Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/n2vLqhQDZX4bvSjnREYfPB4t1q8.roa
File: n2vLqhQDZX4bvSjnREYfPB4t1q8.roa (raw, json)
Hash identifier: 1upAK2MX/kHfqvI7yS+1rJIRJVmsAAUZ1JPDhxYPEYE=
Subject key identifier: 9F:6B:CB:AA:14:03:65:7E:1B:BD:28:E7:44:46:1F:3C:1E:2D:D6:AF
Certificate issuer: /CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
Certificate serial: 0BE0DE
Authority key identifier: B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/n2vLqhQDZX4bvSjnREYfPB4t1q8.roa
Signing time: Wed 16 Feb 2022 09:11:47 +0000
ROA not before: Wed 16 Feb 2022 09:11:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 4755
IP address blocks: 85.158.133.0/24 maxlen: 24
85.158.134.0/24 maxlen: 24
85.158.135.0/24 maxlen: 24
85.158.128.0/24 maxlen: 24
85.158.129.0/24 maxlen: 24
85.158.130.0/24 maxlen: 24
85.158.131.0/24 maxlen: 24
85.158.132.0/24 maxlen: 24
85.158.128.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 778462 (0xbe0de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
Validity
Not Before: Feb 16 09:11:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f6bcbaa1403657e1bbd28e744461f3c1e2dd6af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:58:7c:f6:46:88:ef:d7:5a:13:bc:c9:5f:dc:
10:7c:85:0b:99:4a:f6:3c:ac:58:e2:e0:59:af:67:
34:62:b4:b7:c3:6d:a7:58:2f:ee:2e:4d:96:53:ee:
bb:52:82:b9:66:9b:3a:19:05:74:31:89:09:0a:65:
d1:c6:98:7a:da:dc:59:5b:50:9f:b6:64:29:43:b5:
11:ee:59:5d:74:15:e4:e6:0d:2f:2e:4e:12:4c:57:
f3:a2:07:ed:e9:42:86:d4:f8:23:39:8c:16:4c:69:
93:93:72:18:57:9d:06:8b:f4:f0:ff:7a:43:08:57:
ef:9d:2d:80:dd:ce:da:b7:92:e9:07:d9:39:b5:9a:
6c:24:e9:6e:78:7a:e0:c6:07:0c:92:12:54:9a:93:
20:e7:d1:83:c7:a0:92:3a:c0:7b:46:71:c7:69:bb:
04:0d:81:11:73:bd:b6:e9:22:66:3c:f1:b8:1f:0b:
0a:6c:d2:1e:09:16:7d:bf:47:75:da:b7:24:6c:6c:
08:46:ad:54:4c:6e:44:d4:78:c6:fa:54:2b:1f:e3:
2d:01:4c:8b:e2:03:eb:0d:0e:03:91:4d:88:97:72:
fc:8d:ff:f2:30:5a:95:42:5f:f4:3a:4d:89:64:f6:
e4:ce:dd:b9:fe:64:78:5d:9d:f6:f1:e1:b2:06:f9:
08:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6B:CB:AA:14:03:65:7E:1B:BD:28:E7:44:46:1F:3C:1E:2D:D6:AF
X509v3 Authority Key Identifier:
keyid:B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/n2vLqhQDZX4bvSjnREYfPB4t1q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.128.0/21
Signature Algorithm: sha256WithRSAEncryption
45:90:f5:f3:32:10:ea:34:90:07:c6:74:7d:c3:ed:85:79:d4:
b5:29:2a:7c:68:7f:b6:85:04:5b:89:e8:d8:d2:8a:1a:aa:40:
