Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/IopFSdDCPeCYusNNvTBygaJpO6E.roa
File: IopFSdDCPeCYusNNvTBygaJpO6E.roa (raw, json)
Hash identifier: HLbWw1U5EXxptUbwXCBtTRtmADDZzmFuHWvQANTOL2k=
Subject key identifier: 22:8A:45:49:D0:C2:3D:E0:98:BA:C3:4D:BD:30:72:81:A2:69:3B:A1
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01930600942F49A148B65595CE12FC94338F
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/IopFSdDCPeCYusNNvTBygaJpO6E.roa
Signing time: Thu 07 Nov 2024 09:42:01 +0000
ROA not before: Thu 07 Nov 2024 09:42:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.128.0/22 maxlen: 22
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.132.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.134.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.140.0/24 maxlen: 24
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.143.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.147.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.153.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.156.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.167.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
85.133.168.0/24 maxlen: 24
85.133.169.0/24 maxlen: 24
85.133.170.0/24 maxlen: 24
85.133.171.0/24 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.173.0/24 maxlen: 24
85.133.174.0/24 maxlen: 24
85.133.175.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.176.0/24 maxlen: 24
85.133.177.0/24 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.179.0/24 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.180.0/24 maxlen: 24
85.133.181.0/24 maxlen: 24
85.133.182.0/24 maxlen: 24
85.133.183.0/24 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.184.0/24 maxlen: 24
85.133.185.0/24 maxlen: 24
85.133.186.0/24 maxlen: 24
85.133.187.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.188.0/24 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.190.0/24 maxlen: 24
85.133.191.0/24 maxlen: 24
85.133.192.0/24 maxlen: 24
85.133.196.0/22 maxlen: 22
85.133.196.0/24 maxlen: 24
85.133.209.0/24 maxlen: 24
85.133.210.0/23 maxlen: 24
85.133.210.0/24 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/22 maxlen: 22
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.217.0/24 maxlen: 24
85.133.219.0/24 maxlen: 24
85.133.220.0/22 maxlen: 22
85.133.220.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.225.0/24 maxlen: 24
85.133.226.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.231.0/24 maxlen: 24
85.133.232.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.245.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
85.133.248.0/23 maxlen: 24
85.133.248.0/24 maxlen: 24
85.133.249.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 09 Nov 2024 16:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:06:00:94:2f:49:a1:48:b6:55:95:ce:12:fc:94:33:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Nov 7 09:42:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=228a4549d0c23de098bac34dbd307281a2693ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:31:4f:9a:31:ee:55:08:51:de:f1:d5:d6:be:
dc:ef:d9:7b:f2:75:ac:79:70:5f:c2:9a:91:bb:3c:
5d:e0:ef:3f:32:92:49:85:b4:ed:03:f3:57:92:52:
f7:67:48:84:cd:58:08:46:a4:52:da:90:ad:9a:b9:
d4:e3:25:a8:55:9a:20:1a:2e:1e:d5:44:be:59:de:
39:20:71:e7:56:90:dc:81:48:20:e1:8b:1d:87:26:
fb:6f:93:19:10:99:b9:d1:f1:47:a7:17:9b:eb:67:
5c:9c:79:79:72:54:f9:95:28:ae:ca:88:9a:f2:88:
af:f8:f6:df:e8:73:33:93:5f:f1:6c:9e:fa:03:f4:
a9:10:4f:95:9c:26:7b:77:55:8f:28:f3:b8:75:13:
03:23:d8:cb:77:c5:11:56:c0:8a:cb:1c:a9:9c:14:
65:56:c6:39:3e:6a:84:50:52:67:f8:37:50:f7:3b:
dd:61:3e:0a:83:76:27:f4:bc:a1:a3:ca:6e:8a:d4:
c7:d4:b3:4c:8c:5e:b3:f4:a0:b0:a9:bd:a6:10:23:
ce:90:32:f2:6c:94:08:3f:a8:5a:c0:32:b7:04:51:
98:f9:8a:66:61:1a:94:9c:f9:9b:80:b5:32:b1:6d:
dd:88:78:e3:00:fa:e7:9b:37:3e:54:cd:51:9f:63:
c1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8A:45:49:D0:C2:3D:E0:98:BA:C3:4D:BD:30:72:81:A2:69:3B:A1
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/IopFSdDCPeCYusNNvTBygaJpO6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/19
85.133.164.0/23
85.133.167.0-85.133.192.255
85.133.196.0/22
85.133.209.0-85.133.215.255
85.133.217.0/24
85.133.219.0-85.133.223.255
85.133.225.0-85.133.226.255
85.133.228.0-85.133.232.255
85.133.235.0/24
85.133.239.0/24
85.133.244.0/23
85.133.247.0-85.133.249.255
85.133.255.0/24
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
b4:dc:5b:5f:47:85:00:ee:8e:fc:8b:e4:60:a3:b7:7f:b2:f8:
f5:4c:4b:cd:24:c2:01:53:10:df:9f:81:71:ae:0c:40:74:7d:
1f:80:25:b3:bb:e9:c6:90:cc:a0:e7:08:ae:ac:a1:7b:68:86:
8e:3b:3a:fe:98:f7:e1:18:f7:ab:59:6d:b9:12:3d:a0:15:56:
0f:2b:67:75:65:a9:85:1e:e4:0d:41:90:18:c4:f8:02:54:eb:
d8:f5:f8:67:70:4c:07:59:21:2c:de:89:23:4c:66:c0:02:8f:
4c:93:82:19:38:df:b7:33:50:cb:33:24:7b:0c:f2:fb:8a:a1:
c6:c8:30:e4:6b:31:56:36:15:06:2c:e2:5f:6c:4f:77:81:43:
77:d9:b4:10:99:3c:88:22:36:77:1a:b7:8f:ca:b1:0c:da:89:
e6:8a:85:b3:43:92:d1:06:46:0e:eb:85:57:6f:1a:cd:d7:4a:
1d:b6:c6:52:0a:17:a6:7c:bc:a2:b1:9b:26:60:48:e1:bb:ae:
27:84:20:9e:0f:a0:50:2c:68:c9:c3:33:f3:be:94:ab:ff:9d:
6d:06:21:94:6e:c6:35:aa:0b:b5:7c:99:c2:87:88:2f:ef:fe:
fa:2f:31:dc:de:a7:7d:46:dd:51:2e:9d:e6:2a:56:4c:ac:56:
4b:79:1a:01
-----BEGIN CERTIFICATE-----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Generated at Sat Nov 9 19:53:16 2024 by rpki-client on console-ams.rpki-client.org