Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/13MOZR3EEqJoH6UUvElY2wMpeHE.roa
File: 13MOZR3EEqJoH6UUvElY2wMpeHE.roa (raw, json)
Hash identifier: swmlQqhPr9zW0JelhoGwTLmy3K/kHfGzsJmh0pBNBCY=
Subject key identifier: D7:73:0E:65:1D:C4:12:A2:68:1F:A5:14:BC:49:58:DB:03:29:78:71
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0182A0A79B888CE898016DE700D2E270806D
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/13MOZR3EEqJoH6UUvElY2wMpeHE.roa
Signing time: Mon 15 Aug 2022 08:38:34 +0000
ROA not before: Mon 15 Aug 2022 08:38:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210392
IP address blocks: 85.133.224.0/24 maxlen: 24
85.133.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a0:a7:9b:88:8c:e8:98:01:6d:e7:00:d2:e2:70:80:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Aug 15 08:38:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7730e651dc412a2681fa514bc4958db03297871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:84:b1:1c:4e:02:67:2f:c3:e0:e3:12:0a:e3:
b6:b8:6b:f9:73:cc:c5:d1:9e:1b:71:de:06:d4:dd:
03:39:c1:7d:8e:71:a2:c9:60:06:66:3b:24:9c:8b:
f0:18:44:fd:77:ce:a2:59:e3:a2:54:d3:34:ff:5d:
3b:34:28:ad:1c:35:2f:60:e0:da:57:6d:74:5b:72:
ef:3b:e5:4f:ca:14:fb:07:8a:a4:49:e9:39:c1:e6:
e9:2f:a1:de:04:56:62:e4:3d:e3:76:90:17:b5:12:
82:dc:b0:7d:60:97:37:1c:9b:67:f6:b4:29:08:69:
3a:68:b7:c1:aa:d2:e0:59:b8:f8:0a:b8:a4:18:3c:
65:d7:3f:89:b1:28:fa:ed:78:0a:df:25:48:a1:01:
96:79:a2:d0:79:95:ab:d4:8a:e9:7d:dc:09:2f:08:
2a:5c:03:06:2c:a5:ea:0c:62:88:c1:97:01:e1:dd:
1f:79:e5:f5:4f:64:24:e7:34:de:c3:55:c9:8f:1a:
92:d6:be:db:e1:cc:aa:de:de:52:29:68:39:68:74:
83:4c:fa:13:0e:cb:eb:33:05:47:89:b5:86:9d:fe:
ff:31:de:69:ce:12:75:35:99:0e:ca:fa:c1:48:af:
89:78:83:3b:07:b3:bd:59:3e:91:ea:b0:b1:49:27:
ac:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:73:0E:65:1D:C4:12:A2:68:1F:A5:14:BC:49:58:DB:03:29:78:71
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/13MOZR3EEqJoH6UUvElY2wMpeHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.169.0/24
85.133.224.0/24
Signature Algorithm: sha256WithRSAEncryption
23:8d:88:11:65:75:c2:b6:ea:f8:68:77:77:37:e0:49:ee:18:
5f:2d:7a:12:e4:23:5c:7a:5f:61:d5:53:80:91:7b:ff:f0:57:
d0:65:08:49:d5:87:b5:43:e9:8e:16:2c:e3:f0:e0:e1:1e:b0:
11:8d:37:4f:6f:91:db:0e:35:b9:97:51:69:6b:bb:66:57:76:
dd:99:0f:71:58:c4:82:b0:20:3f:7b:20:b2:c7:06:6a:70:89:
9e:72:bb:8a:6b:26:38:a8:d1:46:43:3e:f2:ac:a1:60:21:65:
9a:b3:96:14:ec:2f:de:e6:0b:32:38:05:74:64:bb:c3:27:79:
e8:cf:70:5c:13:86:03:24:57:64:7d:95:d0:95:ee:c7:d4:4f:
9f:a3:eb:ac:ef:24:4b:f8:63:c2:98:81:fd:33:8b:88:06:16:
21:21:f9:2d:40:14:70:0d:1c:39:07:f5:53:4e:c7:e8:ef:9b:
0d:ab:09:3e:1e:47:6b:79:e8:ed:d3:59:ab:42:6e:96:3c:33:
6d:66:6a:fa:c8:a8:3c:33:f6:3a:85:00:85:72:2a:03:0d:49:
61:6d:a9:f6:8b:76:67:3d:6a:df:1f:cb:15:08:b2:3c:ed:2c:
d8:e8:56:c7:be:df:3f:39:11:35:57:3d:24:2a:52:58:d2:3b:
01:83:c7:90
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYKgp5uIjOiYAW3nANLicIBtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjIwODE1MDgzODM0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzczMGU2NTFkYzQxMmEyNjgxZmE1MTRiYzQ5NThkYjAzMjk3ODcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4SxHE4CZy/D4OMSCuO2uGv5c8zF
0Z4bcd4G1N0DOcF9jnGiyWAGZjsknIvwGET9d86iWeOiVNM0/107NCitHDUvYODa
V210W3LvO+VPyhT7B4qkSek5webpL6HeBFZi5D3jdpAXtRKC3LB9YJc3HJtn9rQp
CGk6aLfBqtLgWbj4CrikGDxl1z+JsSj67XgK3yVIoQGWeaLQeZWr1IrpfdwJLwgq
XAMGLKXqDGKIwZcB4d0feeX1T2Qk5zTew1XJjxqS1r7b4cyq3t5SKWg5aHSDTPoT
DsvrMwVHibWGnf7/Md5pzhJ1NZkOyvrBSK+JeIM7B7O9WT6R6rCxSSesawIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNdzDmUdxBKiaB+lFLxJWNsDKXhxMB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvMTNNT1pSM0VFcUpvSDZVVXZFbFkyd01wZUhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVYWpAwQA
VYXgMA0GCSqGSIb3DQEBCwUAA4IBAQAjjYgRZXXCtur4aHd3N+BJ7hhfLXoS5CNc
el9h1VOAkXv/8FfQZQhJ1Ye1Q+mOFizj8ODhHrARjTdPb5HbDjW5l1Fpa7tmV3bd
mQ9xWMSCsCA/eyCyxwZqcImecruKayY4qNFGQz7yrKFgIWWas5YU7C/e5gsyOAV0
ZLvDJ3noz3BcE4YDJFdkfZXQle7H1E+fo+us7yRL+GPCmIH9M4uIBhYhIfktQBRw
DRw5B/VTTsfo75sNqwk+Hkdreejt01mrQm6WPDNtZmr6yKg8M/Y6hQCFcioDDUlh
ban2i3ZnPWrfH8sVCLI87SzY6FbHvt8/ORE1Vz0kKlJY0jsBg8eQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:12 2024 by rpki-client on console-fra.rpki-client.org