Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ac2978-4903-4a87-9015-bf4a38107e99/1/5ZsdoV03bpIRmNdo2aPFU7xHACo.roa
File: 5ZsdoV03bpIRmNdo2aPFU7xHACo.roa (raw, json)
Hash identifier: L/fVJ/h6cqeWtaijdAHcw7cPUvbp+lBmpb5hbLtZIFQ=
Subject key identifier: E5:9B:1D:A1:5D:37:6E:92:11:98:D7:68:D9:A3:C5:53:BC:47:00:2A
Certificate issuer: /CN=9adc1290226b8f5b267764fb9565c0bc19833697
Certificate serial: 070508E2
Authority key identifier: 9A:DC:12:90:22:6B:8F:5B:26:77:64:FB:95:65:C0:BC:19:83:36:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mtwSkCJrj1smd2T7lWXAvBmDNpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/ac2978-4903-4a87-9015-bf4a38107e99/1/5ZsdoV03bpIRmNdo2aPFU7xHACo.roa
Signing time: Sat 01 Jan 2022 15:55:58 +0000
ROA not before: Sat 01 Jan 2022 15:55:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202105
IP address blocks: 185.133.85.0/24 maxlen: 24
185.133.84.0/24 maxlen: 24
185.133.86.0/24 maxlen: 24
185.133.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117770466 (0x70508e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9adc1290226b8f5b267764fb9565c0bc19833697
Validity
Not Before: Jan 1 15:55:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e59b1da15d376e921198d768d9a3c553bc47002a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:62:21:1b:67:97:31:4b:ef:ca:9b:f6:65:34:
d3:82:04:2b:b4:cd:23:05:89:b3:a9:52:e0:f9:e7:
db:7e:8d:46:3d:6c:1a:38:45:ae:71:05:5f:6f:c6:
2e:06:c3:fa:02:59:23:13:f6:0f:8c:40:99:52:21:
4a:51:b8:08:08:50:1b:64:f8:a1:c4:5d:76:fd:35:
9b:80:2f:14:ce:52:af:5d:d9:78:b5:61:39:28:37:
ad:a2:79:c8:fb:24:e3:31:7a:02:8a:f8:1b:92:09:
df:4e:35:82:04:1c:c9:29:ce:35:e8:1a:89:bd:7c:
f9:b9:83:98:e9:6a:be:48:79:4b:9e:6e:9c:a3:de:
03:8b:85:fb:45:18:00:d6:df:6f:7a:1e:f0:c9:3f:
f1:27:7d:af:3a:2c:2e:3c:58:49:a3:dc:cb:36:3b:
b4:3d:fe:78:fd:70:92:61:0a:6b:f1:58:ef:8e:5e:
0c:a8:0d:38:fb:6a:29:0b:ae:10:d7:dd:a7:72:53:
f7:91:24:91:83:23:46:19:42:ff:08:0d:38:34:0e:
fb:89:47:85:8c:52:b8:f9:2e:90:3a:9c:fa:e2:03:
65:ee:c5:21:84:c3:f5:86:34:8d:3f:d9:5c:ee:a6:
5f:8a:82:45:a0:34:f7:ff:b6:ab:00:49:0d:1e:d3:
28:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9B:1D:A1:5D:37:6E:92:11:98:D7:68:D9:A3:C5:53:BC:47:00:2A
X509v3 Authority Key Identifier:
keyid:9A:DC:12:90:22:6B:8F:5B:26:77:64:FB:95:65:C0:BC:19:83:36:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mtwSkCJrj1smd2T7lWXAvBmDNpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ac2978-4903-4a87-9015-bf4a38107e99/1/5ZsdoV03bpIRmNdo2aPFU7xHACo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ac2978-4903-4a87-9015-bf4a38107e99/1/mtwSkCJrj1smd2T7lWXAvBmDNpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.84.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:86:20:e4:b0:cb:b7:43:81:2a:15:32:ad:b2:53:c2:96:fd:
ac:3b:55:18:53:65:63:65:be:a1:bd:44:4c:e0:52:4f:a7:0a:
0a:57:d1:c4:d2:1e:29:72:f6:05:f9:79:11:02:46:b4:d5:5e:
a0:6c:38:83:15:63:37:ce:11:c9:d8:7b:62:b3:28:7f:9a:ec:
a0:20:a3:8c:9e:df:72:76:46:ed:e0:8f:19:c5:98:ef:9d:17:
b1:5b:eb:80:45:de:cd:ac:b6:86:c1:dc:11:dc:e0:a8:54:5b:
70:da:fc:1d:32:e8:8b:da:17:da:44:91:4e:43:86:f4:2a:58:
18:52:55:f3:c4:ef:7d:ab:43:13:cf:ab:4c:cc:1a:47:61:61:
55:4a:25:dd:ca:f2:9a:30:87:58:d4:0b:89:a6:0f:92:9a:13:
da:5c:a6:cd:d0:59:41:e7:ff:92:04:69:b7:5a:b3:c8:ac:d2:
44:da:9d:d1:1c:4c:f2:51:79:45:1d:5d:79:53:f6:59:36:75:
01:75:b5:a4:d0:f1:54:bf:c4:d8:ec:00:7e:2e:2e:d2:4e:46:
26:b6:18:07:f6:10:cb:de:ba:9f:f9:ef:e8:19:4e:62:27:89:
6a:58:e8:d4:66:f9:1f:1c:ce:ee:64:78:75:5e:2f:ad:40:af:
e7:4b:09:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:51 2024 by rpki-client on console-ams.rpki-client.org