Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/54fpOmzGm6W7ZJfwIA31lM_NNzE.roa
File: 54fpOmzGm6W7ZJfwIA31lM_NNzE.roa (raw, json)
Hash identifier: BFNI7Pzci08D/IUo3reDK9y0vDPW9qeC496Do/kwqxQ=
Subject key identifier: E7:87:E9:3A:6C:C6:9B:A5:BB:64:97:F0:20:0D:F5:94:CF:CD:37:31
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0A1A2C5B
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/54fpOmzGm6W7ZJfwIA31lM_NNzE.roa
Signing time: Fri 21 Jan 2022 16:00:01 +0000
ROA not before: Fri 21 Jan 2022 16:00:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213277
IP address blocks: 85.133.224.0/24 maxlen: 24
85.133.233.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
85.133.227.0/24 maxlen: 24
85.133.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169487451 (0xa1a2c5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jan 21 16:00:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e787e93a6cc69ba5bb6497f0200df594cfcd3731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:89:01:6f:b0:c2:c5:10:15:02:57:99:5a:58:
87:35:d1:7f:15:36:9e:02:ed:9b:8c:eb:b8:aa:d2:
aa:b3:33:38:45:01:26:ca:5f:70:b9:bc:38:38:01:
e1:0d:42:5e:7b:2b:a6:79:13:63:0f:f8:cc:cc:2b:
69:c4:85:45:fe:fd:69:95:90:4e:c1:67:84:51:c1:
09:3d:32:ba:d7:c4:ab:60:96:30:c6:4d:b7:4d:9b:
67:36:24:2a:62:f9:1a:69:08:a1:77:22:c0:c1:ca:
31:f8:fa:df:65:15:eb:c0:c4:c0:7b:3c:7e:a0:e6:
75:72:5b:cb:10:e6:73:b0:ce:6a:6e:0e:8d:61:b2:
0e:c5:1c:c9:99:9b:45:7f:52:9b:b0:66:8c:da:c5:
21:ab:4f:b5:13:ab:ed:09:cb:aa:51:87:13:98:be:
b4:88:8c:0b:72:c4:27:6e:c0:78:64:1b:2c:c9:de:
4f:00:6d:ac:a7:7f:15:f3:fc:23:2e:34:3c:d4:20:
eb:c8:fb:89:dc:87:02:ab:52:64:11:df:28:0d:84:
07:17:b3:9d:d5:4d:4c:71:26:8f:df:5e:d6:49:13:
21:4b:8b:e7:9e:34:c6:fd:02:c5:63:27:c7:81:04:
d0:79:95:83:6f:f0:6d:53:9e:15:f0:b2:5a:1f:75:
84:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:87:E9:3A:6C:C6:9B:A5:BB:64:97:F0:20:0D:F5:94:CF:CD:37:31
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/54fpOmzGm6W7ZJfwIA31lM_NNzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.224.0/24
85.133.227.0-85.133.228.255
85.133.233.0/24
85.133.243.0/24
Signature Algorithm: sha256WithRSAEncryption
28:30:3b:ee:e5:d9:45:e4:d2:a8:e3:50:6b:ad:b0:59:90:40:
b1:0e:3a:1f:d2:5b:52:61:26:06:d8:60:64:c6:59:dc:33:b5:
0d:f6:77:ff:33:c3:bb:81:7e:73:ae:e1:08:e9:46:5d:e4:30:
5d:1d:27:9c:9e:e2:9c:c3:c8:08:a1:e9:0c:81:d2:d6:34:e3:
ff:c4:2e:f1:c1:6f:f0:7b:66:af:84:f4:b9:ff:67:52:94:d5:
11:55:f8:c1:15:ae:5e:03:f2:a9:70:37:da:8a:e0:3b:8f:75:
85:5f:fb:f7:8a:6d:7e:9a:44:81:a4:59:d0:c5:1a:f5:fb:b3:
9b:27:27:9b:12:a8:38:29:63:0a:5f:a7:2c:5b:54:38:5e:74:
c4:97:b5:d8:d3:54:0b:cf:23:9c:e0:8e:0a:fa:f5:33:79:4f:
f0:a5:c0:77:71:ae:ab:b1:0f:06:b8:80:0f:89:b1:54:5a:62:
4c:7d:70:17:04:41:e8:a5:3c:55:c5:3f:0b:82:ea:43:08:e2:
06:98:0f:80:8b:88:fd:04:01:a6:7f:87:ed:b6:78:cb:3d:ce:
d5:96:ce:25:6d:d1:89:27:8e:8d:8d:2d:c9:2d:c3:1b:aa:0d:
a6:28:fc:04:45:4a:7e:ff:8f:83:fb:95:4a:fe:30:70:3f:f0:
09:4d:92:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:05 2023 by rpki-client on console-ams.rpki-client.org