Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/LzBDoEuTzYyHdw4pWZUdxn_wT90.roa
File: LzBDoEuTzYyHdw4pWZUdxn_wT90.roa (raw, json)
Hash identifier: PoXCIfdy19Hy2bo6noRQ87PUxnI/UArXjxpGrqz2fXc=
Subject key identifier: 2F:30:43:A0:4B:93:CD:8C:87:77:0E:29:59:95:1D:C6:7F:F0:4F:DD
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01936837D647B656FC8A45B994A4D506BCAF
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/LzBDoEuTzYyHdw4pWZUdxn_wT90.roa
Signing time: Tue 26 Nov 2024 11:25:09 +0000
ROA not before: Tue 26 Nov 2024 11:25:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.128.0/22 maxlen: 22
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.132.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.134.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.140.0/24 maxlen: 24
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.143.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.147.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.153.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.156.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.167.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
85.133.168.0/24 maxlen: 24
85.133.169.0/24 maxlen: 24
85.133.170.0/24 maxlen: 24
85.133.171.0/24 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.173.0/24 maxlen: 24
85.133.174.0/24 maxlen: 24
85.133.175.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.176.0/24 maxlen: 24
85.133.177.0/24 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.179.0/24 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.180.0/24 maxlen: 24
85.133.181.0/24 maxlen: 24
85.133.182.0/24 maxlen: 24
85.133.183.0/24 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.184.0/24 maxlen: 24
85.133.185.0/24 maxlen: 24
85.133.186.0/24 maxlen: 24
85.133.187.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.188.0/24 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.190.0/24 maxlen: 24
85.133.191.0/24 maxlen: 24
85.133.192.0/24 maxlen: 24
85.133.196.0/22 maxlen: 22
85.133.196.0/24 maxlen: 24
85.133.207.0/24 maxlen: 24
85.133.209.0/24 maxlen: 24
85.133.210.0/23 maxlen: 24
85.133.210.0/24 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.215.0/24 maxlen: 24
85.133.218.0/23 maxlen: 24
85.133.220.0/22 maxlen: 22
85.133.220.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.225.0/24 maxlen: 24
85.133.226.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.231.0/24 maxlen: 24
85.133.232.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.245.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
85.133.248.0/23 maxlen: 24
85.133.248.0/24 maxlen: 24
85.133.249.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 26 Nov 2024 12:51:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:37:d6:47:b6:56:fc:8a:45:b9:94:a4:d5:06:bc:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Nov 26 11:25:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f3043a04b93cd8c87770e2959951dc67ff04fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e9:bc:38:01:d6:cb:fb:84:e2:d0:8a:ee:9b:
2a:6b:4d:b0:3c:e1:5f:12:27:c6:80:85:6a:8a:0b:
24:c6:91:64:48:95:5e:6f:d6:3a:c0:ea:db:25:e0:
59:0a:6d:21:71:0b:f8:73:d0:d9:44:d4:f6:d0:81:
6e:97:af:f1:a7:ea:c6:69:41:3b:c5:34:c1:cd:fb:
94:e9:4b:7b:81:68:71:58:e1:6b:b6:3e:57:45:36:
b4:6f:01:23:da:d7:0f:ff:ab:7c:23:40:77:ce:05:
05:5e:c7:36:44:23:78:35:06:99:40:da:d6:f0:ea:
b5:95:d8:0f:66:f6:6d:f3:13:06:69:b3:cb:b7:1f:
7f:a1:58:84:77:4a:50:63:a8:7a:6a:65:84:34:b0:
89:2e:e9:10:94:8f:2e:51:28:da:a4:59:54:68:1b:
48:97:48:2d:14:3c:ed:53:14:7f:54:4d:4b:59:c7:
d6:32:06:82:cb:6e:aa:9b:bb:04:d8:f9:fb:0e:3b:
01:0d:38:70:80:80:f4:65:3f:29:04:6e:01:45:be:
47:b4:bc:7f:11:70:e6:7e:9e:60:82:ea:2d:7f:7f:
89:21:bd:6e:cf:95:28:79:35:c5:fe:03:72:7f:af:
59:ed:0f:dc:98:ce:52:80:bc:94:46:40:3c:7e:4b:
da:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:30:43:A0:4B:93:CD:8C:87:77:0E:29:59:95:1D:C6:7F:F0:4F:DD
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/LzBDoEuTzYyHdw4pWZUdxn_wT90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/19
85.133.164.0/23
85.133.167.0-85.133.192.255
85.133.196.0/22
85.133.207.0/24
85.133.209.0-85.133.213.255
85.133.215.0/24
85.133.218.0-85.133.223.255
85.133.225.0-85.133.226.255
85.133.228.0-85.133.232.255
85.133.235.0/24
85.133.239.0/24
85.133.244.0/23
85.133.247.0-85.133.249.255
85.133.255.0/24
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
36:d6:fd:20:33:ab:8a:a1:1e:d9:26:e5:ef:d1:d8:d1:06:35:
90:8c:78:8d:92:23:95:79:3d:71:90:b5:bf:e4:9f:65:8d:f7:
82:9b:1d:62:3d:60:30:b1:79:58:15:bf:23:48:68:b2:cf:c2:
60:4a:7c:0c:fa:64:74:23:99:53:52:93:0e:34:a6:dd:ba:5e:
7e:3f:6e:94:95:ed:02:a6:25:cc:e8:24:3e:cb:90:ef:63:80:
6c:e0:8a:a7:7e:7a:f4:43:50:80:7c:76:e2:c2:29:30:df:8f:
c0:8d:f5:46:20:3f:7f:5d:e9:33:5d:41:7b:40:af:50:2f:62:
c1:4a:69:a9:ea:d4:72:f7:b2:7f:8f:c9:81:67:f1:3c:5c:30:
4b:ac:3f:7e:9a:5d:0d:bb:ef:18:b6:93:5c:64:e9:8c:4c:1c:
66:90:f8:53:9b:67:e2:bf:23:bd:cd:18:71:97:ef:ce:21:33:
e5:ed:d7:77:c9:83:ed:bf:aa:ee:63:b4:9e:25:ec:40:62:15:
8f:0d:c9:66:d4:1f:93:eb:96:56:c6:b5:6c:d5:e8:83:38:ba:
c1:b3:3f:0b:4c:55:a3:67:60:06:23:42:1a:e8:c3:14:df:55:
49:46:af:06:57:c3:b6:15:d9:c9:a3:a1:34:53:98:ad:79:7b:
ca:82:5d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:03:55 2025 by rpki-client