Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/CnZM-eiwDMYahHYT3TEC-I0YtOI.roa
File: CnZM-eiwDMYahHYT3TEC-I0YtOI.roa (raw, json)
Hash identifier: SKX3QFDnRW/maz3K05r/1RVpXkuax3OiFyy6yqgORS8=
Subject key identifier: 0A:76:4C:F9:E8:B0:0C:C6:1A:84:76:13:DD:31:02:F8:8D:18:B4:E2
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0189067414B8E1685E488BF92D606694F813
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/CnZM-eiwDMYahHYT3TEC-I0YtOI.roa
Signing time: Thu 29 Jun 2023 09:20:18 +0000
ROA not before: Thu 29 Jun 2023 09:20:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.231.0/24 maxlen: 24
85.133.232.0/24 maxlen: 24
85.133.232.0/22 maxlen: 22
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.227.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.240.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.240.0/22 maxlen: 22
85.133.237.0/24 maxlen: 24
85.133.234.0/24 maxlen: 24
85.133.245.0/24 maxlen: 24
85.133.246.0/24 maxlen: 24
85.133.243.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
85.133.253.0/24 maxlen: 24
85.133.248.0/22 maxlen: 22
85.133.249.0/24 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.252.0/22 maxlen: 22
85.133.254.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.174.0/24 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.192.0/22 maxlen: 22
85.133.196.0/24 maxlen: 24
85.133.197.0/24 maxlen: 24
85.133.196.0/22 maxlen: 22
85.133.203.0/24 maxlen: 24
85.133.204.0/24 maxlen: 24
85.133.200.0/22 maxlen: 22
85.133.206.0/24 maxlen: 24
85.133.200.0/24 maxlen: 24
85.133.201.0/24 maxlen: 24
85.133.204.0/22 maxlen: 22
85.133.210.0/24 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.207.0/24 maxlen: 24
85.133.212.0/22 maxlen: 22
85.133.209.0/24 maxlen: 24
85.133.218.0/24 maxlen: 24
85.133.216.0/24 maxlen: 24
85.133.220.0/24 maxlen: 24
85.133.220.0/22 maxlen: 22
85.133.226.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.224.0/22 maxlen: 22
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.128.0/17 maxlen: 24
85.133.132.0/24 maxlen: 24
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.128.0/22 maxlen: 22
85.133.134.0/24 maxlen: 24
85.133.136.0/22 maxlen: 22
85.133.133.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.143.0/24 maxlen: 24
85.133.140.0/24 maxlen: 24
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.147.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.162.0/24 maxlen: 24
85.133.163.0/24 maxlen: 24
85.133.164.0/22 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
185.41.0.0/24 maxlen: 24
185.41.1.0/24 maxlen: 24
185.41.2.0/24 maxlen: 24
185.41.3.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 13 Jul 2023 10:49:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:06:74:14:b8:e1:68:5e:48:8b:f9:2d:60:66:94:f8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jun 29 09:20:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a764cf9e8b00cc61a847613dd3102f88d18b4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bb:12:de:48:46:99:f1:06:02:ad:4e:d6:61:
3f:13:f4:93:a1:55:37:02:1b:1e:c6:29:5d:a5:29:
b9:c0:d4:30:20:55:d2:a4:e9:cc:59:87:2f:e0:3a:
4e:1a:e9:82:1e:b3:91:33:ba:08:80:e6:27:5b:63:
0c:91:e7:26:d5:b7:dd:cc:76:01:93:cb:65:bb:9a:
0a:e3:23:47:7f:81:a3:d5:9c:a1:dc:5d:8b:81:c7:
1f:68:f9:cc:eb:c9:ec:48:ed:9b:b3:03:8f:c5:2f:
40:24:38:df:d8:96:e7:da:7d:5b:69:d9:1c:cb:e1:
fb:47:2d:9d:fa:68:ae:a4:10:a6:92:3a:bf:27:78:
05:4a:d6:ce:b4:7c:38:5e:e8:d2:6a:8b:0b:e7:3e:
70:eb:3d:ae:7b:56:1c:db:2b:b6:a2:4e:e1:98:56:
19:65:3a:eb:c9:8a:85:69:e6:c1:96:a2:95:45:85:
ba:2c:1e:81:39:c3:72:8a:15:db:1b:2c:e5:f3:d8:
6b:ee:db:76:c9:8d:91:05:e7:75:ce:86:84:de:fc:
c0:08:c8:a2:ed:e9:1b:a1:3a:d7:46:87:59:55:82:
f6:97:94:50:db:e4:d6:67:a1:3b:98:52:3a:b1:2b:
fe:b7:90:0c:59:61:dd:d8:c9:9f:42:70:8b:44:6d:
04:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:76:4C:F9:E8:B0:0C:C6:1A:84:76:13:DD:31:02:F8:8D:18:B4:E2
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/CnZM-eiwDMYahHYT3TEC-I0YtOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/17
185.41.0.0/22
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
58:4c:f2:d2:03:cc:d6:4f:ba:2c:ef:5f:46:3c:7d:b4:02:13:
2a:2d:4c:cc:ef:d4:91:13:2e:0a:6a:8f:54:38:3d:05:81:8e:
be:d2:11:0f:8c:90:e9:f9:71:7a:0c:0f:06:bf:b4:98:0c:a4:
a0:21:3c:34:17:1f:77:aa:95:ea:8c:76:e9:95:af:70:15:66:
eb:13:ec:cb:3a:17:50:09:e4:b3:b7:cd:9d:4d:53:02:8d:2a:
45:bc:26:68:f8:de:9b:f2:50:8a:03:91:c2:13:ee:34:d2:30:
21:3a:58:06:f2:ea:66:d4:fb:92:73:b3:a1:ac:85:f7:48:d2:
43:5f:2e:69:64:a8:3d:96:ec:5d:a0:e4:10:9e:0c:f0:29:85:
b6:4d:33:9b:bc:19:ec:1a:d9:59:0d:d0:a5:8b:a3:66:05:f8:
61:5f:0f:48:48:72:a4:41:37:80:1d:e4:8e:18:da:6e:94:68:
b6:7b:aa:ed:b4:8c:8d:02:c8:85:8e:5a:03:26:f5:74:cd:b2:
8b:c1:42:da:0c:84:c8:a0:4b:fe:4d:b9:03:4d:0b:94:ca:10:
9a:15:cf:c0:54:5b:da:5c:14:15:92:28:dc:57:e7:64:ec:05:
27:49:c8:c3:3a:73:65:f0:d9:86:a8:67:2a:63:2f:95:c5:15:
a9:19:7d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:01 2024 by rpki-client on console-ams.rpki-client.org