Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/qxtN3fKk4UWGdtmCXuoPiz7n4Po.roa
File: qxtN3fKk4UWGdtmCXuoPiz7n4Po.roa (raw, json)
Hash identifier: 407u9fbSdyArpagDIyxM2pebPaWt1+8KYEpz+/I3SEo=
Subject key identifier: AB:1B:4D:DD:F2:A4:E1:45:86:76:D9:82:5E:EA:0F:8B:3E:E7:E0:FA
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01904118AD616D559FFC469B2B30FD1A85B3
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/qxtN3fKk4UWGdtmCXuoPiz7n4Po.roa
Signing time: Sat 22 Jun 2024 17:57:34 +0000
ROA not before: Sat 22 Jun 2024 17:57:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.128.0/17 maxlen: 24
85.133.128.0/22 maxlen: 22
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.134.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.140.0/24 maxlen: 24
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.147.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.174.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.189.0/24 maxlen: 24
85.133.192.0/22 maxlen: 22
85.133.196.0/22 maxlen: 22
85.133.196.0/24 maxlen: 24
85.133.197.0/24 maxlen: 24
85.133.207.0/24 maxlen: 24
85.133.208.0/24 maxlen: 24
85.133.209.0/24 maxlen: 24
85.133.210.0/23 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/22 maxlen: 22
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.215.0/24 maxlen: 24
85.133.219.0/24 maxlen: 24
85.133.220.0/22 maxlen: 22
85.133.220.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.224.0/22 maxlen: 22
85.133.224.0/23 maxlen: 24
85.133.224.0/24 maxlen: 24
85.133.226.0/24 maxlen: 24
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.231.0/24 maxlen: 24
85.133.232.0/22 maxlen: 22
85.133.232.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.245.0/24 maxlen: 24
85.133.246.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
85.133.248.0/23 maxlen: 24
85.133.249.0/24 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.252.0/22 maxlen: 22
85.133.254.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
185.41.1.0/24 maxlen: 24
185.41.2.0/24 maxlen: 24
185.41.3.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 22 Jun 2024 18:14:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:41:18:ad:61:6d:55:9f:fc:46:9b:2b:30:fd:1a:85:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jun 22 17:57:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab1b4dddf2a4e1458676d9825eea0f8b3ee7e0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:23:1b:98:9c:96:bc:56:ed:7d:62:b6:57:a5:
f6:33:25:86:0f:98:d9:7a:ed:f2:49:8a:c6:d0:ff:
5a:2c:b9:45:18:f0:19:ba:f9:c4:c1:e8:f6:d5:ea:
50:4e:8d:8e:1c:e2:39:2e:f6:56:44:75:39:cc:c1:
64:46:eb:a0:d2:17:b0:f4:5c:6b:d5:ee:03:69:ee:
85:7e:74:11:eb:e2:c0:fd:ed:a2:33:d6:5f:9c:4f:
a6:80:bb:08:78:94:07:ba:a5:b9:4c:f2:db:a2:6a:
88:1a:b6:e7:bf:75:14:23:58:d4:3e:a2:26:97:3c:
6d:8a:df:32:b1:de:38:08:47:6d:d4:2c:8b:bc:2a:
c7:22:03:67:d5:a2:de:5b:0a:01:17:f2:ba:40:04:
1d:f2:48:b7:49:ea:32:28:a8:dc:a8:e8:dc:c9:63:
b9:4b:a1:8a:5c:6b:26:80:d7:55:85:50:a4:5b:94:
73:83:9f:ea:a8:f1:d2:b0:9c:6f:4e:33:97:53:5e:
ad:cb:83:2a:69:d8:84:f9:9c:71:f7:15:89:bf:5a:
34:6e:de:c0:41:d9:53:fe:8a:d4:bc:07:ee:3f:7c:
fc:bf:5a:c5:ea:b4:13:9c:d6:89:8f:07:10:ad:7f:
7b:99:d1:1f:4d:cd:a7:cf:85:b0:26:d3:ed:ae:e9:
dd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1B:4D:DD:F2:A4:E1:45:86:76:D9:82:5E:EA:0F:8B:3E:E7:E0:FA
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/qxtN3fKk4UWGdtmCXuoPiz7n4Po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/17
185.41.1.0-185.41.3.255
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
06:52:5f:da:07:86:70:84:7d:fd:f5:8d:7e:ec:54:0b:15:ad:
29:e3:fc:e6:ec:48:dd:d3:90:d4:31:55:97:97:51:3a:16:8d:
29:fd:0b:e0:0f:ac:8e:a8:b1:29:ec:76:c0:1f:21:89:c7:6a:
c9:a0:73:9e:6b:0f:f0:20:48:32:9f:6f:39:9f:e5:dc:bb:49:
24:02:27:1d:68:11:67:8c:f8:5f:a2:d7:66:4c:84:bc:4b:a4:
c7:87:d9:8b:42:a2:bf:e6:12:c1:53:16:d4:30:f1:8f:30:22:
8c:de:8c:b3:7d:8e:ed:72:c4:52:97:10:ad:42:2c:df:5d:06:
0b:c9:0e:02:5c:f6:29:bd:21:f5:22:a6:5d:b5:9d:f6:db:c2:
7a:5b:91:33:92:a2:42:8c:6e:20:22:36:ff:9d:0e:a5:d4:11:
0b:3b:6c:4f:35:57:9a:9d:c1:ae:cc:10:47:88:74:44:4c:0b:
07:3e:bf:b6:17:04:b3:80:0b:91:0a:73:a5:90:96:41:2e:58:
58:b7:c6:e4:08:4f:8c:b3:4b:b3:cc:6b:3c:f3:ae:59:0d:16:
2b:e4:2c:4b:3c:bb:7f:8f:fb:e4:69:27:f5:25:62:c7:fd:49:
73:9c:e4:65:81:49:c5:3d:3f:44:52:7c:6f:54:b6:71:ed:3e:
d6:d6:b2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:06:04 2025 by rpki-client