Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/cXi2WCty12kSy0qnuQe3CrnJuxA.roa
File: cXi2WCty12kSy0qnuQe3CrnJuxA.roa (raw, json)
Hash identifier: A2qdWpvWkKSGT+mGQzNv8+pkzVIZ8TzT+d64owfTwOM=
Subject key identifier: 71:78:B6:58:2B:72:D7:69:12:CB:4A:A7:B9:07:B7:0A:B9:C9:BB:10
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019402787FD43357934A81E3FCF67E88B0C6
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/cXi2WCty12kSy0qnuQe3CrnJuxA.roa
Signing time: Thu 26 Dec 2024 10:17:19 +0000
ROA not before: Thu 26 Dec 2024 10:17:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.128.0/22 maxlen: 22
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.132.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.134.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.140.0/24 maxlen: 24
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.143.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.147.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.151.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.153.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.156.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.166.0/24 maxlen: 24
85.133.167.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
85.133.168.0/24 maxlen: 24
85.133.169.0/24 maxlen: 24
85.133.170.0/24 maxlen: 24
85.133.171.0/24 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.173.0/24 maxlen: 24
85.133.174.0/24 maxlen: 24
85.133.175.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.176.0/24 maxlen: 24
85.133.177.0/24 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.179.0/24 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.180.0/24 maxlen: 24
85.133.181.0/24 maxlen: 24
85.133.182.0/24 maxlen: 24
85.133.183.0/24 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.184.0/24 maxlen: 24
85.133.185.0/24 maxlen: 24
85.133.186.0/24 maxlen: 24
85.133.187.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.188.0/24 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.190.0/24 maxlen: 24
85.133.191.0/24 maxlen: 24
85.133.192.0/24 maxlen: 24
85.133.196.0/22 maxlen: 22
85.133.196.0/24 maxlen: 24
85.133.209.0/24 maxlen: 24
85.133.210.0/23 maxlen: 24
85.133.210.0/24 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.220.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.225.0/24 maxlen: 24
85.133.226.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.231.0/24 maxlen: 24
85.133.232.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.245.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
85.133.248.0/23 maxlen: 24
85.133.248.0/24 maxlen: 24
85.133.249.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:02:78:7f:d4:33:57:93:4a:81:e3:fc:f6:7e:88:b0:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Dec 26 10:17:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7178b6582b72d76912cb4aa7b907b70ab9c9bb10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cc:93:41:e9:4f:64:c0:ab:0d:c4:3d:dd:f5:
45:82:ef:34:b2:7b:e5:71:16:b8:68:6e:31:df:52:
eb:2b:62:cf:07:c7:6a:35:80:b8:9b:27:0b:f0:21:
c4:dc:05:d9:af:31:aa:06:9a:1b:2c:3c:6e:4c:87:
19:3a:4a:d8:d5:dd:07:59:d1:6b:bf:15:82:8d:06:
bc:90:69:dd:97:b7:e4:a4:ee:09:20:f6:5f:5d:cd:
06:a8:09:bc:54:dd:93:20:6c:d0:81:70:f4:d9:05:
b4:e4:1b:a4:6a:e9:64:32:20:1d:59:ef:ba:9c:0e:
dc:3c:f5:19:5c:90:77:2d:e1:3a:53:24:a9:c7:e6:
01:70:ab:30:e3:84:e9:63:a5:f9:4f:0f:e4:e8:b4:
95:b6:42:a1:4f:7c:30:b6:f9:a6:06:d9:f5:11:ba:
67:1e:fd:67:28:90:e6:fe:a2:9c:42:e0:3a:91:c7:
c7:dc:36:9d:74:3f:89:ff:cb:9b:78:6b:bf:93:a6:
ed:24:7e:9e:5c:52:1e:fa:87:8a:62:b5:b7:b2:e9:
6b:d8:5a:03:c5:05:f8:cc:a6:97:86:a7:56:35:9a:
1c:2a:ce:39:2c:55:c9:43:8b:d5:43:f6:9b:d7:10:
15:25:7e:35:f2:5e:7b:cf:ec:14:55:ea:a9:fd:b2:
4e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:78:B6:58:2B:72:D7:69:12:CB:4A:A7:B9:07:B7:0A:B9:C9:BB:10
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/cXi2WCty12kSy0qnuQe3CrnJuxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/19
85.133.164.0-85.133.192.255
85.133.196.0/22
85.133.209.0-85.133.213.255
85.133.220.0/24
85.133.223.0/24
85.133.225.0-85.133.226.255
85.133.228.0-85.133.232.255
85.133.235.0/24
85.133.239.0/24
85.133.244.0/23
85.133.247.0-85.133.249.255
85.133.255.0/24
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
22:4d:19:b8:d3:72:69:c5:9e:2b:e0:4b:87:0d:76:dc:24:3e:
e7:07:9c:2b:5d:7f:c9:38:f8:82:20:07:61:a8:ba:a0:0b:43:
92:ef:88:5b:32:6d:1b:3f:3b:0e:03:6b:26:65:de:40:da:7b:
c9:3b:82:d4:9b:53:c3:5c:41:bb:64:1e:2a:d3:d8:ef:fc:42:
c1:bf:64:80:49:42:8e:b1:8f:a9:ec:70:a4:8d:f7:86:31:c5:
07:28:81:3b:ae:a0:1a:f4:2b:73:16:fe:6f:79:54:4c:ca:61:
10:3b:1a:c3:82:07:da:10:1f:66:28:af:d5:9a:37:c1:ad:bc:
f2:fa:ce:08:55:43:69:7b:89:cb:9d:82:40:11:eb:4e:5a:84:
72:9f:f5:18:5f:dc:94:fd:87:c3:dd:40:03:bd:ae:8f:8e:28:
32:45:d7:70:7a:42:b6:a0:c8:8e:b7:c8:f1:1c:7a:45:80:99:
21:7e:2e:96:0d:a0:55:25:94:98:f0:34:dd:bf:ac:73:9e:3e:
7d:cc:4e:22:fe:6e:ac:a0:e7:15:a5:b2:3e:3a:b3:86:5b:14:
1d:a9:59:0f:38:0f:03:a5:50:c7:e9:83:ff:b2:24:8d:35:72:
2c:b5:16:b0:29:2a:32:d5:50:0a:67:fb:fd:b0:12:ca:e2:7d:
b6:e4:a3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:35:27 2025 by rpki-client