Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/uYN0CESVPs0TIA4TGVIGWsCW2xI.roa
File: uYN0CESVPs0TIA4TGVIGWsCW2xI.roa (raw, json)
Hash identifier: BD06O5qPmK0okMu28Lo2CaQA+0pV59KcMGzVye1S89Y=
Subject key identifier: B9:83:74:08:44:95:3E:CD:13:20:0E:13:19:52:06:5A:C0:96:DB:12
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0187260B93E746AB5AE909508EF1C0CE215C
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/uYN0CESVPs0TIA4TGVIGWsCW2xI.roa
Signing time: Tue 28 Mar 2023 02:28:25 +0000
ROA not before: Tue 28 Mar 2023 02:28:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.231.0/24 maxlen: 24
85.133.232.0/24 maxlen: 24
85.133.228.0/22 maxlen: 22
85.133.232.0/22 maxlen: 22
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.236.0/22 maxlen: 22
85.133.240.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.240.0/22 maxlen: 22
85.133.245.0/24 maxlen: 24
85.133.246.0/24 maxlen: 24
85.133.243.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
85.133.248.0/22 maxlen: 22
85.133.249.0/24 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.252.0/22 maxlen: 22
85.133.254.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.192.0/22 maxlen: 22
85.133.196.0/24 maxlen: 24
85.133.197.0/24 maxlen: 24
85.133.196.0/22 maxlen: 22
85.133.203.0/24 maxlen: 24
85.133.204.0/24 maxlen: 24
85.133.200.0/22 maxlen: 22
85.133.206.0/24 maxlen: 24
85.133.200.0/24 maxlen: 24
85.133.201.0/24 maxlen: 24
85.133.204.0/22 maxlen: 22
85.133.210.0/24 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.208.0/22 maxlen: 22
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.207.0/24 maxlen: 24
85.133.212.0/22 maxlen: 22
85.133.209.0/24 maxlen: 24
85.133.220.0/24 maxlen: 24
85.133.220.0/22 maxlen: 22
85.133.226.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.224.0/22 maxlen: 22
85.133.132.0/22 maxlen: 22
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.128.0/17 maxlen: 24
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.128.0/22 maxlen: 22
85.133.134.0/24 maxlen: 24
85.133.136.0/22 maxlen: 22
85.133.133.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.140.0/24 maxlen: 24
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.147.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.156.0/22 maxlen: 22
85.133.154.0/24 maxlen: 24
85.133.160.0/22 maxlen: 22
85.133.162.0/24 maxlen: 24
85.133.163.0/24 maxlen: 24
85.133.164.0/22 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:26:0b:93:e7:46:ab:5a:e9:09:50:8e:f1:c0:ce:21:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Mar 28 02:28:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b983740844953ecd13200e131952065ac096db12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c7:33:0a:50:c6:01:ce:c3:92:9a:2f:0e:c4:
68:e8:80:44:97:15:1f:4e:f4:9c:dc:0f:5c:59:d4:
b2:a4:86:5b:68:81:5a:91:30:df:af:85:14:fb:bd:
e6:82:e0:86:e0:dc:90:b5:b7:f5:65:41:1f:9f:0c:
3e:c5:25:e5:8f:5a:74:8d:17:25:25:1f:e9:ef:c1:
0f:a4:68:a3:c7:c2:ab:60:0c:8e:a6:2d:0e:1d:9f:
64:d5:58:00:5b:8d:d0:c3:34:1d:8e:54:c1:65:3b:
61:29:87:7b:1c:74:68:4b:91:be:fa:81:0d:6c:2a:
db:aa:7b:b5:6d:ad:18:81:13:f8:c0:28:d1:2d:5f:
53:84:24:6f:85:d3:44:df:62:3c:94:6d:b5:fc:87:
aa:bd:89:10:7c:8b:6f:b5:92:1c:1c:54:83:7f:e1:
fc:42:d1:5c:23:a0:84:da:0e:49:42:7d:1d:f5:d1:
dd:bd:6f:b8:5f:5b:3c:55:b5:bd:c5:c7:64:54:38:
65:03:36:d9:a7:29:4a:9d:82:0e:1b:a7:9b:bf:f2:
38:e2:0b:89:f5:a8:70:a1:e0:b2:74:a0:5e:b1:04:
78:24:7d:38:d0:d0:fa:6c:04:97:6f:a6:64:4f:8d:
44:e0:bb:ee:cd:9c:16:ba:73:9b:fb:03:37:0b:95:
b0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:83:74:08:44:95:3E:CD:13:20:0E:13:19:52:06:5A:C0:96:DB:12
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/uYN0CESVPs0TIA4TGVIGWsCW2xI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/17
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
6a:1c:29:b6:e3:84:42:ae:cb:6b:65:4a:02:64:d8:ec:a4:4d:
90:e0:89:c5:40:88:a0:6a:28:4c:19:d5:93:4b:6e:df:3a:f1:
e9:d2:12:f1:dd:ea:2f:dd:d4:b7:d0:ed:9f:08:e6:81:2c:dd:
b9:a8:a3:6e:e9:4b:74:be:bb:56:d4:05:86:05:31:83:cf:b6:
28:12:9b:c0:86:95:ba:ed:88:93:da:62:7c:02:2a:37:fa:99:
e8:f7:a3:da:ba:b9:a1:38:b5:19:cb:f8:7d:d7:91:ed:9f:94:
7d:1c:64:27:1d:53:d5:d6:07:11:14:58:0c:c3:23:24:85:63:
9a:b0:9e:29:4e:cd:b3:08:f5:fb:f8:62:3a:94:78:64:00:f9:
15:8e:eb:c8:cc:62:80:0a:7e:05:88:c7:1b:36:09:23:e2:60:
dc:be:fc:90:25:ab:9c:8c:d2:3b:a6:47:21:f5:e0:4f:25:44:
98:bd:1d:e5:36:3d:4a:a9:05:55:d3:13:af:2f:f4:60:7d:ef:
65:0d:1f:71:53:4e:40:50:b5:2c:76:0b:47:41:08:f3:00:0d:
51:49:56:20:99:dc:36:66:f8:93:3a:61:31:7f:72:86:ec:9f:
fe:f8:c5:dd:ec:37:18:08:48:25:cd:b3:66:3a:48:32:7d:82:
f6:37:80:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:15 2023 by rpki-client on console-fra.rpki-client.org