Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/ueUYlLpNPX0NtQVdlFXGJ1vNyzo.roa
File: ueUYlLpNPX0NtQVdlFXGJ1vNyzo.roa (raw, json)
Hash identifier: 8TEdlBT+CkX78h5QYVHwlE5vQVeuoFOwUUo6LzEV67M=
Subject key identifier: B9:E5:18:94:BA:4D:3D:7D:0D:B5:05:5D:94:55:C6:27:5B:CD:CB:3A
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018607116C6989D5AA424CBE1603B15A0A71
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/ueUYlLpNPX0NtQVdlFXGJ1vNyzo.roa
Signing time: Tue 31 Jan 2023 09:03:47 +0000
ROA not before: Tue 31 Jan 2023 09:03:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52209
IP address blocks: 85.133.194.0/24 maxlen: 24
85.133.217.0/24 maxlen: 24
85.133.219.0/24 maxlen: 24
85.133.238.0/24 maxlen: 24
85.133.253.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:07:11:6c:69:89:d5:aa:42:4c:be:16:03:b1:5a:0a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jan 31 09:03:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9e51894ba4d3d7d0db5055d9455c6275bcdcb3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:52:df:f8:85:71:98:b4:54:ee:45:9c:04:8e:
bc:98:e5:f8:90:43:0d:b0:41:05:f1:d4:d4:e6:72:
29:f9:86:1b:91:86:2a:ce:bf:b1:3e:85:f8:ea:8e:
55:04:7a:54:c6:3f:b2:f0:4f:4d:0c:eb:f1:f4:22:
98:1c:3f:f9:4b:39:43:e8:5a:59:28:3b:80:28:4d:
12:34:77:dc:f9:7c:54:26:1b:00:49:02:2c:37:df:
72:ab:23:8a:e3:85:08:0c:cc:14:43:52:e8:9c:c9:
64:4d:0a:45:3b:8f:fc:48:52:d4:6a:fe:c2:2d:30:
b3:3c:3f:ca:c7:fc:8d:83:f1:26:ad:ee:29:4c:49:
db:7b:8a:3e:62:9c:ec:87:f1:58:67:a9:b5:a6:08:
d5:2d:64:d7:51:2b:25:70:25:77:d5:00:76:ce:71:
ac:aa:83:e7:c3:82:19:e7:6f:d3:87:c6:19:d1:9f:
94:35:e5:51:6b:ef:a5:e2:43:ef:ac:59:c9:0a:50:
59:c7:17:0a:14:72:15:47:6c:af:e0:68:d9:fd:57:
ed:b7:11:34:55:59:50:40:cb:15:61:62:dc:80:78:
96:46:1b:57:9b:72:a7:19:ec:79:31:51:fd:db:af:
d9:25:40:7e:cb:5e:51:7d:81:de:38:7e:f7:50:b7:
b7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E5:18:94:BA:4D:3D:7D:0D:B5:05:5D:94:55:C6:27:5B:CD:CB:3A
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/ueUYlLpNPX0NtQVdlFXGJ1vNyzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.165.0/24
85.133.194.0/24
85.133.217.0/24
85.133.219.0/24
85.133.238.0/24
85.133.253.0/24
Signature Algorithm: sha256WithRSAEncryption
62:07:23:5e:d8:5d:3f:b0:47:69:f3:e2:b8:96:20:f3:72:08:
64:d5:3c:d2:24:7a:c2:6a:c2:9d:51:95:16:c3:f9:48:e3:2a:
24:f7:16:22:80:94:bb:50:84:41:22:27:ce:f5:7e:7c:90:e4:
46:14:91:80:b3:69:80:dc:a0:85:e4:8f:85:20:f5:38:4d:4a:
e5:b4:73:bd:b4:01:98:34:f1:9a:25:21:62:e2:49:23:5e:53:
6e:25:39:5e:69:1a:54:44:63:ef:db:1d:77:84:f6:94:87:24:
4a:c8:e6:c7:24:79:d4:fc:8d:26:e7:e8:de:aa:c5:c5:4d:7c:
dd:81:ba:86:00:e6:ee:90:b1:80:90:1f:ca:56:21:f1:90:6e:
8b:e0:62:28:3a:67:51:5a:fe:9a:98:ac:3a:91:1b:fc:aa:db:
4b:c5:24:f2:ec:6d:2d:32:c3:69:e6:03:1d:c2:78:da:af:e1:
9d:b0:0e:7d:40:21:14:1a:f6:67:81:49:a4:27:0e:08:c5:98:
22:47:03:eb:eb:78:6f:4b:18:9c:e2:96:ab:3b:cc:5f:80:4b:
40:46:12:2f:ab:94:06:7e:3b:75:4c:c0:51:39:34:4c:f6:bd:
1a:56:83:0c:4e:a7:bf:3b:13:d6:d3:b0:ed:ee:7c:2c:66:d2:
b6:8c:30:03
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYYHEWxpidWqQky+FgOxWgpxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjMwMTMxMDkwMzQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOWU1MTg5NGJhNGQzZDdkMGRiNTA1NWQ5NDU1YzYyNzViY2RjYjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFLf+IVxmLRU7kWcBI68mOX4kEMN
sEEF8dTU5nIp+YYbkYYqzr+xPoX46o5VBHpUxj+y8E9NDOvx9CKYHD/5SzlD6FpZ
KDuAKE0SNHfc+XxUJhsASQIsN99yqyOK44UIDMwUQ1LonMlkTQpFO4/8SFLUav7C
LTCzPD/Kx/yNg/Emre4pTEnbe4o+Ypzsh/FYZ6m1pgjVLWTXUSslcCV31QB2znGs
qoPnw4IZ52/Th8YZ0Z+UNeVRa++l4kPvrFnJClBZxxcKFHIVR2yv4GjZ/VfttxE0
VVlQQMsVYWLcgHiWRhtXm3KnGex5MVH926/ZJUB+y15RfYHeOH73ULe3GQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFLnlGJS6TT19DbUFXZRVxidbzcs6MB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvdWVVWWxMcE5QWDBOdFFWZGxGWEdKMXZOeXpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAVYWlAwQA
VYXCAwQAVYXZAwQAVYXbAwQAVYXuAwQAVYX9MA0GCSqGSIb3DQEBCwUAA4IBAQBi
ByNe2F0/sEdp8+K4liDzcghk1TzSJHrCasKdUZUWw/lI4yok9xYigJS7UIRBIifO
9X58kORGFJGAs2mA3KCF5I+FIPU4TUrltHO9tAGYNPGaJSFi4kkjXlNuJTleaRpU
RGPv2x13hPaUhyRKyObHJHnU/I0m5+jeqsXFTXzdgbqGAObukLGAkB/KViHxkG6L
4GIoOmdRWv6amKw6kRv8qttLxSTy7G0tMsNp5gMdwnjar+GdsA59QCEUGvZngUmk
Jw4IxZgiRwPr63hvSxic4parO8xfgEtARhIvq5QGfjt1TMBROTRM9r0aVoMMTqe/
OxPW07Dt7nwsZtK2jDAD
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net