Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/3XElwgmYhhvHAnxwGfGjFvhF5J4.roa
File: 3XElwgmYhhvHAnxwGfGjFvhF5J4.roa (raw, json)
Hash identifier: JcxXcvd2+QB3UXuUPOGcQnKSFW8OujxL/he6mHT6ptg=
Subject key identifier: DD:71:25:C2:09:98:86:1B:C7:02:7C:70:19:F1:A3:16:F8:45:E4:9E
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0A52DCCC
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/3XElwgmYhhvHAnxwGfGjFvhF5J4.roa
Signing time: Wed 16 Feb 2022 18:13:19 +0000
ROA not before: Wed 16 Feb 2022 18:13:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60025
IP address blocks: 85.133.238.0/24 maxlen: 24
85.133.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173202636 (0xa52dccc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Feb 16 18:13:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd7125c20998861bc7027c7019f1a316f845e49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:61:cf:92:13:70:38:e1:49:90:c8:48:75:d5:
d3:7d:45:53:52:99:f6:d5:ef:13:6d:b2:d3:75:91:
ee:4a:d6:03:77:53:c1:03:09:c9:65:b4:68:3f:79:
74:d7:2f:19:e4:10:4b:0a:d7:d8:2d:d9:7c:1e:56:
a4:ab:ab:a8:58:70:28:21:99:3d:ac:cc:69:2c:82:
e7:87:ee:bd:41:12:de:66:b0:f2:db:94:14:58:28:
80:9e:cb:78:28:0b:8e:f4:54:de:aa:e0:aa:0f:1e:
c3:27:0c:39:4a:05:9e:c8:cf:42:ee:db:d2:02:f3:
e8:5d:11:ad:43:bb:12:98:7b:e8:34:f6:2c:4f:b7:
bf:65:b2:c3:a7:58:1a:cc:57:81:ef:48:12:a9:fb:
54:e2:de:b4:3f:0b:19:1b:c6:49:b3:ca:1a:82:d1:
6b:2f:a6:60:18:45:9d:3c:f5:96:ac:33:1a:af:ef:
7f:60:72:df:33:4c:2a:e8:c8:81:6b:e2:ca:9d:8a:
50:f3:06:c4:d6:3e:50:63:cd:02:1e:7a:89:4d:89:
d0:d9:12:37:fe:96:d9:a0:3b:b0:ac:78:fb:86:23:
fd:ce:37:47:55:49:f1:76:72:9b:fa:e8:d4:9e:f5:
0c:07:3f:df:22:af:12:21:47:b7:cf:a2:75:42:09:
82:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:71:25:C2:09:98:86:1B:C7:02:7C:70:19:F1:A3:16:F8:45:E4:9E
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/3XElwgmYhhvHAnxwGfGjFvhF5J4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.169.0/24
85.133.238.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:b2:02:29:43:ce:5e:cb:51:b0:e8:2b:f1:6e:1b:77:c6:6a:
84:d8:3f:79:e2:7c:c1:65:8a:7a:f3:77:47:77:6e:f4:93:fb:
4a:4c:4c:f3:ed:4d:3c:31:4f:ea:67:ff:f7:6e:08:40:2a:bf:
ad:00:7d:72:cf:63:67:ff:7f:4e:ac:18:3c:f0:04:d2:5b:e7:
17:b6:ab:19:ee:5d:cd:fa:47:fc:45:d0:2b:ba:4e:8c:30:59:
41:0b:e3:a8:53:9f:b6:d3:ef:3d:d5:fe:91:af:33:13:b9:14:
1e:d6:f7:e0:7c:ea:88:30:cc:6c:ed:e2:4f:ed:c0:f1:0d:5b:
ff:46:02:16:c8:2b:4e:60:a1:20:a5:97:ee:5b:d1:57:3d:a2:
e9:1f:fd:9d:30:0e:d3:3f:38:92:c0:8c:4b:76:9e:ff:2c:04:
45:bf:be:7f:c8:da:12:3a:58:95:57:45:9f:c4:a2:81:18:45:
03:21:c8:be:31:e0:69:6e:b3:ab:17:80:ce:c2:7d:89:23:1d:
64:5b:30:86:c9:ac:94:37:57:67:2f:c8:20:33:93:44:6e:8d:
5b:b3:d6:d2:85:16:de:62:4a:f3:ca:27:41:4d:df:a8:e7:de:
47:4b:fc:19:bd:c6:5c:07:e9:e3:41:42:2c:65:1d:98:41:15:
d6:bd:c6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:12 2024 by rpki-client on console-fra.rpki-client.org