Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/sfygJW6eNRFegS23BO6wxgAaook.roa
File: sfygJW6eNRFegS23BO6wxgAaook.roa (raw, json)
Hash identifier: zRU8+EEjuZgfNbwUhc6JPl7ygFM4iP4qf1YYW5Fe9b4=
Subject key identifier: B1:FC:A0:25:6E:9E:35:11:5E:81:2D:B7:04:EE:B0:C6:00:1A:A2:89
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0189E3961B4DE9A7DC3194CADA01FB73B8B3
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/sfygJW6eNRFegS23BO6wxgAaook.roa
Signing time: Fri 11 Aug 2023 07:53:32 +0000
ROA not before: Fri 11 Aug 2023 07:53:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.231.0/24 maxlen: 24
85.133.232.0/24 maxlen: 24
85.133.232.0/22 maxlen: 22
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.240.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.240.0/22 maxlen: 22
85.133.245.0/24 maxlen: 24
85.133.246.0/24 maxlen: 24
85.133.243.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
85.133.248.0/23 maxlen: 24
85.133.249.0/24 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.252.0/22 maxlen: 22
85.133.254.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.192.0/22 maxlen: 22
85.133.196.0/24 maxlen: 24
85.133.197.0/24 maxlen: 24
85.133.196.0/22 maxlen: 22
85.133.203.0/24 maxlen: 24
85.133.204.0/24 maxlen: 24
85.133.205.0/24 maxlen: 24
85.133.200.0/22 maxlen: 22
85.133.206.0/24 maxlen: 24
85.133.200.0/24 maxlen: 24
85.133.201.0/24 maxlen: 24
85.133.204.0/22 maxlen: 22
85.133.210.0/23 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.207.0/24 maxlen: 24
85.133.212.0/22 maxlen: 22
85.133.209.0/24 maxlen: 24
85.133.217.0/24 maxlen: 24
85.133.219.0/24 maxlen: 24
85.133.215.0/24 maxlen: 24
85.133.220.0/24 maxlen: 24
85.133.220.0/22 maxlen: 22
85.133.226.0/24 maxlen: 24
85.133.221.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.224.0/22 maxlen: 22
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.128.0/17 maxlen: 24
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.128.0/22 maxlen: 22
85.133.134.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.140.0/24 maxlen: 24
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.147.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.162.0/24 maxlen: 24
85.133.163.0/24 maxlen: 24
85.133.161.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.168.0/22 maxlen: 24
185.41.0.0/24 maxlen: 24
185.41.1.0/24 maxlen: 24
185.41.2.0/24 maxlen: 24
185.41.3.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 12 Aug 2023 10:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e3:96:1b:4d:e9:a7:dc:31:94:ca:da:01:fb:73:b8:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Aug 11 07:53:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1fca0256e9e35115e812db704eeb0c6001aa289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1f:93:7e:4c:f2:91:ae:6b:0c:48:c9:26:c4:
48:55:60:cf:4a:b7:e7:9f:82:e6:21:9c:9d:78:11:
b0:a2:e1:71:07:a4:c0:95:1c:8e:ff:e4:a6:c9:4a:
b9:02:35:78:9f:bf:21:75:3b:9f:6b:d7:16:87:57:
d8:a7:c3:48:2c:0c:87:88:79:e0:1b:62:7c:10:59:
a6:e0:58:a9:b2:98:35:0b:a5:4a:19:03:84:f4:78:
78:93:8d:d6:1f:61:cf:c5:6e:56:6c:76:56:45:16:
e4:70:bd:6c:89:6e:27:e7:c1:a3:d7:89:27:46:6b:
e0:8c:36:37:cd:89:46:96:40:31:41:c2:63:da:c8:
26:aa:64:bf:cc:59:c5:56:83:9c:ab:2a:fa:7c:af:
84:fa:fe:09:01:82:3f:e0:67:48:97:e9:27:89:04:
eb:a2:6b:c7:09:84:b9:13:83:32:fd:07:87:27:a6:
34:30:67:99:23:12:1b:c4:16:92:a3:9a:eb:83:76:
4a:4c:b6:1e:e9:6b:19:ed:d9:61:5e:3f:d3:e1:68:
6c:4a:27:f8:5b:07:aa:77:ae:2d:7f:6e:ee:d4:8e:
7b:b0:e8:f9:6e:cb:97:c7:7f:e3:29:85:7f:78:cb:
0b:46:1e:29:af:69:d2:79:9c:83:4b:8b:0d:6f:e7:
2e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FC:A0:25:6E:9E:35:11:5E:81:2D:B7:04:EE:B0:C6:00:1A:A2:89
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/sfygJW6eNRFegS23BO6wxgAaook.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/17
185.41.0.0/22
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
69:f2:36:13:c6:38:aa:0a:3f:7f:39:67:bd:c3:7f:3b:36:02:
ed:26:6a:b0:d2:9c:6f:6a:fc:07:33:b4:30:9c:7d:ff:bb:73:
d1:b3:26:f5:de:ea:01:bb:be:d0:e4:6c:75:75:0d:7e:a9:91:
16:48:84:2c:92:34:c1:c1:09:eb:2a:77:1d:5b:7e:61:64:04:
7f:2a:28:a1:55:d9:2b:9c:0e:61:8c:77:6f:51:ca:1b:2c:c2:
ec:d7:6c:91:4f:e8:92:a5:4b:d1:6f:e4:c8:c9:12:3a:d9:3a:
7b:db:71:c4:c6:d0:be:4c:4a:5a:a8:5b:32:e9:2d:f8:e0:04:
88:56:1b:af:98:90:94:c9:71:f2:0e:c3:95:4e:79:fb:e9:dc:
95:75:2c:b3:4b:27:13:1b:f7:67:eb:f6:ef:2a:51:5c:a9:59:
7d:59:88:c3:73:00:91:1e:3c:4c:1f:ef:2b:0c:fa:66:54:2a:
91:ef:78:5f:46:83:c7:ad:26:91:81:27:d1:c4:77:b8:fb:9f:
ca:84:55:0a:af:f8:f2:f4:6f:85:9c:26:36:da:7d:28:95:94:
37:ef:65:87:b7:83:d4:d8:01:d8:b0:4d:19:94:94:0c:0c:69:
6b:1a:9e:f9:b8:54:78:6d:1d:be:cb:5b:b1:ff:ef:e6:4a:25:
b4:7c:cd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:02 2024 by rpki-client on console-ams.rpki-client.org