Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/m6GSTT36iV8Nh0eIyGbNgAVS6x4.roa
File: m6GSTT36iV8Nh0eIyGbNgAVS6x4.roa (raw, json)
Hash identifier: Xgr+4e94CmfLZtnKG/GsP+4cb5EeFjERsXjnKcsG0fY=
Subject key identifier: 9B:A1:92:4D:3D:FA:89:5F:0D:87:47:88:C8:66:CD:80:05:52:EB:1E
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0192C02E0F24746D74CF63296BB6DDEF40D9
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/m6GSTT36iV8Nh0eIyGbNgAVS6x4.roa
Signing time: Thu 24 Oct 2024 20:18:16 +0000
ROA not before: Thu 24 Oct 2024 20:18:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.128.0/22 maxlen: 22
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.132.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.134.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.140.0/24 maxlen: 24
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.143.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.147.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.153.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.156.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.167.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
85.133.168.0/24 maxlen: 24
85.133.169.0/24 maxlen: 24
85.133.170.0/24 maxlen: 24
85.133.171.0/24 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.173.0/24 maxlen: 24
85.133.174.0/24 maxlen: 24
85.133.175.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.176.0/24 maxlen: 24
85.133.177.0/24 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.179.0/24 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.180.0/24 maxlen: 24
85.133.181.0/24 maxlen: 24
85.133.182.0/24 maxlen: 24
85.133.183.0/24 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.184.0/24 maxlen: 24
85.133.185.0/24 maxlen: 24
85.133.186.0/24 maxlen: 24
85.133.187.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.188.0/24 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.190.0/24 maxlen: 24
85.133.191.0/24 maxlen: 24
85.133.192.0/24 maxlen: 24
85.133.196.0/22 maxlen: 22
85.133.196.0/24 maxlen: 24
85.133.207.0/24 maxlen: 24
85.133.208.0/24 maxlen: 24
85.133.209.0/24 maxlen: 24
85.133.210.0/23 maxlen: 24
85.133.210.0/24 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/22 maxlen: 22
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.215.0/24 maxlen: 24
85.133.217.0/24 maxlen: 24
85.133.218.0/24 maxlen: 24
85.133.219.0/24 maxlen: 24
85.133.220.0/22 maxlen: 22
85.133.220.0/24 maxlen: 24
85.133.222.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.226.0/24 maxlen: 24
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.231.0/24 maxlen: 24
85.133.232.0/22 maxlen: 22
85.133.232.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.245.0/24 maxlen: 24
85.133.248.0/23 maxlen: 24
85.133.248.0/24 maxlen: 24
85.133.249.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 25 Oct 2024 09:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c0:2e:0f:24:74:6d:74:cf:63:29:6b:b6:dd:ef:40:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Oct 24 20:18:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ba1924d3dfa895f0d874788c866cd800552eb1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e4:96:c7:2c:8c:eb:31:98:d1:1e:ec:04:9e:
01:a6:21:b8:ed:7f:a5:38:0d:88:a3:66:a8:d6:af:
92:d5:3b:df:76:ea:56:5d:b7:16:ed:4a:db:0d:db:
ef:18:95:23:04:f1:16:47:38:30:f9:42:b1:0b:3b:
19:2e:f5:a3:83:13:5d:e3:24:e9:58:7a:85:2d:d9:
02:fa:da:fd:cf:5c:84:c5:e3:f1:e5:21:9b:ae:06:
94:75:86:2b:4e:4e:5b:42:3a:21:8e:d2:b2:0d:79:
b5:f0:99:e6:20:fa:ea:69:31:dd:c1:84:8f:02:f2:
98:26:ef:cf:d9:22:39:8a:8b:4a:14:41:52:80:f0:
78:43:b1:f3:c4:db:9b:08:df:d9:d9:55:fc:e9:73:
cf:07:63:f6:61:a2:c6:19:47:34:35:dd:9d:27:03:
71:72:27:d3:f6:33:1f:ce:64:9a:4e:ce:5f:1b:03:
e7:49:13:e4:04:e4:cd:34:11:8a:ea:7c:57:c9:df:
d6:87:38:c2:2f:79:97:ea:46:cf:fd:83:cb:9b:76:
b5:e2:d3:f2:8b:be:d3:99:ff:f9:f3:39:a1:c4:a7:
db:69:4b:92:52:ab:4f:3b:ac:bf:62:50:25:0d:d9:
08:39:44:09:4d:25:01:9b:60:66:7e:09:18:b8:d6:
4a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A1:92:4D:3D:FA:89:5F:0D:87:47:88:C8:66:CD:80:05:52:EB:1E
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/m6GSTT36iV8Nh0eIyGbNgAVS6x4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/19
85.133.164.0/23
85.133.167.0-85.133.192.255
85.133.196.0/22
85.133.207.0-85.133.215.255
85.133.217.0-85.133.223.255
85.133.226.0/24
85.133.229.0-85.133.235.255
85.133.239.0/24
85.133.244.0/23
85.133.248.0/23
85.133.255.0/24
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
3b:af:d5:1d:ab:71:f4:be:2f:5e:a8:d1:30:ea:39:5e:68:9e:
71:7b:3f:f1:50:a8:09:99:dd:c4:25:ef:52:aa:cf:18:38:27:
8d:6c:d2:e9:ce:cc:7d:14:68:12:93:4f:4c:26:87:5f:95:0d:
4f:34:f1:97:c7:e6:5a:e6:5d:3a:0b:86:e9:39:55:6b:99:ee:
aa:85:47:1b:c6:f7:b1:87:29:44:45:86:11:af:44:4f:ea:6a:
a9:f3:82:70:89:01:6f:24:87:43:1f:d3:73:0b:70:91:e2:cf:
f1:29:52:0e:3b:01:03:b2:6d:52:00:d0:42:9a:78:eb:a7:1f:
5a:3d:e7:2c:2c:90:a6:36:9a:80:10:cd:1f:96:4a:63:8b:37:
78:ca:c1:c0:78:36:fe:32:cf:84:3c:52:07:44:8e:a0:cf:1e:
8f:09:61:b2:d3:e8:f0:37:0a:38:18:71:c8:96:a2:2b:3c:fa:
49:73:30:33:e7:7c:db:8d:bb:f4:4d:c8:d8:e4:bb:86:fe:6a:
a2:75:1f:fb:29:26:e4:29:4d:31:2e:a9:80:58:cb:71:a9:05:
6f:7b:53:de:23:37:a3:d2:89:7b:00:d1:db:07:90:2d:e6:10:
0e:dc:40:06:f3:05:6c:6a:9a:3b:b9:84:75:0b:34:2d:de:5d:
46:85:44:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 12:04:00 2024 by rpki-client on console-fra.rpki-client.org