Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/EgE6JPKhN-hZFLNTdkHK_mGHgGU.roa
File: EgE6JPKhN-hZFLNTdkHK_mGHgGU.roa (raw, json)
Hash identifier: dsvDMEjzB51L0XJU++7lJwM4sgmjFU0ZzB5/eYZEl8M=
Subject key identifier: 12:01:3A:24:F2:A1:37:E8:59:14:B3:53:76:41:CA:FE:61:87:80:65
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018692A8DCB401EF561A1E04304FC671BFA8
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/EgE6JPKhN-hZFLNTdkHK_mGHgGU.roa
Signing time: Mon 27 Feb 2023 11:36:25 +0000
ROA not before: Mon 27 Feb 2023 11:36:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52209
IP address blocks: 85.133.227.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
85.133.233.0/24 maxlen: 24
85.133.237.0/24 maxlen: 24
85.133.238.0/24 maxlen: 24
85.133.234.0/24 maxlen: 24
85.133.241.0/24 maxlen: 24
85.133.242.0/24 maxlen: 24
85.133.250.0/24 maxlen: 24
85.133.253.0/24 maxlen: 24
85.133.179.0/24 maxlen: 24
85.133.174.0/24 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.194.0/24 maxlen: 24
85.133.199.0/24 maxlen: 24
85.133.205.0/24 maxlen: 24
85.133.208.0/24 maxlen: 24
85.133.215.0/24 maxlen: 24
85.133.216.0/24 maxlen: 24
85.133.217.0/24 maxlen: 24
85.133.219.0/24 maxlen: 24
85.133.221.0/24 maxlen: 24
85.133.132.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.143.0/24 maxlen: 24
85.133.151.0/24 maxlen: 24
85.133.153.0/24 maxlen: 24
85.133.156.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.166.0/24 maxlen: 24
85.133.160.0/24 maxlen: 24
85.133.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Mar 2023 08:25:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:92:a8:dc:b4:01:ef:56:1a:1e:04:30:4f:c6:71:bf:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Feb 27 11:36:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12013a24f2a137e85914b3537641cafe61878065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:fd:db:4b:4b:7f:4c:40:1b:d8:d8:8b:53:
22:37:e2:ca:bc:ec:3d:db:c6:b3:2a:93:02:b2:d8:
ed:14:a7:62:33:90:98:be:aa:ef:e5:17:57:75:fa:
be:f9:d7:88:e0:c0:ed:53:8e:f3:b1:1c:94:dc:66:
4a:2c:ee:cf:8f:a6:0c:d4:d3:db:72:62:a3:6d:45:
78:0d:98:4b:54:40:7e:e2:e1:02:cf:25:31:41:0e:
e4:8d:11:90:8c:88:e5:01:11:10:ae:77:19:e1:a4:
b5:24:8b:db:3a:9b:7a:2c:a9:5e:ad:38:af:04:ae:
9f:18:d2:09:d2:05:1a:a3:3a:f9:1a:65:11:41:82:
69:d3:f7:4a:a4:26:a9:74:cf:5e:05:b1:3e:dd:4c:
a0:d8:f4:07:d3:82:4f:17:ec:f9:fb:c5:41:d0:76:
e5:fa:d8:18:a8:d9:59:2e:54:03:e3:89:e6:cd:1b:
fe:1a:38:d5:05:e4:32:06:12:75:91:f9:23:d0:8a:
4e:60:d2:8d:d9:95:be:46:14:1a:a4:31:49:f0:7b:
bf:ad:c8:11:de:d4:4a:3a:ff:df:9a:e9:95:66:07:
22:25:86:37:81:47:50:63:c0:37:ad:45:5e:e9:f9:
9a:58:50:c7:b5:5b:4f:40:1e:22:65:34:e9:b8:a4:
38:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:01:3A:24:F2:A1:37:E8:59:14:B3:53:76:41:CA:FE:61:87:80:65
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/EgE6JPKhN-hZFLNTdkHK_mGHgGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.132.0/24
85.133.135.0/24
85.133.137.0/24
85.133.143.0/24
85.133.151.0/24
85.133.153.0/24
85.133.156.0/24
85.133.160.0/23
85.133.165.0-85.133.166.255
85.133.174.0/24
85.133.178.0/23
85.133.194.0/24
85.133.199.0/24
85.133.205.0/24
85.133.208.0/24
85.133.215.0-85.133.217.255
85.133.219.0/24
85.133.221.0/24
85.133.227.0-85.133.228.255
85.133.233.0-85.133.234.255
85.133.237.0-85.133.238.255
85.133.241.0-85.133.242.255
85.133.250.0/24
85.133.253.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:e5:70:85:da:b9:27:19:fc:53:3d:ca:33:5f:3d:39:92:62:
59:52:a7:f6:87:b6:3f:f5:e3:b0:af:6b:97:7c:d7:67:99:f1:
e9:55:f0:4c:06:0f:eb:b9:62:90:35:38:27:5a:6e:52:ee:3b:
57:70:eb:98:40:ff:aa:03:90:ba:f5:79:2d:d8:b6:3b:4d:77:
f6:f3:37:b8:01:74:fc:4f:d7:56:66:0c:0b:f6:75:45:89:ec:
ba:12:62:9b:44:4d:86:a5:1c:a1:e9:e7:20:ad:4b:ed:98:c3:
13:ae:0b:7f:36:49:0f:fd:18:f4:bc:fa:85:57:ba:85:0b:00:
cc:06:9d:29:32:3c:32:47:3b:51:b3:da:ca:c1:74:ac:89:b1:
be:09:b1:cd:cd:47:de:2f:a7:36:ed:b4:02:a9:27:56:a6:61:
5d:d7:c1:3b:71:fd:38:62:53:37:87:b6:d6:f6:2f:b2:83:2b:
37:73:c1:36:25:6e:eb:70:ca:e9:03:f4:98:8d:a0:23:f3:02:
07:ec:de:54:09:0c:98:39:61:5f:0b:ae:56:1c:00:74:82:0a:
d4:40:04:d8:1e:23:31:c4:0a:8f:a6:06:d8:44:c5:9b:fe:4b:
20:2e:36:d3:e7:29:44:1d:08:f7:b4:d6:43:d9:14:1f:e7:d3:
ca:3f:1d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:12 2024 by rpki-client on console-fra.rpki-client.org