Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/gRNnAgG8X-lVFzy_xY9bl_lNwTE.roa
File: gRNnAgG8X-lVFzy_xY9bl_lNwTE.roa (raw, json)
Hash identifier: hIiRijjV08+XPkfI7C/HPkpVTqomX/Lkyo8KqTs0y8g=
Subject key identifier: 81:13:67:02:01:BC:5F:E9:55:17:3C:BF:C5:8F:5B:97:F9:4D:C1:31
Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial: 09EFBDFA
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/gRNnAgG8X-lVFzy_xY9bl_lNwTE.roa
Signing time: Tue 01 Feb 2022 15:53:24 +0000
ROA not before: Tue 01 Feb 2022 15:53:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 85.153.125.0/24 maxlen: 24
85.153.124.0/24 maxlen: 24
85.153.120.0/24 maxlen: 24
85.153.119.0/24 maxlen: 24
85.153.121.0/24 maxlen: 24
85.153.123.0/24 maxlen: 24
85.153.122.0/24 maxlen: 24
85.153.126.0/24 maxlen: 24
85.153.68.0/22 maxlen: 22
85.153.66.0/24 maxlen: 24
85.153.65.0/24 maxlen: 24
85.153.67.0/24 maxlen: 24
85.153.76.0/22 maxlen: 22
85.153.75.0/24 maxlen: 24
85.153.73.0/24 maxlen: 24
85.153.72.0/24 maxlen: 24
85.153.74.0/24 maxlen: 24
85.153.83.0/24 maxlen: 24
85.153.82.0/24 maxlen: 24
85.153.84.0/22 maxlen: 22
85.153.80.0/24 maxlen: 24
85.153.81.0/24 maxlen: 24
85.153.96.0/22 maxlen: 22
85.153.92.0/24 maxlen: 24
85.153.93.0/24 maxlen: 24
85.153.95.0/24 maxlen: 24
85.153.94.0/24 maxlen: 24
85.153.112.0/24 maxlen: 24
85.153.108.0/22 maxlen: 22
85.153.113.0/24 maxlen: 24
85.153.114.0/24 maxlen: 24
85.153.116.0/24 maxlen: 24
85.153.115.0/24 maxlen: 24
85.153.118.0/24 maxlen: 24
85.153.117.0/24 maxlen: 24
85.153.16.0/22 maxlen: 22
85.153.12.0/22 maxlen: 22
85.153.20.0/24 maxlen: 24
85.153.22.0/24 maxlen: 24
85.153.21.0/24 maxlen: 24
85.153.24.0/22 maxlen: 22
85.153.23.0/24 maxlen: 24
85.153.29.0/24 maxlen: 24
85.153.28.0/24 maxlen: 24
85.153.31.0/24 maxlen: 24
85.153.30.0/24 maxlen: 24
85.153.32.0/24 maxlen: 24
85.153.34.0/24 maxlen: 24
85.153.36.0/22 maxlen: 22
85.153.35.0/24 maxlen: 24
85.153.41.0/24 maxlen: 24
85.153.42.0/24 maxlen: 24
85.153.44.0/24 maxlen: 24
85.153.40.0/24 maxlen: 24
85.153.47.0/24 maxlen: 24
85.153.45.0/24 maxlen: 24
85.153.46.0/24 maxlen: 24
85.153.52.0/22 maxlen: 22
85.153.59.0/24 maxlen: 24
85.153.60.0/22 maxlen: 22
85.115.204.0/24 maxlen: 24
85.115.206.0/24 maxlen: 24
85.115.205.0/24 maxlen: 24
85.115.207.0/24 maxlen: 24
85.153.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166706682 (0x9efbdfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Validity
