Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/paJqpyqJAVawj8uSHzKQYhcMAS8.roa
File: paJqpyqJAVawj8uSHzKQYhcMAS8.roa (raw, json)
Hash identifier: /7JwJoGwwu0vt2xJ5gpEVt5Y+oLzaPk5qtEjqLIOPJg=
Subject key identifier: A5:A2:6A:A7:2A:89:01:56:B0:8F:CB:92:1F:32:90:62:17:0C:01:2F
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018C351F05E454883845F5FB3DDEE230873E
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/paJqpyqJAVawj8uSHzKQYhcMAS8.roa
Signing time: Mon 04 Dec 2023 13:57:54 +0000
ROA not before: Mon 04 Dec 2023 13:57:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.231.0/24 maxlen: 24
85.133.232.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
85.133.232.0/22 maxlen: 22
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.227.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.240.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.240.0/22 maxlen: 22
85.133.245.0/24 maxlen: 24
85.133.246.0/24 maxlen: 24
85.133.243.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
85.133.248.0/23 maxlen: 24
85.133.249.0/24 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.252.0/22 maxlen: 22
85.133.254.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
85.133.179.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.174.0/24 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.192.0/22 maxlen: 22
85.133.196.0/24 maxlen: 24
85.133.197.0/24 maxlen: 24
85.133.196.0/22 maxlen: 22
85.133.200.0/22 maxlen: 22
85.133.206.0/24 maxlen: 24
85.133.200.0/24 maxlen: 24
85.133.201.0/24 maxlen: 24
85.133.202.0/24 maxlen: 24
85.133.210.0/23 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.207.0/24 maxlen: 24
85.133.212.0/22 maxlen: 22
85.133.208.0/24 maxlen: 24
85.133.209.0/24 maxlen: 24
85.133.217.0/24 maxlen: 24
85.133.219.0/24 maxlen: 24
85.133.215.0/24 maxlen: 24
85.133.220.0/24 maxlen: 24
85.133.220.0/22 maxlen: 22
85.133.225.0/24 maxlen: 24
85.133.226.0/24 maxlen: 24
85.133.221.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.224.0/22 maxlen: 22
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.128.0/17 maxlen: 24
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.128.0/22 maxlen: 22
85.133.134.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.140.0/24 maxlen: 24
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.147.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.156.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.153.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.162.0/24 maxlen: 24
85.133.163.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
85.133.160.0/24 maxlen: 24
85.133.161.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
185.41.0.0/24 maxlen: 24
185.41.1.0/24 maxlen: 24
185.41.2.0/24 maxlen: 24
185.41.3.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 24 Dec 2023 12:27:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:35:1f:05:e4:54:88:38:45:f5:fb:3d:de:e2:30:87:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Dec 4 13:57:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5a26aa72a890156b08fcb921f329062170c012f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d5:92:0b:a8:6d:75:0a:b6:b8:c1:3d:01:27:
8b:fe:dd:7d:4d:da:0f:fd:02:cb:25:cb:4d:d3:0b:
0b:04:f0:ee:01:d8:52:df:bb:88:0b:7b:44:10:c9:
a0:23:bf:3d:78:9f:e9:af:ed:21:29:be:5e:10:8c:
8e:3c:a7:67:ce:a7:82:8f:77:3a:9f:59:8d:57:a9:
44:f5:71:16:ed:7e:63:b8:71:a9:64:22:d0:5b:33:
2a:2e:95:56:96:41:b0:75:ab:53:bf:d7:fc:62:17:
a5:11:57:a6:01:77:b6:2c:f8:a5:9e:d1:fc:d6:79:
b8:dd:a5:b4:ef:b9:2a:e6:e2:3d:66:2b:cb:ff:1a:
d1:89:8f:b6:5c:df:54:ab:b3:49:87:9e:3a:ff:06:
75:c5:64:8c:2f:e7:f8:d5:b9:8f:24:e1:e4:d3:db:
2e:58:7d:28:b0:4e:c3:9e:98:1e:83:4f:12:d9:18:
08:e2:5b:b6:a9:be:c1:8e:e2:0b:00:1d:e9:ea:e0:
3c:09:3f:8d:ae:92:f8:bf:57:28:6e:17:81:ab:df:
a9:50:b0:fd:ad:6e:2a:5f:31:32:de:da:77:80:ec:
a7:63:af:28:93:5a:06:d0:a4:04:46:27:d5:70:46:
55:33:ae:26:72:8f:67:d4:d3:fd:52:46:87:ff:96:
32:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A2:6A:A7:2A:89:01:56:B0:8F:CB:92:1F:32:90:62:17:0C:01:2F
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/paJqpyqJAVawj8uSHzKQYhcMAS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/17
185.41.0.0/22
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
84:5b:33:36:88:7e:2e:da:d9:50:f1:d8:22:66:dd:a9:8b:66:
16:35:b3:b0:5b:0f:60:b9:8a:45:71:b1:12:1b:35:cd:66:48:
2a:3f:bc:2f:dd:f4:8e:68:d2:be:c5:4f:31:da:4e:26:48:3e:
4e:2d:11:10:63:62:41:77:40:72:fe:2f:e7:3f:c9:9e:76:ee:
62:c4:c1:7c:d1:24:51:bf:76:c2:18:de:67:4f:6d:da:c4:6b:
46:fe:f8:85:c9:db:23:ff:df:d9:d5:a0:74:0d:76:58:d6:c0:
ef:0d:30:0e:97:a6:ac:9b:cb:b4:c3:0c:8d:0f:b7:a5:07:c0:
15:1e:7d:07:2a:b0:8e:dd:49:97:c3:f9:8b:be:d3:77:e8:67:
af:ab:f0:c6:af:ab:c3:2f:42:ef:e2:e6:2b:90:a0:e1:c8:2b:
f4:6e:b3:a8:00:27:7d:be:fe:f7:5c:3e:5b:ad:a3:0f:3f:86:
e6:b5:cb:57:ff:5c:ce:ce:94:58:2e:b6:36:02:15:4a:56:8f:
8a:e8:f2:c0:36:97:ac:ca:6c:29:19:59:09:dd:32:71:60:66:
e6:91:ec:3e:c6:49:74:4e:61:ae:de:51:ce:09:60:cd:fb:ba:
3e:2a:4e:72:36:05:74:ba:05:9e:c6:4d:ff:14:05:b8:4d:2c:
e0:fb:f4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:02 2024 by rpki-client on console-ams.rpki-client.org