Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/Gk40eDocG6WsaBuUFM2n-qnsaTg.roa
File: Gk40eDocG6WsaBuUFM2n-qnsaTg.roa (raw, json)
Hash identifier: ae2O9oT+gLU4iJGHUTFPpaHJ0gzk/AJwPsAyZjhHSzs=
Subject key identifier: 1A:4E:34:78:3A:1C:1B:A5:AC:68:1B:94:14:CD:A7:FA:A9:EC:69:38
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01896E642EAC9BB1EA11A0BDFEABC2B681DA
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/Gk40eDocG6WsaBuUFM2n-qnsaTg.roa
Signing time: Wed 19 Jul 2023 13:43:26 +0000
ROA not before: Wed 19 Jul 2023 13:43:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.231.0/24 maxlen: 24
85.133.232.0/24 maxlen: 24
85.133.233.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
85.133.232.0/22 maxlen: 22
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.227.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.240.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.240.0/22 maxlen: 22
85.133.237.0/24 maxlen: 24
85.133.245.0/24 maxlen: 24
85.133.246.0/24 maxlen: 24
85.133.242.0/24 maxlen: 24
85.133.243.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.241.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
85.133.253.0/24 maxlen: 24
85.133.248.0/22 maxlen: 22
85.133.249.0/24 maxlen: 24
85.133.250.0/24 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.252.0/22 maxlen: 22
85.133.254.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
85.133.179.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.174.0/24 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.192.0/22 maxlen: 22
85.133.196.0/24 maxlen: 24
85.133.197.0/24 maxlen: 24
85.133.199.0/24 maxlen: 24
85.133.196.0/22 maxlen: 22
85.133.203.0/24 maxlen: 24
85.133.204.0/24 maxlen: 24
85.133.205.0/24 maxlen: 24
85.133.200.0/22 maxlen: 22
85.133.206.0/24 maxlen: 24
85.133.200.0/24 maxlen: 24
85.133.201.0/24 maxlen: 24
85.133.204.0/22 maxlen: 22
85.133.210.0/24 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.207.0/24 maxlen: 24
85.133.212.0/22 maxlen: 22
85.133.208.0/24 maxlen: 24
85.133.209.0/24 maxlen: 24
85.133.217.0/24 maxlen: 24
85.133.218.0/24 maxlen: 24
85.133.219.0/24 maxlen: 24
85.133.215.0/24 maxlen: 24
85.133.216.0/24 maxlen: 24
85.133.220.0/24 maxlen: 24
85.133.220.0/22 maxlen: 22
85.133.226.0/24 maxlen: 24
85.133.221.0/24 maxlen: 24
85.133.222.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.224.0/22 maxlen: 22
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.128.0/17 maxlen: 24
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.128.0/22 maxlen: 22
85.133.134.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.140.0/24 maxlen: 24
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.147.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.156.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.153.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.162.0/24 maxlen: 24
85.133.163.0/24 maxlen: 24
85.133.160.0/24 maxlen: 24
85.133.161.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
185.41.0.0/24 maxlen: 24
185.41.1.0/24 maxlen: 24
185.41.2.0/24 maxlen: 24
185.41.3.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 20 Jul 2023 06:42:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6e:64:2e:ac:9b:b1:ea:11:a0:bd:fe:ab:c2:b6:81:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jul 19 13:43:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a4e34783a1c1ba5ac681b9414cda7faa9ec6938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:40:a7:92:a1:1a:19:b8:6c:91:7a:9d:aa:cb:
70:ab:c3:be:ce:37:d1:86:5a:9b:24:f3:1c:35:72:
ba:b5:9b:e9:98:3f:31:f8:09:13:bd:6f:d9:a0:d2:
11:94:cb:b3:2a:88:af:60:48:33:bc:71:70:59:76:
0a:7c:7a:1c:77:b2:0e:0a:63:f9:0b:c7:d9:d6:85:
39:fd:ad:5a:e3:93:5d:59:d6:d9:f4:dd:79:bb:4e:
d9:35:f3:71:82:11:b4:9b:b8:62:a3:75:9a:14:ec:
e0:96:0c:88:73:62:9a:06:bb:2d:97:60:e3:19:1d:
30:3f:fa:ba:0a:1d:44:4b:90:e8:13:c4:2c:22:cd:
1a:da:3c:83:45:46:e3:93:6d:4f:40:f6:c5:26:e5:
57:3b:64:e7:99:9e:5b:70:db:21:f2:8a:de:ae:88:
38:3c:dd:6b:9e:5f:f4:d7:a1:65:e8:fd:da:94:1f:
4b:29:8a:75:49:f2:8d:20:aa:26:19:13:d2:bd:6a:
f2:3d:d8:3b:c6:e7:05:fa:b7:4e:a9:17:7c:14:5b:
14:fa:fd:da:35:25:d3:b1:96:66:af:c4:ab:73:16:
9d:e9:b0:e0:b1:e6:e3:76:11:7e:0e:95:24:0f:11:
ae:15:d1:c5:32:ca:82:ba:67:b2:44:da:23:ae:c9:
0f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4E:34:78:3A:1C:1B:A5:AC:68:1B:94:14:CD:A7:FA:A9:EC:69:38
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/Gk40eDocG6WsaBuUFM2n-qnsaTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/17
185.41.0.0/22
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
70:09:be:3a:ca:7e:42:77:26:da:6d:22:26:07:39:c8:ff:15:
bb:66:02:1f:5e:d5:31:a5:67:43:1a:97:cc:87:cf:50:26:25:
4f:06:80:e4:b9:40:bf:82:99:61:84:de:af:e8:e3:04:ac:97:
de:62:bd:0f:6d:5c:a3:0b:76:44:3f:d3:00:d6:64:cf:9c:5d:
29:eb:e8:fb:cb:09:59:18:2d:b5:64:ef:7e:68:33:cb:e5:83:
6a:4d:16:3d:60:53:82:d0:35:0d:3e:2d:0f:4a:0f:27:d1:ac:
1e:95:15:65:b0:de:ce:db:4f:90:eb:83:21:5e:a5:1d:8f:24:
d3:6d:cd:e9:bb:21:d9:64:ec:d8:8a:52:b2:5f:10:b5:cd:4a:
01:92:22:ad:38:c4:bb:aa:ab:4d:bf:f5:56:52:3f:68:43:b7:
4c:68:7b:17:2c:e0:c8:64:33:8e:e7:0b:35:31:27:c9:0a:72:
42:ce:39:ef:69:f9:93:f0:c6:70:d1:3e:d4:73:38:26:45:72:
22:87:bb:1a:f4:8d:04:ec:27:cc:36:52:53:da:ef:d7:2d:6d:
f5:f3:6c:6b:64:e9:d7:a9:b5:ba:ad:5e:65:ba:ff:ae:09:36:
be:ed:76:3e:68:96:46:c9:6b:64:0c:3d:c4:7b:61:00:55:76:
bf:d1:6d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:12 2024 by rpki-client on console-fra.rpki-client.org