Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/5Kze2NidhPJ4iN17XYXz03YCDzg.roa
File: 5Kze2NidhPJ4iN17XYXz03YCDzg.roa (raw, json)
Hash identifier: NZ7ng60iG0x2hYj21U/ddpUW/UqQgZWlgrc6JvBIcU8=
Subject key identifier: E4:AC:DE:D8:D8:9D:84:F2:78:88:DD:7B:5D:85:F3:D3:76:02:0F:38
Certificate issuer: /CN=259e952e448b82ff4578eceb6448e6fbfc6113e0
Certificate serial: 094511AF
Authority key identifier: 25:9E:95:2E:44:8B:82:FF:45:78:EC:EB:64:48:E6:FB:FC:61:13:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/5Kze2NidhPJ4iN17XYXz03YCDzg.roa
Signing time: Sat 01 Jan 2022 11:53:43 +0000
ROA not before: Sat 01 Jan 2022 11:53:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 54600
IP address blocks: 85.209.40.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155521455 (0x94511af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259e952e448b82ff4578eceb6448e6fbfc6113e0
Validity
Not Before: Jan 1 11:53:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4acded8d89d84f27888dd7b5d85f3d376020f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:83:6b:b9:16:5e:ef:5d:db:05:73:d2:62:8b:
27:22:5b:a1:b1:46:c6:b9:b7:1b:74:a5:b1:e1:2c:
6a:71:df:80:cb:19:96:8d:95:a4:cf:90:38:fc:fc:
25:b6:7f:a5:cf:05:fa:72:fb:09:a8:55:4d:83:c5:
d1:47:0d:9a:81:8b:b9:8a:be:89:6e:d7:fd:86:38:
ec:d2:bb:4b:0c:fa:3d:50:14:30:42:a0:c9:9f:cc:
82:f2:fc:52:a3:5e:b2:a4:00:81:80:41:81:7e:9a:
f2:de:f2:0e:d3:12:1b:9e:d4:d9:bf:7b:94:ff:9a:
0e:d0:29:8d:29:08:8f:98:ff:75:c7:89:c4:3c:26:
ae:e4:36:40:cd:3d:5b:64:2b:60:64:95:0e:3d:2a:
2c:84:07:b5:bb:40:9b:d5:90:6b:4e:d4:8d:a3:19:
61:11:cd:84:60:bc:56:82:1b:4d:8e:49:d7:94:01:
35:03:52:58:51:b8:4f:6b:15:44:5b:65:f3:c9:ba:
e2:88:33:d3:df:8c:b1:e6:f2:f6:69:96:3c:eb:27:
05:7a:f5:5a:70:0c:f7:52:e7:ae:6c:48:9b:b4:79:
17:6b:c0:2c:af:78:cf:32:bd:bd:08:cd:11:0c:4c:
7c:57:d3:0a:ab:d6:a6:64:37:97:73:ba:02:61:b9:
63:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AC:DE:D8:D8:9D:84:F2:78:88:DD:7B:5D:85:F3:D3:76:02:0F:38
X509v3 Authority Key Identifier:
keyid:25:9E:95:2E:44:8B:82:FF:45:78:EC:EB:64:48:E6:FB:FC:61:13:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/5Kze2NidhPJ4iN17XYXz03YCDzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.40.0/22
Signature Algorithm: sha256WithRSAEncryption
18:d8:bb:33:a2:44:b5:e1:43:c2:81:7c:69:73:87:bd:f9:5c:
1d:13:7f:1d:69:56:37:f1:1e:a5:b5:27:83:1c:90:9a:3a:87:
06:bd:14:43:37:41:28:21:70:4e:6f:e0:1d:eb:e1:b0:25:8b:
42:e3:75:4c:65:4e:5c:0a:be:22:c0:fa:76:32:ff:f9:a7:83:
18:9f:21:75:7d:26:30:ed:f0:45:dc:50:1b:51:91:f5:0b:ca:
26:92:63:e2:94:64:b0:66:55:88:c2:c5:5d:24:3c:60:20:a9:
34:a5:e5:70:91:f7:11:75:a2:40:4a:b6:f7:08:c4:d2:bb:03:
d8:f9:ce:c4:23:c6:ce:a9:72:37:c9:49:80:4e:7b:32:b4:cd:
28:46:a5:65:ad:8c:60:ef:ff:47:75:7d:3d:70:84:6d:e6:83:
4c:b1:fe:5b:84:a3:03:ab:b0:2c:d9:18:4f:0d:50:b0:2f:d4:
e5:a6:0f:d7:4d:af:9c:60:2e:b2:0b:73:0b:4c:0d:5b:88:49:
55:9c:86:78:d5:61:1c:ce:6d:47:fe:4b:8d:0f:2d:72:49:c1:
c6:8e:92:76:fe:46:37:43:9f:9e:c1:8e:48:d9:a9:f8:f6:66:
65:d5:3f:29:5f:cb:64:4f:02:af:26:5e:57:a9:b9:af:ee:82:
82:11:ea:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:50 2024 by rpki-client on console-ams.rpki-client.org