Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/ThtIRhFVWDIe3VlGsS_Wj2Ou0oU.roa
File: ThtIRhFVWDIe3VlGsS_Wj2Ou0oU.roa (raw, json)
Hash identifier: hjSiq8F/oI9XVddJRcvLbNszE9UqdAxB+qPa8t6JHZE=
Subject key identifier: 4E:1B:48:46:11:55:58:32:1E:DD:59:46:B1:2F:D6:8F:63:AE:D2:85
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0192F7335F6BB555DDF3F3AC23EAD05836F1
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/ThtIRhFVWDIe3VlGsS_Wj2Ou0oU.roa
Signing time: Mon 04 Nov 2024 12:43:11 +0000
ROA not before: Mon 04 Nov 2024 12:43:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.128.0/22 maxlen: 22
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.132.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.134.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.140.0/24 maxlen: 24
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.143.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.147.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.153.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.156.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.167.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
85.133.168.0/24 maxlen: 24
85.133.169.0/24 maxlen: 24
85.133.170.0/24 maxlen: 24
85.133.171.0/24 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.173.0/24 maxlen: 24
85.133.174.0/24 maxlen: 24
85.133.175.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.176.0/24 maxlen: 24
85.133.177.0/24 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.179.0/24 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.180.0/24 maxlen: 24
85.133.181.0/24 maxlen: 24
85.133.182.0/24 maxlen: 24
85.133.183.0/24 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.184.0/24 maxlen: 24
85.133.185.0/24 maxlen: 24
85.133.186.0/24 maxlen: 24
85.133.187.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.188.0/24 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.190.0/24 maxlen: 24
85.133.191.0/24 maxlen: 24
85.133.192.0/24 maxlen: 24
85.133.196.0/22 maxlen: 22
85.133.196.0/24 maxlen: 24
85.133.209.0/24 maxlen: 24
85.133.210.0/23 maxlen: 24
85.133.210.0/24 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/22 maxlen: 22
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.217.0/24 maxlen: 24
85.133.219.0/24 maxlen: 24
85.133.220.0/22 maxlen: 22
85.133.220.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.225.0/24 maxlen: 24
85.133.226.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.231.0/24 maxlen: 24
85.133.232.0/22 maxlen: 22
85.133.232.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.245.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
85.133.248.0/23 maxlen: 24
85.133.248.0/24 maxlen: 24
85.133.249.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 07 Nov 2024 09:42:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f7:33:5f:6b:b5:55:dd:f3:f3:ac:23:ea:d0:58:36:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Nov 4 12:43:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e1b4846115558321edd5946b12fd68f63aed285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4a:11:3c:ee:b1:58:1a:85:44:5d:ce:4e:98:
6a:dd:6e:3a:53:4f:de:1d:09:2e:73:f2:20:a6:c9:
8a:28:ad:92:20:e9:e9:e5:16:fd:d2:d6:6d:f4:1b:
71:ea:37:a2:32:fa:5f:03:61:84:1d:f3:a4:78:2d:
a0:77:99:7a:94:20:70:b8:f0:2b:16:65:03:f2:c2:
6e:8f:8d:59:40:ec:08:c8:47:25:b6:83:12:8b:de:
b0:26:98:33:c9:0c:1e:cf:8f:e8:dd:c4:ab:e6:29:
1e:7e:59:b4:1c:7b:0b:0f:ee:55:92:1b:75:a8:69:
45:66:e3:82:46:18:4e:1d:47:65:bf:ee:73:74:de:
92:b8:e8:ef:b4:55:da:d3:17:4c:e9:9c:e2:50:fc:
3b:24:69:ec:56:55:e7:16:a8:97:b7:40:15:ad:2c:
3d:40:8c:7c:67:0f:1b:9d:16:2b:6f:dd:60:2a:92:
c2:f0:3c:48:29:cd:d7:af:b5:78:1a:86:76:9f:78:
1f:de:ac:5d:32:e5:da:dc:6b:90:f1:00:fc:bb:cf:
94:49:12:c5:a1:fc:89:cc:83:92:89:bd:32:dd:2c:
20:1f:8a:ef:b2:64:b0:55:ed:a3:7d:16:b0:86:c0:
1b:75:8c:34:60:69:b3:a0:b4:b0:d3:55:ff:3c:e5:
cc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1B:48:46:11:55:58:32:1E:DD:59:46:B1:2F:D6:8F:63:AE:D2:85
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/ThtIRhFVWDIe3VlGsS_Wj2Ou0oU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/19
85.133.164.0/23
85.133.167.0-85.133.192.255
85.133.196.0/22
85.133.209.0-85.133.215.255
85.133.217.0/24
85.133.219.0-85.133.223.255
85.133.225.0-85.133.226.255
85.133.228.0-85.133.235.255
85.133.239.0/24
85.133.244.0/23
85.133.247.0-85.133.249.255
85.133.255.0/24
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
9e:24:42:0a:bf:c9:71:7f:03:d2:f0:43:86:fa:8f:b3:c4:bb:
05:e5:28:3b:2b:19:de:5a:ba:13:e7:40:6c:37:f8:44:2f:bd:
38:0c:8b:41:9a:66:3c:0b:fb:7a:3e:cc:2b:fc:f5:4f:86:23:
06:b2:92:76:44:07:fc:ea:13:27:f2:cc:0b:95:43:d6:17:a0:
26:5e:e2:a5:d6:86:bd:89:87:50:cd:21:f6:58:73:43:d9:63:
10:75:ed:51:95:03:2e:1d:29:91:84:27:0f:4b:8f:16:aa:58:
42:ec:b1:f2:20:7d:fe:b8:e2:be:74:9e:e2:e9:52:0b:5c:05:
9f:bc:66:5f:98:cf:73:85:93:79:ec:53:4f:8b:fa:ee:cc:99:
0e:f5:14:91:3d:3c:bb:94:2e:24:81:11:36:4b:a6:f3:3d:39:
60:c7:d4:b3:75:64:d4:da:63:fd:66:97:62:f3:fc:63:f6:a8:
fb:ed:48:11:4c:4a:6c:6d:c2:61:9e:50:e7:b9:0b:82:ed:6f:
b4:bc:b7:12:fd:8d:79:7a:7f:98:b6:fa:5b:67:7f:0a:89:1f:
55:d5:4b:c3:51:3e:8b:06:e5:82:c7:24:24:61:af:c4:5c:f3:
67:9d:ea:28:75:08:5d:80:ae:2a:ad:5b:f5:26:02:04:79:2e:
cf:61:bd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 14:04:44 2024 by rpki-client on console-ams.rpki-client.org