Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/k52_q7TPWHJ_Rnr3r7ZwRJio-9g.roa
File: k52_q7TPWHJ_Rnr3r7ZwRJio-9g.roa (raw, json)
Hash identifier: Taw/Qb8nEtGzuv8fZ9BXSiaAjRMSwzvA0SE5j/5VNzY=
Subject key identifier: 93:9D:BF:AB:B4:CF:58:72:7F:46:7A:F7:AF:B6:70:44:98:A8:FB:D8
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0192B4865B28D9410D18667A7EC908B10025
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/k52_q7TPWHJ_Rnr3r7ZwRJio-9g.roa
Signing time: Tue 22 Oct 2024 13:59:16 +0000
ROA not before: Tue 22 Oct 2024 13:59:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.128.0/17 maxlen: 24
85.133.128.0/22 maxlen: 22
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.132.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.134.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.140.0/24 maxlen: 24
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.143.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.147.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.153.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.156.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.167.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
85.133.168.0/24 maxlen: 24
85.133.170.0/24 maxlen: 24
85.133.171.0/24 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.173.0/24 maxlen: 24
85.133.174.0/24 maxlen: 24
85.133.175.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.176.0/24 maxlen: 24
85.133.177.0/24 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.179.0/24 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.180.0/24 maxlen: 24
85.133.181.0/24 maxlen: 24
85.133.182.0/24 maxlen: 24
85.133.183.0/24 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.184.0/24 maxlen: 24
85.133.185.0/24 maxlen: 24
85.133.186.0/24 maxlen: 24
85.133.187.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.188.0/24 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.190.0/24 maxlen: 24
85.133.191.0/24 maxlen: 24
85.133.192.0/24 maxlen: 24
85.133.196.0/22 maxlen: 22
85.133.196.0/24 maxlen: 24
85.133.207.0/24 maxlen: 24
85.133.208.0/24 maxlen: 24
85.133.209.0/24 maxlen: 24
85.133.210.0/23 maxlen: 24
85.133.210.0/24 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/22 maxlen: 22
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.214.0/24 maxlen: 24
85.133.215.0/24 maxlen: 24
85.133.217.0/24 maxlen: 24
85.133.218.0/24 maxlen: 24
85.133.219.0/24 maxlen: 24
85.133.220.0/22 maxlen: 22
85.133.220.0/24 maxlen: 24
85.133.222.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.226.0/24 maxlen: 24
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.231.0/24 maxlen: 24
85.133.232.0/22 maxlen: 22
85.133.232.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.245.0/24 maxlen: 24
85.133.246.0/24 maxlen: 24
85.133.248.0/23 maxlen: 24
85.133.248.0/24 maxlen: 24
85.133.249.0/24 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.254.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 23 Oct 2024 08:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b4:86:5b:28:d9:41:0d:18:66:7a:7e:c9:08:b1:00:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Oct 22 13:59:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=939dbfabb4cf58727f467af7afb6704498a8fbd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e0:c7:2a:c0:67:92:24:ea:7a:dc:95:40:22:
a6:a3:a4:d2:e6:25:0a:86:ca:bb:65:7d:ca:03:77:
fe:b1:e2:cd:31:24:9f:a9:81:29:e4:99:b9:8c:0b:
88:e4:cb:c1:75:ad:cb:66:0e:29:78:c3:8a:6e:23:
f3:20:27:1c:c3:8b:2b:a2:9a:cf:a3:4d:6c:d5:1e:
4b:4e:37:de:32:7d:75:9d:01:05:27:43:5d:cf:28:
2d:d8:e8:6b:84:fe:63:7a:61:1d:64:58:19:ca:e2:
a9:7b:9a:2a:a2:62:aa:f3:c7:08:e4:da:0c:7e:49:
cb:95:bd:ea:54:a1:f7:aa:a7:48:1b:ca:8c:ed:18:
36:31:ea:24:2a:8d:e1:9a:18:a8:46:db:79:c0:26:
f4:80:27:97:eb:89:3b:b1:ce:b9:50:c7:ef:a5:3d:
41:90:03:74:80:44:e8:b3:29:67:4a:ae:ae:45:f2:
19:58:39:e5:98:c2:79:ae:e1:5a:bd:e0:a5:6b:1f:
2c:7c:d0:7a:b2:6d:e3:92:2d:55:5c:1a:ae:59:e8:
6d:c3:6f:52:dc:c9:33:9f:bb:52:f3:ae:6f:8d:50:
4f:cd:4c:7b:77:ff:0d:d9:28:6a:6b:e5:95:fc:da:
9c:97:e5:69:d3:a3:f8:6f:7b:79:d6:c8:cc:79:03:
7b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9D:BF:AB:B4:CF:58:72:7F:46:7A:F7:AF:B6:70:44:98:A8:FB:D8
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/k52_q7TPWHJ_Rnr3r7ZwRJio-9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/17
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
04:63:e2:01:80:4b:e1:c6:bf:c7:04:b9:a6:7b:70:83:0d:f8:
67:73:97:67:e4:c3:c9:2b:fc:65:9f:81:66:d6:52:2c:0d:5c:
0c:39:9c:bb:d2:36:67:f2:8d:e6:86:73:31:bf:e4:f5:e6:03:
cf:ae:d9:bf:3c:28:bd:a5:57:01:54:5e:81:08:e3:26:78:55:
0d:37:e1:44:de:6e:6d:70:0d:70:75:74:52:d6:f6:96:78:37:
cf:81:77:80:28:05:49:7e:18:af:1f:45:a1:90:4e:35:a4:80:
fb:e6:86:9b:c8:b5:83:79:f4:d6:23:0d:48:6f:1f:90:49:b6:
d9:6b:88:e6:62:57:8b:41:fb:e5:28:90:ec:a8:4d:82:72:2e:
f2:98:25:52:82:36:9a:6b:c3:47:34:16:1a:39:44:77:d8:c3:
c1:11:37:ea:81:ce:f8:c2:8e:ef:f1:5b:be:0e:13:83:e7:b1:
e5:50:a0:1b:d6:ae:76:3d:5f:68:4f:e0:0d:68:19:01:56:ea:
54:ef:eb:28:e9:f3:75:ca:f4:3e:35:04:56:d7:14:21:ae:0c:
71:b9:73:89:91:43:e4:da:48:98:7c:95:cc:d6:44:ae:03:84:
13:1b:b3:37:36:da:b5:52:f9:4d:a7:96:2a:51:51:fa:cb:ed:
13:c4:94:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 10:37:17 2024 by rpki-client on console-ams.rpki-client.org