Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/vpw0hNTVi5SpmmwX0Hwn3haVmkw.roa
File: vpw0hNTVi5SpmmwX0Hwn3haVmkw.roa (raw, json)
Hash identifier: jorANr62c7U+qUSm/j1mw7Jk9OrBiZ3HpvJAlo6duGQ=
Subject key identifier: BE:9C:34:84:D4:D5:8B:94:A9:9A:6C:17:D0:7C:27:DE:16:95:9A:4C
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018F062030381F6585A2FF097C4B250E8535
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/vpw0hNTVi5SpmmwX0Hwn3haVmkw.roa
Signing time: Mon 22 Apr 2024 14:05:23 +0000
ROA not before: Mon 22 Apr 2024 14:05:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.128.0/17 maxlen: 24
85.133.128.0/22 maxlen: 22
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.134.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.140.0/24 maxlen: 24
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.147.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.189.0/24 maxlen: 24
85.133.192.0/22 maxlen: 22
85.133.196.0/22 maxlen: 22
85.133.196.0/24 maxlen: 24
85.133.197.0/24 maxlen: 24
85.133.204.0/24 maxlen: 24
85.133.206.0/24 maxlen: 24
85.133.207.0/24 maxlen: 24
85.133.209.0/24 maxlen: 24
85.133.210.0/23 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/22 maxlen: 22
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.220.0/22 maxlen: 22
85.133.220.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.224.0/22 maxlen: 22
85.133.224.0/24 maxlen: 24
85.133.225.0/24 maxlen: 24
85.133.226.0/24 maxlen: 24
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.231.0/24 maxlen: 24
85.133.232.0/22 maxlen: 22
85.133.232.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.240.0/22 maxlen: 22
85.133.240.0/24 maxlen: 24
85.133.243.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.245.0/24 maxlen: 24
85.133.246.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
85.133.248.0/23 maxlen: 24
85.133.249.0/24 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.252.0/22 maxlen: 22
85.133.254.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
185.41.1.0/24 maxlen: 24
185.41.2.0/24 maxlen: 24
185.41.3.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 11 May 2024 10:24:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:06:20:30:38:1f:65:85:a2:ff:09:7c:4b:25:0e:85:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Apr 22 14:05:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be9c3484d4d58b94a99a6c17d07c27de16959a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:20:91:c4:87:8a:03:29:08:11:1f:d3:08:87:
17:f1:5b:56:ae:f3:5e:20:71:e0:b2:7f:40:ef:be:
e5:40:c7:2f:50:65:9d:09:b6:a1:e1:48:61:60:cc:
1d:78:ff:c0:f4:a8:ed:f4:18:8d:5f:01:9c:1d:eb:
11:05:49:2f:b1:64:59:dc:03:42:bd:9c:79:90:05:
c2:83:0d:2a:0a:67:8b:bd:37:42:54:8d:f8:a0:d6:
13:54:43:8f:45:70:d8:0d:e0:a2:c7:d9:98:6c:0a:
76:ca:f5:08:3b:97:04:fe:69:27:c0:62:d8:5a:8d:
99:36:81:06:57:29:39:2d:4a:2f:36:84:34:e0:2c:
