Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/7NYMtMSmMw_mkkZCbO70y-5NQJs.roa
File: 7NYMtMSmMw_mkkZCbO70y-5NQJs.roa (raw, json)
Hash identifier: f/LkHEVZ7/wruvA2PINKRYs2gVXQeImG5T9z8we81bg=
Subject key identifier: EC:D6:0C:B4:C4:A6:33:0F:E6:92:46:42:6C:EE:F4:CB:EE:4D:40:9B
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01852B8B11D136B268738ED8DED59BAB1157
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/7NYMtMSmMw_mkkZCbO70y-5NQJs.roa
Signing time: Mon 19 Dec 2022 18:00:12 +0000
ROA not before: Mon 19 Dec 2022 18:00:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 85.133.225.0/24 maxlen: 24
85.133.236.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2b:8b:11:d1:36:b2:68:73:8e:d8:de:d5:9b:ab:11:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Dec 19 18:00:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ecd60cb4c4a6330fe69246426ceef4cbee4d409b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:46:be:fc:a4:a7:21:0f:2c:b2:8e:21:3d:5e:
54:35:13:06:e2:f5:11:d8:e8:b2:bf:54:14:86:01:
86:fb:00:d7:d8:40:f4:28:6a:c1:a8:3f:0c:5a:fd:
3a:b3:c9:59:eb:e7:9e:d6:f6:c1:0f:97:30:04:1f:
e1:b6:8b:28:4c:3e:2e:df:5f:7f:be:97:db:52:4f:
18:93:5b:f3:cc:18:83:b0:dd:db:e9:d1:dc:38:c0:
34:7f:74:2d:78:a0:53:c6:c7:a4:a2:e4:57:82:a3:
b3:60:69:0a:ba:0a:33:54:9a:e1:32:7c:14:a7:85:
dd:d4:d1:d2:55:c4:0e:67:b8:6b:90:fa:1e:13:33:
a9:c5:d8:70:c7:03:56:ef:4e:0a:99:81:08:65:93:
34:46:49:e5:5a:28:97:7f:2d:53:63:01:e3:74:b6:
f1:28:4b:f1:c5:87:9f:b5:15:a8:ff:b8:9e:00:da:
81:2b:5b:b7:47:ef:bd:cc:ef:80:47:00:3b:16:4d:
01:ad:ec:f4:6e:e4:16:e6:8b:2f:67:90:63:bb:ea:
c3:e5:c5:ec:0c:a3:44:3a:56:d9:19:2b:da:e3:62:
24:72:2d:62:fb:b4:3d:6e:b4:09:4b:28:54:82:e8:
ef:30:00:f4:a6:71:b8:e5:b4:26:b8:a3:ac:08:04:
1b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D6:0C:B4:C4:A6:33:0F:E6:92:46:42:6C:EE:F4:CB:EE:4D:40:9B
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/7NYMtMSmMw_mkkZCbO70y-5NQJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.164.0/24
85.133.225.0/24
85.133.236.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:28:7f:32:81:97:af:c6:82:7a:6e:7f:89:af:70:f9:ef:96:
ae:fc:9c:2f:9f:d8:c1:5d:af:0d:e1:c8:fa:30:95:67:10:46:
07:b6:f1:1d:03:b1:79:ee:46:61:e5:de:de:ba:90:d9:39:e4:
49:65:ed:db:99:8a:ce:b1:90:af:a2:24:ce:2c:ee:1c:19:c2:
38:82:b5:cb:ad:e8:64:12:c2:90:bd:2a:36:4f:32:ec:f1:64:
8e:4c:11:42:a8:d9:5b:b3:f5:d5:d9:ed:78:57:84:a4:c6:0d:
57:df:4d:4f:5e:bd:8f:70:49:48:9e:c3:50:48:a2:a1:c5:20:
03:55:a6:87:37:2a:2d:be:0c:04:f2:2f:41:14:e9:dd:4b:91:
21:e8:13:41:4b:63:b5:34:ba:93:f3:3f:99:52:53:29:11:53:
60:8b:16:df:07:01:ee:6b:24:0d:15:72:47:0b:fc:52:b0:76:
39:96:9a:6e:a3:d1:57:e8:e1:b4:49:65:d0:bd:9c:37:da:66:
2b:61:21:45:ba:2d:44:8f:5e:7d:8d:c7:23:f4:cf:13:78:6c:
9e:86:a1:fe:4c:a7:a6:dd:d6:8d:58:36:3f:0d:c9:13:86:32:
16:76:01:3d:60:1a:22:e6:e1:3b:ae:3a:33:23:27:07:ce:15:
ac:a3:1b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:12 2024 by rpki-client on console-fra.rpki-client.org