Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/nQSDW1IfsZeXZdCvjYRxvV3gYCU.roa
File: nQSDW1IfsZeXZdCvjYRxvV3gYCU.roa (raw, json)
Hash identifier: usEd8lRU399CsFh26jwn5uOUGcbtxx8aHyPgW/PBIPc=
Subject key identifier: 9D:04:83:5B:52:1F:B1:97:97:65:D0:AF:8D:84:71:BD:5D:E0:60:25
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0185727105FE8D11F1F79BC6107D0D44A902
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/nQSDW1IfsZeXZdCvjYRxvV3gYCU.roa
Signing time: Mon 02 Jan 2023 12:24:47 +0000
ROA not before: Mon 02 Jan 2023 12:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.231.0/24 maxlen: 24
85.133.232.0/24 maxlen: 24
85.133.228.0/22 maxlen: 22
85.133.232.0/22 maxlen: 22
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.236.0/22 maxlen: 22
85.133.240.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.240.0/22 maxlen: 22
85.133.245.0/24 maxlen: 24
85.133.246.0/24 maxlen: 24
85.133.243.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
85.133.248.0/22 maxlen: 22
85.133.249.0/24 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.252.0/22 maxlen: 22
85.133.254.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.192.0/22 maxlen: 22
85.133.196.0/24 maxlen: 24
85.133.197.0/24 maxlen: 24
85.133.196.0/22 maxlen: 22
85.133.203.0/24 maxlen: 24
85.133.204.0/24 maxlen: 24
85.133.200.0/22 maxlen: 22
85.133.206.0/24 maxlen: 24
85.133.200.0/24 maxlen: 24
85.133.201.0/24 maxlen: 24
85.133.204.0/22 maxlen: 22
85.133.210.0/24 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.208.0/22 maxlen: 22
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.207.0/24 maxlen: 24
85.133.212.0/22 maxlen: 22
85.133.209.0/24 maxlen: 24
85.133.216.0/22 maxlen: 22
85.133.220.0/24 maxlen: 24
85.133.220.0/22 maxlen: 22
85.133.226.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.224.0/22 maxlen: 22
85.133.132.0/22 maxlen: 22
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.128.0/17 maxlen: 24
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.128.0/22 maxlen: 22
85.133.134.0/24 maxlen: 24
85.133.136.0/22 maxlen: 22
85.133.133.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.140.0/24 maxlen: 24
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.147.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.156.0/22 maxlen: 22
85.133.154.0/24 maxlen: 24
85.133.160.0/22 maxlen: 22
85.133.162.0/24 maxlen: 24
85.133.163.0/24 maxlen: 24
85.133.164.0/22 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
185.41.0.0/24 maxlen: 24
185.41.1.0/24 maxlen: 24
185.41.2.0/24 maxlen: 24
185.41.3.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:71:05:fe:8d:11:f1:f7:9b:c6:10:7d:0d:44:a9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jan 2 12:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d04835b521fb1979765d0af8d8471bd5de06025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:44:29:b2:0f:c5:94:0c:6e:db:3b:c1:bf:85:
f6:1e:f2:fa:43:8d:9c:3a:c0:b3:73:d6:b6:52:57:
8a:bb:43:24:f3:2e:dd:cc:67:00:df:da:2e:06:20:
fb:71:47:ec:44:e9:6c:02:81:65:14:2a:c9:a2:6d:
43:01:7b:67:59:fe:37:09:6c:d3:a6:fd:70:87:39:
9c:b4:a8:09:de:ca:31:09:46:f8:a6:17:d8:93:5b:
55:b7:ea:2c:71:e8:38:e8:9b:ef:4d:d4:99:88:09:
a5:b0:26:a1:b6:64:34:3a:28:45:6d:32:e7:45:ae:
65:e2:86:69:47:39:15:e5:79:2c:2c:1a:7c:f0:b4:
94:0a:6e:a2:b1:65:ec:e5:9d:63:51:8a:7f:8a:76:
5f:00:d8:94:77:95:10:85:27:a8:f6:e8:dc:4b:8d:
36:02:b6:5b:f4:13:30:04:41:5b:3e:b6:87:bf:3f:
79:f4:57:1a:10:c5:18:5f:f5:82:0d:9a:d4:e8:af:
f1:d7:51:46:18:88:bc:d6:fc:4b:56:cc:f8:bd:bf:
78:95:2b:5c:85:58:3f:dd:18:ce:f1:f5:39:84:48:
24:f2:f8:b4:42:6a:ea:f7:fb:2d:ef:69:99:84:58:
2e:bb:24:96:32:53:a5:7e:14:7d:4e:96:2e:e4:73:
28:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:04:83:5B:52:1F:B1:97:97:65:D0:AF:8D:84:71:BD:5D:E0:60:25
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/nQSDW1IfsZeXZdCvjYRxvV3gYCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/17
185.41.0.0/22
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
55:ea:e4:8b:2e:56:29:9a:dc:f3:8e:c0:33:e8:65:8f:0d:16:
f4:24:9f:a4:10:a1:35:fc:10:60:17:24:03:9e:77:ca:c1:b5:
f3:d5:4c:b6:26:bf:ab:25:a4:55:76:fb:d0:51:89:bb:47:7d:
39:68:9b:24:10:0b:bb:8b:23:14:5b:ba:1d:72:d6:cd:bc:ad:
3e:ab:0f:07:6d:3a:02:8a:98:77:40:9b:e7:e8:6d:a6:1f:5a:
d4:ff:13:a7:29:16:3e:04:ad:1e:a5:d9:7b:2f:8a:b1:08:e3:
25:b5:17:9b:23:7b:af:72:ef:8e:b4:7d:b3:25:bd:a1:93:f1:
97:d4:61:f2:ce:d9:f7:f1:71:5f:b3:69:8e:6d:2f:4c:f6:bf:
3a:13:ed:67:3f:bb:08:a0:0d:09:68:17:e6:ce:af:0c:61:49:
37:55:a1:61:e6:ab:a1:79:e9:8d:fc:93:4b:e1:be:17:6b:4a:
8b:b2:3f:70:d7:1a:c3:65:4a:d8:a4:c1:21:07:6a:05:c9:01:
5d:f2:e4:a3:ef:eb:5a:60:1d:69:8a:6c:d7:c3:5b:4e:f2:e2:
7c:64:43:a9:37:0c:e6:b4:9b:4d:cc:6c:6a:30:fc:8b:02:7d:
80:2c:4b:86:55:79:5c:5e:9f:78:fb:92:79:00:0d:ba:6b:b9:
e5:0c:8c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:05 2023 by rpki-client on console-ams.rpki-client.org