Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/HIoBSRKZG1U2yw_SAzsufm5D3fw.roa
File: HIoBSRKZG1U2yw_SAzsufm5D3fw.roa (raw, json)
Hash identifier: CTsv8JABJvOySKSrLsQY913A1idhURG7RlvyUJ/p/MQ=
Subject key identifier: 1C:8A:01:49:12:99:1B:55:36:CB:0F:D2:03:3B:2E:7E:6E:43:DD:FC
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0189B5EEE01C4369EB9B71C74E50FCC43742
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/HIoBSRKZG1U2yw_SAzsufm5D3fw.roa
Signing time: Wed 02 Aug 2023 11:07:58 +0000
ROA not before: Wed 02 Aug 2023 11:07:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.231.0/24 maxlen: 24
85.133.232.0/24 maxlen: 24
85.133.232.0/22 maxlen: 22
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.240.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.240.0/22 maxlen: 22
85.133.245.0/24 maxlen: 24
85.133.246.0/24 maxlen: 24
85.133.243.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
85.133.248.0/23 maxlen: 24
85.133.249.0/24 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.252.0/22 maxlen: 22
85.133.254.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.174.0/24 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.192.0/22 maxlen: 22
85.133.196.0/24 maxlen: 24
85.133.197.0/24 maxlen: 24
85.133.196.0/22 maxlen: 22
85.133.203.0/24 maxlen: 24
85.133.204.0/24 maxlen: 24
85.133.205.0/24 maxlen: 24
85.133.200.0/22 maxlen: 22
85.133.206.0/24 maxlen: 24
85.133.200.0/24 maxlen: 24
85.133.201.0/24 maxlen: 24
85.133.204.0/22 maxlen: 22
85.133.210.0/23 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.207.0/24 maxlen: 24
85.133.212.0/22 maxlen: 22
85.133.209.0/24 maxlen: 24
85.133.217.0/24 maxlen: 24
85.133.218.0/24 maxlen: 24
85.133.219.0/24 maxlen: 24
85.133.215.0/24 maxlen: 24
85.133.220.0/24 maxlen: 24
85.133.220.0/22 maxlen: 22
85.133.226.0/24 maxlen: 24
85.133.221.0/24 maxlen: 24
85.133.222.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.224.0/22 maxlen: 22
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.128.0/17 maxlen: 24
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.128.0/22 maxlen: 22
85.133.134.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.140.0/24 maxlen: 24
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.147.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.162.0/24 maxlen: 24
85.133.163.0/24 maxlen: 24
85.133.160.0/24 maxlen: 24
85.133.161.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.168.0/22 maxlen: 24
185.41.0.0/24 maxlen: 24
185.41.1.0/24 maxlen: 24
185.41.2.0/24 maxlen: 24
185.41.3.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b5:ee:e0:1c:43:69:eb:9b:71:c7:4e:50:fc:c4:37:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Aug 2 11:07:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c8a014912991b5536cb0fd2033b2e7e6e43ddfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:72:bb:20:49:65:a9:28:6c:c6:d2:e6:af:fc:
ea:53:4d:dd:2f:8b:ab:4f:d1:f6:e1:ea:8c:09:c8:
2f:46:f3:d4:bc:58:a6:6a:10:ba:4e:81:d5:d3:44:
45:e6:bc:93:37:2e:ae:f4:21:e2:e7:4e:da:9f:96:
f9:41:07:6f:a8:2a:61:eb:c1:04:d2:2f:5f:d2:d6:
