5:85:91:e1:10:72:be:d3:48:ac:42:2d:b7:
ef:33:07:54:86:da:07:b6:bd:b3:fa:d0:df:6e:53:
fe:a0:0a:ad:18:29:c2:0e:2a:a4:12:96:69:be:04:
dd:42:aa:e5:2a:39:e7:d7:28:0f:bc:cc:97:f9:b4:
8c:84:8e:b6:9b:57:a5:2f:ae:94:4d:0d:e8:bf:5c:
19:6a:17:1e:f8:13:d7:1f:7e:b7:24:77:49:6c:92:
2f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9B:CA:4E:A7:26:1B:22:EC:A3:27:56:A4:60:5F:11:F4:20:72:26
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/9JvKTqcmGyLsoydWpGBfEfQgciY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/17
185.41.0.0/22
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
58:1c:3e:03:e5:70:92:16:a5:8e:4e:65:5a:f3:bb:7a:fb:83:
3d:e7:20:7c:cd:a6:1c:06:90:19:5a:6e:11:fc:dc:68:ec:f9:
4e:b8:3f:6f:c8:44:19:68:27:a4:3e:e5:2a:ae:b6:aa:9e:8a:
69:83:31:38:28:f2:b9:c1:1f:c5:5e:97:87:04:c2:93:1d:10:
b0:2c:48:0c:2d:f0:e4:03:5c:67:55:ff:7f:90:75:c8:35:2a:
c6:10:6e:12:68:54:4a:00:58:77:21:da:c3:ce:b2:21:12:bb:
cb:45:df:2e:01:1c:0c:f3:e7:58:6e:49:fa:66:0e:23:9f:62:
40:a3:e3:3d:f2:26:e5:81:97:aa:f5:69:71:cc:39:26:fd:20:
76:7d:ba:fb:ad:29:68:cb:57:5a:d0:0a:fb:d1:9a:d3:23:b2:
92:48:64:1d:ac:5e:58:97:be:c7:3d:0e:89:50:46:9a:7d:7b:
39:b7:c5:2a:7c:a3:5c:25:fd:3c:00:13:eb:94:c3:32:e1:6b:
04:69:10:47:68:d9:1a:70:ae:7b:8d:6f:86:09:6c:f0:7a:6f:
3b:1b:93:01:92:5a:36:b3:1d:21:d5:c9:dd:f2:c1:fe:9b:94:
ed:ef:77:d9:85:98:ed:de:00:bd:d2:30:d9:fc:02:75:34:b9:
77:4e:91:12
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYlqucSe4kIdhRWdI5YfWCKMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjMwNzE4MjAzODI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDliY2E0ZWE3MjYxYjIyZWNhMzI3NTZhNDYwNWYxMWY0MjA3MjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKVk/3kH912eAerd33GA9WCCkuLd
hffgMNfFeqA802dp8Pjukidy7jaY1PbNJWjikw5D/Y7oNYMUiZdeRtPbtG4KTWTX
P51B0Wn/f/prew+PAVj+QKIyHaOKqI+Ju/yX7H1oZC1V2jdGllb4DPntsVAzMDxe
iKavNN6aOiCGlmlYBqCQiRcEJfIgNAntSq96ivVYWDprNwtdtbgIxE6104P/qKeT
GvWFkeEQcr7TSKxCLbfvMwdUhtoHtr2z+tDfblP+oAqtGCnCDiqkEpZpvgTdQqrl
Kjnn1ygPvMyX+bSMhI62m1elL66UTQ3ov1wZahce+BPXH363JHdJbJIvYQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFPSbyk6nJhsi7KMnVqRgXxH0IHImMB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvOUp2S1RxY21HeUxzb3lkV3BHQmZFZlFnY2lZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQHVYWAAwQC
uSkAMA0EAgACMAcDBQMqBIfAMA0GCSqGSIb3DQEBCwUAA4IBAQBYHD4D5XCSFqWO
TmVa87t6+4M95yB8zaYcBpAZWm4R/Nxo7PlOuD9vyEQZaCekPuUqrraqnoppgzE4
KPK5wR/FXpeHBMKTHRCwLEgMLfDkA1xnVf9/kHXINSrGEG4SaFRKAFh3IdrDzrIh
ErvLRd8uARwM8+dYbkn6Zg4jn2JAo+M98iblgZeq9WlxzDkm/SB2fbr7rSloy1da
0Ar70ZrTI7KSSGQdrF5Yl77HPQ6JUEaafXs5t8UqfKNcJf08ABPrlMMy4WsEaRBH
aNkacK57jW+GCWzwem87G5MBklo2sx0h1cnd8sH+m5Tt73fZhZjt3gC90jDZ/AJ1
NLl3TpES
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:01 2024 by rpki-client on console-ams.rpki-client.org