Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/NKN8n-zPQejiuULbxLDzx9FwqTI.roa
File: NKN8n-zPQejiuULbxLDzx9FwqTI.roa (raw, json)
Hash identifier: 8O+7DpBaC4HQ/4uChURFq7vPJ/IhcNO56J/daz5qozg=
Subject key identifier: 34:A3:7C:9F:EC:CF:41:E8:E2:B9:42:DB:C4:B0:F3:C7:D1:70:A9:32
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01894EDF1B5755AA3256A0A3AD032C81EA2F
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/NKN8n-zPQejiuULbxLDzx9FwqTI.roa
Signing time: Thu 13 Jul 2023 10:49:51 +0000
ROA not before: Thu 13 Jul 2023 10:49:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.231.0/24 maxlen: 24
85.133.232.0/24 maxlen: 24
85.133.232.0/22 maxlen: 22
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.227.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.240.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.240.0/22 maxlen: 22
85.133.237.0/24 maxlen: 24
85.133.245.0/24 maxlen: 24
85.133.246.0/24 maxlen: 24
85.133.243.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
85.133.253.0/24 maxlen: 24
85.133.248.0/22 maxlen: 22
85.133.249.0/24 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.252.0/22 maxlen: 22
85.133.254.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.174.0/24 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.192.0/22 maxlen: 22
85.133.196.0/24 maxlen: 24
85.133.197.0/24 maxlen: 24
85.133.196.0/22 maxlen: 22
85.133.203.0/24 maxlen: 24
85.133.204.0/24 maxlen: 24
85.133.200.0/22 maxlen: 22
85.133.206.0/24 maxlen: 24
85.133.200.0/24 maxlen: 24
85.133.201.0/24 maxlen: 24
85.133.204.0/22 maxlen: 22
85.133.210.0/24 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.207.0/24 maxlen: 24
85.133.212.0/22 maxlen: 22
85.133.209.0/24 maxlen: 24
85.133.218.0/24 maxlen: 24
85.133.216.0/24 maxlen: 24
85.133.220.0/24 maxlen: 24
85.133.220.0/22 maxlen: 22
85.133.226.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.224.0/22 maxlen: 22
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.128.0/17 maxlen: 24
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.128.0/22 maxlen: 22
85.133.134.0/24 maxlen: 24
85.133.136.0/22 maxlen: 22
85.133.133.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.143.0/24 maxlen: 24
85.133.140.0/24 maxlen: 24
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.147.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.162.0/24 maxlen: 24
85.133.163.0/24 maxlen: 24
85.133.164.0/22 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
185.41.0.0/24 maxlen: 24
185.41.1.0/24 maxlen: 24
185.41.2.0/24 maxlen: 24
185.41.3.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4e:df:1b:57:55:aa:32:56:a0:a3:ad:03:2c:81:ea:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jul 13 10:49:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34a37c9feccf41e8e2b942dbc4b0f3c7d170a932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:46:57:2a:5e:2b:c8:03:85:c4:02:e4:71:d8:
33:50:4b:12:65:ca:97:c7:29:7b:4d:73:c8:d7:b0:
4a:78:61:ef:d2:a7:fe:15:c8:45:64:89:ac:02:2f:
6e:6b:66:63:b3:7a:40:bc:6c:95:56:3a:b9:21:8a:
4b:81:be:6e:2c:d8:84:d7:e5:f1:b8:1f:89:f9:24:
