Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/owH2d-QtKH4Jt06RVVyJrZT6V2E.roa
File: owH2d-QtKH4Jt06RVVyJrZT6V2E.roa (raw, json)
Hash identifier: oY5EQxbV4yJr1CSRcZ0xm9XXmUYOTYVTpMjdcixdBUA=
Subject key identifier: A3:01:F6:77:E4:2D:28:7E:09:B7:4E:91:55:5C:89:AD:94:FA:57:61
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0186274D68C81E92F5B877FE6C552679E708
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/owH2d-QtKH4Jt06RVVyJrZT6V2E.roa
Signing time: Mon 06 Feb 2023 15:17:09 +0000
ROA not before: Mon 06 Feb 2023 15:17:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52209
IP address blocks: 85.133.174.0/24 maxlen: 24
85.133.199.0/24 maxlen: 24
85.133.205.0/24 maxlen: 24
85.133.208.0/24 maxlen: 24
85.133.217.0/24 maxlen: 24
85.133.132.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.151.0/24 maxlen: 24
85.133.153.0/24 maxlen: 24
85.133.166.0/24 maxlen: 24
85.133.160.0/24 maxlen: 24
85.133.161.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:27:4d:68:c8:1e:92:f5:b8:77:fe:6c:55:26:79:e7:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Feb 6 15:17:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a301f677e42d287e09b74e91555c89ad94fa5761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:37:c6:a6:f5:e8:bc:9b:52:51:23:9f:48:55:
9e:27:03:de:8c:72:9d:cb:e8:f7:4e:95:fe:26:67:
5c:f4:a2:9e:31:c3:f6:a6:2c:85:82:08:02:76:3e:
e0:88:3c:67:1d:60:1b:9f:3d:fa:70:5e:7f:d1:8c:
24:0d:3f:77:57:60:1c:0d:56:a1:77:1e:35:57:69:
c0:72:da:c6:07:9d:58:f6:b8:05:2d:70:75:9b:d0:
03:92:c6:41:d1:ca:43:5a:a1:de:09:57:72:8a:24:
21:e0:e4:d4:bc:97:aa:c2:81:1a:5d:d2:51:f8:b2:
76:c8:a8:df:05:8b:9b:46:db:c2:bb:ef:07:fb:d1:
11:e3:9e:9c:92:46:41:4c:a2:fe:5c:ef:55:2d:66:
2e:13:45:f7:73:5f:46:46:04:19:db:c8:78:7b:79:
89:f5:c1:e9:65:e6:b4:2e:24:4d:16:f0:a8:e1:f7:
ae:67:cb:23:ce:69:97:71:fe:31:f3:32:ac:09:d3:
fc:72:8a:59:96:da:13:bf:69:b5:2c:67:41:43:46:
af:ef:22:7c:3e:23:5a:49:b5:a3:3f:18:55:02:51:
dd:5e:c4:d1:ec:f9:72:11:d4:4c:81:f9:c8:25:ce:
9c:4b:4d:3c:eb:25:93:9d:6a:72:03:6f:fc:b2:93:
65:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:01:F6:77:E4:2D:28:7E:09:B7:4E:91:55:5C:89:AD:94:FA:57:61
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/owH2d-QtKH4Jt06RVVyJrZT6V2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.132.0/24
85.133.135.0/24
85.133.151.0/24
85.133.153.0/24
85.133.160.0/23
85.133.166.0/24
85.133.174.0/24
85.133.199.0/24
85.133.205.0/24
85.133.208.0/24
85.133.217.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:66:9c:56:5a:12:30:d6:95:17:07:77:6b:35:6a:b8:fe:02:
8e:df:ae:f0:6b:18:22:ec:c1:36:66:f7:c0:9d:9d:26:ef:cc:
ad:cf:92:4c:e9:4c:2c:70:00:c2:3c:5e:f9:32:96:ca:ee:e8:
78:02:8d:e7:aa:1e:f1:f2:50:69:29:18:83:80:a5:b7:0c:cc:
e8:14:ad:1c:ee:5b:17:7c:7a:65:59:1d:cc:0f:2b:65:35:ab:
8a:57:ea:92:7e:f7:55:36:ce:6f:b7:1c:72:27:71:4e:fd:2d:
56:39:e4:75:7a:eb:6b:08:d6:2e:9d:3b:c3:cb:27:3c:8a:9e:
ad:7b:40:2e:94:ed:8c:94:54:eb:a9:63:3d:5c:4c:29:ad:2f:
c7:27:c6:20:e2:8e:cb:fc:46:b4:5f:ca:50:36:4a:2b:9d:f2:
d2:ad:d8:df:c0:e7:26:e1:85:42:5f:0e:21:ec:e8:58:10:63:
0d:fd:16:78:42:e9:fe:53:37:df:bc:09:cc:ab:cc:79:f9:ce:
5b:e8:e9:4d:1a:0a:0b:86:dd:69:f1:de:60:42:8e:df:af:e0:
6c:ea:90:49:66:17:42:be:57:0c:90:53:5a:fd:4d:5f:06:6b:
46:91:da:75:03:1e:ac:c0:6a:8c:e8:b5:be:f4:57:98:b9:29:
18:2a:a6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:05 2023 by rpki-client on console-ams.rpki-client.org