Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/gMY3xdyejpAMYDD5LdqyVgYXwB4.roa
File: gMY3xdyejpAMYDD5LdqyVgYXwB4.roa (raw, json)
Hash identifier: 4Gc6/6aClxhIhp3NhTUYyDBIJ5Qc+CMmDPtt8hxoGzU=
Subject key identifier: 80:C6:37:C5:DC:9E:8E:90:0C:60:30:F9:2D:DA:B2:56:06:17:C0:1E
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019001033D2491CFF07A0DD6FBF686C5E04A
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/gMY3xdyejpAMYDD5LdqyVgYXwB4.roa
Signing time: Mon 10 Jun 2024 07:18:27 +0000
ROA not before: Mon 10 Jun 2024 07:18:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.128.0/17 maxlen: 24
85.133.128.0/22 maxlen: 22
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.134.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.140.0/24 maxlen: 24
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.147.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.174.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.189.0/24 maxlen: 24
85.133.192.0/22 maxlen: 22
85.133.196.0/22 maxlen: 22
85.133.196.0/24 maxlen: 24
85.133.197.0/24 maxlen: 24
85.133.206.0/24 maxlen: 24
85.133.207.0/24 maxlen: 24
85.133.208.0/24 maxlen: 24
85.133.209.0/24 maxlen: 24
85.133.210.0/23 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/22 maxlen: 22
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.215.0/24 maxlen: 24
85.133.219.0/24 maxlen: 24
85.133.220.0/22 maxlen: 22
85.133.220.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.224.0/22 maxlen: 22
85.133.224.0/23 maxlen: 24
85.133.224.0/24 maxlen: 24
85.133.225.0/24 maxlen: 24
85.133.226.0/24 maxlen: 24
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.231.0/24 maxlen: 24
85.133.232.0/22 maxlen: 22
85.133.232.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.240.0/22 maxlen: 22
85.133.240.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.245.0/24 maxlen: 24
85.133.246.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
85.133.248.0/23 maxlen: 24
85.133.249.0/24 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.252.0/22 maxlen: 22
85.133.254.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
185.41.1.0/24 maxlen: 24
185.41.2.0/24 maxlen: 24
185.41.3.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 16 Jun 2024 07:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:01:03:3d:24:91:cf:f0:7a:0d:d6:fb:f6:86:c5:e0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jun 10 07:18:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80c637c5dc9e8e900c6030f92ddab2560617c01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:1d:54:f5:1d:a3:a9:53:69:02:0e:3f:55:
7e:52:f1:13:34:25:c9:f5:d7:5c:2d:5c:ac:51:ee:
9b:03:61:d7:00:c7:61:9a:72:38:33:a4:9d:1d:60:
8a:45:24:32:31:74:f5:4d:e9:9a:53:a7:fa:c2:77:
b9:e4:f5:a2:1e:2e:86:fb:6c:c0:54:7e:fc:d0:aa:
2f:0a:9e:35:ee:21:79:4a:7d:0a:88:b8:76:11:0c:
f8:80:f0:ea:9a:87:71:97:49:f4:68:b2:d9:58:a2:
be:68:30:73:53:07:01:6f:14:88:5a:a0:4e:e5:44:
6f:ba:f5:02:92:e1:f7:f6:5b:f0:67:83:fb:19:a7:
12:26:6f:a7:61:13:bd:6e:54:bf:0f:52:d9:8f:8e:
44:97:9a:e0:ec:62:56:37:21:9d:56:f3:70:c2:c4:
f5:e8:af:17:01:db:e7:73:18:cb:d4:f4:f1:21:d6:
7c:db:dd:0a:bd:46:d5:af:80:aa:2b:c0:35:89:1c:
e5:7f:04:6c:dd:6a:63:00:54:f6:86:f4:ae:4e:e3:
ec:69:0e:c8:93:7d:46:80:cc:13:b1:cd:bf:53:71:
5f:67:ef:a5:70:93:1e:c7:56:bd:b4:ae:8f:ae:95:
8b:f1:51:2d:35:b4:8b:e2:dc:05:ac:cc:a9:2f:15:
9d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C6:37:C5:DC:9E:8E:90:0C:60:30:F9:2D:DA:B2:56:06:17:C0:1E
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/gMY3xdyejpAMYDD5LdqyVgYXwB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/17
185.41.1.0-185.41.3.255
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
37:d0:0d:88:26:98:68:63:52:fb:42:ed:9d:83:bb:b2:8f:3f:
37:77:b6:39:9f:17:f2:db:9b:fc:0e:30:c1:56:9d:bd:0a:0c:
ad:61:f4:36:c0:38:43:cd:4c:c0:0d:e6:55:e0:07:53:76:b2:
dc:09:d4:0b:80:95:58:9b:ba:ea:f9:7c:2d:84:e9:dd:b8:f1:
30:f5:ef:b5:ac:7d:27:92:9d:f8:fe:4a:28:1e:1c:cb:9d:22:
72:e2:74:91:cc:f9:fc:78:3a:ff:c5:14:0d:1a:5f:13:9d:57:
e5:6a:a2:c7:8c:86:0a:fe:87:92:73:6b:29:99:b9:ba:46:b9:
0d:16:60:12:69:b2:0f:4a:00:60:0f:20:cb:2c:72:aa:ea:81:
75:fe:c9:ad:ee:e1:8b:15:c2:c1:47:ed:39:af:7f:00:ee:75:
44:af:b6:e3:44:13:34:20:40:9e:13:f6:54:e4:5d:f9:ef:34:
d0:96:61:5d:39:72:b2:b0:ab:4e:33:7c:01:6f:b5:b3:be:f7:
8e:1d:a2:fa:6f:d7:47:73:d3:7f:db:17:37:01:66:48:71:ed:
d5:e4:e6:83:b2:f0:2e:c8:ca:4e:5c:73:a8:f7:e5:bd:e7:bb:
aa:a4:53:f1:2e:e4:3c:be:8a:f3:3d:2f:e4:63:ff:de:28:4a:
ed:81:85:19
-----BEGIN CERTIFICATE-----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Generated at Sun Jun 16 08:18:08 2024 by rpki-client on console-fra.rpki-client.org