Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/JFVSlx7a2NpZBAhNAYtqwQ8hf14.roa
File: JFVSlx7a2NpZBAhNAYtqwQ8hf14.roa (raw, json)
Hash identifier: YKEZ9WRcbGKHyU7xQUXP7C1qcflgXUVCZ6cydzAZ2ao=
Subject key identifier: 24:55:52:97:1E:DA:D8:DA:59:04:08:4D:01:8B:6A:C1:0F:21:7F:5E
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01931A095D21EB2FD33704643F1FD914B921
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/JFVSlx7a2NpZBAhNAYtqwQ8hf14.roa
Signing time: Mon 11 Nov 2024 07:04:01 +0000
ROA not before: Mon 11 Nov 2024 07:04:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.128.0/22 maxlen: 22
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.132.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.134.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.140.0/24 maxlen: 24
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.143.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.147.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.153.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.156.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.167.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
85.133.168.0/24 maxlen: 24
85.133.169.0/24 maxlen: 24
85.133.170.0/24 maxlen: 24
85.133.171.0/24 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.173.0/24 maxlen: 24
85.133.174.0/24 maxlen: 24
85.133.175.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.176.0/24 maxlen: 24
85.133.177.0/24 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.179.0/24 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.180.0/24 maxlen: 24
85.133.181.0/24 maxlen: 24
85.133.182.0/24 maxlen: 24
85.133.183.0/24 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.184.0/24 maxlen: 24
85.133.185.0/24 maxlen: 24
85.133.186.0/24 maxlen: 24
85.133.187.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.188.0/24 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.190.0/24 maxlen: 24
85.133.191.0/24 maxlen: 24
85.133.192.0/24 maxlen: 24
85.133.196.0/22 maxlen: 22
85.133.196.0/24 maxlen: 24
85.133.207.0/24 maxlen: 24
85.133.209.0/24 maxlen: 24
85.133.210.0/23 maxlen: 24
85.133.210.0/24 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/22 maxlen: 22
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.215.0/24 maxlen: 24
85.133.219.0/24 maxlen: 24
85.133.220.0/22 maxlen: 22
85.133.220.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.225.0/24 maxlen: 24
85.133.226.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.231.0/24 maxlen: 24
85.133.232.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.245.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
85.133.248.0/23 maxlen: 24
85.133.248.0/24 maxlen: 24
85.133.249.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 11 Nov 2024 09:48:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1a:09:5d:21:eb:2f:d3:37:04:64:3f:1f:d9:14:b9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Nov 11 07:04:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=245552971edad8da5904084d018b6ac10f217f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:db:33:e1:a7:7b:6d:2e:70:d7:22:24:fd:76:
80:b6:b9:8a:6b:0b:b6:0f:4f:c4:3e:4f:11:e1:59:
21:d2:80:d0:4f:15:37:23:bf:be:fe:90:ff:ad:d0:
0b:10:0f:56:0b:9e:a0:96:27:b2:fa:6f:5b:43:29:
19:9c:03:fe:70:22:2e:1d:ab:e7:75:82:2d:e2:82:
5b:17:5f:bc:22:48:ef:bb:0b:93:cc:5f:f2:b7:ef:
e7:95:9a:a2:a4:2e:3c:49:a9:0a:81:28:1b:3a:24:
93:8c:8d:bd:42:44:18:6e:70:4b:57:62:2f:af:2d:
07:25:c3:f9:38:88:7f:a5:f6:ea:bb:9e:d0:ad:11:
c9:20:8d:6d:7c:9f:a4:3b:5b:fd:5b:26:81:e9:4d:
0c:43:68:23:c8:81:b0:c2:15:4c:c0:a5:e7:e1:6d:
e4:16:a2:d5:a1:18:b3:df:04:0b:07:38:2e:f5:c4:
8b:a6:b7:89:ca:3a:f5:bc:de:bb:b1:62:3c:9d:4f:
68:b7:50:e0:25:de:a3:df:03:cc:3d:b6:9e:55:e7:
26:81:0c:72:63:46:42:22:47:a0:13:62:f2:01:48:
d7:4b:95:eb:76:4f:a8:63:36:f1:4b:d3:a8:e7:1e:
72:53:dd:3d:65:b7:5c:a1:c9:d9:21:9a:59:a4:c5:
0c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:55:52:97:1E:DA:D8:DA:59:04:08:4D:01:8B:6A:C1:0F:21:7F:5E
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/JFVSlx7a2NpZBAhNAYtqwQ8hf14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/19
85.133.164.0/23
85.133.167.0-85.133.192.255
85.133.196.0/22
85.133.207.0/24
85.133.209.0-85.133.215.255
85.133.219.0-85.133.223.255
85.133.225.0-85.133.226.255
85.133.228.0-85.133.232.255
85.133.235.0/24
85.133.239.0/24
85.133.244.0/23
85.133.247.0-85.133.249.255
85.133.255.0/24
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
a4:08:6a:f8:4b:64:3c:d0:10:69:f9:06:c0:97:bc:d7:d0:c4:
36:37:f1:de:2b:6c:54:b1:63:ba:66:c3:88:5b:6f:71:e3:fb:
80:ab:e8:f2:eb:15:d0:ec:11:10:89:01:08:68:f3:e4:e2:fc:
4e:05:dc:e2:c9:10:b5:db:b8:fc:8e:79:2a:14:a3:f6:6c:5e:
b2:dc:2a:30:e7:a9:b6:97:67:19:9e:8f:82:46:1c:f9:f6:b6:
6e:e5:a1:60:07:24:63:9b:32:39:f7:dd:30:f4:0f:5a:36:84:
eb:ae:13:26:77:19:2b:e3:a4:5c:91:98:ca:73:ec:e7:5d:96:
29:7a:31:ff:c9:f6:4e:4a:69:5f:70:c1:84:59:38:26:68:50:
91:b9:73:a4:0a:6e:fa:74:46:7f:bf:8a:56:56:70:ee:b5:44:
94:0c:f2:b9:b5:20:4c:b8:c5:03:55:5e:46:07:1f:70:c6:9a:
9a:70:b6:4b:75:c6:1f:48:3a:75:2c:89:f5:02:f9:52:ef:ee:
24:fa:f0:dd:17:76:cc:7d:38:7e:5b:ed:22:31:ee:b6:19:be:
49:2a:96:50:72:e3:b4:98:a6:95:66:6b:91:b1:74:37:14:a7:
64:9b:1e:fa:3e:01:24:4c:86:01:2b:de:4b:f9:ac:da:e0:2e:
3c:3c:5f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 13:29:12 2024 by rpki-client on console-ams.rpki-client.org