Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/cx8d4uxinpAiKo4GzIbpbY0E9mg.roa
File: cx8d4uxinpAiKo4GzIbpbY0E9mg.roa (raw, json)
Hash identifier: jN3rtY01UNy/EPFAwaJ/ZQIYW2N8+n/uPcGYH2AMJIA=
Subject key identifier: 73:1F:1D:E2:EC:62:9E:90:22:2A:8E:06:CC:86:E9:6D:8D:04:F6:68
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018DA1627A0A1CF389B78F6AB25217C8DD69
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/cx8d4uxinpAiKo4GzIbpbY0E9mg.roa
Signing time: Tue 13 Feb 2024 07:33:21 +0000
ROA not before: Tue 13 Feb 2024 07:33:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.128.0/17 maxlen: 24
85.133.128.0/22 maxlen: 22
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.134.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.140.0/24 maxlen: 24
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.147.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.189.0/24 maxlen: 24
85.133.192.0/22 maxlen: 22
85.133.196.0/22 maxlen: 22
85.133.196.0/24 maxlen: 24
85.133.197.0/24 maxlen: 24
85.133.200.0/24 maxlen: 24
85.133.201.0/24 maxlen: 24
85.133.202.0/24 maxlen: 24
85.133.203.0/24 maxlen: 24
85.133.204.0/24 maxlen: 24
85.133.205.0/24 maxlen: 24
85.133.206.0/24 maxlen: 24
85.133.207.0/24 maxlen: 24
85.133.209.0/24 maxlen: 24
85.133.210.0/23 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/22 maxlen: 22
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.217.0/24 maxlen: 24
85.133.218.0/24 maxlen: 24
85.133.220.0/22 maxlen: 22
85.133.220.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.224.0/22 maxlen: 22
85.133.224.0/24 maxlen: 24
85.133.225.0/24 maxlen: 24
85.133.226.0/24 maxlen: 24
85.133.227.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.231.0/24 maxlen: 24
85.133.232.0/22 maxlen: 22
85.133.232.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.240.0/22 maxlen: 22
85.133.240.0/24 maxlen: 24
85.133.243.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.245.0/24 maxlen: 24
85.133.246.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
85.133.248.0/23 maxlen: 24
85.133.249.0/24 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.252.0/22 maxlen: 22
85.133.254.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
185.41.0.0/24 maxlen: 24
185.41.1.0/24 maxlen: 24
185.41.2.0/24 maxlen: 24
185.41.3.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 13 Feb 2024 15:21:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a1:62:7a:0a:1c:f3:89:b7:8f:6a:b2:52:17:c8:dd:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Feb 13 07:33:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=731f1de2ec629e90222a8e06cc86e96d8d04f668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:95:5b:2c:e0:62:52:37:5e:0f:ae:d7:6e:1e:
5f:eb:0d:9e:9a:3e:aa:2d:45:6c:99:c8:65:ca:29:
e0:87:41:b9:ed:3c:38:a7:68:d4:5a:59:f0:d5:6f:
5d:b7:55:14:52:31:40:1a:fa:29:0e:e0:0d:1f:10:
1e:50:db:b5:37:b4:56:98:72:3a:34:ae:cc:fb:2d:
43:9d:1a:f7:1a:85:d8:39:5e:6b:0e:7f:c1:4e:c9:
34:9a:8f:1c:60:cd:f7:02:92:3c:17:c9:33:95:f0:
93:d7:7e:fd:f2:3c:d1:8f:af:c5:f7:74:8b:3d:52:
fb:d6:01:1c:17:be:01:b5:d0:28:89:63:69:7e:38:
f8:76:c7:eb:8d:88:a5:d0:d3:e8:b2:d0:64:50:a4:
10:f0:9c:8a:1e:78:bb:d0:8e:e3:32:88:78:ea:1a:
0e:1d:33:2f:cb:e9:f9:55:0c:ec:ae:b0:40:e4:bc:
7c:27:56:88:fe:42:ea:e2:13:ed:5a:83:ad:28:6a:
8e:11:af:f6:42:7a:51:97:fa:74:73:ef:e7:4f:f9:
a0:e3:13:2c:b7:81:00:21:21:7a:91:57:37:2c:fb:
81:80:c3:0f:08:8b:a8:8d:78:f4:ab:81:85:a2:5d:
5a:ea:71:3b:7b:fd:0c:28:b8:c0:72:48:6c:7d:fd:
66:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1F:1D:E2:EC:62:9E:90:22:2A:8E:06:CC:86:E9:6D:8D:04:F6:68
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/cx8d4uxinpAiKo4GzIbpbY0E9mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/17
185.41.0.0/22
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
3c:53:8c:1c:16:f7:8d:18:a0:4b:40:01:07:8d:a7:4d:a1:f6:
86:b4:f9:b2:fc:11:57:47:70:f7:ed:3f:1f:93:66:30:d4:49:
d5:3e:02:d6:fb:42:1b:37:08:ee:b5:32:2a:28:56:28:88:d6:
6f:55:91:ff:c0:22:33:53:61:26:fb:13:5d:71:a8:e9:6d:0a:
df:01:e7:b8:9d:b9:b5:9d:cf:48:3a:eb:47:61:4d:95:3e:d2:
7f:bb:e6:3d:76:1d:e1:e6:c1:1b:96:cc:98:21:00:e9:74:1b:
12:46:87:5f:57:b6:16:8e:47:f2:34:64:a9:2a:eb:34:20:07:
73:2c:ec:a0:dc:1d:28:12:ad:40:b5:9d:3c:a7:72:97:a1:f5:
26:dc:77:1d:a3:4d:c6:81:ae:5b:4a:9f:bb:48:56:7f:c0:2d:
95:62:ff:88:79:60:70:c8:1b:40:b5:f7:cf:f0:85:b9:fd:3e:
54:c2:41:d8:d5:01:b6:df:99:a5:d7:76:8e:0c:df:3f:fc:98:
06:5e:23:f1:50:d7:83:3d:76:49:ef:b8:f5:1c:08:38:34:a3:
3b:db:3a:5f:c9:c7:3c:d8:11:03:5f:13:23:42:4d:7f:44:d6:
8c:83:6e:7d:07:f7:ff:84:17:63:55:ca:5f:1c:e8:b4:8d:30:
79:42:ac:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 13 20:34:26 2024 by rpki-client on console-fra.rpki-client.org