Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/1ziw1LGs6XmyzzzNPWs0Q7pbxfc.roa
File: 1ziw1LGs6XmyzzzNPWs0Q7pbxfc.roa (raw, json)
Hash identifier: Ft+6Nj9DcJIfrQIJr4Gib9tZpnhZeQLWUvi/8UFdEC4=
Subject key identifier: D7:38:B0:D4:B1:AC:E9:79:B2:CF:3C:CD:3D:6B:34:43:BA:5B:C5:F7
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01851B688D9B2F3D87256D811D9A37DDBF90
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/1ziw1LGs6XmyzzzNPWs0Q7pbxfc.roa
Signing time: Fri 16 Dec 2022 14:48:34 +0000
ROA not before: Fri 16 Dec 2022 14:48:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 85.133.225.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1b:68:8d:9b:2f:3d:87:25:6d:81:1d:9a:37:dd:bf:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Dec 16 14:48:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d738b0d4b1ace979b2cf3ccd3d6b3443ba5bc5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ac:3c:43:05:00:46:d0:fb:bb:cd:e8:f6:a1:
a2:9f:ba:ca:e2:3a:96:d9:3a:27:ed:bf:e5:7a:d2:
66:1f:a9:22:67:dc:78:0b:64:c1:4a:b8:f2:39:75:
e7:10:5a:be:0f:a8:1b:35:de:fd:ea:11:5a:8f:10:
c3:c4:87:5f:77:5f:36:ca:7b:18:26:09:36:8d:f4:
14:1f:85:b4:b3:aa:92:be:73:d3:f3:bb:be:fa:3d:
ca:bf:91:91:1f:08:b4:9a:71:50:85:5f:99:b2:fc:
fc:c9:03:f2:18:cb:a7:55:6f:5f:d7:c7:8c:5d:b5:
3a:f9:fc:e2:11:ab:fa:d6:88:7a:fb:17:70:d5:a6:
11:81:32:09:a8:5a:0a:74:60:64:ed:8f:1f:23:66:
93:65:4e:ff:a6:70:87:f3:34:68:a1:f0:62:bd:a8:
43:d9:2d:99:83:8f:56:35:37:29:82:7d:96:01:22:
f0:b4:7f:7a:39:28:97:d0:d1:0e:3a:d5:02:94:33:
cc:86:02:3f:d1:bb:12:26:9e:e6:dc:47:41:4f:b4:
c2:0d:98:c0:0d:fe:31:22:1b:de:97:d3:f6:67:44:
f9:24:ab:7b:65:05:39:07:4b:78:c2:b6:d7:28:78:
6a:03:2d:ce:a2:fa:47:33:b3:a3:8a:15:fb:57:17:
da:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:38:B0:D4:B1:AC:E9:79:B2:CF:3C:CD:3D:6B:34:43:BA:5B:C5:F7
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/1ziw1LGs6XmyzzzNPWs0Q7pbxfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.164.0/24
85.133.225.0/24
Signature Algorithm: sha256WithRSAEncryption
59:e1:c0:38:5f:98:08:48:6a:14:51:89:c4:00:1e:1d:9d:51:
ea:37:67:d7:7f:cf:0c:29:a4:3c:92:b1:84:29:3e:db:a9:97:
ec:32:cb:ec:88:82:03:98:fc:f6:4f:bf:de:51:fa:21:f7:8a:
99:dd:79:df:59:70:4a:35:22:30:be:3c:45:30:43:45:a6:62:
ec:4a:ef:dd:f0:8e:42:97:78:d3:68:0a:85:a6:fa:2c:86:f8:
4d:7d:df:56:b1:31:90:b5:31:c1:99:60:35:78:89:a6:9d:a0:
98:ce:36:56:a2:61:93:c6:64:50:7e:1d:84:20:69:be:8b:b8:
65:1f:43:38:40:aa:55:ec:af:ff:11:95:dd:c3:80:99:1d:66:
a8:65:c5:f0:be:bb:71:f3:24:f9:3b:a0:ec:c5:cf:86:64:8f:
0c:66:d4:03:ad:dd:c6:b7:99:f0:22:05:a0:c6:0d:3e:a5:b3:
2b:0e:44:5b:34:2c:41:7c:e0:18:8d:b0:aa:0b:33:e0:c7:cf:
29:17:59:c4:ee:65:ba:5e:38:ad:ad:e5:3f:4d:f8:56:42:f3:
f8:f6:b9:8d:f7:df:00:8b:c9:c8:76:a7:8f:76:11:7f:8a:de:
4e:e3:07:77:f0:ee:84:c7:07:94:34:f0:d9:68:76:7c:e1:14:
0d:8b:99:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:05 2023 by rpki-client on console-ams.rpki-client.org