Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/U4_poVLdI2ZxE0GLh63gVAGqqFc.roa
File: U4_poVLdI2ZxE0GLh63gVAGqqFc.roa (raw, json)
Hash identifier: wVZAjxbXP2V8LTVm1Qn30ykVtP9qO+CSAYauoEQ0dTw=
Subject key identifier: 53:8F:E9:A1:52:DD:23:66:71:13:41:8B:87:AD:E0:54:01:AA:A8:57
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0189D4FEF3381E46CDF42F5B6C57281F9014
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/U4_poVLdI2ZxE0GLh63gVAGqqFc.roa
Signing time: Tue 08 Aug 2023 11:53:45 +0000
ROA not before: Tue 08 Aug 2023 11:53:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.231.0/24 maxlen: 24
85.133.232.0/24 maxlen: 24
85.133.232.0/22 maxlen: 22
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.240.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.240.0/22 maxlen: 22
85.133.245.0/24 maxlen: 24
85.133.246.0/24 maxlen: 24
85.133.243.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
85.133.248.0/23 maxlen: 24
85.133.249.0/24 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.252.0/22 maxlen: 22
85.133.254.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.174.0/24 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.192.0/22 maxlen: 22
85.133.196.0/24 maxlen: 24
85.133.197.0/24 maxlen: 24
85.133.196.0/22 maxlen: 22
85.133.203.0/24 maxlen: 24
85.133.204.0/24 maxlen: 24
85.133.205.0/24 maxlen: 24
85.133.200.0/22 maxlen: 22
85.133.206.0/24 maxlen: 24
85.133.200.0/24 maxlen: 24
85.133.201.0/24 maxlen: 24
85.133.204.0/22 maxlen: 22
85.133.210.0/23 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.207.0/24 maxlen: 24
85.133.212.0/22 maxlen: 22
85.133.209.0/24 maxlen: 24
85.133.217.0/24 maxlen: 24
85.133.219.0/24 maxlen: 24
85.133.215.0/24 maxlen: 24
85.133.220.0/24 maxlen: 24
85.133.220.0/22 maxlen: 22
85.133.226.0/24 maxlen: 24
85.133.221.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.224.0/22 maxlen: 22
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.128.0/17 maxlen: 24
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.128.0/22 maxlen: 22
85.133.134.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.140.0/24 maxlen: 24
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.147.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.162.0/24 maxlen: 24
85.133.163.0/24 maxlen: 24
85.133.161.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.168.0/22 maxlen: 24
185.41.0.0/24 maxlen: 24
185.41.1.0/24 maxlen: 24
185.41.2.0/24 maxlen: 24
185.41.3.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:fe:f3:38:1e:46:cd:f4:2f:5b:6c:57:28:1f:90:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Aug 8 11:53:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=538fe9a152dd23667113418b87ade05401aaa857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:df:70:ff:08:26:65:31:e5:b8:25:a6:4d:6d:
6b:17:97:61:f2:c2:96:6d:d2:15:ec:31:4a:ba:c4:
ae:68:e5:bd:35:b7:b3:cc:41:49:6f:28:8a:a7:e6:
4e:1f:cf:a3:35:0e:73:70:79:f9:15:e5:0d:fb:27:
b4:5e:6a:79:0e:a0:e0:0e:01:f2:ad:90:92:6c:4d:
9b:1b:5f:da:a3:66:f9:cc:13:5e:2c:7e:eb:a0:11:
c8:42:48:54:5f:c5:67:db:87:b7:7f:ee:16:00:46:
90:65:e6:06:ea:88:0b:e4:2a:0a:93:7b:7d:ba:e2:
0d:ae:06:66:ce:c3:ba:3f:d7:2c:e3:34:8a:aa:90:
44:44:a2:32:ef:d9:68:c5:f7:1f:4b:89:68:67:e3:
26:f4:1a:8b:0a:71:76:12:89:01:96:00:f1:18:e5:
cd:05:27:65:0f:bf:1b:ec:d5:80:dc:bb:cf:50:b6:
c8:9e:24:d2:c3:ae:01:3a:cb:28:1b:52:ee:55:f7:
e7:b6:30:bb:c1:80:5d:3e:5a:3b:46:b8:de:4e:cc:
ea:2f:e7:a4:0f:75:61:e9:f9:66:c7:14:04:8d:5d:
38:8c:d9:3d:4e:d5:26:77:6e:e3:93:e7:bf:21:d1:
3c:19:d8:ac:d5:6c:1d:d6:cb:96:3d:4c:7d:f6:a0:
6d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8F:E9:A1:52:DD:23:66:71:13:41:8B:87:AD:E0:54:01:AA:A8:57
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/U4_poVLdI2ZxE0GLh63gVAGqqFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/17
185.41.0.0/22
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
a8:dd:2d:2a:bc:26:08:1b:8a:88:3f:60:e4:46:68:67:8e:7a:
92:0b:05:91:43:fd:24:88:4a:ef:ae:90:60:c6:ed:69:ea:3a:
4c:f7:4c:d4:69:13:8e:dc:cf:5e:27:c1:0d:1a:36:8a:f3:49:
43:22:04:c1:64:e4:a9:b5:4e:37:72:09:cb:19:8a:c3:27:8e:
64:a4:45:f9:5d:c9:e1:05:99:c2:3d:9c:5e:c7:22:66:30:f2:
7b:1d:6d:5c:74:b7:56:99:c6:32:a7:cc:8c:cb:e3:6d:fe:37:
0d:d7:3b:60:6d:da:6d:29:b5:89:05:91:a7:88:52:2f:a9:8c:
d1:5d:fa:b8:a2:cb:fe:06:f7:60:45:21:7d:79:39:c5:e0:8c:
d1:39:b6:fd:6b:5e:d9:5a:c1:b4:3e:38:cd:a9:e8:be:2d:13:
35:06:2c:06:76:7f:df:d5:37:0b:80:c0:48:3e:12:49:62:b3:
c9:d7:22:5c:2c:f0:cb:6d:71:e7:75:bb:9b:e2:9d:e0:8b:e9:
75:7c:74:cf:38:f6:56:62:6a:c7:78:7f:c2:09:dd:d0:22:36:
0e:41:bf:18:03:73:ca:80:56:d3:16:31:9b:5c:d8:1c:bb:bb:
82:b2:ea:c5:9c:39:38:be:41:48:0f:f0:c2:11:9b:08:b1:b6:
ca:4e:c8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 11 08:17:36 2023 by rpki-client on console-ams.rpki-client.org