Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/F0ZegRSYA6ngXIWS1ZpNdmOyYF8.roa
File: F0ZegRSYA6ngXIWS1ZpNdmOyYF8.roa (raw, json)
Hash identifier: YGqrJ2NM3KQ9Cc/9+JImLYhAQGLIOukdfQLwLaDq75g=
Subject key identifier: 17:46:5E:81:14:98:03:A9:E0:5C:85:92:D5:9A:4D:76:63:B2:60:5F
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0188240846B031E619D0C180EC1D53624EE6
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/F0ZegRSYA6ngXIWS1ZpNdmOyYF8.roa
Signing time: Tue 16 May 2023 10:08:22 +0000
ROA not before: Tue 16 May 2023 10:08:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.231.0/24 maxlen: 24
85.133.232.0/24 maxlen: 24
85.133.232.0/22 maxlen: 22
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.240.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.240.0/22 maxlen: 22
85.133.245.0/24 maxlen: 24
85.133.246.0/24 maxlen: 24
85.133.243.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
85.133.248.0/22 maxlen: 22
85.133.249.0/24 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.252.0/22 maxlen: 22
85.133.254.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.192.0/22 maxlen: 22
85.133.196.0/24 maxlen: 24
85.133.197.0/24 maxlen: 24
85.133.196.0/22 maxlen: 22
85.133.203.0/24 maxlen: 24
85.133.204.0/24 maxlen: 24
85.133.200.0/22 maxlen: 22
85.133.206.0/24 maxlen: 24
85.133.200.0/24 maxlen: 24
85.133.201.0/24 maxlen: 24
85.133.204.0/22 maxlen: 22
85.133.210.0/24 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.207.0/24 maxlen: 24
85.133.212.0/22 maxlen: 22
85.133.209.0/24 maxlen: 24
85.133.216.0/24 maxlen: 24
85.133.220.0/24 maxlen: 24
85.133.220.0/22 maxlen: 22
85.133.226.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.224.0/22 maxlen: 22
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.128.0/17 maxlen: 24
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.128.0/22 maxlen: 22
85.133.134.0/24 maxlen: 24
85.133.136.0/22 maxlen: 22
85.133.133.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.140.0/24 maxlen: 24
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.147.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.156.0/22 maxlen: 22
85.133.154.0/24 maxlen: 24
85.133.162.0/24 maxlen: 24
85.133.163.0/24 maxlen: 24
85.133.164.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.168.0/22 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 21 Jun 2023 12:46:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:24:08:46:b0:31:e6:19:d0:c1:80:ec:1d:53:62:4e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: May 16 10:08:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17465e81149803a9e05c8592d59a4d7663b2605f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:98:84:6c:d7:72:71:77:48:9b:55:da:12:a3:
9e:d8:eb:67:9f:d5:b4:eb:ed:4d:ce:5b:a2:d9:68:
52:b9:5b:62:6b:d7:46:9f:ce:23:3b:99:56:b9:70:
89:9e:95:38:7d:a6:f2:29:d7:0d:04:09:d7:1c:6a:
e0:d1:29:03:5e:88:87:0c:3b:6b:d2:50:d6:2e:d4:
9a:ee:f8:b7:0f:d8:24:d5:d8:a3:ef:a7:38:06:01:
a9:29:5e:26:b5:c9:05:33:7a:ed:1a:46:23:d1:20:
48:fc:a0:a3:c8:2e:c8:33:a0:c6:c4:e3:fd:e3:f4:
70:c8:46:71:5e:c7:79:e0:d8:7e:eb:f8:83:ad:f5:
04:dc:b2:87:af:f7:19:5d:b4:40:a8:4f:e2:69:80:
3a:de:c9:5a:2f:d7:5e:7e:a1:76:55:d0:6c:05:1b:
c6:d3:16:92:3e:dc:88:73:a8:8c:5b:9d:2a:0b:06:
a7:f6:ec:83:6e:09:11:da:e7:68:bc:10:35:72:8d:
1d:7e:ef:aa:21:72:5b:29:15:08:7a:c7:b3:aa:3a:
94:fd:a3:f2:fe:5b:8c:e6:20:61:0d:59:73:13:1c:
ae:f0:62:59:6f:f3:bc:ae:1a:09:9f:eb:b7:9e:3b:
fb:3c:c2:53:f9:4b:fc:39:65:98:0d:c6:54:48:ae:
a3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:46:5E:81:14:98:03:A9:E0:5C:85:92:D5:9A:4D:76:63:B2:60:5F
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/F0ZegRSYA6ngXIWS1ZpNdmOyYF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/17
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
98:3d:74:6a:67:7a:90:c7:39:60:48:ed:e6:ea:cf:d9:74:a0:
e9:c5:2e:5e:ad:e8:33:ee:a2:1c:f9:ea:ab:33:76:d9:48:90:
20:2e:1d:61:cd:73:f0:4b:04:31:dc:f6:ee:5a:40:68:08:4a:
bb:92:7b:43:0c:8e:12:42:98:63:28:ab:ab:f1:f9:64:fa:30:
67:f1:8e:dc:25:e5:71:c9:92:c7:c2:8c:e4:21:4c:f9:58:be:
06:4c:b1:83:fb:c0:d3:ff:07:19:4f:80:48:8e:6a:d0:30:ac:
20:df:9c:e2:42:93:68:fd:51:2d:50:df:1c:b3:fd:e3:d5:cc:
e5:64:7d:8f:ca:b7:4b:19:ce:54:e9:ac:a5:f9:5d:28:6b:86:
d8:c4:b0:6f:6c:e3:46:8f:12:e3:1d:82:79:9a:43:9e:32:db:
4e:0d:c7:ba:3c:36:47:42:cd:c4:ce:82:ef:0a:46:b3:d6:5e:
a4:1b:e1:4b:c9:76:3d:82:64:02:97:e1:52:45:d4:38:a1:33:
ae:f1:4e:b5:17:ff:d4:ff:c7:74:cd:85:a0:c8:9b:12:ef:de:
78:e3:39:04:5f:c3:2d:d4:4c:00:0c:c3:e6:60:5f:fd:7c:2b:
e9:fd:23:62:86:62:8e:29:8d:2d:51:68:d1:db:41:59:6e:a0:
bf:89:5e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:01 2024 by rpki-client on console-ams.rpki-client.org