Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/TBlMNrQmq6v1ULl71t7CtmmqbOo.roa
File: TBlMNrQmq6v1ULl71t7CtmmqbOo.roa (raw, json)
Hash identifier: Zd8ycoWK9YZwmynU8xRR3u1hv+Pnt5CZ+ODWi7Qd4zk=
Subject key identifier: 4C:19:4C:36:B4:26:AB:AB:F5:50:B9:7B:D6:DE:C2:B6:69:AA:6C:EA
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0187B31F8B1802AF4F230AEB614047BEEC4B
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/TBlMNrQmq6v1ULl71t7CtmmqbOo.roa
Signing time: Mon 24 Apr 2023 11:56:41 +0000
ROA not before: Mon 24 Apr 2023 11:56:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.228.0/24 maxlen: 24
85.133.231.0/24 maxlen: 24
85.133.232.0/24 maxlen: 24
85.133.233.0/24 maxlen: 24
85.133.228.0/22 maxlen: 22
85.133.232.0/22 maxlen: 22
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.227.0/24 maxlen: 24
85.133.238.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.236.0/22 maxlen: 22
85.133.240.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.240.0/22 maxlen: 22
85.133.237.0/24 maxlen: 24
85.133.234.0/24 maxlen: 24
85.133.245.0/24 maxlen: 24
85.133.246.0/24 maxlen: 24
85.133.242.0/24 maxlen: 24
85.133.243.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.241.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
85.133.253.0/24 maxlen: 24
85.133.248.0/22 maxlen: 22
85.133.249.0/24 maxlen: 24
85.133.250.0/24 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.252.0/22 maxlen: 22
85.133.254.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.174.0/24 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.192.0/22 maxlen: 22
85.133.196.0/24 maxlen: 24
85.133.197.0/24 maxlen: 24
85.133.194.0/24 maxlen: 24
85.133.196.0/22 maxlen: 22
85.133.203.0/24 maxlen: 24
85.133.204.0/24 maxlen: 24
85.133.205.0/24 maxlen: 24
85.133.200.0/22 maxlen: 22
85.133.206.0/24 maxlen: 24
85.133.200.0/24 maxlen: 24
85.133.201.0/24 maxlen: 24
85.133.204.0/22 maxlen: 22
85.133.210.0/24 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.208.0/22 maxlen: 22
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.207.0/24 maxlen: 24
85.133.212.0/22 maxlen: 22
85.133.209.0/24 maxlen: 24
85.133.219.0/24 maxlen: 24
85.133.220.0/24 maxlen: 24
85.133.220.0/22 maxlen: 22
85.133.226.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.224.0/22 maxlen: 22
85.133.132.0/22 maxlen: 22
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.128.0/17 maxlen: 24
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.128.0/22 maxlen: 22
85.133.134.0/24 maxlen: 24
85.133.136.0/22 maxlen: 22
85.133.133.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.143.0/24 maxlen: 24
85.133.140.0/24 maxlen: 24
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.147.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.156.0/22 maxlen: 22
85.133.154.0/24 maxlen: 24
85.133.160.0/22 maxlen: 22
85.133.162.0/24 maxlen: 24
85.133.163.0/24 maxlen: 24
85.133.164.0/22 maxlen: 24
85.133.160.0/24 maxlen: 24
85.133.161.0/24 maxlen: 24
85.133.166.0/24 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.168.0/22 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 10 May 2023 07:57:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b3:1f:8b:18:02:af:4f:23:0a:eb:61:40:47:be:ec:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Apr 24 11:56:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c194c36b426ababf550b97bd6dec2b669aa6cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:93:68:1a:44:88:fe:2b:f1:bb:78:b0:fd:30:
8a:9f:db:36:62:84:c5:62:a0:5b:e6:79:1d:26:de:
c5:84:c2:91:60:46:67:4e:1e:4e:95:8f:5c:55:5f:
77:fb:2f:09:14:d3:40:66:09:66:c8:6a:6a:41:ee:
32:8c:8a:8e:23:a7:73:60:34:f0:65:a4:75:32:1f:
fe:6e:48:7b:41:55:a9:b6:df:14:32:3e:0d:05:1d:
b4:76:32:8c:55:cd:89:29:a6:b7:20:af:29:4d:96:
1e:32:19:66:0f:96:b1:25:17:2a:7b:0c:8e:45:6b:
6b:e6:c5:ee:f9:a5:0b:a8:bc:03:d2:8d:10:0e:00:
0d:35:38:a4:72:c7:f1:bd:06:66:1f:f0:1e:44:06:
d1:1a:14:7e:82:4a:b5:b7:4b:16:0a:41:52:76:7d:
ee:e3:82:a5:9d:cd:b5:48:1a:f4:3f:d6:db:09:20:
cd:01:4c:59:27:94:56:aa:9b:75:32:25:43:7c:f8:
d7:d1:47:07:41:30:ed:3f:34:b4:4f:2a:ef:71:7f:
e2:fe:38:be:bf:a5:38:70:86:6e:84:a0:b6:8f:83:
2e:c1:af:82:3c:16:f8:a4:72:1d:a1:3e:5b:0f:0d:
ab:c8:0b:43:d9:6e:41:75:d7:33:e6:d4:96:cc:fa:
22:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:19:4C:36:B4:26:AB:AB:F5:50:B9:7B:D6:DE:C2:B6:69:AA:6C:EA
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/TBlMNrQmq6v1ULl71t7CtmmqbOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/17
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
44:a1:4a:b6:bf:e3:4e:db:fb:33:dc:dd:f9:69:b3:09:4e:4a:
1c:12:13:7c:02:18:87:6d:7b:6a:fd:5d:20:fb:3d:1f:16:48:
fc:95:fe:cc:f1:51:3d:5c:ea:51:cc:86:aa:9e:c7:35:42:38:
bc:02:bc:6a:e6:49:f5:e1:f0:e6:77:04:3f:28:13:27:18:c2:
e1:a1:7b:f0:eb:cb:6e:3c:28:85:c1:bf:ac:9b:4e:19:ee:5d:
e7:b4:87:84:ee:26:07:01:1b:0b:15:a9:5b:e0:72:3d:f7:a5:
19:8e:ed:f7:f0:b2:e0:45:fc:26:d1:1d:d7:14:1c:c9:76:d0:
90:5e:72:e9:9b:ec:7f:fb:97:af:18:2d:6d:f3:12:36:a1:bd:
00:f3:fa:ad:df:4d:d9:a0:4d:fe:a3:bc:cc:83:62:3f:e6:d7:
bc:32:e4:e8:fa:1e:80:09:fa:b8:bd:e8:83:42:a7:46:d4:7b:
b4:26:58:69:0b:02:a4:69:e3:25:11:85:38:87:a1:52:1c:f5:
09:8c:c6:e3:f2:9f:56:6b:98:cd:06:62:3f:95:e6:59:f8:86:
c9:f1:6d:f8:f4:01:4e:eb:f2:f7:ff:ae:4f:70:de:5e:23:a9:
4b:71:9b:69:73:8f:9b:03:4b:b8:71:c2:77:f5:7a:ba:67:18:
8e:a7:92:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:01 2024 by rpki-client on console-ams.rpki-client.org