Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/VaTqGOkfR3b28KuQaY2-ocJjnF8.roa
File: VaTqGOkfR3b28KuQaY2-ocJjnF8.roa (raw, json)
Hash identifier: CxPOrjs2dYJ4MvcnkBbfKXEOCMW1PjlRSF41D5/GSIA=
Subject key identifier: 55:A4:EA:18:E9:1F:47:76:F6:F0:AB:90:69:8D:BE:A1:C2:63:9C:5F
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018D6E8E0028F510611D9953767FD77C2D3B
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/VaTqGOkfR3b28KuQaY2-ocJjnF8.roa
Signing time: Sat 03 Feb 2024 10:40:16 +0000
ROA not before: Sat 03 Feb 2024 10:40:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.128.0/17 maxlen: 24
85.133.128.0/22 maxlen: 22
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.134.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.140.0/24 maxlen: 24
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.147.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.153.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.156.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.174.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.189.0/24 maxlen: 24
85.133.192.0/22 maxlen: 22
85.133.196.0/22 maxlen: 22
85.133.196.0/24 maxlen: 24
85.133.197.0/24 maxlen: 24
85.133.200.0/24 maxlen: 24
85.133.201.0/24 maxlen: 24
85.133.202.0/24 maxlen: 24
85.133.203.0/24 maxlen: 24
85.133.204.0/24 maxlen: 24
85.133.205.0/24 maxlen: 24
85.133.206.0/24 maxlen: 24
85.133.207.0/24 maxlen: 24
85.133.208.0/24 maxlen: 24
85.133.209.0/24 maxlen: 24
85.133.210.0/23 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/22 maxlen: 22
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.215.0/24 maxlen: 24
85.133.217.0/24 maxlen: 24
85.133.218.0/24 maxlen: 24
85.133.219.0/24 maxlen: 24
85.133.220.0/22 maxlen: 22
85.133.220.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.224.0/22 maxlen: 22
85.133.224.0/24 maxlen: 24
85.133.225.0/24 maxlen: 24
85.133.226.0/24 maxlen: 24
85.133.227.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.231.0/24 maxlen: 24
85.133.232.0/22 maxlen: 22
85.133.232.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.240.0/22 maxlen: 22
85.133.240.0/24 maxlen: 24
85.133.243.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.245.0/24 maxlen: 24
85.133.246.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
85.133.248.0/23 maxlen: 24
85.133.249.0/24 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.252.0/22 maxlen: 22
85.133.254.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
185.41.0.0/24 maxlen: 24
185.41.1.0/24 maxlen: 24
185.41.2.0/24 maxlen: 24
185.41.3.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 04 Feb 2024 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6e:8e:00:28:f5:10:61:1d:99:53:76:7f:d7:7c:2d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Feb 3 10:40:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55a4ea18e91f4776f6f0ab90698dbea1c2639c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e5:4c:bf:55:58:d0:c4:82:26:32:ae:88:7c:
99:89:07:5c:bb:c1:a0:57:00:04:0a:bd:4e:23:c8:
f0:ae:01:a0:34:17:2e:85:ad:6a:e1:94:15:19:11:
47:06:ae:d5:c9:be:75:4f:64:ac:01:73:8b:f4:66:
34:e5:87:2f:57:52:68:26:dc:cc:07:a0:03:74:4a:
56:4b:e9:ff:91:81:1e:cf:2a:2d:f0:7b:11:5c:45:
71:a1:84:a1:3e:15:66:04:4a:0e:e3:da:f4:78:76:
d9:cb:b8:13:ff:06:d8:06:6a:1d:c0:b4:51:09:19:
fb:c1:6a:2d:79:e8:a9:6a:fb:c3:fb:db:d0:47:5c:
5b:01:96:68:c5:d8:3a:e1:92:c2:32:a7:9a:a3:d4:
26:08:6c:f4:59:1b:df:36:11:85:c9:43:58:45:e4:
dc:d3:63:2f:9a:f7:27:13:bf:97:2a:a6:31:ff:3e:
22:7f:52:c6:11:09:72:ed:86:de:40:32:80:00:cd:
c5:bd:f5:f7:96:a3:d2:81:25:a0:20:0e:93:5b:fe:
a5:95:93:25:bb:82:f8:9b:48:6d:87:39:1a:df:57:
e4:0e:d5:56:aa:ac:3f:3d:51:37:f2:47:e6:db:c0:
50:bb:cc:63:00:2f:42:76:65:3f:3c:8d:2c:0c:20:
10:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A4:EA:18:E9:1F:47:76:F6:F0:AB:90:69:8D:BE:A1:C2:63:9C:5F
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/VaTqGOkfR3b28KuQaY2-ocJjnF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/17
185.41.0.0/22
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
29:66:11:f8:96:94:08:d5:34:00:dd:22:f5:82:a3:47:d1:f3:
aa:6a:85:71:de:61:71:39:9c:fb:f1:29:ae:d8:75:a9:d8:c2:
b4:a5:e1:fb:82:21:ac:11:36:37:d2:1c:b7:55:24:28:50:c6:
11:9f:88:1f:21:b9:cc:e3:3a:ad:38:31:26:7a:e0:b1:9c:a9:
c2:bb:3d:57:8f:40:cf:59:3d:bc:6e:c4:d6:d0:f6:28:e1:ec:
77:7b:65:cb:9a:0b:7e:40:f5:17:89:73:cd:f1:54:06:8f:32:
a9:c6:53:d0:39:7e:f9:d2:dc:dc:94:df:bc:61:2c:ba:e7:8c:
2f:99:a4:fd:e9:da:a3:75:ea:51:d4:27:2b:94:f3:d2:cd:4d:
7f:1c:c3:ac:fe:44:25:2d:a5:18:5b:6c:38:58:43:c1:2d:83:
4b:7a:92:ff:07:ab:08:fc:06:c1:aa:5b:0d:2b:09:ee:51:35:
09:d9:71:48:53:53:d4:89:8d:92:52:e4:ff:4b:7b:9e:6c:23:
25:dd:27:49:09:28:52:8f:a2:97:7c:70:d0:c6:55:62:d2:8f:
1f:aa:6f:b1:5e:26:76:b5:58:de:31:fa:d2:52:d7:32:cb:02:
4c:ad:80:1e:2a:43:4b:fe:47:4c:b9:6a:2e:03:94:99:5c:57:
f7:b1:e1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:13 2024 by rpki-client on console-fra.rpki-client.org