Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/nSPIxVeT3wXT-Q54GQS2tcuSOjo.roa
File: nSPIxVeT3wXT-Q54GQS2tcuSOjo.roa (raw, json)
Hash identifier: 41mQBLRGCtCfHJEgzl7+b1gl8aanH3BQBLs23RmdMXg=
Subject key identifier: 9D:23:C8:C5:57:93:DF:05:D3:F9:0E:78:19:04:B6:B5:CB:92:3A:3A
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0192BA293A7CAE407848911811E7054FDFAF
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/nSPIxVeT3wXT-Q54GQS2tcuSOjo.roa
Signing time: Wed 23 Oct 2024 16:15:16 +0000
ROA not before: Wed 23 Oct 2024 16:15:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.128.0/17 maxlen: 24
85.133.128.0/22 maxlen: 22
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.132.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.134.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.140.0/24 maxlen: 24
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.143.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.147.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.153.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.156.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.167.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
85.133.168.0/24 maxlen: 24
85.133.169.0/24 maxlen: 24
85.133.170.0/24 maxlen: 24
85.133.171.0/24 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.173.0/24 maxlen: 24
85.133.174.0/24 maxlen: 24
85.133.175.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.176.0/24 maxlen: 24
85.133.177.0/24 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.179.0/24 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.180.0/24 maxlen: 24
85.133.181.0/24 maxlen: 24
85.133.182.0/24 maxlen: 24
85.133.183.0/24 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.184.0/24 maxlen: 24
85.133.185.0/24 maxlen: 24
85.133.186.0/24 maxlen: 24
85.133.187.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.188.0/24 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.190.0/24 maxlen: 24
85.133.191.0/24 maxlen: 24
85.133.192.0/24 maxlen: 24
85.133.196.0/22 maxlen: 22
85.133.196.0/24 maxlen: 24
85.133.207.0/24 maxlen: 24
85.133.208.0/24 maxlen: 24
85.133.209.0/24 maxlen: 24
85.133.210.0/23 maxlen: 24
85.133.210.0/24 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/22 maxlen: 22
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.214.0/24 maxlen: 24
85.133.215.0/24 maxlen: 24
85.133.217.0/24 maxlen: 24
85.133.218.0/24 maxlen: 24
85.133.219.0/24 maxlen: 24
85.133.220.0/22 maxlen: 22
85.133.220.0/24 maxlen: 24
85.133.222.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.226.0/24 maxlen: 24
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.231.0/24 maxlen: 24
85.133.232.0/22 maxlen: 22
85.133.232.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.245.0/24 maxlen: 24
85.133.246.0/24 maxlen: 24
85.133.248.0/23 maxlen: 24
85.133.248.0/24 maxlen: 24
85.133.249.0/24 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.252.0/24 maxlen: 24
85.133.254.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 24 Oct 2024 19:48:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ba:29:3a:7c:ae:40:78:48:91:18:11:e7:05:4f:df:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Oct 23 16:15:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d23c8c55793df05d3f90e781904b6b5cb923a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:77:70:cc:42:f6:b0:53:6a:75:7a:e6:1d:eb:
51:69:e5:bb:e0:07:53:84:a6:fd:3e:eb:d9:3b:dc:
8b:ff:5f:31:ec:03:7e:7a:f0:4c:27:bc:55:d4:24:
54:9f:5c:e0:45:3e:93:6a:ac:e4:24:88:ea:21:cc:
e0:ba:0e:42:7f:d0:65:82:53:7f:e2:84:11:b2:58:
7e:7c:9f:80:ff:2b:6a:7a:d7:f9:01:85:94:68:d4:
95:1d:5b:01:3d:67:80:ae:9b:77:2b:2c:f7:27:6d:
06:0b:b3:45:17:95:28:a7:ba:31:35:9c:ba:c7:b1:
83:d2:d0:10:30:8c:af:14:16:1d:03:6b:83:6f:12:
f6:b4:85:93:c4:58:05:1c:df:75:4c:ce:86:12:5e:
11:48:00:2b:a8:d7:99:f1:9d:3b:16:52:0b:3f:62:
fd:c9:a1:c1:52:4a:fe:55:01:02:79:10:b7:74:03:
5e:17:a3:b5:0c:6a:79:10:f9:bc:ad:9c:41:31:95:
93:8f:85:a2:7f:5a:12:ff:d4:89:82:69:97:fb:93:
7a:b4:16:ac:40:18:20:4c:f4:b1:bf:40:b3:03:4e:
58:c4:d9:07:38:cc:cb:5f:08:06:dc:4b:80:a1:b6:
47:ff:d0:bf:c8:5b:66:e4:d1:28:3a:39:8d:57:1a:
0c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:23:C8:C5:57:93:DF:05:D3:F9:0E:78:19:04:B6:B5:CB:92:3A:3A
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/nSPIxVeT3wXT-Q54GQS2tcuSOjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/17
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
98:11:8a:35:1a:a9:37:ea:38:ac:22:9e:77:10:1a:5b:f5:b1:
4d:fe:9c:c9:b0:01:37:be:59:8c:fc:07:43:cf:35:1f:ec:94:
f2:80:72:9b:a6:52:7e:88:6e:30:f4:35:74:83:7d:06:57:ee:
18:9b:7d:fb:f3:f2:20:33:34:d6:51:47:4c:47:a7:91:2f:5f:
a2:57:66:74:52:bb:ea:13:3f:59:db:77:84:00:47:99:61:13:
3c:c0:6d:80:db:99:57:20:6a:ad:24:13:f0:ea:af:b8:d3:e0:
41:e2:99:46:7f:61:f7:f1:90:8b:1e:17:01:55:5e:3d:50:f2:
a5:8d:11:85:3a:64:cf:7a:e0:97:32:98:2e:99:6a:6b:1d:a2:
e9:ae:13:fe:c6:de:94:7a:d1:a5:63:57:f3:56:57:b1:6e:6e:
0a:40:b6:7a:f9:71:bd:31:67:bc:a9:68:b5:5d:66:88:bf:25:
67:d2:21:42:41:9e:af:ac:ab:d2:5c:a6:f4:0e:18:cb:37:fa:
65:51:4c:7c:71:c9:13:96:7f:73:38:20:7f:76:3e:c4:fd:01:
80:08:53:3d:ed:2c:f1:27:d7:12:fd:15:c3:b8:5f:11:31:bc:
60:ac:01:91:b1:4e:5d:11:65:b7:5b:c1:08:5c:67:98:8c:34:
36:53:da:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:34:08 2025 by rpki-client