22:00:3c:36:02:1a:6f:e9:23:6e:43:72:14:35:a4:83:44:30:
26:06:22:90:f8:4d:42:e1:ee:d7:8d:6c:02:eb:c0:bd:2c:7a:
63:6d:82:8c:df:46:e6:3a:30:03:ba:66:57:94:c4:18:38:41:
08:7e:ff:37:7a:d5:25:c2:a4:b4:f2:1d:f1:ce:15:0b:22:6e:
71:9d:1c:12:34:bc:be:53:75:37:17:48:68:86:41:b8:fa:d7:
13:c0:79:8a:5e:06:13:e8:91:ea:20:08:24:dd:6d:d1:61:f2:
20:b4:ef:c0:fa:24:52:04:c3:12:e2:93:2f:11:3e:e0:43:0b:
2b:f5:74:44:72:08:b8:d6:c3:99:76:71:86:38:d4:60:e4:de:
82:4e:41:40:4a:86:85:15:ea:71:69:72:2d:9f:90:bb:e9:fb:
d5:a5:6d:75:f3:37:c4:22:60:95:f3:61:fd:1e:61:f2:ad:3b:
00:e5:38:f0:2a:7c:7f:9e:5f:53:7a:fe:98:69:d0:64:83:ea:
de:de:37:63:66:02:eb:7c:63:dd:54:3b:79:50:5c:65:2d:a9:
09:bf:cc:fc
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDC+DeMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI2
Y2Y0ZTU3Y2JjMTVjZTRlY2VmNDRmNTBlNWI4NTkyZmJlZWVlYTAwHhcNMjIwMjE2
MDkxMTQ3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg5ZjZiY2JhYTE0MDM2
NTdlMWJiZDI4ZTc0NDQ2MWYzYzFlMmRkNmFmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtFh89kaI79daE7zJX9wQfIULmUr2PKxY4uBZr2c0YrS3w22n
WC/uLk2WU+67UoK5Zps6GQV0MYkJCmXRxph62txZW1CftmQpQ7UR7llddBXk5g0v
Lk4STFfzogft6UKG1PgjOYwWTGmTk3IYV50Gi/Tw/3pDCFfvnS2A3c7at5LpB9k5
tZpsJOlueHrgxgcMkhJUmpMg59GDx6CSOsB7RnHHabsEDYERc7226SJmPPG4HwsK
bNIeCRZ9v0d12rckbGwIRq1UTG5E1HjG+lQrH+MtAUyL4gPrDQ4DkU2Il3L8jf/y
MFqVQl/0Ok2JZPbkzt25/mR4XZ328eGyBvkILwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFJ9ry6oUA2V+G70o50RGHzweLdavMB8GA1UdIwQYMBaAFLbPTlfLwVzk7O9E
9Q5bhZL77u6gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
dHM5T1Y4dkJYT1RzNzBUMURsdUZrdnZ1N3FBLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8wNy80ZTg5N2YtZTQzNS00NzE1LWEzYzUtODViZTQyNWQzMTk5LzEv
bjJ2THFoUURaWDRidlNqblJFWWZQQjR0MXE4LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80
ZTg5N2YtZTQzNS00NzE1LWEzYzUtODViZTQyNWQzMTk5LzEvdHM5T1Y4dkJYT1Rz
NzBUMURsdUZrdnZ1N3FBLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDVZ6AMA0GCSqGSIb3DQEBCwUAA4IB
AQBFkPXzMhDqNJAHxnR9w+2FedS1KSp8aH+2hQRbiejY0ooaqkAiADw2Ahpv6SNu
Q3IUNaSDRDAmBiKQ+E1C4e7XjWwC68C9LHpjbYKM30bmOjADumZXlMQYOEEIfv83
etUlwqS08h3xzhULIm5xnRwSNLy+U3U3F0hohkG4+tcTwHmKXgYT6JHqIAgk3W3R
YfIgtO/A+iRSBMMS4pMvET7gQwsr9XREcgi41sOZdnGGONRg5N6CTkFASoaFFepx
aXItn5C76fvVpW118zfEImCV82H9HmHyrTsA5TjwKnx/nl9Tev6YadBkg+re3jdj
ZgLrfGPdVDt5UFxlLakJv8z8
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:27 2024 by rpki-client on console-ams.rpki-client.org