Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/zzrPLZFBVLGiiCxw94oGzNX-EjA.roa
File: zzrPLZFBVLGiiCxw94oGzNX-EjA.roa (raw, json)
Hash identifier: 5ka34jd7EOx3wozr+R07QNAT1UGzn9FyNzfVcbPkI18=
Subject key identifier: CF:3A:CF:2D:91:41:54:B1:A2:88:2C:70:F7:8A:06:CC:D5:FE:12:30
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 389AE2FE
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/zzrPLZFBVLGiiCxw94oGzNX-EjA.roa
Signing time: Tue 17 May 2022 05:21:30 +0000
ROA not before: Tue 17 May 2022 05:21:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39251
IP address blocks: 85.130.72.0/22 maxlen: 22
85.130.74.0/24 maxlen: 24
85.130.73.0/24 maxlen: 24
85.130.72.0/24 maxlen: 24
85.130.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 949674750 (0x389ae2fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: May 17 05:21:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf3acf2d914154b1a2882c70f78a06ccd5fe1230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8f:f9:0c:14:fb:ab:90:66:2f:03:6b:68:e9:
96:e3:fb:79:40:30:89:1f:b8:f2:2d:8e:00:5b:a5:
70:37:7b:34:d5:c5:6b:64:25:d2:5f:f7:7d:df:4a:
6f:91:06:82:73:d9:a7:05:85:68:66:70:35:78:c0:
9b:83:71:f6:47:79:e9:8b:93:0f:55:68:5b:5a:f4:
30:2e:a5:59:dc:a3:47:a6:d8:e1:75:7e:b7:4b:b9:
69:09:18:a7:ff:65:87:b1:d1:7a:7f:f3:aa:ab:b4:
2a:0b:37:5c:e0:ed:e3:d3:56:59:1d:f8:2a:03:3e:
3b:02:32:90:e0:75:13:6a:32:64:79:89:ec:6a:e5:
8b:4d:56:27:3b:ed:79:86:89:05:c8:cb:18:d5:41:
08:86:ea:03:39:9c:43:a7:db:bf:0b:b1:c6:12:7b:
66:b4:4d:18:a5:01:18:ea:db:1a:fd:79:59:40:16:
a5:9c:f1:16:c3:25:2f:fa:70:c8:b7:8e:8f:a2:3c:
59:79:c1:ee:3e:fd:87:15:0b:37:e5:0b:e0:f9:fa:
46:db:7b:4f:11:c6:6e:fd:a9:3d:78:31:1f:19:73:
92:0c:03:c5:71:4e:8e:08:06:9d:c7:58:22:74:77:
4e:74:c7:4b:43:c2:cf:3e:7b:06:72:e1:58:9c:40:
c9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3A:CF:2D:91:41:54:B1:A2:88:2C:70:F7:8A:06:CC:D5:FE:12:30
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/zzrPLZFBVLGiiCxw94oGzNX-EjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.130.72.0/22
Signature Algorithm: sha256WithRSAEncryption
59:02:ed:23:7e:89:c5:0b:97:d3:f6:ed:e7:3f:72:ad:b1:6a:
61:c5:72:f9:f1:e6:59:b2:1e:a9:eb:eb:3f:15:d2:1a:51:09:
aa:42:a4:08:3e:d9:a3:63:1c:58:f2:16:0a:af:b5:eb:5f:eb:
07:b0:73:f8:a9:c2:94:04:81:ac:25:f3:77:b3:e0:dc:c0:5a:
fa:d3:46:77:67:0c:a3:da:48:96:53:39:25:1a:c6:11:45:f8:
ad:9c:c0:9f:f7:69:04:a4:9b:cb:8d:66:17:c0:68:80:ec:86:
7c:a4:a6:84:f1:fe:0d:ff:e7:85:b3:6a:55:e4:5d:a5:17:83:
0e:a8:1d:b4:31:4c:13:1d:4d:1a:be:fc:03:39:12:e6:fb:46:
f0:51:0d:9b:89:05:19:d6:52:c5:3e:0a:b1:19:a2:35:ad:0f:
92:c6:11:8a:91:f5:d1:b0:62:4d:17:02:a6:a1:33:62:46:f4:
bb:ac:11:fc:a0:77:b5:51:16:b8:64:2c:6a:06:a9:a0:3e:e9:
1a:c7:89:f8:ae:63:4a:28:94:65:78:0f:69:68:ee:cb:6e:4b:
53:6c:ea:e3:71:db:1e:9d:c0:da:93:ca:33:21:0d:cd:eb:b4:
4a:2a:85:78:de:d7:7a:cf:d0:4b:8e:1c:93:e0:18:c1:86:b2:
0b:e4:f8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:14 2023 by rpki-client on console-ams.rpki-client.org