Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/jJC4UcAxLSbjssDdNgnG3FoWdlA.roa
File: jJC4UcAxLSbjssDdNgnG3FoWdlA.roa (raw, json)
Hash identifier: CxMX/1iUD/Nh7sJcoU9lMTwDxv9FBLm8u5PHlNnAFlU=
Subject key identifier: 8C:90:B8:51:C0:31:2D:26:E3:B2:C0:DD:36:09:C6:DC:5A:16:76:50
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0192ECF3C77EA08A6ADF2FFA3E14ECCE995A
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/jJC4UcAxLSbjssDdNgnG3FoWdlA.roa
Signing time: Sat 02 Nov 2024 12:57:32 +0000
ROA not before: Sat 02 Nov 2024 12:57:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.128.0/22 maxlen: 22
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.132.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.134.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.140.0/24 maxlen: 24
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.143.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.147.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.153.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.156.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.167.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
85.133.168.0/24 maxlen: 24
85.133.169.0/24 maxlen: 24
85.133.170.0/24 maxlen: 24
85.133.171.0/24 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.173.0/24 maxlen: 24
85.133.174.0/24 maxlen: 24
85.133.175.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.176.0/24 maxlen: 24
85.133.177.0/24 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.179.0/24 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.180.0/24 maxlen: 24
85.133.181.0/24 maxlen: 24
85.133.182.0/24 maxlen: 24
85.133.183.0/24 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.184.0/24 maxlen: 24
85.133.185.0/24 maxlen: 24
85.133.186.0/24 maxlen: 24
85.133.187.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.188.0/24 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.190.0/24 maxlen: 24
85.133.191.0/24 maxlen: 24
85.133.192.0/24 maxlen: 24
85.133.196.0/22 maxlen: 22
85.133.196.0/24 maxlen: 24
85.133.209.0/24 maxlen: 24
85.133.210.0/23 maxlen: 24
85.133.210.0/24 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/22 maxlen: 22
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.217.0/24 maxlen: 24
85.133.219.0/24 maxlen: 24
85.133.220.0/22 maxlen: 22
85.133.220.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.225.0/24 maxlen: 24
85.133.226.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.231.0/24 maxlen: 24
85.133.232.0/22 maxlen: 22
85.133.232.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.245.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
85.133.248.0/23 maxlen: 24
85.133.248.0/24 maxlen: 24
85.133.249.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 04 Nov 2024 05:58:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ec:f3:c7:7e:a0:8a:6a:df:2f:fa:3e:14:ec:ce:99:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Nov 2 12:57:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c90b851c0312d26e3b2c0dd3609c6dc5a167650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:58:ed:96:86:dc:62:31:1e:3b:d2:bd:1d:04:
4f:1a:98:0a:78:6e:19:6e:16:31:af:97:25:26:71:
93:14:4b:ca:8f:a1:da:10:9a:1e:86:ef:f0:0a:be:
49:aa:22:be:9b:9c:5b:10:c0:8e:b3:75:db:b3:94:
13:1b:1f:3a:b6:58:af:bf:73:c9:3c:1e:87:95:e6:
35:26:f8:8f:2b:7d:3c:36:f6:4b:7b:25:89:14:c0:
f0:4e:28:32:95:05:3c:28:d4:25:2a:c4:85:26:df:
05:11:1c:76:92:9b:22:87:55:94:0f:c0:ac:59:f5:
22:38:04:cb:dc:9a:af:15:e9:6a:00:11:75:99:24:
04:f8:98:98:63:bb:f4:a4:f7:1d:67:a3:d0:4a:15:
f6:77:33:12:32:a2:1d:6d:38:69:ff:76:56:11:73:
a2:57:d2:2b:d2:4f:02:65:30:8c:1c:d7:19:17:c2:
2e:e4:05:ac:d2:0d:85:88:e8:88:e5:cb:e7:bb:18:
34:c4:7e:19:d2:b6:9d:85:f1:cd:3c:2c:99:21:69:
0b:63:0a:87:e0:39:8a:9e:1f:6e:f0:db:7d:2d:c5:
07:be:90:53:9f:fc:6d:cf:4f:f8:ef:de:ca:ba:c6:
3f:af:4f:e4:ce:5c:a2:f0:b9:4c:ad:a8:90:cb:e7:
4e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:90:B8:51:C0:31:2D:26:E3:B2:C0:DD:36:09:C6:DC:5A:16:76:50
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/jJC4UcAxLSbjssDdNgnG3FoWdlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/19
85.133.164.0/23
85.133.167.0-85.133.192.255
85.133.196.0/22
85.133.209.0-85.133.215.255
85.133.217.0/24
85.133.219.0-85.133.223.255
85.133.225.0-85.133.226.255
85.133.228.0-85.133.235.255
85.133.239.0/24
85.133.244.0/23
85.133.247.0-85.133.249.255
85.133.255.0/24
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
96:8e:53:f6:5d:50:87:40:8b:ec:64:c7:9d:fa:57:b2:ac:b6:
72:5c:f5:f5:78:0a:bb:75:6d:99:fb:6f:40:e1:90:c5:1c:ee:
92:ea:a1:bd:63:02:d7:54:68:4d:d1:e1:fb:4e:93:63:1d:5f:
df:2b:29:64:d5:70:1b:e7:8b:71:26:17:47:3b:e2:a3:01:19:
77:d1:fa:44:0f:ef:20:7c:9e:b5:9f:1c:16:21:76:a4:f3:33:
e1:0a:15:9b:76:78:89:c7:48:40:3d:b6:25:84:4c:61:d3:20:
df:50:dc:a9:2e:73:6c:8b:b7:29:d9:21:ff:00:48:15:4d:e4:
2e:a8:d9:70:2d:f6:27:4b:1a:fa:e0:f7:01:44:39:ff:5b:f1:
53:34:dc:97:23:90:8a:dc:0e:3e:71:98:c5:c2:2a:ec:25:f7:
1c:70:db:2a:56:1d:71:f5:02:ce:fb:c3:b4:ed:28:c5:0f:03:
7a:0f:c6:8b:a9:5a:ee:29:fa:11:2c:0a:a7:3f:47:3e:8d:79:
60:a2:fc:92:6b:07:4e:14:8a:0d:c7:83:7d:2f:8c:7c:26:08:
c2:84:f0:42:1f:b9:12:51:f8:e5:dd:52:1f:1f:c5:44:63:95:
4a:86:0a:af:d7:3a:84:49:99:a9:58:6f:d5:6b:ee:76:65:51:
ae:1d:fe:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 09:05:01 2024 by rpki-client on console-ams.rpki-client.org