Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/mygmUAa3c8BZSwaeGXzQKLK_AX4.roa
File: mygmUAa3c8BZSwaeGXzQKLK_AX4.roa (raw, json)
Hash identifier: 1b1hItWzd/zaNoknW8rB4aEyKb+5VfVXDUe2HfC0FzE=
Subject key identifier: 9B:28:26:50:06:B7:73:C0:59:4B:06:9E:19:7C:D0:28:B2:BF:01:7E
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018B41AC8448D5617354911C5D00116ACB5F
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/mygmUAa3c8BZSwaeGXzQKLK_AX4.roa
Signing time: Wed 18 Oct 2023 07:25:06 +0000
ROA not before: Wed 18 Oct 2023 07:25:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.231.0/24 maxlen: 24
85.133.232.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
85.133.232.0/22 maxlen: 22
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.227.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.240.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.240.0/22 maxlen: 22
85.133.245.0/24 maxlen: 24
85.133.246.0/24 maxlen: 24
85.133.243.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
85.133.248.0/23 maxlen: 24
85.133.249.0/24 maxlen: 24
85.133.250.0/24 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.252.0/22 maxlen: 22
85.133.254.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
85.133.179.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.174.0/24 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.192.0/22 maxlen: 22
85.133.196.0/24 maxlen: 24
85.133.197.0/24 maxlen: 24
85.133.199.0/24 maxlen: 24
85.133.196.0/22 maxlen: 22
85.133.205.0/24 maxlen: 24
85.133.203.0/24 maxlen: 24
85.133.204.0/24 maxlen: 24
85.133.200.0/22 maxlen: 22
85.133.206.0/24 maxlen: 24
85.133.200.0/24 maxlen: 24
85.133.201.0/24 maxlen: 24
85.133.204.0/22 maxlen: 22
85.133.202.0/24 maxlen: 24
85.133.210.0/23 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.207.0/24 maxlen: 24
85.133.212.0/22 maxlen: 22
85.133.208.0/24 maxlen: 24
85.133.209.0/24 maxlen: 24
85.133.217.0/24 maxlen: 24
85.133.219.0/24 maxlen: 24
85.133.215.0/24 maxlen: 24
85.133.220.0/24 maxlen: 24
85.133.220.0/22 maxlen: 22
85.133.225.0/24 maxlen: 24
85.133.226.0/24 maxlen: 24
85.133.221.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.224.0/22 maxlen: 22
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.128.0/17 maxlen: 24
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.128.0/22 maxlen: 22
85.133.134.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.140.0/24 maxlen: 24
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.147.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.156.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.153.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.162.0/24 maxlen: 24
85.133.163.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
85.133.160.0/24 maxlen: 24
85.133.161.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
185.41.0.0/24 maxlen: 24
185.41.1.0/24 maxlen: 24
185.41.2.0/24 maxlen: 24
185.41.3.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 23 Oct 2023 13:11:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:41:ac:84:48:d5:61:73:54:91:1c:5d:00:11:6a:cb:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Oct 18 07:25:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b28265006b773c0594b069e197cd028b2bf017e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e4:b8:87:1a:83:c3:5b:51:55:e6:7c:bd:46:
1d:47:7e:74:0a:e0:e8:b0:ea:86:0a:70:36:b4:b1:
d2:3a:41:ef:54:f7:8f:22:81:25:09:7a:da:46:1b:
81:b5:60:04:e0:5e:d6:55:d2:f8:34:51:07:15:6e:
8b:0d:f6:23:26:72:9e:2e:af:06:82:4d:8e:52:12:
9f:d2:d8:bf:a1:ec:b4:75:94:b5:dc:97:45:ab:24:
98:85:f3:87:05:72:ae:e8:1f:58:4b:2b:0a:d8:9b:
48:02:db:21:91:d2:77:c9:49:7c:f3:3f:f8:32:8d:
3b:f6:37:7b:5d:a0:b9:03:c4:d8:6a:7b:05:13:0c:
9c:d4:fc:0e:98:1b:64:74:d6:94:2d:59:fd:9b:53:
ba:50:56:f8:26:1f:f2:7f:78:3e:7e:9c:9e:d6:2b:
e5:07:0e:58:97:0b:c2:ba:e3:ad:41:a9:ed:6d:db:
33:b7:34:e1:75:3f:15:cf:d0:80:fd:53:f2:a3:2c:
7a:52:73:67:52:65:f0:04:17:97:14:6a:10:8d:05:
3d:ae:e5:1a:62:35:3e:a1:d5:94:15:36:61:e0:cd:
5a:3e:8c:e4:29:d9:07:52:7d:f0:fc:04:04:dc:4d:
db:d7:7b:03:1e:d1:40:fa:88:ef:bf:28:90:73:6a:
01:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:28:26:50:06:B7:73:C0:59:4B:06:9E:19:7C:D0:28:B2:BF:01:7E
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/mygmUAa3c8BZSwaeGXzQKLK_AX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/17
185.41.0.0/22
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
87:81:23:9e:c5:60:b5:02:56:ea:96:cc:d0:98:6e:01:ef:0b:
db:f2:cc:20:e4:aa:9a:0f:05:15:0f:8e:11:8c:fb:a8:06:97:
68:82:ad:a3:a5:ff:b1:50:22:d4:79:44:97:b4:7e:51:ec:08:
55:52:a0:90:62:19:14:d0:1b:44:ef:09:4d:49:af:60:2e:a6:
21:ac:40:4c:2c:df:26:c8:74:c5:7b:b3:13:15:ee:85:3b:df:
5b:49:c4:2c:78:6c:44:17:01:8d:16:75:d3:6e:35:20:a3:53:
36:7a:09:58:e2:1c:b1:63:c0:93:a8:3b:f1:aa:69:88:e5:37:
de:f7:b5:73:2d:27:7c:ac:f8:ec:f8:af:e2:53:5a:e8:00:c3:
42:84:70:38:5e:24:54:e0:72:a2:50:6c:d0:47:14:9f:ef:f0:
80:26:03:46:48:37:26:e4:40:af:17:ee:63:64:19:b1:ca:6d:
70:90:27:74:eb:9b:31:11:81:83:ef:fa:f4:e8:f3:4a:00:81:
cc:af:6e:89:3b:30:37:7d:f4:e2:ca:8c:9d:4f:6b:e2:76:e2:
c1:9b:9a:a0:a8:78:6f:10:e5:35:00:80:14:d2:1a:d9:50:d4:
2e:0d:e3:b6:ef:81:15:6b:95:ea:5b:29:a3:12:61:4a:03:a6:
01:f3:1a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:13 2024 by rpki-client on console-fra.rpki-client.org