Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/vCr4ICij0-OdC1Nr8aPInDvF38c.roa
File: vCr4ICij0-OdC1Nr8aPInDvF38c.roa (raw, json)
Hash identifier: Q0X9toobF2SmuJFh3vRtPkY/PkkB/ON95JAD7T4kwfg=
Subject key identifier: BC:2A:F8:20:28:A3:D3:E3:9D:0B:53:6B:F1:A3:C8:9C:3B:C5:DF:C7
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019685D069DAF4B1714E5C46EABF52C2AB5E
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/vCr4ICij0-OdC1Nr8aPInDvF38c.roa
Signing time: Wed 30 Apr 2025 08:29:10 +0000
ROA not before: Wed 30 Apr 2025 08:29:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39074
IP address blocks: 85.133.128.0/22 maxlen: 22
85.133.128.0/24 maxlen: 24
85.133.129.0/24 maxlen: 24
85.133.130.0/24 maxlen: 24
85.133.131.0/24 maxlen: 24
85.133.132.0/24 maxlen: 24
85.133.133.0/24 maxlen: 24
85.133.134.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.138.0/24 maxlen: 24
85.133.139.0/24 maxlen: 24
85.133.140.0/22 maxlen: 22
85.133.140.0/24 maxlen: 24
85.133.141.0/24 maxlen: 24
85.133.142.0/24 maxlen: 24
85.133.143.0/24 maxlen: 24
85.133.144.0/22 maxlen: 22
85.133.144.0/24 maxlen: 24
85.133.145.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.147.0/24 maxlen: 24
85.133.148.0/22 maxlen: 22
85.133.148.0/24 maxlen: 24
85.133.149.0/24 maxlen: 24
85.133.150.0/24 maxlen: 24
85.133.151.0/24 maxlen: 24
85.133.152.0/22 maxlen: 22
85.133.152.0/24 maxlen: 24
85.133.153.0/24 maxlen: 24
85.133.154.0/24 maxlen: 24
85.133.155.0/24 maxlen: 24
85.133.156.0/24 maxlen: 24
85.133.157.0/24 maxlen: 24
85.133.158.0/24 maxlen: 24
85.133.159.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.166.0/24 maxlen: 24
85.133.167.0/24 maxlen: 24
85.133.168.0/22 maxlen: 24
85.133.168.0/24 maxlen: 24
85.133.169.0/24 maxlen: 24
85.133.170.0/24 maxlen: 24
85.133.171.0/24 maxlen: 24
85.133.172.0/22 maxlen: 24
85.133.172.0/24 maxlen: 24
85.133.173.0/24 maxlen: 24
85.133.174.0/24 maxlen: 24
85.133.175.0/24 maxlen: 24
85.133.176.0/22 maxlen: 24
85.133.176.0/24 maxlen: 24
85.133.177.0/24 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.179.0/24 maxlen: 24
85.133.180.0/22 maxlen: 24
85.133.180.0/24 maxlen: 24
85.133.181.0/24 maxlen: 24
85.133.182.0/24 maxlen: 24
85.133.183.0/24 maxlen: 24
85.133.184.0/22 maxlen: 24
85.133.184.0/24 maxlen: 24
85.133.185.0/24 maxlen: 24
85.133.186.0/24 maxlen: 24
85.133.187.0/24 maxlen: 24
85.133.188.0/22 maxlen: 22
85.133.188.0/24 maxlen: 24
85.133.189.0/24 maxlen: 24
85.133.190.0/24 maxlen: 24
85.133.191.0/24 maxlen: 24
85.133.192.0/24 maxlen: 24
85.133.194.0/24 maxlen: 24
85.133.208.0/23 maxlen: 24
85.133.210.0/23 maxlen: 24
85.133.210.0/24 maxlen: 24
85.133.211.0/24 maxlen: 24
85.133.212.0/24 maxlen: 24
85.133.213.0/24 maxlen: 24
85.133.214.0/24 maxlen: 24
85.133.220.0/24 maxlen: 24
85.133.222.0/24 maxlen: 24
85.133.223.0/24 maxlen: 24
85.133.225.0/24 maxlen: 24
85.133.226.0/24 maxlen: 24
85.133.227.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
85.133.229.0/24 maxlen: 24
