Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/sz81j7RcHQ-XeTJQTS6IkWrYsE8.roa
File: sz81j7RcHQ-XeTJQTS6IkWrYsE8.roa (raw, json)
Hash identifier: er2Wg7dgXH/PSnHWeVOKG16aW2yeBI52fc/qOJoKFVA=
Subject key identifier: B3:3F:35:8F:B4:5C:1D:0F:97:79:32:50:4D:2E:88:91:6A:D8:B0:4F
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018B191AEC08FC78E0ABEC74BF0E21F5D68B
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/sz81j7RcHQ-XeTJQTS6IkWrYsE8.roa
Signing time: Tue 10 Oct 2023 10:21:16 +0000
ROA not before: Tue 10 Oct 2023 10:21:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.231.0/24 maxlen: 24
85.133.232.0/24 maxlen: 24
85.133.232.0/22 maxlen: 22
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.240.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.240.0/22 maxlen: 22
85.133.245.0/24 maxlen: 24
85.133.246.0/24 maxlen: 24
85.133.243.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
85.133.248.0/23 maxlen: 24
85.133.249.0/24 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.252.0/22 maxlen: 22
85.133.254.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
85.133.179.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.174.0/24 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.192.0/22 maxlen: 22
85.133.196.0/24 maxlen: 24
85.133.197.0/24 maxlen: 24
85.133.196.0/22 maxlen: 22
85.133.203.0/24 maxlen: 24
85.133.204.0/24 maxlen: 24
85.133.200.0/22 maxlen: 22
85.133.206.0/24 maxlen: 24
85.133.200.0/24 maxlen: 24
85.133.201.0/24 maxlen: 24
85.133.204.0/22 maxlen: 22
85.133.210.0/23 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.207.0/24 maxlen: 24
85.133.212.0/22 maxlen: 22
85.133.209.0/24 maxlen: 24
85.133.220.0/24 maxlen: 24
85.133.220.0/22 maxlen: 22
85.133.225.0/24 maxlen: 24
85.133.226.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.224.0/22 maxlen: 22
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.128.0/17 maxlen: 24
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.128.0/22 maxlen: 22
85.133.134.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.140.0/24 maxlen: 24
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.147.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.156.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.153.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.162.0/24 maxlen: 24
85.133.163.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
85.133.160.0/24 maxlen: 24
85.133.161.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.168.0/22 maxlen: 24
185.41.0.0/24 maxlen: 24
185.41.1.0/24 maxlen: 24
185.41.2.0/24 maxlen: 24
185.41.3.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 11 Oct 2023 13:23:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:19:1a:ec:08:fc:78:e0:ab:ec:74:bf:0e:21:f5:d6:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Oct 10 10:21:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b33f358fb45c1d0f977932504d2e88916ad8b04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:24:48:95:79:e4:1d:41:f2:4d:b9:05:d4:58:
15:0c:a1:a8:52:2b:70:0d:fe:a1:a2:ab:4b:db:db:
06:59:21:f1:9f:b2:5d:c9:2d:58:ee:30:02:e4:eb:
6d:b3:66:ba:23:a1:ab:5e:4c:09:ff:bf:8e:fd:18:
09:70:23:33:be:4e:c1:90:a7:02:c6:cd:99:77:f9:
77:88:fd:97:40:af:da:9e:e3:9e:78:f9:89:d6:c3:
6b:b4:d3:bd:9c:96:16:84:f8:ef:3a:85:7e:61:ad:
39:68:96:53:b5:85:16:5b:11:cb:18:5a:88:ef:f6:
a9:f7:e8:04:57:f9:67:a9:50:14:44:8f:68:63:b9:
06:4b:cc:fb:34:80:05:41:c2:63:c4:47:8e:5f:ed:
f0:51:3a:3b:20:e1:75:3b:1b:2e:d5:c4:76:21:bc:
a1:f3:35:fd:1b:cb:5d:7a:60:43:58:98:77:64:79:
06:09:d0:25:ed:e2:6a:f2:51:27:5c:9c:8f:45:f9:
f3:5d:8a:8b:ab:5f:4c:df:1a:67:d7:3d:65:6f:29:
d7:6b:33:08:ce:3f:19:fd:b0:0e:50:de:fc:26:be:
62:f2:38:1e:d5:2b:ea:f8:77:43:a2:13:41:ce:43:
fd:3b:46:07:76:bb:48:a4:c6:07:cb:ec:08:b5:23:
2d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3F:35:8F:B4:5C:1D:0F:97:79:32:50:4D:2E:88:91:6A:D8:B0:4F
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/sz81j7RcHQ-XeTJQTS6IkWrYsE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/17
185.41.0.0/22
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
3c:66:75:9d:27:0b:32:6c:c8:f2:9f:99:4e:1e:ba:2a:0a:14:
73:f7:d1:4d:db:9c:d1:97:32:91:82:b0:2b:2e:5f:5b:ed:08:
8f:f2:8b:a7:cc:04:a1:50:44:c2:87:1f:05:73:a7:f1:71:58:
e4:1a:c1:9d:e6:91:cf:18:08:e3:ce:5e:9a:ab:74:ea:c4:0a:
da:29:cb:0d:f0:dc:4c:b1:fd:89:19:51:7e:d5:94:52:53:ec:
f5:57:2e:b1:4b:92:5e:53:14:30:d6:da:60:3b:22:1e:c7:c1:
f5:6c:35:89:46:bf:0f:d3:d7:3c:95:68:b5:b8:25:fb:62:e1:
1a:bd:ed:87:1f:31:1b:fd:63:1e:a1:f8:29:e0:63:c2:5a:ed:
02:7d:88:58:7b:b9:ce:c4:c0:4b:e9:72:64:00:27:67:e2:d4:
16:6d:40:53:52:d8:a2:f8:3f:7a:64:f8:f4:ea:7b:71:8c:a4:
1d:94:f0:4a:b1:49:db:d0:0f:a0:ce:5b:39:4b:a7:01:bb:8d:
03:34:dc:80:29:b4:21:8a:b7:c0:aa:7a:e1:45:09:78:d7:5c:
eb:23:f9:7d:0d:09:0d:be:23:48:69:71:ee:5b:d6:8a:ec:fd:
2d:b1:5f:b4:03:c0:a0:12:eb:3e:35:50:62:4f:b3:87:43:dc:
a6:43:6b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:02 2024 by rpki-client on console-ams.rpki-client.org