94:0d:18:cc:b0:ba:71:9e:81:f8:28:c5:ba:71:ee:
03:05:7b:21:30:77:a9:75:b0:69:a0:44:13:68:a5:
50:da:48:e2:07:46:ad:c3:01:cb:2d:6a:c7:6e:15:
a9:08:dc:3e:ee:6d:c8:8a:52:78:0c:80:8a:8b:c3:
82:1e:17:06:a5:c9:c2:d4:6b:06:d7:12:05:a7:2c:
59:30:3d:bd:ad:13:91:a6:fa:59:21:b4:db:90:44:
e5:ec:33:7b:de:36:77:7a:87:28:72:ce:88:ea:81:
2a:b2:46:54:a2:ca:c3:30:ae:24:53:1a:3a:15:3a:
dc:2c:7e:bb:c6:f0:65:c7:71:87:9d:b1:3c:c0:ad:
be:cf:75:ab:30:66:cf:4b:ed:07:61:5c:1f:28:13:
c8:fc:ad:02:69:4f:7a:ed:b7:99:3c:0c:51:fa:54:
92:d1:94:fd:71:91:66:7c:72:a0:36:9e:7f:4b:ea:
9a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A3:7C:9F:EC:CF:41:E8:E2:B9:42:DB:C4:B0:F3:C7:D1:70:A9:32
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/NKN8n-zPQejiuULbxLDzx9FwqTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/17
185.41.0.0/22
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
a5:69:c7:e3:41:83:5e:e8:44:dc:ec:36:1a:c6:4f:2f:e1:88:
8e:9a:f6:8c:dc:7a:93:3e:fe:08:2a:6c:12:56:5e:3f:77:ad:
3e:f4:fa:e1:e5:93:b8:57:1f:44:25:8c:e2:a0:6f:0c:d0:58:
9f:4f:0c:d6:f3:6e:37:c0:95:f1:b3:5a:7e:e3:fe:91:8d:91:
60:6d:36:6b:27:e5:89:aa:5b:0a:54:e9:e4:0c:28:f4:6d:4e:
e8:f8:91:01:92:c5:f1:1a:67:61:a8:87:20:11:37:79:3c:88:
0d:6f:fb:cb:98:a1:d1:fd:e8:68:27:3f:d9:f8:66:37:65:3b:
42:0e:0f:60:3a:9e:d6:44:f8:14:2c:79:08:b3:2f:22:4d:99:
e9:43:4d:3d:ec:ec:16:38:e6:e1:7c:f4:e3:bc:a0:45:5b:a5:
d1:82:a7:5c:aa:39:d3:54:67:b2:34:f3:0e:dd:ed:2a:a5:00:
03:bd:2a:71:31:91:c3:76:a2:2f:a7:0b:5f:8d:f5:5d:e1:c9:
d9:bb:14:ac:06:19:4a:ce:9c:d8:22:e9:25:5f:3a:53:04:71:
5b:5c:35:d9:30:c3:8d:ca:c6:56:77:3c:fc:d8:13:a0:49:37:
2f:0b:19:5e:f8:0c:df:a8:08:82:ce:48:39:c7:78:3c:1f:a5:
5b:87:d7:0d
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYlO3xtXVaoyVqCjrQMsgeovMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjMwNzEzMTA0OTUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGEzN2M5ZmVjY2Y0MWU4ZTJiOTQyZGJjNGIwZjNjN2QxNzBhOTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkZXKl4ryAOFxALkcdgzUEsSZcqX
xyl7TXPI17BKeGHv0qf+FchFZImsAi9ua2Zjs3pAvGyVVjq5IYpLgb5uLNiE1+Xx
uB+J+SSUDRjMsLpxnoH4KMW6ce4DBXshMHepdbBpoEQTaKVQ2kjiB0atwwHLLWrH
bhWpCNw+7m3IilJ4DICKi8OCHhcGpcnC1GsG1xIFpyxZMD29rRORpvpZIbTbkETl
7DN73jZ3eococs6I6oEqskZUosrDMK4kUxo6FTrcLH67xvBlx3GHnbE8wK2+z3Wr
MGbPS+0HYVwfKBPI/K0CaU967beZPAxR+lSS0ZT9cZFmfHKgNp5/S+qaZwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFDSjfJ/sz0Ho4rlC28Sw88fRcKkyMB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvTktOOG4telBRZWppdVVMYnhMRHp4OUZ3cVRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQHVYWAAwQC
uSkAMA0EAgACMAcDBQMqBIfAMA0GCSqGSIb3DQEBCwUAA4IBAQClacfjQYNe6ETc
7DYaxk8v4YiOmvaM3HqTPv4IKmwSVl4/d60+9Prh5ZO4Vx9EJYzioG8M0FifTwzW
8243wJXxs1p+4/6RjZFgbTZrJ+WJqlsKVOnkDCj0bU7o+JEBksXxGmdhqIcgETd5
PIgNb/vLmKHR/ehoJz/Z+GY3ZTtCDg9gOp7WRPgULHkIsy8iTZnpQ0097OwWOObh
fPTjvKBFW6XRgqdcqjnTVGeyNPMO3e0qpQADvSpxMZHDdqIvpwtfjfVd4cnZuxSs
BhlKzpzYIuklXzpTBHFbXDXZMMONysZWdzz82BOgSTcvCxle+AzfqAiCzkg5x3g8
H6Vbh9cN
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:05 2023 by rpki-client on console-ams.rpki-client.org