85.133.230.0/24 maxlen: 24
85.133.231.0/24 maxlen: 24
85.133.232.0/24 maxlen: 24
85.133.234.0/24 maxlen: 24
85.133.235.0/24 maxlen: 24
85.133.239.0/24 maxlen: 24
85.133.244.0/24 maxlen: 24
85.133.245.0/24 maxlen: 24
85.133.246.0/23 maxlen: 24
85.133.248.0/23 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.252.0/24 maxlen: 24
85.133.254.0/24 maxlen: 24
85.133.255.0/24 maxlen: 24
2a04:87c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 05 May 2025 08:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:d0:69:da:f4:b1:71:4e:5c:46:ea:bf:52:c2:ab:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Apr 30 08:29:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc2af82028a3d3e39d0b536bf1a3c89c3bc5dfc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:be:ab:a6:47:45:86:ba:ac:fc:af:db:84:e7:
99:f0:77:63:71:dc:2a:fe:6e:b0:b9:56:fe:e7:99:
47:0f:d4:69:28:c8:33:90:c6:4c:6f:e9:c2:00:24:
de:75:9a:bf:d4:8f:c5:59:ef:f9:c2:ea:d3:85:ab:
1f:19:4b:16:59:60:bc:b4:6f:80:c4:b9:0c:8d:ef:
e8:e3:95:e1:5a:94:b3:6a:8e:63:45:3c:6d:7c:b0:
ce:9a:d8:99:76:b3:9c:b5:cb:a4:7e:ae:29:86:ca:
ff:13:1e:d5:89:f7:7e:d3:e8:f4:ff:ee:de:ba:11:
1e:f6:d9:62:f0:e0:f4:ef:ac:ce:0e:36:bf:c2:97:
c1:99:58:4a:27:6d:d6:3b:43:15:17:6c:de:70:81:
3c:f8:a6:b5:79:4c:4f:16:60:06:84:af:63:08:f7:
87:67:12:67:7a:5f:21:02:7f:99:da:97:d0:c8:4f:
d2:07:22:0c:c3:f0:eb:0f:01:d6:a8:f7:16:75:da:
1d:96:20:80:f7:98:78:54:7d:3f:3b:1c:2e:3f:1c:
b3:65:c0:b1:0a:c2:47:82:8f:67:db:30:6b:54:a1:
81:ae:a6:27:b0:25:0c:46:58:27:3a:75:be:fd:45:
af:52:09:7c:91:71:fa:6e:e8:26:73:9b:de:9b:e1:
85:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2A:F8:20:28:A3:D3:E3:9D:0B:53:6B:F1:A3:C8:9C:3B:C5:DF:C7
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/vCr4ICij0-OdC1Nr8aPInDvF38c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.128.0/19
85.133.164.0-85.133.192.255
85.133.194.0/24
85.133.208.0-85.133.214.255
85.133.220.0/24
85.133.222.0/23
85.133.225.0-85.133.232.255
85.133.234.0/23
85.133.239.0/24
85.133.244.0-85.133.249.255
85.133.251.0-85.133.252.255
85.133.254.0/23
IPv6:
2a04:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
ae:0d:54:d8:fa:55:c7:ba:80:78:80:05:5a:b9:b4:98:14:32:
e7:cc:d3:15:b2:4d:65:fd:c4:1b:8f:9f:61:cb:86:d5:b1:10:
ff:25:ed:0a:52:2c:26:05:96:b5:89:b1:3d:65:d0:67:2e:5f:
40:01:49:33:05:1a:9a:26:15:cc:41:ce:02:6b:db:61:66:0a:
8a:26:fc:c5:6d:9d:c8:bb:b4:18:ef:3c:0a:de:20:95:f9:59:
d9:84:b4:4d:2c:54:8a:d0:08:02:54:77:93:f4:07:09:bc:57:
1c:c3:94:9f:66:8e:3d:a8:92:4f:1d:3b:14:7c:82:3e:cc:ab:
41:d3:a8:a5:80:e5:54:3d:b5:e5:26:ae:bb:00:0f:25:9f:ea:
f7:31:d0:73:e8:3b:a5:e0:e4:04:a8:3b:80:b5:87:66:25:2b:
4a:f6:37:eb:8b:5e:b9:03:69:5d:9b:40:11:98:60:e4:e2:49:
3d:e9:f9:c6:7a:09:4f:b6:85:96:53:57:14:84:b4:85:ba:0c:
1b:f8:de:f6:aa:f7:2f:72:4f:4f:cb:24:5d:de:e0:bd:76:6c:
77:fb:31:ed:0d:26:b9:57:48:08:e8:5b:91:86:21:3d:7f:3b:
e3:71:74:76:99:9c:66:4f:d5:2b:da:fd:9b:11:fa:62:d1:8d:
29:0d:6f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:25:13 2025 by rpki-client