Not Before: Feb 1 15:53:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8113670201bc5fe955173cbfc58f5b97f94dc131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4f:17:e7:23:b8:3f:d7:57:de:72:21:8c:e7:
0f:f4:3e:4c:b1:00:7c:1e:e9:e3:fc:20:0f:2c:9e:
e5:00:b4:bd:6e:1b:42:7c:95:da:c1:37:7f:b3:9f:
75:e1:2a:36:de:3b:56:3d:58:15:b2:64:51:9a:96:
2e:d2:5c:d9:e5:d0:9c:d1:2b:d7:45:42:f8:83:ab:
19:75:a7:cf:2a:c3:b8:d9:96:ed:1d:85:11:95:c9:
b0:9f:c6:37:5f:9a:d3:4f:38:d0:07:49:ef:69:1a:
94:3e:3c:35:1f:32:ab:3b:fd:36:a9:ac:1e:16:8f:
cf:e4:68:b0:3b:6d:3e:b6:6a:b0:73:bd:56:64:2d:
80:e3:e4:3d:8b:0c:93:52:ec:30:b5:ce:87:f4:90:
09:58:b4:77:61:7a:4b:5f:f8:94:8f:f6:ca:e8:cf:
07:a0:19:33:65:47:27:fd:d5:77:a2:be:a5:a8:60:
df:d1:6c:42:4a:98:12:d1:30:85:9b:1c:c9:66:8d:
eb:5a:bb:64:6c:4e:40:c7:d9:37:a1:98:8e:9e:f3:
fb:92:0d:a5:e3:84:c1:32:12:69:0f:09:72:51:42:
7d:02:af:31:72:9a:5c:0b:0f:a3:fe:16:21:e2:fa:
07:6c:fd:a7:10:32:ac:43:16:46:b1:a1:3c:76:d6:
e6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:13:67:02:01:BC:5F:E9:55:17:3C:BF:C5:8F:5B:97:F9:4D:C1:31
X509v3 Authority Key Identifier:
keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/gRNnAgG8X-lVFzy_xY9bl_lNwTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.204.0/22
85.153.4.0/24
85.153.12.0-85.153.32.255
85.153.34.0-85.153.42.255
85.153.44.0/22
85.153.52.0/22
85.153.59.0-85.153.63.255
85.153.65.0-85.153.87.255
85.153.92.0-85.153.99.255
85.153.108.0-85.153.126.255
Signature Algorithm: sha256WithRSAEncryption
6c:7c:7f:58:47:a3:ff:4a:b4:5f:8f:cb:11:f2:d1:40:cb:ea:
4b:63:ff:cd:53:72:97:e9:4a:c6:ca:4e:41:0e:b7:47:f3:9b:
a3:2a:db:93:2d:0e:ee:75:b4:87:4c:3a:f6:b8:bd:a0:f7:f4:
7b:fd:22:0b:6a:56:3e:01:e4:48:9f:8d:88:5c:c2:54:7f:3a:
e3:28:aa:5a:65:81:08:81:7b:6b:fe:24:45:07:37:d7:5d:4d:
20:c4:cc:4a:04:75:77:af:e5:e9:66:e8:2c:4a:b4:8f:f1:82:
e9:07:f4:9c:aa:d0:be:0c:98:90:df:d4:50:6a:7a:45:38:53:
7d:cc:44:9f:6b:19:b1:7d:9e:de:8b:07:a6:e2:90:f9:7d:b6:
e4:f3:87:8e:a5:6a:5a:42:d3:00:38:cc:03:10:1c:5c:43:c5:
60:a7:0d:e8:f8:58:42:23:60:7a:64:ce:89:32:b8:00:02:1b:
75:8c:09:0f:52:2a:bd:4b:bd:7c:63:ee:3c:ac:29:24:38:2b:
1f:22:86:2c:16:80:da:15:60:23:8b:6f:67:e9:c3:69:40:9e:
57:df:3e:f0:ae:0e:b4:02:25:50:fc:b8:7a:71:7c:67:ee:ba:
64:e6:37:a1:b6:64:0a:e8:9d:59:b2:8c:ed:7a:6e:54:30:ef:
27:b9:3e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-fra.rpki-client.org