ee:20:a3:a6:a8:c8:3c:e8:fc:c7:35:8d:b3:9e:e8:
6f:ae:a2:44:8f:b7:74:ab:1b:26:cb:bb:a0:66:c8:
8f:3c:a8:0a:f1:c3:8a:ab:91:11:a7:5a:0f:6e:41:
e5:45:3d:3c:aa:6f:25:71:3a:40:70:08:6e:46:64:
e4:a2:66:71:5e:78:d0:ff:86:08:e0:01:76:75:7e:
71:c4:b9:93:55:6b:9f:46:d7:64:b9:fd:a3:19:fe:
40:85:37:41:3f:04:ae:71:e2:a5:57:0b:87:ce:1c:
8f:0d:18:cc:3b:b0:17:96:c2:46:5c:42:8a:a4:2c:
14:de:91:3b:5d:22:60:b4:18:81:ac:1a:b3:74:2a:
55:6b:ae:42:d2:73:1e:29:ed:3c:ba:08:25:df:40:
27:97:76:73:81:c1:e3:ec:eb:d8:d6:87:f7:c5:3a:
72:55:3f:0b:ee:c8:18:b5:ce:55:5a:44:2b:19:bf:
74:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8A:01:49:12:99:1B:55:36:CB:0F:D2:03:3B:2E:7E:6E:43:DD:FC
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/HIoBSRKZG1U2yw_SAzsufm5D3fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/17
185.41.0.0/22
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
a8:64:5a:aa:ac:e6:cd:72:f2:44:76:bd:ce:89:4b:36:58:51:
22:00:ff:45:30:ec:46:97:47:a0:63:37:d7:67:0f:e6:9b:7f:
7f:98:f7:65:32:bb:85:01:a1:42:e0:72:d4:61:49:53:c0:24:
a6:7a:36:2c:cb:b5:5a:1a:d6:8b:d4:a6:54:34:51:d9:98:f3:
24:9b:62:f1:6f:ae:84:ba:d4:3c:c9:47:fa:32:12:5e:41:d0:
6c:94:b0:ab:05:07:97:d9:b0:26:47:eb:f4:14:ea:d7:8d:ee:
2a:11:eb:e0:fe:1f:f8:23:d1:16:1e:f4:fa:1b:8a:94:1d:3b:
dd:66:79:04:a3:48:a5:d6:cc:8f:7f:16:bc:6b:b8:2c:7c:d0:
08:f8:ae:53:25:5d:6e:d9:e4:2e:fa:cc:b2:b8:b1:c9:84:87:
67:d6:e8:73:73:bf:9c:2c:55:26:27:f8:c2:e0:7a:e3:33:3a:
9e:48:29:df:a5:49:54:9a:ac:c5:f5:4e:51:50:d3:ea:98:ce:
4f:42:3d:ba:3b:5e:b0:45:20:a1:65:26:cd:bd:f2:c8:7b:72:
81:99:b4:e9:42:76:43:af:00:b8:d8:af:d8:6c:01:19:09:4f:
c8:76:0d:5b:10:26:6f:db:61:2d:bf:d2:4f:d3:57:b3:28:b6:
0d:de:e2:25
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYm17uAcQ2nrm3HHTlD8xDdCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjMwODAyMTEwNzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzhhMDE0OTEyOTkxYjU1MzZjYjBmZDIwMzNiMmU3ZTZlNDNkZGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonK7IEllqShsxtLmr/zqU03dL4ur
T9H24eqMCcgvRvPUvFimahC6ToHV00RF5ryTNy6u9CHi507an5b5QQdvqCph68EE
0i9f0tbuIKOmqMg86PzHNY2znuhvrqJEj7d0qxsmy7ugZsiPPKgK8cOKq5ERp1oP
bkHlRT08qm8lcTpAcAhuRmTkomZxXnjQ/4YI4AF2dX5xxLmTVWufRtdkuf2jGf5A
hTdBPwSuceKlVwuHzhyPDRjMO7AXlsJGXEKKpCwU3pE7XSJgtBiBrBqzdCpVa65C
0nMeKe08uggl30Anl3ZzgcHj7OvY1of3xTpyVT8L7sgYtc5VWkQrGb90iwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFByKAUkSmRtVNssP0gM7Ln5uQ938MB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvSElvQlNSS1pHMVUyeXdfU0F6c3VmbTVEM2Z3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQHVYWAAwQC
uSkAMA0EAgACMAcDBQMqBIfAMA0GCSqGSIb3DQEBCwUAA4IBAQCoZFqqrObNcvJE
dr3OiUs2WFEiAP9FMOxGl0egYzfXZw/mm39/mPdlMruFAaFC4HLUYUlTwCSmejYs
y7VaGtaL1KZUNFHZmPMkm2Lxb66EutQ8yUf6MhJeQdBslLCrBQeX2bAmR+v0FOrX
je4qEevg/h/4I9EWHvT6G4qUHTvdZnkEo0il1syPfxa8a7gsfNAI+K5TJV1u2eQu
+syyuLHJhIdn1uhzc7+cLFUmJ/jC4HrjMzqeSCnfpUlUmqzF9U5RUNPqmM5PQj26
O16wRSChZSbNvfLIe3KBmbTpQnZDrwC42K/YbAEZCU/Idg1bECZv22Etv9JP01ez
KLYN3uIl
-----END CERTIFICATE-----
Generated at Tue Aug 8 08:56:00 2023 by rpki-client on console-ams.rpki-client.org