Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/rWAZyFpixYrf37E8tlYuAYt9F0w.roa
File: rWAZyFpixYrf37E8tlYuAYt9F0w.roa (raw, json)
Hash identifier: JVtJivb52Hs/t5p4jD8jgdgWcYCHAU1oSL5/5+xs5aU=
Subject key identifier: AD:60:19:C8:5A:62:C5:8A:DF:DF:B1:3C:B6:56:2E:01:8B:7D:17:4C
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019248087ECF852FC576FBF05B1D333EB5BF
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/rWAZyFpixYrf37E8tlYuAYt9F0w.roa
Signing time: Tue 01 Oct 2024 12:22:49 +0000
ROA not before: Tue 01 Oct 2024 12:22:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.128.0/17 maxlen: 24
85.133.128.0/22 maxlen: 22
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.132.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.134.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.140.0/24 maxlen: 24
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.143.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.147.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.153.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.156.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.174.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.179.0/24 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.189.0/24 maxlen: 24
85.133.192.0/22 maxlen: 22
85.133.196.0/22 maxlen: 22
85.133.196.0/24 maxlen: 24
85.133.207.0/24 maxlen: 24
85.133.208.0/24 maxlen: 24
85.133.209.0/24 maxlen: 24
85.133.210.0/23 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/22 maxlen: 22
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.215.0/24 maxlen: 24
85.133.217.0/24 maxlen: 24
85.133.218.0/24 maxlen: 24
85.133.219.0/24 maxlen: 24
85.133.220.0/22 maxlen: 22
85.133.220.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.226.0/24 maxlen: 24
85.133.227.0/24 maxlen: 24
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.231.0/24 maxlen: 24
85.133.232.0/22 maxlen: 22
85.133.232.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.245.0/24 maxlen: 24
85.133.246.0/24 maxlen: 24
85.133.248.0/23 maxlen: 24
85.133.249.0/24 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.252.0/22 maxlen: 22
85.133.254.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 01 Oct 2024 14:05:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:48:08:7e:cf:85:2f:c5:76:fb:f0:5b:1d:33:3e:b5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Oct 1 12:22:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad6019c85a62c58adfdfb13cb6562e018b7d174c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f9:6b:23:9a:2a:2c:b9:75:62:a8:48:44:62:
a9:93:2b:4d:bf:e2:c2:d6:e4:08:21:00:dc:e5:e7:
7e:02:ba:d4:4f:6d:c2:78:cb:14:41:f9:71:70:65:
09:a5:ac:90:da:c6:10:05:3f:3e:fb:34:ac:c7:c3:
a3:55:7c:80:85:ca:47:59:06:85:a6:bd:03:75:45:
80:47:0d:78:6a:17:28:bc:b5:00:01:10:6c:d1:ea:
21:bc:44:40:a8:ca:eb:d2:7b:dd:13:d0:1e:74:f5:
79:aa:6d:eb:98:eb:48:11:be:98:b1:52:32:89:af:
ca:44:10:12:e3:68:c6:50:5b:64:45:66:c6:a5:3c:
e4:bf:11:12:3f:92:16:26:f5:5f:b8:a5:74:45:24:
7e:36:a3:99:10:43:bf:08:2d:1c:8b:f2:7c:c6:75:
87:12:cf:72:6c:a4:ba:6f:f0:13:45:c7:09:34:4f:
05:ca:b8:9c:5a:d1:b0:1d:78:d9:77:2a:ee:ff:11:
b7:36:a2:8f:87:87:b2:eb:42:63:cc:50:28:9f:a4:
bf:ca:4c:ee:ac:32:f3:a0:1a:38:78:ad:e8:82:cd:
79:b2:1b:04:b7:1e:40:61:df:f7:b7:17:bb:40:42:
ea:bb:84:34:67:88:1b:3e:fe:39:cf:d2:9a:8c:11:
c7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:60:19:C8:5A:62:C5:8A:DF:DF:B1:3C:B6:56:2E:01:8B:7D:17:4C
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/rWAZyFpixYrf37E8tlYuAYt9F0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/17
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
7b:88:f1:91:16:d5:dd:49:03:0b:25:21:f2:e6:72:45:38:d8:
c7:9c:b9:4e:20:97:79:db:42:78:6a:53:f0:67:43:13:d1:66:
7b:46:ea:7a:23:ae:ca:e6:71:c8:43:7d:ee:c2:4d:68:ec:d3:
19:0d:93:0a:7d:64:1c:7f:13:f3:f7:73:ae:a0:0b:83:88:cf:
6b:0e:a6:cc:4e:f9:70:bd:85:7b:60:7c:9a:8d:b8:7a:aa:b8:
5b:2f:69:48:94:62:a0:99:57:09:5f:b9:89:96:5d:95:9d:34:
69:37:a6:7d:60:ea:0b:d4:6a:33:5c:96:89:eb:1e:5d:5d:1e:
2b:fd:5b:f8:2e:e8:f1:81:f5:56:c1:28:61:e0:08:22:03:7b:
90:aa:71:7f:c2:1d:b9:24:ee:d4:68:cb:91:0b:6e:94:c8:fb:
30:f8:8b:52:4d:6a:cf:bf:1b:97:a8:c2:fb:13:a7:00:94:65:
75:59:9c:f5:6a:71:14:5e:17:9b:0d:1d:13:e1:ef:e6:94:33:
b3:f0:63:35:86:48:f4:08:70:96:d2:25:8e:cc:52:86:5b:ad:
91:46:03:48:83:95:b1:8b:d6:ee:70:42:17:aa:21:e5:07:cf:
15:0b:e8:3d:12:99:a1:76:d0:b6:5e:ff:f2:ed:c9:75:18:7a:
38:56:b1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 16:20:40 2024 by rpki-client on console-fra.rpki-client.org