Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/xyQEHdJlv_ow1ISZy_QzOCq6q-o.roa
File: xyQEHdJlv_ow1ISZy_QzOCq6q-o.roa (raw, json)
Hash identifier: ow/6J6dLFmRzy+/0bb4TTAioURDVQYbVRY5SlnbzXjU=
Subject key identifier: C7:24:04:1D:D2:65:BF:FA:30:D4:84:99:CB:F4:33:38:2A:BA:AB:EA
Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial: 099E86B4
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/xyQEHdJlv_ow1ISZy_QzOCq6q-o.roa
Signing time: Sat 01 Jan 2022 01:51:56 +0000
ROA not before: Sat 01 Jan 2022 01:51:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31365
IP address blocks: 85.153.33.0/24 maxlen: 24
85.153.43.0/24 maxlen: 24
85.153.58.0/24 maxlen: 24
85.153.1.0/24 maxlen: 24
85.153.3.0/24 maxlen: 24
85.153.2.0/24 maxlen: 24
85.153.5.0/24 maxlen: 24
85.153.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161384116 (0x99e86b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Validity
Not Before: Jan 1 01:51:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c724041dd265bffa30d48499cbf433382abaabea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fb:39:57:0c:2d:a6:a5:b2:b0:60:2e:d2:f4:
4c:5a:dd:12:31:c6:10:08:c6:5d:0a:59:03:5a:8f:
d7:40:82:c9:25:43:b9:47:02:ae:91:fb:99:37:4f:
4e:ca:47:09:60:32:c3:a1:05:e9:30:b7:fc:ee:1c:
a0:4a:86:03:d3:9a:ae:22:0f:47:f1:4b:98:49:a6:
d8:7f:1f:ba:ff:97:a3:45:fa:a3:5f:58:c1:21:ed:
ab:22:a2:25:d9:12:53:55:f3:7f:be:17:6a:31:2a:
5d:39:c4:74:f8:0f:b9:d0:8b:ea:3c:1e:6f:ba:9a:
e6:5f:67:0e:bb:17:ba:e6:2c:0b:6c:0e:7b:b3:22:
68:f0:79:45:af:3b:50:f2:06:f2:f1:db:92:4d:6f:
2a:0d:cb:85:5f:c9:01:35:b9:70:0a:6d:71:02:10:
1e:9b:d5:bd:bf:1e:3b:46:91:a2:f1:e6:28:fe:21:
5c:fa:0f:3f:b0:9f:d6:57:42:1c:4e:75:30:33:c7:
32:a5:5b:10:b4:90:0b:e1:61:13:f6:4c:95:c9:59:
bc:f6:63:6d:1a:63:a0:88:3a:cd:5f:00:1f:fe:41:
13:39:49:bc:69:11:2f:c8:1a:4f:77:b5:63:c2:7c:
fc:19:08:39:93:60:94:46:90:99:c0:94:b1:7d:ee:
a2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:24:04:1D:D2:65:BF:FA:30:D4:84:99:CB:F4:33:38:2A:BA:AB:EA
X509v3 Authority Key Identifier:
keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/xyQEHdJlv_ow1ISZy_QzOCq6q-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.1.0-85.153.3.255
85.153.5.0/24
85.153.10.0/24
85.153.33.0/24
85.153.43.0/24
85.153.58.0/24
Signature Algorithm: sha256WithRSAEncryption
27:4a:e5:9a:51:44:fa:81:61:34:9c:5a:8d:cf:6a:0e:cb:cb:
b8:c5:71:8b:7e:a9:d1:fc:80:1c:92:0e:5e:ac:02:1c:9b:6a:
c2:1e:aa:5e:8f:ec:cb:c5:29:b5:d0:d0:a0:09:72:8d:28:2d:
11:a8:f3:d4:6a:71:0f:58:9a:5a:41:83:d7:57:ff:78:4e:4a:
1c:53:a4:75:c6:89:fb:41:d3:ec:e8:79:67:47:ab:ab:9f:e0:
5f:bc:80:20:d4:94:f1:dc:f5:66:db:8b:da:12:33:a6:92:fd:
bb:f8:56:d9:ec:a3:5f:4a:be:79:de:c1:43:32:d0:7c:52:94:
39:b4:c9:a7:6a:da:42:ae:f3:1b:33:09:b3:2c:12:48:3e:5d:
94:e5:c1:a3:39:ff:3e:3a:3b:e7:2d:64:54:b4:11:9d:6e:81:
7f:25:95:9f:9c:f4:7f:0c:43:11:89:7e:61:68:10:c4:8b:86:
d8:92:f3:b4:7e:8a:6c:4b:89:fc:08:dc:5b:0a:9e:8d:27:ba:
da:31:81:c4:93:b1:b0:eb:37:95:3b:f3:fd:66:97:42:02:96:
49:ed:fe:43:16:ff:03:c8:16:ee:22:f7:90:ed:06:21:a1:ba:
88:80:76:18:86:c1:bb:63:5b:c5:11:67:4c:5b:66:0d:92:87:
a0:14:e7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-fra.rpki-client.org