Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/cGtpROXDsI3FbodObBQN3gzZGWk.roa
File: cGtpROXDsI3FbodObBQN3gzZGWk.roa (raw, json)
Hash identifier: iPY5CnOjCJrHSlG+RXH17nKEaJ+AjEshfbhA6sXWDII=
Subject key identifier: 70:6B:69:44:E5:C3:B0:8D:C5:6E:87:4E:6C:14:0D:DE:0C:D9:19:69
Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial: 09EDA2DD
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/cGtpROXDsI3FbodObBQN3gzZGWk.roa
Signing time: Tue 01 Feb 2022 15:43:26 +0000
ROA not before: Tue 01 Feb 2022 15:43:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57844
IP address blocks: 85.153.127.0/24 maxlen: 24
85.153.56.0/24 maxlen: 24
85.153.57.0/24 maxlen: 24
85.153.6.0/24 maxlen: 24
85.153.7.0/24 maxlen: 24
85.153.8.0/24 maxlen: 24
85.153.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166568669 (0x9eda2dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Validity
Not Before: Feb 1 15:43:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=706b6944e5c3b08dc56e874e6c140dde0cd91969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:87:1d:3a:12:64:e2:78:9c:e8:6c:8e:1f:2f:
8a:e1:87:c2:2b:78:db:f8:97:41:f2:24:3f:76:5f:
20:30:a9:66:45:65:45:0d:56:52:59:e5:96:ff:31:
9b:3c:bf:b9:2c:02:2f:79:73:62:24:fa:71:64:69:
25:23:f8:0b:e3:d1:c7:3b:01:09:b4:aa:5d:0f:c8:
a7:94:b3:85:39:32:e6:71:63:39:6d:e2:ef:8b:e4:
f3:7d:b0:6a:28:0d:9f:9a:30:77:3f:f7:26:df:32:
c1:20:94:3f:b9:ec:54:f2:d1:43:df:4c:48:f8:89:
5e:21:23:f0:bd:5c:3a:f8:51:88:b1:27:01:f0:75:
da:b2:cb:2c:ae:74:7f:c8:8c:1d:20:9e:fc:c6:93:
83:2f:e2:4a:ee:be:54:86:a6:00:74:e3:b1:e7:24:
d0:cf:95:75:2c:d6:ea:1e:18:f8:77:28:d0:43:d2:
fa:7e:6f:8e:f1:34:35:f4:34:55:49:64:8b:1d:99:
b7:c6:92:96:96:27:eb:6e:c7:a9:11:22:1c:6f:eb:
b1:be:66:81:cd:04:21:99:bd:d4:c7:07:0a:84:6e:
31:3a:38:65:0b:33:56:0f:1e:56:29:0f:2d:22:c8:
52:72:2d:6b:e9:10:8f:9e:b6:1c:7f:27:e9:d6:28:
3e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6B:69:44:E5:C3:B0:8D:C5:6E:87:4E:6C:14:0D:DE:0C:D9:19:69
X509v3 Authority Key Identifier:
keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/cGtpROXDsI3FbodObBQN3gzZGWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.6.0-85.153.9.255
85.153.56.0/23
85.153.127.0/24
Signature Algorithm: sha256WithRSAEncryption
11:47:b2:75:ac:75:85:15:dd:ec:16:1d:3d:a7:65:d9:84:68:
b2:20:66:d2:57:59:08:c9:bf:2f:e2:87:27:ba:35:0a:27:b2:
40:5e:0c:62:7c:f1:6a:da:1e:ee:01:cd:6a:87:c1:63:a3:3a:
