Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/iJ0T5f4PXY_zsh0mmTcPz_IGDDE.roa
File: iJ0T5f4PXY_zsh0mmTcPz_IGDDE.roa (raw, json)
Hash identifier: BwcyJzdzweivWurrZjlIUw2LMgU3c8iNMkGgoPoc7WA=
Subject key identifier: 88:9D:13:E5:FE:0F:5D:8F:F3:B2:1D:26:99:37:0F:CF:F2:06:0C:31
Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254
Certificate serial: 0183A30C73939FD36624ECA97ED299425C07
Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/iJ0T5f4PXY_zsh0mmTcPz_IGDDE.roa
Signing time: Tue 04 Oct 2022 12:50:45 +0000
ROA not before: Tue 04 Oct 2022 12:50:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25211
IP address blocks: 85.11.163.0/24 maxlen: 24
85.11.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a3:0c:73:93:9f:d3:66:24:ec:a9:7e:d2:99:42:5c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254
Validity
Not Before: Oct 4 12:50:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=889d13e5fe0f5d8ff3b21d2699370fcff2060c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:57:58:c1:ee:ee:53:e5:bb:31:0d:d2:b1:e3:
7c:b1:35:32:da:f3:70:8d:08:b3:17:79:64:0f:39:
ea:09:ea:1d:f9:9b:c0:26:77:49:5c:b0:79:5c:d6:
15:74:1f:a9:16:4d:5b:6b:62:bf:5a:73:5a:74:43:
6d:87:d1:77:4e:a2:46:50:a6:02:9b:0e:3d:8c:a1:
8f:27:24:8c:16:d6:2f:bc:c7:30:de:9b:ea:a3:c3:
c0:11:26:18:a3:44:2e:08:0f:d4:20:1e:ad:83:6e:
55:86:ed:cd:8a:03:73:2e:68:eb:89:5d:5f:ab:e1:
c0:3b:06:dc:26:c2:4f:6d:92:36:a7:fa:a3:3b:6e:
c1:0e:15:a4:02:ee:3c:ff:bf:9c:0e:90:c0:a7:78:
d3:79:e6:0f:69:45:51:6c:ae:9d:de:34:fa:a0:78:
6f:ba:8c:8d:4b:0d:25:9a:47:79:3c:f6:0c:c2:15:
9f:21:7c:ff:a2:6f:73:b7:02:36:76:43:eb:80:73:
3a:c8:59:8a:6c:99:e0:df:b0:fd:62:c0:db:2b:31:
cc:5b:de:3d:97:6f:a1:f6:60:bc:48:93:c7:5c:55:
b6:83:dd:3d:3e:70:51:37:11:56:5c:aa:56:03:53:
92:e5:a2:65:5e:d4:cb:cc:50:7f:24:04:1e:2b:1b:
d2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9D:13:E5:FE:0F:5D:8F:F3:B2:1D:26:99:37:0F:CF:F2:06:0C:31
X509v3 Authority Key Identifier:
keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/iJ0T5f4PXY_zsh0mmTcPz_IGDDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.11.161.0/24
85.11.163.0/24
Signature Algorithm: sha256WithRSAEncryption
48:2c:b7:80:d8:8c:60:c0:05:3e:63:4c:f0:fb:9b:69:c7:a0:
58:37:ba:cb:48:2a:2d:7c:5f:8a:42:f3:b1:06:03:d6:01:f2:
04:a2:f7:d4:2e:a1:ca:cb:2a:92:54:dc:5c:d8:02:2c:1c:b9:
cf:11:b7:9f:d5:ae:aa:40:aa:18:1a:87:fe:b3:df:a8:d0:fc:
bc:4a:c4:85:34:69:85:78:dc:ba:4f:c0:2f:c1:32:5a:2e:dd:
ed:48:3a:d9:88:d8:2b:cf:d4:bd:ac:5b:41:ba:41:01:75:f4:
0c:f2:05:09:eb:b2:af:4f:1c:3b:a4:08:aa:4c:ea:a0:42:97:
84:35:c5:89:c6:10:b6:7b:25:4c:cc:68:3e:f4:38:77:e1:24:
66:ad:8a:99:09:00:3a:34:e9:10:fe:bb:b7:67:55:8d:37:33:
2d:36:82:b6:3e:de:8f:03:7e:ea:6c:77:97:5b:16:7f:5c:b6:
ac:0a:f5:5b:2a:df:fb:89:93:47:7a:55:15:54:5a:8d:22:4b:
79:5b:7c:a7:da:9a:53:39:c5:d8:11:b5:89:14:9a:1a:3f:b6:
01:97:bc:9c:72:1f:c1:13:53:b0:13:81:40:a1:68:db:bc:d1:
37:7b:76:cd:db:0c:aa:4a:df:f2:ec:7c:d2:56:41:f0:4b:97:
b0:9b:5b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:56 2024 by rpki-client on console-ams.rpki-client.org