Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/DhWSAlOD4tb7OLip-diQhlQkHFI.roa
File: DhWSAlOD4tb7OLip-diQhlQkHFI.roa (raw, json)
Hash identifier: 7DkoPD8+uxtlt6cKjOOTXexrzj31/0ApZpehXdX7fck=
Subject key identifier: 0E:15:92:02:53:83:E2:D6:FB:38:B8:A9:F9:D8:90:86:54:24:1C:52
Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial: 099E158C
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/DhWSAlOD4tb7OLip-diQhlQkHFI.roa
Signing time: Sat 01 Jan 2022 01:51:55 +0000
ROA not before: Sat 01 Jan 2022 01:51:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 85.153.125.0/24 maxlen: 24
85.153.124.0/24 maxlen: 24
85.153.120.0/24 maxlen: 24
85.153.119.0/24 maxlen: 24
85.153.121.0/24 maxlen: 24
85.153.123.0/24 maxlen: 24
85.153.126.0/24 maxlen: 24
85.153.68.0/22 maxlen: 22
85.153.66.0/24 maxlen: 24
85.153.65.0/24 maxlen: 24
85.153.67.0/24 maxlen: 24
85.153.76.0/22 maxlen: 22
85.153.75.0/24 maxlen: 24
85.153.73.0/24 maxlen: 24
85.153.72.0/24 maxlen: 24
85.153.74.0/24 maxlen: 24
85.153.83.0/24 maxlen: 24
85.153.82.0/24 maxlen: 24
85.153.84.0/22 maxlen: 22
85.153.80.0/24 maxlen: 24
85.153.81.0/24 maxlen: 24
85.153.96.0/22 maxlen: 22
85.153.92.0/24 maxlen: 24
85.153.93.0/24 maxlen: 24
85.153.95.0/24 maxlen: 24
85.153.94.0/24 maxlen: 24
85.153.112.0/24 maxlen: 24
85.153.114.0/24 maxlen: 24
85.153.116.0/24 maxlen: 24
85.153.115.0/24 maxlen: 24
85.153.118.0/24 maxlen: 24
85.153.117.0/24 maxlen: 24
85.153.16.0/22 maxlen: 22
85.153.12.0/22 maxlen: 22
85.153.20.0/24 maxlen: 24
85.153.22.0/24 maxlen: 24
85.153.21.0/24 maxlen: 24
85.153.24.0/22 maxlen: 22
85.153.23.0/24 maxlen: 24
85.153.29.0/24 maxlen: 24
85.153.28.0/24 maxlen: 24
85.153.31.0/24 maxlen: 24
85.153.30.0/24 maxlen: 24
85.153.32.0/24 maxlen: 24
85.153.34.0/24 maxlen: 24
85.153.36.0/22 maxlen: 22
85.153.35.0/24 maxlen: 24
85.153.41.0/24 maxlen: 24
85.153.42.0/24 maxlen: 24
85.153.44.0/24 maxlen: 24
85.153.40.0/24 maxlen: 24
85.153.47.0/24 maxlen: 24
85.153.45.0/24 maxlen: 24
85.153.46.0/24 maxlen: 24
85.153.52.0/22 maxlen: 22
85.153.59.0/24 maxlen: 24
85.153.60.0/22 maxlen: 22
85.115.204.0/24 maxlen: 24
85.115.205.0/24 maxlen: 24
85.153.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161355148 (0x99e158c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Validity
Not Before: Jan 1 01:51:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e1592025383e2d6fb38b8a9f9d8908654241c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a5:d0:71:4c:0b:c3:05:16:0a:4c:90:80:2f:
12:85:0b:1e:18:99:52:4c:d1:07:2a:a6:57:8f:87:
1c:a2:33:e6:96:8e:4c:8a:90:9e:d5:a9:2d:3e:6a:
56:8d:43:22:50:0b:55:9f:e8:84:b8:5e:99:b5:b7:
68:f2:aa:bc:3a:34:bb:7c:df:9f:fb:12:3e:5e:80:
70:af:21:79:e1:cb:b6:d0:02:64:bf:51:92:06:38:
fc:8e:83:a8:ce:95:13:34:32:d7:f7:14:23:40:46:
47:7f:9a:77:1a:7f:a6:78:d0:cf:69:62:3f:81:4c:
3e:c2:d7:9c:6c:a0:fe:44:19:83:27:44:2b:0e:f3:
49:bc:f1:6a:7a:43:6f:22:e0:d3:f2:3f:80:74:59:
19:a4:1a:08:0d:8b:60:c3:77:45:1f:e5:68:12:d6:
98:c1:de:d3:03:67:71:12:fc:a5:b1:6f:59:53:79:
37:bb:df:9a:9e:6a:a2:35:7d:f2:f3:5f:d2:42:aa:
10:d8:95:a1:53:3c:06:99:da:4d:4d:cb:9c:7d:63:
a1:4a:c9:4a:e9:9e:40:75:ac:c5:41:ff:8c:4e:61:
91:6e:12:3b:8a:7e:db:ef:de:45:01:3b:d6:11:80:
da:4e:9d:51:41:5b:bc:e5:ec:36:06:c2:22:49:20:
75:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:15:92:02:53:83:E2:D6:FB:38:B8:A9:F9:D8:90:86:54:24:1C:52
X509v3 Authority Key Identifier:
keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/DhWSAlOD4tb7OLip-diQhlQkHFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.204.0/23
85.153.4.0/24
85.153.12.0-85.153.32.255
85.153.34.0-85.153.42.255
85.153.44.0/22
85.153.52.0/22
85.153.59.0-85.153.63.255
85.153.65.0-85.153.87.255
85.153.92.0-85.153.99.255
85.153.112.0/24
85.153.114.0-85.153.121.255
85.153.123.0-85.153.126.255
Signature Algorithm: sha256WithRSAEncryption
0e:0c:a8:af:91:a0:69:38:2a:43:b2:cf:3f:a3:de:db:5a:0d:
d4:33:8d:41:cc:50:ba:03:db:70:f6:18:c0:86:6e:6d:20:20:
5a:f3:06:aa:ca:2d:5c:e5:9b:a6:3c:07:c1:73:26:17:cc:a4:
a6:69:93:f4:18:bb:00:e1:bd:eb:15:0b:32:53:f5:cc:c4:b9:
7d:5c:14:f6:a8:da:92:a8:cc:73:39:53:74:28:51:2e:26:4a:
60:b4:be:b8:bc:f3:0b:d2:e1:e2:cd:40:b4:f9:79:60:35:03:
a6:a9:15:d0:e7:9c:7d:59:05:36:a8:70:5c:e5:2b:70:de:02:
36:bd:c1:19:69:62:c0:86:ba:89:67:b1:10:8f:9c:43:b9:f6:
fa:85:ec:4e:4c:fc:58:83:b6:83:7e:66:69:06:5b:07:82:7e:
9c:a2:c0:7e:4a:09:cf:f5:c5:de:20:52:d3:29:11:86:15:78:
fc:54:42:62:b8:54:f7:71:a4:c8:05:0f:c3:83:dd:ca:9d:36:
d4:4e:3f:b8:77:fd:4c:da:55:e8:ac:80:f0:64:9e:b7:ab:6b:
e3:85:80:52:c4:a4:f2:51:87:be:c5:52:16:5e:7e:3b:73:14:
77:6a:44:94:f9:10:d1:f8:be:e3:7b:c4:b4:25:81:b0:90:9f:
e6:15:e7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-fra.rpki-client.org