Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/KJuVdaJjdbtpgcrQoKfAol8m_MM.roa
File: KJuVdaJjdbtpgcrQoKfAol8m_MM.roa (raw, json)
Hash identifier: jm3NfGamXrI8hDG/k1s4E0SkEq91JnzgCkJtHGHND6Q=
Subject key identifier: 28:9B:95:75:A2:63:75:BB:69:81:CA:D0:A0:A7:C0:A2:5F:26:FC:C3
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018B5CA911749D32A0A029C36FD5EE9451BE
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/KJuVdaJjdbtpgcrQoKfAol8m_MM.roa
Signing time: Mon 23 Oct 2023 13:11:05 +0000
ROA not before: Mon 23 Oct 2023 13:11:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 85.133.199.0/24 maxlen: 24
85.133.202.0/24 maxlen: 24
85.133.205.0/24 maxlen: 24
85.133.208.0/24 maxlen: 24
85.133.217.0/24 maxlen: 24
85.133.215.0/24 maxlen: 24
85.133.219.0/24 maxlen: 24
85.133.221.0/24 maxlen: 24
85.133.227.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
85.133.250.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Oct 2023 13:57:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5c:a9:11:74:9d:32:a0:a0:29:c3:6f:d5:ee:94:51:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Oct 23 13:11:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=289b9575a26375bb6981cad0a0a7c0a25f26fcc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:16:bd:01:81:07:53:ae:65:01:e4:33:64:2d:
ba:89:4c:9e:f4:9a:32:42:3b:d3:82:d8:ae:a5:39:
36:72:ca:bb:44:c9:92:a2:d0:d8:0c:03:d8:4c:5b:
90:80:ab:47:3a:17:58:26:84:d8:79:75:5e:76:e5:
22:ff:73:fc:70:4f:33:2f:76:11:5b:88:9d:00:85:
c8:01:46:3a:4b:08:b8:d5:a0:48:ee:c0:68:c8:cb:
0c:e9:8f:b4:43:d8:17:3e:79:6a:40:5b:1d:92:1e:
a8:4e:c8:a6:2b:d7:19:bd:87:ce:cd:55:58:70:01:
66:70:70:92:f7:49:31:2e:ba:04:6e:de:e2:5b:11:
6b:ef:d5:4e:86:86:4a:ad:cb:63:a6:e6:6a:78:7a:
f9:e0:36:98:90:b6:82:d8:d3:99:30:12:1c:96:bb:
02:63:b0:43:a9:66:14:88:1e:8e:c1:d2:e0:b6:3b:
eb:9c:9e:4c:d3:20:a8:92:51:10:d8:97:60:c3:ed:
ac:df:8c:66:be:b5:5e:c9:4f:11:56:9d:91:19:bc:
b1:c8:60:f6:08:0b:d9:da:df:f1:ea:c1:12:7c:91:
6c:92:d6:27:62:39:bd:90:a9:0e:33:63:1d:15:0d:
18:3a:5a:89:f5:2d:fb:3c:3b:78:3b:4e:57:6d:8e:
4a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:9B:95:75:A2:63:75:BB:69:81:CA:D0:A0:A7:C0:A2:5F:26:FC:C3
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/KJuVdaJjdbtpgcrQoKfAol8m_MM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.146.0/24
85.133.199.0/24
85.133.202.0/24
85.133.205.0/24
85.133.208.0/24
85.133.215.0/24
85.133.217.0/24
85.133.219.0/24
85.133.221.0/24
85.133.227.0-85.133.228.255
85.133.250.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:0e:dc:b9:0f:f9:26:37:4d:37:cf:1c:6e:32:2d:4f:92:75:
e8:0b:04:e9:f4:fe:92:b8:8a:1f:99:37:ee:91:33:da:bb:76:
8c:ba:27:4d:a3:5d:de:4c:84:b1:f6:30:30:04:62:e0:50:0d:
d5:4c:20:d4:73:f9:d3:cd:0a:94:b6:1b:02:d1:60:cd:6e:47:
02:6e:4b:92:3c:8a:cd:ce:b9:1d:63:67:20:39:f7:20:fe:07:
98:08:ad:4d:25:06:cc:7c:85:41:c1:93:51:50:9d:d6:1b:98:
8f:fd:22:06:08:f8:93:4d:d5:fc:e0:f7:28:08:08:d5:e4:dc:
4f:df:b9:0f:66:08:61:b0:bb:f6:70:80:37:a7:4a:5d:6a:49:
f8:ae:0b:9c:2f:3a:ff:b9:3d:20:3a:37:3c:b0:fe:84:e6:d5:
fb:dd:28:26:06:b8:10:37:b5:34:b2:a7:1b:5d:08:c8:19:0e:
a6:79:a8:35:22:21:58:63:8b:21:ad:34:e3:5e:4c:a0:bf:6d:
7c:12:8c:06:0b:12:fd:44:c1:9c:9a:aa:d0:dc:9f:0e:df:84:
a3:75:58:b7:ed:fb:b7:4b:e6:36:6a:49:99:3d:66:0d:3c:4e:
6a:5f:4e:2f:4e:4a:1a:70:74:bb:ec:fe:3f:d5:f2:de:d5:65:
82:86:20:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:13 2024 by rpki-client on console-fra.rpki-client.org