c3:c3:7f:3e:a0:4c:00:f7:9d:8e:0b:ca:5b:fa:e7:
24:20:71:29:cb:c4:69:40:98:38:2a:0e:e9:c4:81:
95:68:b6:0d:0e:24:d9:d3:65:9b:56:36:a5:a6:8e:
6e:d2:35:ec:8d:57:23:66:0f:77:4a:aa:44:ad:b3:
66:6e:e0:ac:89:b7:da:36:7f:18:55:4a:58:e1:ef:
c8:9f:ec:cc:7a:b2:1b:2e:50:70:70:ce:b3:ae:2b:
81:6a:72:00:e0:fd:32:0b:0e:06:5a:62:89:44:49:
af:43:ce:72:59:d3:96:3a:b6:9a:ed:60:64:9f:0b:
ba:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9C:34:84:D4:D5:8B:94:A9:9A:6C:17:D0:7C:27:DE:16:95:9A:4C
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/vpw0hNTVi5SpmmwX0Hwn3haVmkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/17
185.41.1.0-185.41.3.255
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
40:57:f7:de:5e:fe:c5:92:d3:cd:69:28:87:25:e1:46:f7:2e:
30:c6:26:7d:d4:3a:8a:97:45:b2:fa:49:27:3b:ca:74:a0:54:
b1:29:3a:c2:07:7f:d2:a1:1f:47:a8:8c:87:74:d0:d7:f7:62:
99:b8:e8:27:7d:02:e4:5e:a6:ea:f4:14:80:a0:15:60:c5:a4:
21:d3:34:4b:b7:18:8e:ca:44:e0:89:89:04:bb:69:36:9d:b6:
2a:ec:04:1b:98:d5:ea:e3:ad:2c:75:11:a6:84:12:fa:6b:5d:
87:7f:56:37:eb:d3:9d:de:9f:7e:38:70:d7:59:47:21:ad:42:
af:1e:1d:f5:ee:94:16:a1:70:62:e9:f7:0b:79:6a:c0:6a:2c:
cf:94:a4:92:f1:97:29:21:d3:53:37:bb:0a:f4:47:c1:e5:4f:
ca:cc:45:83:0f:ca:6e:21:e0:b9:cc:2b:2e:4c:9f:c5:76:7a:
bf:4d:8a:9d:d7:95:03:d4:25:d5:a8:f9:6d:9c:65:47:3c:0c:
4c:30:5d:f4:bc:54:c3:e5:10:e1:e7:9e:cf:b7:34:a1:a6:06:
ad:6a:0d:f0:9b:32:cb:7f:8b:20:f2:2b:57:a2:bb:05:ed:a4:
77:b7:d6:d4:b4:f6:b1:7a:92:48:a8:7e:33:b8:b4:05:de:7c:
b3:6c:13:7c
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAY8GIDA4H2WFov8JfEslDoU1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjQwNDIyMTQwNTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTljMzQ4NGQ0ZDU4Yjk0YTk5YTZjMTdkMDdjMjdkZTE2OTU5YTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziCRxIeKAykIER/TCIcX8VtWrvNe
IHHgsn9A777lQMcvUGWdCbah4UhhYMwdeP/A9Kjt9BiNXwGcHesRBUkvsWRZ3ANC
vZx5kAXCgw0qCmeLvTdCVI34oNYTVEOPRXDYDeCix9mYbAp2yvUIO5cE/mknwGLY
Wo2ZNoEGVyk5LUovNoQ04CzDw38+oEwA952OC8pb+uckIHEpy8RpQJg4Kg7pxIGV
aLYNDiTZ02WbVjalpo5u0jXsjVcjZg93SqpErbNmbuCsibfaNn8YVUpY4e/In+zM
erIbLlBwcM6zriuBanIA4P0yCw4GWmKJREmvQ85yWdOWOraa7WBknwu60QIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFL6cNITU1YuUqZpsF9B8J94WlZpMMB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvdnB3MGhOVFZpNVNwbW13WDBId24zaGFWbWt3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQHVYWAMAwD
BAC5KQEDBAK5KQAwDQQCAAIwBwMFAyoEh8AwDQYJKoZIhvcNAQELBQADggEBAEBX
995e/sWS081pKIcl4Ub3LjDGJn3UOoqXRbL6SSc7ynSgVLEpOsIHf9KhH0eojId0
0Nf3Ypm46Cd9AuRepur0FICgFWDFpCHTNEu3GI7KROCJiQS7aTadtirsBBuY1erj
rSx1EaaEEvprXYd/Vjfr053en344cNdZRyGtQq8eHfXulBahcGLp9wt5asBqLM+U
pJLxlykh01M3uwr0R8HlT8rMRYMPym4h4LnMKy5Mn8V2er9Nip3XlQPUJdWo+W2c
ZUc8DEwwXfS8VMPlEOHnns+3NKGmBq1qDfCbMst/iyDyK1eiuwXtpHe31tS09rF6
kkiofjO4tAXefLNsE3w=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:02 2024 by rpki-client on console-ams.rpki-client.org