8b:e8:42:5d:0e:8f:05:7a:a0:cc:c2:7b:18:8b:e5:cb:ae:ec:
b5:1a:ab:6c:ef:1a:83:ec:5d:7a:95:53:25:58:7f:c5:62:66:
a5:68:2b:51:46:ce:ee:80:5e:d1:64:ea:47:77:41:a9:81:bc:
85:3d:67:32:31:39:9e:a6:b1:14:2e:e7:89:7c:71:cb:5f:f7:
f9:a6:2d:b3:a8:47:8d:3f:0c:23:db:d6:35:c9:c3:65:56:d0:
2c:e4:ba:ee:79:8f:b7:42:85:56:96:f6:9e:8a:d5:50:f8:44:
c8:76:2b:89:04:85:f4:34:db:4e:0e:7c:59:27:4b:9c:8a:cb:
00:04:19:8c:5d:20:d7:b1:e7:f8:1a:f2:82:86:7d:97:96:91:
2a:cc:9c:88:73:1e:64:1a:e0:56:4d:15:a6:ce:58:69:62:22:
90:3a:9c:4b:80:17:f0:7d:95:17:14:6f:29:94:f0:8d:17:84:
c7:89:8d:af:3e:ed:37:77:98:52:44:b7:03:94:b0:74:c7:17:
e7:f6:bb:00
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIECe2i3TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MWExODVkMGViMGNhNzgxMWM1ODY0MjVkZTBlOTYwZTFjZmViNjFiMB4XDTIyMDIw
MTE1NDMyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzA2YjY5NDRlNWMz
YjA4ZGM1NmU4NzRlNmMxNDBkZGUwY2Q5MTk2OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN+HHToSZOJ4nOhsjh8viuGHwit42/iXQfIkP3ZfIDCpZkVl
RQ1WUlnllv8xmzy/uSwCL3lzYiT6cWRpJSP4C+PRxzsBCbSqXQ/Ip5SzhTky5nFj
OW3i74vk832waigNn5owdz/3Jt8ywSCUP7nsVPLRQ99MSPiJXiEj8L1cOvhRiLEn
AfB12rLLLK50f8iMHSCe/MaTgy/iSu6+VIamAHTjseck0M+VdSzW6h4Y+Hco0EPS
+n5vjvE0NfQ0VUlkix2Zt8aSlpYn627HqREiHG/rsb5mgc0EIZm91McHCoRuMTo4
ZQszVg8eVikPLSLIUnIta+kQj562HH8n6dYoPmkCAwEAAaOCAh0wggIZMB0GA1Ud
DgQWBBRwa2lE5cOwjcVuh05sFA3eDNkZaTAfBgNVHSMEGDAWgBQxoYXQ6wyngRxY
ZCXeDpYOHP62GzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01hR0YwT3NNcDRFY1dHUWwzZzZXRGh6LXRocy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODcvMDgxYzZlLTFkNjUtNGNjZC05NmY1LTFkY2M4NmMxMWU3NC8x
L2NHdHBST1hEc0kzRmJvZE9iQlFOM2d6WkdXay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcv
MDgxYzZlLTFkNjUtNGNjZC05NmY1LTFkY2M4NmMxMWU3NC8xL01hR0YwT3NNcDRF
Y1dHUWwzZzZXRGh6LXRocy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAz
BggrBgEFBQcBBwEB/wQkMCIwIAQCAAEwGjAMAwQBVZkGAwQBVZkIAwQBVZk4AwQA
VZl/MA0GCSqGSIb3DQEBCwUAA4IBAQARR7J1rHWFFd3sFh09p2XZhGiyIGbSV1kI
yb8v4ocnujUKJ7JAXgxifPFq2h7uAc1qh8FjozqL6EJdDo8FeqDMwnsYi+XLruy1
Gqts7xqD7F16lVMlWH/FYmalaCtRRs7ugF7RZOpHd0GpgbyFPWcyMTmeprEULueJ
fHHLX/f5pi2zqEeNPwwj29Y1ycNlVtAs5LrueY+3QoVWlvaeitVQ+ETIdiuJBIX0
NNtODnxZJ0ucissABBmMXSDXsef4GvKChn2XlpEqzJyIcx5kGuBWTRWmzlhpYiKQ
OpxLgBfwfZUXFG8plPCNF4THiY2vPu03d5hSRLcDlLB0xxfn9rsA
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:40 2024 by rpki-client on console-ams.rpki-client.org